The Department of Internal Affairs

Department of Internal Affairs | Te Tari Taiwhenua

Building a safe, prosperous and respected nation



Sector Risk Assessments (SRAs)

Sector Risk Assessments (SRAs) help reporting entities understand how criminals can misuse their services for money laundering or terrorism financing (ML/TF).

You must consider the SRA for your sector when conducting your own ML/TF risk assessment and programme.

SRAs identify:

  • key money laundering and terrorism financing threats
  • vulnerabilities of the different products and services provided within a sector
  • areas of higher risk and “red flags” to watch out for
  • the effectiveness of AML/CFT controls at a sector level.

A sector risk assessment does not replace your business’s own risk assessment. It is a starting point for you to assess the risks faced by your business.

How to use a Sector Risk Assessment

You must use your SRA when conducting or updating your own ML/TF risk assessment.

Step 1: Read the risks relevant to your sector

  • Review the threats and vulnerabilities that your sector faces

Step 2: Compare the findings to your business

  • Determine (from the box on page 1) whether you provide services identified as having relevant risks
  • Understand how your products and services can be exploited by criminals
  • Consider the various factors (in Part 4) that may increase or decrease your business’s risks.

Step 3: Conduct or update your risk assessment and programme

  • Consider:
  • the size, nature, and complexity of your business
  • the products and services you provide
  • your types of customers
  • how you deliver your products and services (for example online or face to face)
  • the countries you deal with
  • the institutions you deal with
  • Identify the risk your business faces in the course of business
  • Understand the types of customers, activities, and transactions where the risks are higher. This is where you must apply the most AML/CFT scrutiny.

Step 4: Keep your assessment current

  • Risks change over time
  • Keep your risk assessment up to date
  • Review new or updated information relating to risks from the FIU or the Department.

Available Sector Risk Assessments

Sector

Last updated

Resources

Online Gambling

May, 2026

Online Gambling Sector Risk Assessment 2026 (PDF, 507KB)

Financial Institutions 

December, 2019

Financial Institutions Sector Risk Assessment December 2019 (PDF, 1.7MB)

Designated Non-Financial Businesses and Professions (DNFBPs) and Casinos Sector Risk Assessment

December, 2019

Designated Non-Financial Businesses and Professions (DNFBPs) and Casinos Sector Risk Assessment December 2019 (PDF, 2MB)

Supporting guidance

Sector Risk Assessments should be read alongside: