AML Policy Writing & Review
Need to write or update your AML policy?
Policies and procedures aligned with your business model, risks and jurisdictions: ownership, due diligence, monitoring and escalation.
Explore AML policy services ↗AML POLICY WRITING · KYC · FRAUD AUTOMATION
Custom AML policy writing and review, KYC procedures and fraud controls for fintechs, crypto exchanges, casinos, iGaming and digital platforms. Supporting operations in the U.S., Brazil and international markets.
BASED IN BRAZIL. WORKING GLOBALLY.

WHAT DOES YOUR OPERATION NEED?
AML Policy Writing & Review
Policies and procedures aligned with your business model, risks and jurisdictions: ownership, due diligence, monitoring and escalation.
Explore AML policy services ↗KYC & Screening Procedures
Customer journeys, backoffice design, statuses, API requirements and operating manuals. Documented procedures for PEP, sanctions and adverse media.
Discuss KYC and screening ↗Fraud Alerts & Automation
Data-calibrated alerts and automation with zero execution cost within free-tier limits. Intelligent Claude API integrations where AI adds value, with usage controls.
Discuss alerts and automation ↗years of experience
professionals led across global operations
fraud signals implemented with data-driven calibration
profiles analyzed to build a device investigation index
Results from previous projects and specific scopes; not a promise of future performance.
01 / THE CONSULTANT
12 years of experience in operations, technology and financial services, specializing in U.S. compliance and fraud prevention, with leadership across LATAM, APAC and Europe.
I’m Christiane Delazeri, an operations, compliance and financial crime prevention leader. My experience combines the scale of global technology businesses with hands-on control design, case investigation and automation delivery. I have also designed KYC systems from scratch, connecting the identity verification journey with risk criteria and compliance operations.
In the Atlassian ecosystem, I led support and operations for enterprise products. At Deriv, my experience includes operations management and KYC team leadership. At Ruby Labs, my work brings together AML, fraud prevention and automation. Today, I connect compliance expertise with systems for detection, investigations and risk monitoring.
Atlassian ACA-910 certification · ITSM with Jira Service Management Foundations
02 / INDUSTRIES
Controls need to reflect each business’s product, payment methods, user journey and operating model.
KYC, deposit and withdrawal reviews, multiple accounts, promotional abuse and fraud investigations.
Discuss my project ↗02Onboarding, AML, crypto and fiat transaction reviews, investigations and escalation.
Discuss my project ↗03Payment fraud, chargebacks, identity, cross-provider integrations and operational automation.
Discuss my project ↗03 / HOW I CAN HELP
Each engagement starts with your challenge. Scope, deliverables and a proposal are defined after discussing your operations, priorities and available resources.
Business rules, SQL and API integrations for monitoring, data enrichment and alerts. Zero execution cost where volume and architecture fit entirely within free infrastructure tiers, without token consumption.
I also develop intelligent automation through the Claude API for text analysis, evidence organization and investigation support, with human review and usage controls. These projects incur API usage charges. Zero cost for eligible solutions refers to execution, not consulting fees or maintenance.
Discuss an automation project ↗Policies and procedures aligned with your business model, risks and jurisdictions: ownership, due diligence, monitoring and escalation.
Business-specific AML policy; KYC, enhanced due diligence and screening procedures; Ownership and escalation matrix.
Review journeys, verification criteria, vendors and handoffs between product and operations.
Risk-proportionate verification flows and practical team guidance.
Analyze patterns, calibrate alerts with real data and assess signal quality.
Explainable rules and triage playbooks to support decisions.
Playbooks for account takeover, synthetic identities and abuse, with case reviews and team coaching.
Consistent investigations, organized evidence and escalation criteria.
Monitoring, alerts and integrations using SQL and business rules. Zero execution cost options within free tiers and Claude API automation with human review and an agreed usage budget.
Workflows suited to the company’s volume and infrastructure, with documentation, review criteria and predictable operating costs.
Gap analysis, process reviews and improvement prioritization for growing operations.
An action plan with sequencing, ownership and review criteria.
04 / PROJECTS & RESULTS
Projects showing how I connect analysis, engineering and operations. Customer data and sensitive details are withheld; figures relate to the contexts described.
HOW I APPROACH MY WORK
“Identifying risk is not enough.Christiane Delazeri
You need to build the operation
that can respond to it.”
Experience structuring compliance and fraud prevention programs for international operations reaching 180 countries. At Deriv, responsible for developing the complete KYC manual and establishing the operations-side fraud prevention program. Expertise translating regulatory requirements into policies, procedures and operational controls, including Brazilian and US contexts.
REGULATORY EXPERIENCE
Compliance and fraud programs need to reflect the risks, products and jurisdictions of an operation. My work connects these requirements to KYC, monitoring, investigations, documentation and automation.
FATF / GAFI
The FATF Recommendations guide risk-based approaches, customer and beneficial-owner due diligence, monitoring and suspicious activity handling. Their application depends on each jurisdiction’s laws.
Official source ↗United States
The Bank Secrecy Act and its implementing regulations in 31 CFR Chapter X establish recordkeeping, reporting and control obligations for covered businesses. Operational design considers the institution category, including specific rules for casinos and money services businesses.
Official source ↗Brazil
Law 9,613/1998 underpins anti-money laundering prevention and duties for covered entities, including identification, recordkeeping and reporting to COAF. Regulatory classification determines which controls and procedures apply to the operation.
Official source ↗PEP status calls for proportionate due diligence; it is not an allegation or a sanction. Adverse media requires source and context assessment. Sanctions require identifying the applicable list and program: OFAC maintains the SDN List and consolidated non-SDN lists, whose restrictions are not identical.
BCB Circular 3,978/2020: policy, risk assessment and controls to prevent money laundering and terrorist financing for covered institutions.
Law 14,790/2023 and SPA/MF Ordinance 1,143/2024: the betting framework and sector-specific AML/CFT requirements, including identification, monitoring and reporting procedures.
Law 14,478/2022 and BCB Resolution 520/2025: the virtual asset services framework and operational, governance and AML requirements, subject to classification and current rules.
LGPD — Law 13,709/2018: legal bases, purpose, necessity and security in personal data processing. Collection and retention must be consistent with applicable obligations.
In practice: turn due diligence, risk classification, PEP and sanctions criteria into review workflows, approval levels, evidence and escalation paths. Fraud prevention and AML/CFT share data and controls, but have distinct objectives and obligations.
Selected references; applicability is assessed by activity, license and jurisdiction together with the business’s legal team. Regulatory content checked in September 2026.
05 / HOW I WORK
Review the product, operating markets, existing documentation, tools and purpose of the engagement.
Agree on scope, deliverables, timeline, responsibilities and acceptance criteria before work begins.
Develop policies, procedures or controls with review checkpoints and validation by the responsible team.
Document decisions, enable the team and agree on post-delivery reviews and support within the contracted scope.
TOOLS THAT SUPPORT CONTROL
SQL · n8n · Cloudflare Workers · APIs and webhooks · Slack · Chatwoot · Claude API
FREQUENTLY ASKED QUESTIONS
Yes. Scope can combine assessment, control design, SQL, integrations, automation, documentation and team training. Deliverables depend on the problem and the company’s tools.
Yes. My focus includes casino and iGaming operators, crypto exchanges, fintechs and payment businesses. The work centers on AML, KYC, fraud prevention and operational efficiency.
Business rules, SQL and API integrations for monitoring, data enrichment and alerts. Zero execution cost where volume and architecture fit entirely within free infrastructure tiers, without token consumption. I also develop intelligent automation through the Claude API for text analysis, evidence organization and investigation support, with human review and usage controls. These projects incur API usage charges. Zero cost for eligible solutions refers to execution, not consulting fees or maintenance.
Prepare your brief below and send it through LinkedIn. We discuss your project to define scope, deliverables and timeline for a tailored proposal.
06 / LET’S TALK
Prepare your brief below and send it through LinkedIn. We discuss your project to define scope, deliverables and timeline for a tailored proposal.
Request a proposal on LinkedIn