We are going to be banking a large company that offers consumer financial services: auto loans, small personal loans (secured and unsecured.) They are in IL,IN and FL. As a NBFI, we know they are required to have their own AML program, but do we as a bank have to see proof of their program? We are very hesitant to bank this customer, but it is going to happen whether we (in Risk) like it or not. We feel like we should be doing some kind of monitoring, above and beyond our usual procedures, but it doesn't seem like we are required to. Any thoughts?