When compliance failures in legal practice are examined after the fact, the pattern is remarkably consistent: the gap is rarely a failure to understand the law in the abstract. It is a failure in the operational discipline of client due diligence — the systematic process of verifying who a client actually is, where their funds originate, and whether the transaction they're asking for makes commercial sense.
Effective client due diligence in a law firm context operates at two levels. The first is identity verification: confirming beneficial ownership behind corporate structures, trusts, and nominee arrangements, rather than accepting the first layer of documentation at face value. The second is transactional plausibility: does the instructed transaction make sense given what the firm knows about the client's business and financial profile?
High-risk practice areas deserve a specifically elevated standard. Real estate transactions, cross-border corporate structuring, and trust and estate work involving complex beneficial ownership chains are consistently the practice areas where AML risk concentrates — not because lawyers in these areas are less diligent, but because the underlying transaction types are structurally more attractive to those seeking to launder funds.
A well-designed due diligence framework doesn't ask individual lawyers to become AML investigators. It gives them a clear, documented checklist: what questions to ask, what documentation to require, what patterns should trigger internal escalation rather than proceeding on the matter partner's individual judgment. This documentation matters as much as the substance of the diligence performed — a firm that can show it followed a consistent process is in a fundamentally stronger position than one that relied on ad hoc judgment calls, even where those judgment calls happened to be correct.
The operational takeaway is simple: due diligence failures are rarely about not knowing the law. They are about not having — or not following — a consistent process. Building that process, and training every relevant fee-earner on it, closes the gap where most real-world exposure actually sits.