Threshold Transactions in Financial Monitoring: the UAH 400,000 Rule

When a payment reaches UAH 400,000, the bank does not decide “at its own discretion” whether to tell the state about it — where certain features are present, reporting is a direct statutory duty. Understanding which transactions count as “threshold” transactions, at what level, and how they differ from suspicious ones removes most of the anxiety businesses feel about financial monitoring. It also makes the key point clear: trying to “break up” a sum below the line creates far more risk than the payment itself.

The threshold transaction: what it is and where the line falls

A threshold financial transaction is one that, because of its size and character, is subject to mandatory financial monitoring. It is governed by Article 20 of the Law of Ukraine “On Prevention and Counteraction to the Legalisation (Laundering) of the Proceeds of Crime, the Financing of Terrorism and the Financing of the Proliferation of Weapons of Mass Destruction” (Law No. 361-IX) — the country’s AML/CFT law.

The key parameters:

• The threshold amount is UAH 400,000 (or the equivalent in foreign currency, banking metals or other assets at the official exchange rate of the National Bank of Ukraine (NBU) on the day of the transaction).
• For businesses that run lotteries and/or gambling, the threshold is lower — UAH 55,000.
• A transaction falls under mandatory reporting only when it both reaches the threshold and carries at least one of the features defined by the article (set out below).

An important nuance that dispels needless worry: not every UAH 400,000 payment is a threshold transaction. An ordinary payment under a supply contract between two genuine enterprises does not, in itself, trigger any duty to report — one of the features below must also be present.

The duty to detect and report such transactions rests on the primary financial-monitoring entity (SPFM) — above all the bank, but also other financial institutions, payment organisations and insurers, and, within the scope of their activity, notaries, real-estate agents, auditors and lawyers. Having detected a threshold transaction, the SPFM informs the State Financial Monitoring Service of Ukraine (Derzhfinmonitoring) within the statutory period after registering it.

The four features of a threshold transaction

Article 20 contains a closed list of features. A transaction at or above the threshold becomes a “threshold transaction” only if it carries at least one of them:

1. A transfer of funds abroad, including to states (territories) placed by the Cabinet of Ministers of Ukraine on the list of offshore zones. Cross-border movement of money is always in the monitoring spotlight.
2. Cash operations — the crediting, transfer or receipt of cash.
3. Transactions of politically exposed persons (PEPs), together with their family members and closely associated persons. PEPs are people who perform, or have performed, prominent public functions: senior officials, members of parliament, judges, heads of state enterprises, and the like.
4. Involvement of a party from a “risky” jurisdiction — where at least one party to the transaction is registered, resident or located in a state that fails, or improperly fails, to comply with the recommendations of the FATF (the Financial Action Task Force), or holds an account with a bank registered in such a state.

The list is closed: if none of the features is present, the transaction is not a threshold transaction even when the sum substantially exceeds UAH 400,000. That is why the bank looks not only at the figure, but at the character of the operation and at the parties taking part in it.

Threshold or suspicious: the key distinction

This is where most of the confusion lies. Threshold and suspicious transactions are two different regimes, and mixing them up is a classic mistake.

Criterion	Threshold transactions	Suspicious transactions
Basis	Size (from UAH 400,000 / 55,000) plus one Article 20 feature	A reasonable suspicion about the source or purpose of the funds
Role of the amount	Decisive: below the threshold there is no duty	Irrelevant: reported at any amount
Logic	Formal, by clear criteria	Evaluative, by the SPFM’s professional judgment
Possible suspension	As a rule, no	Yes — the operation may be halted

The thing to remember: suspicious transactions are reported regardless of amount. If a bank forms a reasonable suspicion that funds may be connected to laundering or another crime, it must inform Derzhfinmonitoring even for a payment of a few thousand hryvnia. The UAH 400,000 threshold applies only to threshold transactions — and does not “protect” a suspicious one.

What the bank actually examines

Before carrying out a transaction and, where required, reporting it, the bank performs customer due diligence. Three things are in focus.

• The purpose of the payment. Whether it matches the real substance of the operation and the customer’s business profile. A gap between the wording in the payment instruction and the actual nature of the operation is the first prompt for closer analysis.
• Source of funds and source of wealth. Where the money came from and whether it is consistent with the customer’s declared income and the scale of their activity. For large or atypical sums, the bank is entitled to request supporting documents.
• The ultimate beneficial owner (UBO). Who really controls the customer and stands behind the operation. An opaque ownership structure, or an inability to establish the UBO, sharply raises the risk profile of the transaction.

In my expert practice, it is precisely these three parameters that most often become the subject of later examination when a matter reaches court: the question is not whether a payment “went through,” but whether its substance matched a real business operation.

The classic business mistake: splitting payments

The most common and most dangerous mistake is deliberately breaking a sum into several payments below UAH 400,000 to “stay out of monitoring.” In international practice this is called structuring, and it produces the opposite of the intended effect.

The logic is simple. Splitting payments in order to dodge the threshold is itself a classic marker of suspicion. So instead of avoiding attention, the business guarantees it — and moves the operation out of the formal “threshold” category into the “suspicious” one, which, as noted above, is reported regardless of amount and may be suspended.

Typical situations that read as artificial splitting:

• a single UAH 900,000 payment replaced by three of UAH 300,000 to one counterparty over a few days;
• a large sum spread among several related recipients with no genuine economic need;
• a customer insisting on paying “in parts,” although the contract and invoice provide for a single payment.

The conclusion is simple: if an operation is real and documented, there is no need to “fit” it under the threshold. A transparent UAH 500,000 payment with a clear purpose and a full set of documents is safer for a business than three “optimised” payments of UAH 200,000.

Consequences: what happens next

When a transaction raises questions, the consequences unfold gradually — not as the instant “account freeze” people often imagine.

1. A request for supporting documents. The most frequent and mildest scenario: the bank asks for the contract, primary documents, and an explanation of the source of funds or purpose of the payment. A complete, internally consistent set of documents usually closes the matter.
2. Suspension of the financial operation. For suspicious transactions the law allows the SPFM to halt execution (including at the decision or request of Derzhfinmonitoring) for a defined period, to allow checking. This is not a “seizure” but a temporary hold until the circumstances are clarified.
3. Transfer of consolidated materials to law enforcement. If the analysis confirms the risks, Derzhfinmonitoring forwards consolidated materials to the competent bodies — the Bureau of Economic Security (BEB), the National Police and the SBU (Security Service of Ukraine); where the predicate is a tax offence, the State Tax Service (DPS) is drawn in. Within criminal proceedings, a forensic economic examination of the movement of funds may then be ordered.

It is worth stressing: a report on a threshold transaction is not an accusation in itself. It is a routine element of the financial-monitoring system, through which thousands of lawful operations pass every day. Problems arise not from the fact of a report, but from an inability to confirm that the funds are real and lawfully sourced.

Practical guidance: how to act within the law

What different participants should take into account in advance:

• For accountants and finance officers — do not “optimise” payments to fit the threshold; ensure their documentary transparency instead: a correct payment purpose, a contract, primary documents, a clear source of funds.
• For business owners — understand that risk is created not by the amount but by a mismatch between an operation and its documentation; keep UBO and ownership-structure data current.
• For politically exposed persons and those associated with them — be ready for heightened bank attention to any operation regardless of amount, and prepare explanations of the source of wealth in advance.
• For private individuals — do not run other people’s money through your own accounts “for a fee”: transiting and splitting someone else’s sums is a genuine role in someone else’s scheme, with corresponding consequences.

Threshold transactions are not a trap but a clear set of rules. Knowing the threshold, the four features, and the difference between threshold and suspicious transactions, a business can easily arrange its work so that financial monitoring is a formality rather than a problem.

If you have faced a bank request, a suspended operation, or need to assess the movement of funds and the lawfulness of their sources within proceedings, a considered consultation and a professional forensic economic examination will help you build a position on facts and documents. Get in touch — I will consider your situation within the bounds of my expert competence.