Free Reference Tool

Investment Advisers AML Red Flags

Search 427 AML and BSA red flags specifically for investment advisers. Filter by risk level, transaction type, and customer profile, each sourced from a FinCEN advisory, FFIEC manual, or federal regulation. Whether you're preparing for an exam, filing a SAR, or training your team, find exactly the red flags that apply to your regulated business in seconds.

How to Use This Tool
  1. 1

    Pick your industry: Select from 13 regulated sectors like Money Services Businesses, Fintech, Real Estate, or Crypto to instantly filter relevant red flags.

  2. 2

    Narrow by risk or transaction type: Sort by Critical, High, or Medium risk, or filter by wire, cash, ACH, or crypto transactions.

  3. 3

    Save, share, or print: Copy filtered sets for your compliance program, export for SAR documentation, or use Training Mode to quiz your team.

Study for Your CAMS or BSA ExamInteractive

Turn this library into an active study session. Use Training Mode to hide risk levels and test your own classification skills. Or jump into Quiz Mode for flashcard-style review with pass/review tracking, a progress bar, and a readiness score, exactly what you need before exam day.

427+ red flags, source-cited
Investment Advisers
FinCEN & FFIEC sourced
SAR checkbox mapping
AML Red Flag Hub

What AML and BSA red flags are, and how to use them

This library is more than a list. It is a working reference for compliance officers, examiners, and training programs. Before diving into the database, here is how red flags fit into an effective AML program and what they do and do not mean.

What AML and BSA red flags are

A red flag is a transaction pattern, customer behavior, or operational anomaly that may indicate money laundering, terrorist financing, fraud, or sanctions evasion under the Bank Secrecy Act. Red flags are warning signs drawn from FinCEN advisories, FFIEC examination manuals, and federal regulation. They help a compliance team know where to look; they are the beginning of an analysis, not the end of one.

Why red flags vary by industry

Money laundering risk is not the same everywhere. A cash-intensive money services business, a mortgage lender funding a home purchase, a casino handling chips, and a crypto exchange moving virtual assets each face different typologies. That is why this library is organized by industry and why a red flag that is critical for one sector may be irrelevant to another.

A red flag is not proof of suspicious activity

Identifying a red flag does not automatically mean suspicious activity has occurred. Legitimate customers trigger indicators for entirely benign reasons. The framework expects institutions to weigh each indicator against the customer profile, the nature of the business, and the surrounding facts before deciding what it means.

Escalation and investigation

Once an indicator is observed, the next step is investigation, not accusation. Staff compare the activity against the expected profile, gather supporting facts, and route the review through a documented escalation path to the compliance officer. The goal is a clear, consistent, and documented decision about what the activity means.

The importance of documented procedures

A red flag only becomes useful when there is a written procedure for handling it. Documented escalation steps, investigation notes, and decision records show examiners that the institution has a repeatable process, regardless of how any single case turns out. Good documentation is what makes a program defensible.

Connection to SAR decision-making

Red flags feed into Suspicious Activity Report decisions. When the facts meet the applicable threshold and suggest illegal activity, evasion of the BSA, or no apparent lawful purpose, a SAR is filed. When they do not, that decision is documented too. Not every red flag requires a SAR, and treating it as though it does is a common misunderstanding.

Educational versus legal conclusions

The entries in this library are educational and informational. They describe indicators; they do not determine guilt, liability, or compliance. They are not legal advice and do not replace a qualified review of your specific facts, your obligations, and the current text of the regulation. Always confirm against the official source.

Red flags organized by industry

Every entry in the database is tagged by industry. Skip straight to the dedicated guide for your sector, or use the selector below to filter the full library on this page.

Nothing on this hub is legal, regulatory, or compliance advice. Red flags are educational indicators and do not establish that suspicious activity, criminal conduct, or a violation has occurred. Confirm every requirement against the official FinCEN, FFIEC, or federal source and consult a qualified professional for your specific circumstances.

Select your industry to get started

27

of 427 total

Matching Red Flags

Investment

Currently filtered

Industry

27

FinCEN & FFIEC

Source Documents

15

Red flag types

Categories

Risk breakdown in resultsCritical~9High~14Medium~4
Featured This WeekRotates every Monday
FINTECH-CF-002Critical RiskFintech & Payment Processors

Fintech platform experiences a ransomware attack where customer data is exfiltrated and a cryptocurrency ransom demand is made, with subsequent dark web postings of stolen account information.

Source: FIN-2021-A004 Ransomware31 CFR §1022.210
Training ModeActive Study

Hide risk levels and source documents to test your own classification skills. A proven way to lock in knowledge before your CAMS or BSA exam.

Off

27 of 427 red flags

CriticalINV-KYC-002
Investment Advisers

Synthetic identity passes initial onboarding but the client has no verifiable employment history, credit report, or prior banking relationships, despite claiming significant wealth.

identity/KYC|FinCEN FTA Identity 2024|31 CFR §1024.220
View
CriticalINV-KYC-005
Investment Advisers

PEP client opens an investment account but the stated source of wealth cannot be verified through independent sources, and the assets appear disproportionate to known salary or business income.

identity/KYC|Kleptocracy Advisory|31 CFR §1024.220
View
CriticalINV-TM-001
Investment Advisers

Client wires funds to the advisory account and immediately requests liquidation and wire-out to a different beneficiary, with no stated investment objective or time horizon.

transaction monitoring|FinCEN Investment Adviser Rule (89 FR 72156)|31 CFR §1024.220
View
CriticalINV-TM-005
Investment Advisers

Client requests that dividends, interest, or capital gains be paid to a different account or payee than the original funding source, with no documented gift, family, or legal reason for the diversion.

transaction monitoring|FinCEN Investment Adviser Rule (89 FR 72156)|31 CFR §1024.220
View
CriticalINV-TM-006
Investment Advisers

Advisory account for a corporate client shows investments in sectors completely unrelated to the client’s business, with no board resolution or documented investment policy authorizing the allocation.

transaction monitoring|FinCEN Investment Adviser Rule (89 FR 72156)|31 CFR §1024.220
View
CriticalINV-BO-003
Investment Advisers

Investment vehicle is owned by a series of shell companies in different jurisdictions, with each layer adding opacity, and the ultimate beneficial owner is a sanctioned individual or entity.

beneficial ownership|FFIEC Core Exam Manual|31 CFR §1010.230
View
CriticalINV-CB-003
Investment Advisers

Client introduces another prospective investor who is a PEP or sanctioned individual, and attempts to facilitate account opening by vouching for them or offering to co-sign.

customer behavior|Kleptocracy Advisory|31 CFR §1010.630
View
CriticalINV-CF-001
Investment Advisers

Adviser receives an email purportedly from the client requesting a wire transfer of account assets to a new bank, but the email address contains a subtle domain variation and bypasses verbal confirmation.

cyber/fraud|FIN-2016-A003 E-Mail Compromise Fraud|31 CFR §1024.220
View
CriticalINV-SE-001
Investment Advisers

Foreign national uses a U.S.-domiciled investment fund to hold assets that are effectively controlled by a sanctioned individual, with the nominee structure designed to avoid OFAC screening.

sanctions evasion|FIN-2022-Alert003 Russian Export Control Evasion|31 CFR §501
View
CriticalINV-PEP-001
Investment Advisers

PEP invests in a private equity fund with capital sourced from a government development bank in their home country, where the investment terms are disproportionately favorable and lack independent valuation.

customer behavior|Kleptocracy Advisory|31 CFR §1010.630
View
HighINV-KYC-001
Investment Advisers

Client provides a passport or driver’s license that fails document authentication checks, with the photo appearing artificially generated or manipulated using AI tools.

identity/KYC|FIN-2024-Alert004 Deepfake Fraud|31 CFR §1024.220
View
HighINV-KYC-003
Investment Advisers

Investment fund client is a legal entity registered in a secrecy jurisdiction with no audited financials, no website, and no verifiable officers or employees.

identity/KYC|FinCEN Investment Adviser Rule (89 FR 72156)|31 CFR §1024.220
View
HighINV-KYC-004
Investment Advisers

Client uses multiple Social Security numbers or provides different dates of birth across account applications at the same advisory firm, suggesting identity manipulation or multiple personas.

identity/KYC|FinCEN FTA Identity 2024|31 CFR §1024.220
View
HighINV-TM-002
Investment Advisers

Client invests in a private placement or hedge fund and requests redemption within days or weeks, despite the investment having a stated lock-up period, with no explanation for the urgency.

transaction monitoring|FinCEN Investment Adviser Rule (89 FR 72156)|31 CFR §1024.220
View
HighINV-TM-003
Investment Advisers

Investment account funded by a business entity shows round-dollar wire amounts with no supporting invoices, and the entity’s stated business does not generate sufficient revenue to justify the investment size.

transaction monitoring|FinCEN Investment Adviser Rule (89 FR 72156)|31 CFR §1024.220
View
HighINV-TM-004
Investment Advisers

Client directs the adviser to purchase thinly traded penny stocks or micro-cap securities, then immediately sell at a loss and wire the proceeds to an unrelated third party, suggesting a layering scheme.

transaction monitoring|FinCEN Investment Adviser Rule (89 FR 72156)|31 CFR §1024.220
View
HighINV-TM-007
Investment Advisers

Client uses a margin account to borrow against securities and immediately wires the loan proceeds to an offshore account, with no stated purpose for the leverage or the international transfer.

transaction monitoring|FinCEN Investment Adviser Rule (89 FR 72156)|31 CFR §1024.220
View
HighINV-BO-001
Investment Advisers

Fund-of-funds or feeder fund client refuses to disclose the beneficial owners of the underlying investors, or the ultimate controllers are foreign PEPs from jurisdictions with high corruption indices.

beneficial ownership|FinCEN Investment Adviser Rule (89 FR 72156)|31 CFR §1010.230
View
HighINV-BO-002
Investment Advisers

Family office client manages assets for a wealthy family but the source of the family’s wealth cannot be traced to legitimate business activities, inheritances, or documented employment.

beneficial ownership|FinCEN Investment Adviser Rule (89 FR 72156)|31 CFR §1010.230
View
HighINV-GEO-001
Investment Advisers

Foreign client wires investment funds from a jurisdiction under FATF enhanced monitoring or OFAC sanctions, with no independent verification of the source of funds or the client’s local business activities.

geographic risk|FIN-2022-Alert003 Russian Export Control Evasion|31 CFR §1024.220
View
HighINV-GEO-002
Investment Advisers

Client residing in a low-tax jurisdiction invests in U.S. securities through a complex structure involving multiple offshore entities with no apparent tax or business rationale other than opacity.

geographic risk|FinCEN Investment Adviser Rule (89 FR 72156)|31 CFR §1024.220
View
HighINV-CB-002
Investment Advisers

Client insists on using unorthodox payment methods, such as cash delivered to the adviser’s office, third-party checks, or wire from an unrelated business, to fund an investment account.

customer behavior|FinCEN Investment Adviser Rule (89 FR 72156)|31 CFR §1024.220
View
HighINV-EFE-001
Investment Advisers

Elderly client is persuaded to liquidate conservative retirement holdings and invest in high-risk alternative investments at the direction of a new acquaintance who gains trading authority over the account.

elder financial exploitation|Elder Financial Exploitation Advisory|31 CFR §1024.220
View
HighINV-TBML-001
Investment Advisers

Investment advisory client is a commodity trading firm whose account shows round-dollar purchases and sales with no corresponding market price movement, suggesting invoice-based fictitious trading.

trade-based ML|FIN-2014-A005 Funnel Accounts and TBML|31 CFR §1024.220
View
MediumINV-CB-001
Investment Advisers

Client is evasive about their investment experience, risk tolerance, or financial situation, and pressures the adviser to execute trades quickly without standard suitability documentation.

customer behavior|FinCEN Investment Adviser Rule (89 FR 72156)|31 CFR §1024.220
View
MediumINV-EFE-002
Investment Advisers

Elderly client adds a non-relative as an authorized signer or beneficiary to an investment account shortly after meeting them at a seminar, with no prior relationship or documented reason.

elder financial exploitation|Elder Financial Exploitation Advisory|31 CFR §1024.220
View
MediumINV-TBML-002
Investment Advisers

Cross-border investment fund receives wires described as “capital contributions” from entities in different countries, but the amounts are identical and occur on the same day, suggesting circular financing.

trade-based ML|FIN-2014-A005 Funnel Accounts and TBML|31 CFR §1024.220
View

Showing 27 of 427 red flags

Your Next Step

Found an investment red flag? See what your program should do next.

FinCEN's investment adviser AML rule, finalized in 2024, would require registered and exempt reporting advisers to maintain AML programs, including risk-based customer due diligence and Suspicious Activity Report filing. The rule's effective date has been postponed to January 1, 2028, so advisers should use the time to prepare.

Source Transparency

How every red flag is sourced, cited, and reviewed

This library is meant to be checked, not just read. Each entry shows where it came from and when it was last reviewed, so examiners, compliance officers, and trainers can verify the basis for any indicator.

Every entry cites its source — and its attribution strength

Each red flag is linked to a related FinCEN, FFIEC or regulatory source. The wording is Soflo's summary, not a quotation, so confirm any indicator against the source before relying on it. Reviewed records also carry an attribution tier, so you can see whether the source names the indicator directly or whether it was adapted from that source.

Citations are shown, not summarized away

Where a record maps to a regulation, the 31 CFR citation is displayed with a direct link so you can read the operative text yourself instead of trusting a paraphrase.

Each record carries a last-reviewed date

Records show the date they were last checked against the source document. The library is reviewed periodically against current FinCEN advisories, FFIEC manual updates, and the Code of Federal Regulations.

SAR categories are mapped, not implied

Where applicable, records show the corresponding FinCEN SAR Form 111 checkbox category and key term, so the link between an indicator and a filing decision is explicit.

How we signal the strength of each citation

Not every entry is a literal, named FinCEN indicator \u2014 some are FinCEN indicators applied to a new industry context, and some are generalized training scenarios. Rather than blur those distinctions, each reviewed record is tagged with one of three attribution tiers:

Direct FinCEN

Direct FinCEN indicator

Restates an indicator that the cited FinCEN advisory or guidance itself identifies.

Adapted

Adapted from FinCEN advisory

Applies an indicator from a FinCEN advisory to this industry’s context rather than quoting it verbatim.

Composite

Composite training scenario

A generalized compliance scenario assembled from multiple concepts or standard practice. Useful for training; it is not a single named advisory indicator.

Tagging is being applied sector by sector as each industry\u2019s records are re-checked against their source documents. Insurance and Fintech are classified first; records without a tier are still being reviewed and carry no attribution claim until they are.

Red flags are educational indicators drawn from official sources. They do not establish that suspicious activity, criminal conduct, or a violation has occurred, and this library is not legal or compliance advice.

Browse compliance resources

Educational & Informational Use Only

This library is a training aid and reference tool. It is not legal, regulatory, or compliance advice. Results are a self-reported estimate, not a formal examination or audit. There is no guarantee of regulatory compliance, and this is not a substitute for an independent BSA audit by a qualified professional. No attorney-client or consulting relationship is established. No warranties are made regarding the accuracy, completeness, or fitness for purpose of the content herein. Always consult a licensed compliance professional for guidance specific to your situation.

Red Flag Reference by Topic

Deep-dive guides for specific red flag categories and industries. Each page includes expanded explanations, regulatory context, and related training resources.

Title & Escrow Red Flags

AML Red Flags for Title Companies

30+ BSA red flags specifically for title companies, escrow agents, and closing attorneys. Sourced from FinCEN advisories...

Browse red flags
MSB Red Flags

MSB Suspicious Activity Indicators

45+ suspicious activity indicators specifically for money services businesses. Drawn from the FFIEC Exam Manual and rela...

Browse red flags
Crypto Red Flags

Cryptocurrency Money Laundering Red Flags

40+ red flags for detecting money laundering in cryptocurrency transactions. Drawn from FIN-2019-G001, FIN-2021-A004, an...

Browse red flags
SAR Filing Reference

SAR Red Flags List

427+ BSA red flags organized by SAR checkbox category. Each red flag includes the SAR checkbox it maps to, its source do...

Browse red flags
Bank Structuring Red Flags

Structuring Red Flags for Banks

25+ structuring indicators specifically for banks. Sourced from the FFIEC Core Examination Manual, FinCEN advisories, an...

Browse red flags
Industry-Specific Red Flags

AML Red Flags by Industry

427+ BSA red flags organized by 13 regulated industries. Each entry is sourced from a FinCEN advisory, FFIEC manual, or ...

Browse red flags
BSA Compliance Reference

BSA Red Flags List

427+ Bank Secrecy Act red flags covering every compliance category, industry, and risk level. Each flag cites a FinCEN, ...

Browse red flags
Money Laundering Detection

Money Laundering Red Flags

427+ money laundering indicators organized by the three stages: placement, layering, and integration. Each flag cites a ...

Browse red flags
Mortgage Red Flags

FinCEN Red Flags for Mortgage Companies

35+ BSA red flags for mortgage companies under 31 CFR § 1029. Drawn from FIN-2012-A009 and FinCEN mortgage fraud reporti...

Browse red flags
Fintech Red Flags

FinCEN Red Flags for Fintech Companies

35+ BSA red flags for fintech companies under 31 CFR § 1022. Drawn from FIN-2020-A007, the 2024 Financial Trend Analysis...

Browse red flags
Casino Red Flags

FinCEN Casino AML Red Flags Examiners Look For

30+ BSA red flags for casinos under 31 CFR § 1021. Adapted from FinCEN casino guidance and advisories, each record shows...

Browse red flags
Insurance Red Flags

FinCEN Red Flags for Insurance

25+ BSA red flags for insurance under 31 CFR § 1025. Based on FinCEN's insurance rule and related FinCEN advisories, eac...

Browse red flags
Investment Red Flags

FinCEN Red Flags for Investment Advisers

25+ red flags for investment firms. Based on FinCEN's investment adviser rule and related guidance, each record shows it...

Browse red flags
DPMS Red Flags

FinCEN Red Flags for Precious Metals Dealers

20+ BSA red flags for DPMS under 31 CFR § 1027. Based on FinCEN's dealer rule at 31 CFR Part 1027 and related guidance, ...

Browse red flags
Real Estate Red Flags

FinCEN Red Flags for Real Estate

25+ BSA red flags for real estate under the FIN-2017-A003 Real Estate Advisory and GTO Orders. Sourced from 31 CFR § 101...

Browse red flags
Nonprofit Red Flags

FinCEN Red Flags for Charities and Nonprofit Organizations

20+ red flags for nonprofits. Drawn from FIN-2014-A005, FinCEN's Hizballah financing alert (FIN-2024-Alert003), and FinC...

Browse red flags
Auto Dealer Red Flags

FinCEN Red Flags for Auto Dealers

15+ red flags for auto dealers, tied to Form 8300 and OFAC duties. Each flag includes its SAR checkbox and source citati...

Browse red flags

Need Help Building Your AML Program?

Soflo Consulting provides end-to-end BSA/AML compliance solutions for regulated businesses across 13 industries. From risk assessments to annual training, we have you covered.

Explore investment adviser AML requirements