Pakistan mobile wallet transaction monitoring is sometimes described as an uncovered gap: Level-0 and Level-1 wallet accounts, run through telecom-linked channels, supposedly sit outside anti-money laundering rules. That claim circulates widely, so it is worth tracing. It originates in July 2018 press reporting, which cited concerns linked to the Financial Action Task Force, and the State Bank of Pakistan rejected it in the same week.
This article sets out what was reported, what the SBP said, how the rules have since tightened, and what monitoring of branchless banking and mobile wallet accounts should cover. It does not treat the 2018 claim as a current finding.
What was reported in 2018
In July 2018, amid concern over Pakistan's counter-terrorism financing regime, press reports said Pakistan faced a challenge in regulating telecom companies that process large volumes through mobile wallet accounts. The reports said Level-0 and Level-1 accounts operated by telecom agents were not covered by AML/CFT regulations, that daily transfers of up to Rs25,000 and Rs50,000 respectively could be made without those controls, and that supervision was divided between the Pakistan Telecommunication Authority and the SBP.
Those figures describe the position as reported in 2018 and should not be read as current account limits, which the SBP has changed over time.
What the State Bank said
The SBP responded within days. It said branchless banking is regulated and supervised like other banking activity, that AML/CFT controls apply to all transactions regardless of the account level and value, and that no transaction may be conducted anonymously without identification and verification of the customer. It said banks and microfinance banks keep logs and trails under record-keeping standards, and that over-the-counter transactions by walk-in customers require real-time biometric verification through NADRA.
The SBP also said telecom companies provide only a communication channel and distribution network, and that the Pakistan Telecommunication Authority has no regulatory role in conducting financial transactions through the branchless banking channel. Pakistan follows a bank-led model, in which banks and microfinance banks approved by the SBP offer branchless banking through agents.
How the rules tightened afterward
The SBP later revised its branchless banking regulations to strengthen money laundering and terrorist financing controls. Operators were asked to biometrically verify customers holding Level-1 accounts by March 2020, with unverified accounts downgraded to Level-0 from 1 April 2020, and to keep transaction records, including records of attempted transactions, for at least ten years. The SBP's AML/CFT/CPF Regulations for regulated entities, issued in 2020, apply to the wider set of entities that includes payment system operators and providers.
The sensible reading today is that wallet and branchless banking activity falls within the SBP's AML/CFT regime through the licensed institutions that offer it, with the practical question being how well those institutions monitor it, not whether they must.
What effective monitoring of wallet accounts looks like
Wallet accounts differ from bank accounts in ways that shape monitoring: high volumes of small transactions, rapid movement of value between accounts, agent-assisted cash-in and cash-out, and customers with limited documentary history. Effective programmes monitor velocity and pattern across linked accounts, agent behaviour such as unusual cash-in volumes or structuring below limits, dormant accounts that suddenly activate, and many accounts that share devices or identity data.
Institutions should align the risk tier of the account with the intensity of monitoring and document the rationale. Whether any gap remains in practice is a question for each institution's own testing, and for the SBP's and the Financial Monitoring Unit's published findings, rather than an assumption drawn from 2018 coverage. Good Pakistan mobile wallet transaction monitoring starts from evidence of how each institution's own accounts behave.
