The Department of Internal Affairs

Department of Internal Affairs | Te Tari Taiwhenua

Building a safe, prosperous and respected nation



Sector Risk Assessments (SRAs)

Sector Risk Assessments (SRAs) help reporting entities understand how criminals can misuse their services for money laundering or terrorism financing (ML/TF).

You must consider the SRA for your sector when conducting your own ML/TF risk assessment and programme.

SRAs identify:

  • key money laundering and terrorism financing threats
  • vulnerabilities of the different products and services provided within a sector
  • areas of higher risk and “red flags” to watch out for
  • the effectiveness of AML/CFT controls at a sector level.

A sector risk assessment does not replace your business’s own risk assessment. It is a starting point for you to assess the risks faced by your business.

How to use a Sector Risk Assessment

You must use your SRA when conducting or updating your own ML/TF risk assessment.

Step 1: Read the risks relevant to your sector

  • Review the threats and vulnerabilities that your sector faces

Step 2: Compare the findings to your business

  • Determine (from the box on page 1) whether you provide services identified as having relevant risks
  • Understand how your products and services can be exploited by criminals
  • Consider the various factors (in Part 4) that may increase or decrease your business’s risks.

Step 3: Conduct or update your risk assessment and programme

  • Consider:
  • the size, nature, and complexity of your business
  • the products and services you provide
  • your types of customers
  • how you deliver your products and services (for example online or face to face)
  • the countries you deal with
  • the institutions you deal with
  • Identify the risk your business faces in the course of business
  • Understand the types of customers, activities, and transactions where the risks are higher. This is where you must apply the most AML/CFT scrutiny.

Step 4: Keep your assessment current

  • Risks change over time
  • Keep your risk assessment up to date
  • Review new or updated information relating to risks from the FIU or the Department.

Disclaimer

This sector risk assessment is intended to provide a summary and general overview. It does not set out the comprehensive obligations under the Anti-Money Laundering and Countering Financing of Terrorism (AML/CFT) Act 2009 and associated AML/CFT regulations and codes of practice. It does not constitute, nor should it be treated as, legal advice or opinion. The Department of Internal Affairs accepts no liability for any loss suffered as a result of reliance on this publication.

Available Sector Risk Assessments

Sector

Last updated

Resources

Real Estate Agents

22 June 2026

Real Estate Sector Risk Assessment 2026 (PDF, 1MB)

Online Gambling

29 May, 2026

Online Gambling Sector Risk Assessment 2026 (PDF, 620KB)

Financial Institutions 

December, 2019

Financial Institutions Sector Risk Assessment December 2019 (PDF, 1.7MB)

Designated Non-Financial Businesses and Professions (DNFBPs) and Casinos Sector Risk Assessment

December, 2019

Designated Non-Financial Businesses and Professions (DNFBPs) and Casinos Sector Risk Assessment December 2019 (PDF, 2MB)

Financial Institutions

April 2017

Anti-Money Laundering and Countering Financing of Terrorism(AML/CFT). Bank Deposit Takers and Life Insurers (PDF, 1.3MB)

Financial Institutions

2017

Anti-Money Laundering and Countering Financing of Terrorism Sector Risk Assessment 2017 (PDF, 1.9MB)

Financial Institutions

March 2011

 

Anti-Money Laundering and Countering the Financing of Terrorism Sector Risk Assessment) (PDF, 219KB)

 

Supporting guidance

Sector Risk Assessments should be read alongside: