Free Reference Tool

Insurance Companies AML Red Flags

Search 427 AML and BSA red flags specifically for insurance companies. Filter by risk level, transaction type, and customer profile, each sourced from a FinCEN advisory, FFIEC manual, or federal regulation. Whether you're preparing for an exam, filing a SAR, or training your team, find exactly the red flags that apply to your regulated business in seconds.

How to Use This Tool
  1. 1

    Pick your industry: Select from 13 regulated sectors like Money Services Businesses, Fintech, Real Estate, or Crypto to instantly filter relevant red flags.

  2. 2

    Narrow by risk or transaction type: Sort by Critical, High, or Medium risk, or filter by wire, cash, ACH, or crypto transactions.

  3. 3

    Save, share, or print: Copy filtered sets for your compliance program, export for SAR documentation, or use Training Mode to quiz your team.

Study for Your CAMS or BSA ExamInteractive

Turn this library into an active study session. Use Training Mode to hide risk levels and test your own classification skills. Or jump into Quiz Mode for flashcard-style review with pass/review tracking, a progress bar, and a readiness score, exactly what you need before exam day.

427+ red flags, source-cited
Insurance Companies
FinCEN & FFIEC sourced
SAR checkbox mapping
AML Red Flag Hub

What AML and BSA red flags are, and how to use them

This library is more than a list. It is a working reference for compliance officers, examiners, and training programs. Before diving into the database, here is how red flags fit into an effective AML program and what they do and do not mean.

What AML and BSA red flags are

A red flag is a transaction pattern, customer behavior, or operational anomaly that may indicate money laundering, terrorist financing, fraud, or sanctions evasion under the Bank Secrecy Act. Red flags are warning signs drawn from FinCEN advisories, FFIEC examination manuals, and federal regulation. They help a compliance team know where to look; they are the beginning of an analysis, not the end of one.

Why red flags vary by industry

Money laundering risk is not the same everywhere. A cash-intensive money services business, a mortgage lender funding a home purchase, a casino handling chips, and a crypto exchange moving virtual assets each face different typologies. That is why this library is organized by industry and why a red flag that is critical for one sector may be irrelevant to another.

A red flag is not proof of suspicious activity

Identifying a red flag does not automatically mean suspicious activity has occurred. Legitimate customers trigger indicators for entirely benign reasons. The framework expects institutions to weigh each indicator against the customer profile, the nature of the business, and the surrounding facts before deciding what it means.

Escalation and investigation

Once an indicator is observed, the next step is investigation, not accusation. Staff compare the activity against the expected profile, gather supporting facts, and route the review through a documented escalation path to the compliance officer. The goal is a clear, consistent, and documented decision about what the activity means.

The importance of documented procedures

A red flag only becomes useful when there is a written procedure for handling it. Documented escalation steps, investigation notes, and decision records show examiners that the institution has a repeatable process, regardless of how any single case turns out. Good documentation is what makes a program defensible.

Connection to SAR decision-making

Red flags feed into Suspicious Activity Report decisions. When the facts meet the applicable threshold and suggest illegal activity, evasion of the BSA, or no apparent lawful purpose, a SAR is filed. When they do not, that decision is documented too. Not every red flag requires a SAR, and treating it as though it does is a common misunderstanding.

Educational versus legal conclusions

The entries in this library are educational and informational. They describe indicators; they do not determine guilt, liability, or compliance. They are not legal advice and do not replace a qualified review of your specific facts, your obligations, and the current text of the regulation. Always confirm against the official source.

Red flags organized by industry

Every entry in the database is tagged by industry. Skip straight to the dedicated guide for your sector, or use the selector below to filter the full library on this page.

Nothing on this hub is legal, regulatory, or compliance advice. Red flags are educational indicators and do not establish that suspicious activity, criminal conduct, or a violation has occurred. Confirm every requirement against the official FinCEN, FFIEC, or federal source and consult a qualified professional for your specific circumstances.

Select your industry to get started

28

of 427 total

Matching Red Flags

Insurance

Currently filtered

Industry

27

FinCEN & FFIEC

Source Documents

15

Red flag types

Categories

Risk breakdown in resultsCritical~9High~14Medium~4
Featured This WeekRotates every Monday
FINTECH-CF-002Critical RiskFintech & Payment Processors

Fintech platform experiences a ransomware attack where customer data is exfiltrated and a cryptocurrency ransom demand is made, with subsequent dark web postings of stolen account information.

Source: FIN-2021-A004 Ransomware31 CFR §1022.210
Training ModeActive Study

Hide risk levels and source documents to test your own classification skills. A proven way to lock in knowledge before your CAMS or BSA exam.

Off

28 of 427 red flags

CriticalINS-KYC-005Adapted
Insurance Companies

Customer uses a synthetic identity combining a real SSN with fabricated personal details to purchase a high-value whole life or universal life policy with minimal health underwriting.

identity/KYC|FinCEN FTA Identity 2024|31 CFR §1025.210
View
CriticalINS-TM-001Adapted
Insurance Companies

Policyholder pays the first premium with a large wire from a third party who is not a documented family member or employer, and the wire memo provides no explanation for the payment.

transaction monitoring|FinCEN Insurance Rule (31 CFR Part 1025)|31 CFR §1025.210
View
CriticalINS-TM-005Adapted
Insurance Companies

Customer purchases a single-premium life insurance policy with a large wire transfer and requests surrender or policy loan within the free-look period, effectively using the policy as a money laundering vehicle.

transaction monitoring|FinCEN Insurance Rule (31 CFR Part 1025)|31 CFR §1025.210
View
CriticalINS-TM-008Adapted
Insurance Companies

Corporate-owned life insurance (COLI) policy is purchased with company funds but the insured employees are low-level workers with no executive role, and the death benefit is disproportionate to their compensation.

transaction monitoring|FinCEN Insurance Rule (31 CFR Part 1025)|31 CFR §1025.210
View
CriticalINS-GEO-002Composite
Insurance Companies

Policyholder wires premiums from an account in a jurisdiction subject to OFAC sanctions, routed through an intermediary bank, and requests the policy benefits be paid to a beneficiary in the same sanctioned country.

geographic risk|FIN-2022-Alert003 Russian Export Control Evasion|31 CFR §501
View
CriticalINS-HT-001Adapted
Insurance Companies

Multiple individuals listed as beneficiaries on separate life insurance policies all share the same address and phone number, with the policies purchased by a single agent associated with a massage parlor or escort service.

human trafficking|FIN-2020-A008 Human Trafficking|31 CFR §1025.210
View
CriticalINS-SE-001Composite
Insurance Companies

Foreign national uses a U.S. life insurance policy as a store of value, funding it with wires from a sanctioned jurisdiction and planning to surrender it later to receive clean U.S. dollars from the insurer.

sanctions evasion|FIN-2022-Alert003 Russian Export Control Evasion|31 CFR §501
View
CriticalINS-PEP-001Adapted
Insurance Companies

PEP purchases a high-value life insurance policy with premiums paid via wire from a foreign government bank account, and the coverage amount far exceeds any documented legitimate salary or assets.

customer behavior|Kleptocracy Advisory|31 CFR §1010.630
View
HighINS-KYC-001Adapted
Insurance Companies

Policy applicant provides identification that appears altered or forged, with mismatched holograms, incorrect fonts, or a photo that does not resemble the person presenting the document.

identity/KYC|FinCEN Insurance Rule (31 CFR Part 1025)|31 CFR §1025.210
View
HighINS-KYC-002Adapted
Insurance Companies

Applicant for a life insurance policy uses a Social Security number that belongs to a deceased individual, or the number shows no credit history or prior tax filings.

identity/KYC|FinCEN Insurance Rule (31 CFR Part 1025)|31 CFR §1025.210
View
HighINS-KYC-004Adapted
Insurance Companies

Corporate policyholder is a shell company with no physical office, website, or employees, and the stated business purpose is inconsistent with the type or amount of insurance requested.

identity/KYC|FinCEN Insurance Rule (31 CFR Part 1025)|31 CFR §1025.210
View
HighINS-TM-002Adapted
Insurance Companies

Customer pays premiums using sequentially numbered checks from multiple unrelated bank accounts, suggesting the policy is being funded by a network of nominees or shell accounts.

transaction monitoring|FinCEN Insurance Rule (31 CFR Part 1025)|31 CFR §1025.210
View
HighINS-TM-003Adapted
Insurance Companies

Corporate customer pays premiums from an account that receives frequent large cash deposits, with the business type inconsistent with the volume of cash activity observed.

transaction monitoring|FinCEN Insurance Rule (31 CFR Part 1025)|31 CFR §1025.210
View
HighINS-TM-006Adapted
Insurance Companies

Policyholder borrows the maximum allowable amount against the cash value of a life insurance policy shortly after funding it, with no stated purpose for the loan and immediate wire of proceeds overseas.

transaction monitoring|FinCEN Insurance Rule (31 CFR Part 1025)|31 CFR §1025.210
View
HighINS-TM-007Adapted
Insurance Companies

Customer cancels a policy and requests the refund be sent to a different bank account or payee than the one used for premium payments, with no documented explanation for the change.

transaction monitoring|FinCEN Insurance Rule (31 CFR Part 1025)|31 CFR §1025.210
View
HighINS-BO-001Adapted
Insurance Companies

Trust purchases an insurance policy but the settlor, beneficiaries, or protector are concealed, and the trustee is a professional fiduciary who refuses to disclose the ultimate beneficial owners.

beneficial ownership|FinCEN Insurance Rule (31 CFR Part 1025)|31 CFR §1010.230
View
HighINS-BO-002Adapted
Insurance Companies

Business entity is the policyholder and premium payer but the beneficial owners are foreign nationals from high-risk jurisdictions, with no legitimate business connection to the U.S. insurance market.

beneficial ownership|FinCEN Insurance Rule (31 CFR Part 1025)|31 CFR §1010.230
View
HighINS-GEO-001Adapted
Insurance Companies

Foreign national applies for a U.S. life insurance policy and pays premiums via wire from a jurisdiction with weak AML controls or high corruption indices, with no U.S. residency or business ties.

geographic risk|FinCEN Insurance Rule (31 CFR Part 1025)|31 CFR §1025.210
View
HighINS-CB-001Adapted
Insurance Companies

Customer is unusually insistent on purchasing a policy with minimal underwriting, no medical exam, and maximum cash value accumulation, showing no interest in the death benefit or coverage details.

customer behavior|FinCEN Insurance Rule (31 CFR Part 1025)|31 CFR §1025.210
View
HighINS-CB-003Composite
Insurance Companies

Applicant for a high-value policy is represented by an agent or broker who has a history of policies that lapse quickly, or who is under investigation by state regulators for churning or twisting.

customer behavior|FinCEN Insurance Rule (31 CFR Part 1025)|31 CFR §1025.210
View
HighINS-EFE-001Adapted
Insurance Companies

Elderly policyholder is pressured by a new caregiver or family member to take out a policy loan, surrender the policy, or change the beneficiary designation shortly after the individual enters their life.

elder financial exploitation|Elder Financial Exploitation Advisory|31 CFR §1025.210
View
HighINS-TBML-001Adapted
Insurance Companies

Corporate customer uses insurance premium financing arranged through an offshore lender, with the loan collateralized by the policy itself, creating a circular flow of funds between related entities.

trade-based ML|FIN-2014-A005 Funnel Accounts and TBML|31 CFR §1025.210
View
HighINS-CF-001Adapted
Insurance Companies

Insurance company receives a wire for premium payment from an account name that differs slightly from the policyholder’s name, following an email request to update payment instructions that bypassed normal verification.

cyber/fraud|FIN-2016-A003 E-Mail Compromise Fraud|31 CFR §1025.210
View
MediumINS-KYC-003Adapted
Insurance Companies

Customer applies for multiple insurance policies from different insurers within a short timeframe, using slightly different personal information or beneficiary designations in each application.

identity/KYC|FinCEN Insurance Rule (31 CFR Part 1025)|31 CFR §1025.210
View
MediumINS-TM-004Adapted
Insurance Companies

Policyholder makes premium payments that are inconsistent with their stated income or occupation, particularly when the premium amount exceeds annual earnings by a significant margin.

transaction monitoring|FinCEN Insurance Rule (31 CFR Part 1025)|31 CFR §1025.210
View
MediumINS-CB-002Composite
Insurance Companies

Customer becomes evasive or hostile when asked about the source of premium funds, refuses to provide financial statements, or provides inconsistent explanations about their income or wealth.

customer behavior|FinCEN Insurance Rule (31 CFR Part 1025)|31 CFR §1025.210
View
MediumINS-EFE-002Adapted
Insurance Companies

Elderly customer purchases a deferred annuity with a long surrender period at the direction of a “financial advisor” who gains power of attorney and then requests an early surrender with heavy penalties.

elder financial exploitation|Elder Financial Exploitation Advisory|31 CFR §1025.210
View
MediumINS-TBML-002Composite
Insurance Companies

Business customer claims to be purchasing insurance for international trade shipments but the declared cargo values are inconsistent with commodity prices and no bills of lading are provided.

trade-based ML|FIN-2014-A005 Funnel Accounts and TBML|31 CFR §1025.210
View

Showing 28 of 427 red flags

Your Next Step

Found an insurance red flag? See what your program should do next.

Insurers offering cash-value life insurance and annuities are covered under 31 CFR Part 1025. Programs should address policy-surrender monitoring, premium structuring, and beneficial ownership for trust-owned policies.

Source Transparency

How every red flag is sourced, cited, and reviewed

This library is meant to be checked, not just read. Each entry shows where it came from and when it was last reviewed, so examiners, compliance officers, and trainers can verify the basis for any indicator.

Every entry cites its source — and its attribution strength

Each red flag is linked to a related FinCEN, FFIEC or regulatory source. The wording is Soflo's summary, not a quotation, so confirm any indicator against the source before relying on it. Reviewed records also carry an attribution tier, so you can see whether the source names the indicator directly or whether it was adapted from that source.

Citations are shown, not summarized away

Where a record maps to a regulation, the 31 CFR citation is displayed with a direct link so you can read the operative text yourself instead of trusting a paraphrase.

Each record carries a last-reviewed date

Records show the date they were last checked against the source document. The library is reviewed periodically against current FinCEN advisories, FFIEC manual updates, and the Code of Federal Regulations.

SAR categories are mapped, not implied

Where applicable, records show the corresponding FinCEN SAR Form 111 checkbox category and key term, so the link between an indicator and a filing decision is explicit.

How we signal the strength of each citation

Not every entry is a literal, named FinCEN indicator \u2014 some are FinCEN indicators applied to a new industry context, and some are generalized training scenarios. Rather than blur those distinctions, each reviewed record is tagged with one of three attribution tiers:

Direct FinCEN

Direct FinCEN indicator

Restates an indicator that the cited FinCEN advisory or guidance itself identifies.

Adapted

Adapted from FinCEN advisory

Applies an indicator from a FinCEN advisory to this industry’s context rather than quoting it verbatim.

Composite

Composite training scenario

A generalized compliance scenario assembled from multiple concepts or standard practice. Useful for training; it is not a single named advisory indicator.

Tagging is being applied sector by sector as each industry\u2019s records are re-checked against their source documents. Insurance and Fintech are classified first; records without a tier are still being reviewed and carry no attribution claim until they are.

Red flags are educational indicators drawn from official sources. They do not establish that suspicious activity, criminal conduct, or a violation has occurred, and this library is not legal or compliance advice.

Browse compliance resources

Educational & Informational Use Only

This library is a training aid and reference tool. It is not legal, regulatory, or compliance advice. Results are a self-reported estimate, not a formal examination or audit. There is no guarantee of regulatory compliance, and this is not a substitute for an independent BSA audit by a qualified professional. No attorney-client or consulting relationship is established. No warranties are made regarding the accuracy, completeness, or fitness for purpose of the content herein. Always consult a licensed compliance professional for guidance specific to your situation.

Red Flag Reference by Topic

Deep-dive guides for specific red flag categories and industries. Each page includes expanded explanations, regulatory context, and related training resources.

Title & Escrow Red Flags

AML Red Flags for Title Companies

30+ BSA red flags specifically for title companies, escrow agents, and closing attorneys. Sourced from FinCEN advisories...

Browse red flags
MSB Red Flags

MSB Suspicious Activity Indicators

45+ suspicious activity indicators specifically for money services businesses. Drawn from the FFIEC Exam Manual and rela...

Browse red flags
Crypto Red Flags

Cryptocurrency Money Laundering Red Flags

40+ red flags for detecting money laundering in cryptocurrency transactions. Drawn from FIN-2019-G001, FIN-2021-A004, an...

Browse red flags
SAR Filing Reference

SAR Red Flags List

427+ BSA red flags organized by SAR checkbox category. Each red flag includes the SAR checkbox it maps to, its source do...

Browse red flags
Bank Structuring Red Flags

Structuring Red Flags for Banks

25+ structuring indicators specifically for banks. Sourced from the FFIEC Core Examination Manual, FinCEN advisories, an...

Browse red flags
Industry-Specific Red Flags

AML Red Flags by Industry

427+ BSA red flags organized by 13 regulated industries. Each entry is sourced from a FinCEN advisory, FFIEC manual, or ...

Browse red flags
BSA Compliance Reference

BSA Red Flags List

427+ Bank Secrecy Act red flags covering every compliance category, industry, and risk level. Each flag cites a FinCEN, ...

Browse red flags
Money Laundering Detection

Money Laundering Red Flags

427+ money laundering indicators organized by the three stages: placement, layering, and integration. Each flag cites a ...

Browse red flags
Mortgage Red Flags

FinCEN Red Flags for Mortgage Companies

35+ BSA red flags for mortgage companies under 31 CFR § 1029. Drawn from FIN-2012-A009 and FinCEN mortgage fraud reporti...

Browse red flags
Fintech Red Flags

FinCEN Red Flags for Fintech Companies

35+ BSA red flags for fintech companies under 31 CFR § 1022. Drawn from FIN-2020-A007, the 2024 Financial Trend Analysis...

Browse red flags
Casino Red Flags

FinCEN Casino AML Red Flags Examiners Look For

30+ BSA red flags for casinos under 31 CFR § 1021. Adapted from FinCEN casino guidance and advisories, each record shows...

Browse red flags
Insurance Red Flags

FinCEN Red Flags for Insurance

25+ BSA red flags for insurance under 31 CFR § 1025. Based on FinCEN's insurance rule and related FinCEN advisories, eac...

Browse red flags
Investment Red Flags

FinCEN Red Flags for Investment Advisers

25+ red flags for investment firms. Based on FinCEN's investment adviser rule and related guidance, each record shows it...

Browse red flags
DPMS Red Flags

FinCEN Red Flags for Precious Metals Dealers

20+ BSA red flags for DPMS under 31 CFR § 1027. Based on FinCEN's dealer rule at 31 CFR Part 1027 and related guidance, ...

Browse red flags
Real Estate Red Flags

FinCEN Red Flags for Real Estate

25+ BSA red flags for real estate under the FIN-2017-A003 Real Estate Advisory and GTO Orders. Sourced from 31 CFR § 101...

Browse red flags
Nonprofit Red Flags

FinCEN Red Flags for Charities and Nonprofit Organizations

20+ red flags for nonprofits. Drawn from FIN-2014-A005, FinCEN's Hizballah financing alert (FIN-2024-Alert003), and FinC...

Browse red flags
Auto Dealer Red Flags

FinCEN Red Flags for Auto Dealers

15+ red flags for auto dealers, tied to Form 8300 and OFAC duties. Each flag includes its SAR checkbox and source citati...

Browse red flags

Need Help Building Your AML Program?

Soflo Consulting provides end-to-end BSA/AML compliance solutions for regulated businesses across 13 industries. From risk assessments to annual training, we have you covered.

Explore insurance AML requirements