Navigating AML Red Flags in Emerging Market FX Flows

I've been noticing a subtle but persistent shift in the kind of 'unusual activity' flags popping up in our transaction monitoring for FX desks dealing with certain emerging market corridors. It's less about the classic structured deposits or large round-number transfers and more about a high frequency of smaller, seemingly disconnected transactions from various new accounts, often linked by a shared beneficiary or IP. The aggregate can be substantial, but each individual transaction might fall below the usual thresholds. It feels like a more sophisticated attempt at layering.

My question to the group is, how are others refining their AML models to catch these distributed, 'micro-layering' patterns, especially when dealing with jurisdictions where the underlying banking infrastructure might be less robust or where regulatory reporting itself is evolving? Are there specific behavioral analytics or network analysis tools that have proven particularly effective in identifying these diffuse red flags without generating an overwhelming amount of false positives? It's a fine line to walk between robust compliance and maintaining efficient operational flow, particularly when dealing with high-volume, lower-value transactions. Any practical insights or experiences would be genuinely appreciated.