Free Reference Tool

Real Estate Professionals AML Red Flags

Search 427 AML and BSA red flags specifically for real estate professionals. Filter by risk level, transaction type, and customer profile, each sourced from a FinCEN advisory, FFIEC manual, or federal regulation. Whether you're preparing for an exam, filing a SAR, or training your team, find exactly the red flags that apply to your regulated business in seconds.

How to Use This Tool
  1. 1

    Pick your industry: Select from 13 regulated sectors like Money Services Businesses, Fintech, Real Estate, or Crypto to instantly filter relevant red flags.

  2. 2

    Narrow by risk or transaction type: Sort by Critical, High, or Medium risk, or filter by wire, cash, ACH, or crypto transactions.

  3. 3

    Save, share, or print: Copy filtered sets for your compliance program, export for SAR documentation, or use Training Mode to quiz your team.

Study for Your CAMS or BSA ExamInteractive

Turn this library into an active study session. Use Training Mode to hide risk levels and test your own classification skills. Or jump into Quiz Mode for flashcard-style review with pass/review tracking, a progress bar, and a readiness score, exactly what you need before exam day.

427+ red flags, source-cited
Real Estate Professionals
FinCEN & FFIEC sourced
SAR checkbox mapping
AML Red Flag Hub

What AML and BSA red flags are, and how to use them

This library is more than a list. It is a working reference for compliance officers, examiners, and training programs. Before diving into the database, here is how red flags fit into an effective AML program and what they do and do not mean.

What AML and BSA red flags are

A red flag is a transaction pattern, customer behavior, or operational anomaly that may indicate money laundering, terrorist financing, fraud, or sanctions evasion under the Bank Secrecy Act. Red flags are warning signs drawn from FinCEN advisories, FFIEC examination manuals, and federal regulation. They help a compliance team know where to look; they are the beginning of an analysis, not the end of one.

Why red flags vary by industry

Money laundering risk is not the same everywhere. A cash-intensive money services business, a mortgage lender funding a home purchase, a casino handling chips, and a crypto exchange moving virtual assets each face different typologies. That is why this library is organized by industry and why a red flag that is critical for one sector may be irrelevant to another.

A red flag is not proof of suspicious activity

Identifying a red flag does not automatically mean suspicious activity has occurred. Legitimate customers trigger indicators for entirely benign reasons. The framework expects institutions to weigh each indicator against the customer profile, the nature of the business, and the surrounding facts before deciding what it means.

Escalation and investigation

Once an indicator is observed, the next step is investigation, not accusation. Staff compare the activity against the expected profile, gather supporting facts, and route the review through a documented escalation path to the compliance officer. The goal is a clear, consistent, and documented decision about what the activity means.

The importance of documented procedures

A red flag only becomes useful when there is a written procedure for handling it. Documented escalation steps, investigation notes, and decision records show examiners that the institution has a repeatable process, regardless of how any single case turns out. Good documentation is what makes a program defensible.

Connection to SAR decision-making

Red flags feed into Suspicious Activity Report decisions. When the facts meet the applicable threshold and suggest illegal activity, evasion of the BSA, or no apparent lawful purpose, a SAR is filed. When they do not, that decision is documented too. Not every red flag requires a SAR, and treating it as though it does is a common misunderstanding.

Educational versus legal conclusions

The entries in this library are educational and informational. They describe indicators; they do not determine guilt, liability, or compliance. They are not legal advice and do not replace a qualified review of your specific facts, your obligations, and the current text of the regulation. Always confirm against the official source.

Red flags organized by industry

Every entry in the database is tagged by industry. Skip straight to the dedicated guide for your sector, or use the selector below to filter the full library on this page.

Nothing on this hub is legal, regulatory, or compliance advice. Red flags are educational indicators and do not establish that suspicious activity, criminal conduct, or a violation has occurred. Confirm every requirement against the official FinCEN, FFIEC, or federal source and consult a qualified professional for your specific circumstances.

Select your industry to get started

30

of 427 total

Matching Red Flags

Real Estate

Currently filtered

Industry

27

FinCEN & FFIEC

Source Documents

15

Red flag types

Categories

Risk breakdown in resultsCritical~10High~16Medium~5
Featured This WeekRotates every Monday
FINTECH-CF-002Critical RiskFintech & Payment Processors

Fintech platform experiences a ransomware attack where customer data is exfiltrated and a cryptocurrency ransom demand is made, with subsequent dark web postings of stolen account information.

Source: FIN-2021-A004 Ransomware31 CFR §1022.210
Training ModeActive Study

Hide risk levels and source documents to test your own classification skills. A proven way to lock in knowledge before your CAMS or BSA exam.

Off

30 of 427 red flags

CriticalRE-CASH-001
Real Estate Professionals

Buyer pays the entire purchase price or a substantial down payment in cash, with no documented source of funds, bank draft, or letter from a financial institution.

structuring|FIN-2017-A003 Real Estate Advisory|31 CFR §1010.370
View
CriticalRE-CASH-002
Real Estate Professionals

Buyer provides multiple cashier’s checks or money orders from different banks, each just under $10,000, to fund a single real estate transaction, suggesting intentional structuring.

structuring|FIN-2017-A003 Real Estate Advisory|31 CFR §1010.370
View
CriticalRE-CASH-003
Real Estate Professionals

LLC or trust purchases residential real estate entirely in cash with no mortgage financing, and the beneficial owners are not disclosed or are foreign nationals from high-risk jurisdictions.

structuring|FIN-2017-A003 Real Estate Advisory|31 CFR §1010.370
View
CriticalRE-WIRE-001
Real Estate Professionals

Closing funds are wired from an account that is not in the buyer’s name, with no gift letter, power of attorney, or other documentation authorizing the third-party funding.

wire activity|FIN-2017-A003 Real Estate Advisory|31 CFR §1010.370
View
CriticalRE-WIRE-003
Real Estate Professionals

Last-minute change to wire instructions sent via email differs from previously verified instructions, particularly if the email domain is slightly altered or the signature block is missing.

wire activity|FIN-2021-A004 Ransomware|31 CFR §1010.370
View
CriticalRE-BO-001
Real Estate Professionals

Purchaser is a legal entity (LLC, trust, or corporation) and refuses to provide beneficial ownership information, or the provided information traces to shell companies with no physical presence.

beneficial ownership|FIN-2017-A003 Real Estate Advisory|31 CFR §1010.230
View
CriticalRE-BO-002
Real Estate Professionals

PEP or close family member is listed as a beneficial owner of the purchasing entity, with funds sourced from a country with high corruption indices and no legitimate business justification.

beneficial ownership|Kleptocracy Advisory|31 CFR §1010.230
View
CriticalRE-HT-001
Real Estate Professionals

Entity purchasing residential property operates a massage business, nail salon, or residential rental where the occupants match patterns of forced labor, with no legitimate commercial lease documentation.

human trafficking|FIN-2020-A008 Human Trafficking|31 CFR §1010.370
View
CriticalRE-CF-001
Real Estate Professionals

Title company receives an email purportedly from the buyer’s attorney directing a change in wire destination, but the email address contains a subtle typographical variation from the legitimate domain.

cyber/fraud|FIN-2016-A003 E-Mail Compromise Fraud|31 CFR §1010.370
View
CriticalRE-SE-001
Real Estate Professionals

Foreign buyer uses a title company to purchase U.S. real estate and subsequently transfers the property to a family member or associate on the OFAC SDN list without filing a SAR.

sanctions evasion|FIN-2022-Alert003 Russian Export Control Evasion|31 CFR §501
View
CriticalRE-PEP-001
Real Estate Professionals

PEP purchases luxury residential property in the U.S. using funds wired from a foreign government account or from a shell company linked to government contracts in their home country.

customer behavior|Kleptocracy Advisory|31 CFR §1010.630
View
HighRE-CASH-004
Real Estate Professionals

Buyer brings cash to closing in denominations commonly associated with drug trafficking, with no bank account history, no employment documentation, and no explanation for the cash accumulation.

unusual cash|FIN-2024-A002 Fentanyl Precursors|31 CFR §1010.370
View
HighRE-WIRE-002
Real Estate Professionals

Foreign buyer wires closing funds from an overseas account in a jurisdiction with weak AML controls, and the wire memo references a property address that does not match the closing file.

wire activity|GTO Orders 31 CFR §1010.370|31 CFR §1010.370
View
HighRE-WIRE-004
Real Estate Professionals

Buyer’s wire for closing comes from a cryptocurrency exchange or digital asset custodian, with no prior relationship or explanation for the virtual currency holdings.

wire activity|FIN-2019-G001 Convertible Virtual Currency|31 CFR §1010.370
View
HighRE-BO-003
Real Estate Professionals

Trust purchasing real estate has a protector or settlor who is a foreign national with no U.S. tax identification number, and the trust deed is not registered in any U.S. jurisdiction.

beneficial ownership|FIN-2017-A003 Real Estate Advisory|31 CFR §1010.230
View
HighRE-KYC-001
Real Estate Professionals

Buyer’s identification documents show signs of tampering, such as mismatched fonts, incorrect holograms, or a photo that does not resemble the person presenting them at closing.

identity/KYC|FIN-2024-Alert004 Deepfake Fraud|31 CFR §1010.370
View
HighRE-TM-001
Real Estate Professionals

Buyer purchases multiple properties in rapid succession, all funded by the same source, with no evidence of rental income, property management, or legitimate investment strategy.

transaction monitoring|FIN-2017-A003 Real Estate Advisory|31 CFR §1010.370
View
HighRE-TM-002
Real Estate Professionals

Property is purchased well above market value with no appraisal justification, and the buyer appears unconcerned about the inflated price or refuses to negotiate.

transaction monitoring|FIN-2017-A003 Real Estate Advisory|31 CFR §1010.370
View
HighRE-GEO-001
Real Estate Professionals

Purchase occurs in a county or metropolitan area subject to an in-force FinCEN Geographic Targeting Order, and the transaction matches the GTO criteria (cash, LLC, no mortgage).

geographic risk|GTO Orders 31 CFR §1010.370|31 CFR §1010.370
View
HighRE-GEO-002
Real Estate Professionals

Funds are wired from a jurisdiction that is subject to OFAC sanctions or a FinCEN advisory, and the source of funds cannot be verified through independent documentation.

geographic risk|FIN-2022-Alert003 Russian Export Control Evasion|31 CFR §501
View
HighRE-CB-002
Real Estate Professionals

Buyer expresses no interest in the property’s condition, location, or amenities, and does not request an inspection, appraisal, or walkthrough before closing.

customer behavior|FIN-2017-A003 Real Estate Advisory|31 CFR §1010.370
View
HighRE-EFE-001
Real Estate Professionals

Elderly seller is coerced into signing a quitclaim deed or power of attorney at closing by a caregiver or family member who then directs the proceeds to their own account.

elder financial exploitation|Elder Financial Exploitation Advisory|31 CFR §1010.370
View
HighRE-CF-002
Real Estate Professionals

Buyer’s email account is compromised, and the attacker sends wire instructions that bypass the title company’s verbal verification protocol by spoofing the buyer’s phone number via VOIP.

cyber/fraud|FIN-2021-A004 Ransomware|31 CFR §1010.370
View
HighRE-TBML-001
Real Estate Professionals

Commercial real estate purchase is funded by a business whose stated revenue is incompatible with the purchase price, with no audited financial statements or tax returns to support the funding source.

trade-based ML|FIN-2014-A005 Funnel Accounts and TBML|31 CFR §1010.370
View
HighRE-PEP-002
Real Estate Professionals

PEP’s family member purchases U.S. real estate through a trust or LLC and refuses to disclose the source of funds, which cannot be traced to legitimate salary, business income, or inheritance.

customer behavior|Kleptocracy Advisory|31 CFR §1010.630
View
HighRE-CHK-001
Real Estate Professionals

Buyer’s earnest money check is drawn on a closed account, is post-dated, or is from an account with no prior transaction history, suggesting the account was opened solely for this transaction.

transaction monitoring|FIN-2017-A003 Real Estate Advisory|31 CFR §1010.370
View
MediumRE-KYC-002
Real Estate Professionals

Foreign buyer presents a passport from a country not commonly associated with U.S. real estate investment and provides no U.S. visa, green card, or other immigration documentation.

identity/KYC|FIN-2017-A003 Real Estate Advisory|31 CFR §1010.370
View
MediumRE-TM-003
Real Estate Professionals

Buyer purchases property with cash and immediately takes out a home equity line of credit, converting the equity to liquid funds with no stated renovation or investment purpose.

transaction monitoring|FIN-2017-A003 Real Estate Advisory|31 CFR §1010.370
View
MediumRE-CB-001
Real Estate Professionals

Buyer is unwilling to attend closing in person and insists on using a remote notary or power of attorney from an individual with no prior relationship to the transaction.

customer behavior|FIN-2017-A003 Real Estate Advisory|31 CFR §1010.370
View
MediumRE-EFE-002
Real Estate Professionals

Elderly buyer purchases property well above their means or in a distant location with no apparent reason, funded by a reverse mortgage or HELOC taken out under pressure.

elder financial exploitation|Elder Financial Exploitation Advisory|31 CFR §1010.370
View

Showing 30 of 427 red flags

Your Next Step

Found a real estate red flag? Here is what should come next.

Real estate professionals face FinCEN Geographic Targeting Orders and continued rulemaking. Training and documented procedures covering all-cash purchases, beneficial ownership, and suspicious activity are the practical next step.

Source Transparency

How every red flag is sourced, cited, and reviewed

This library is meant to be checked, not just read. Each entry shows where it came from and when it was last reviewed, so examiners, compliance officers, and trainers can verify the basis for any indicator.

Every entry cites its source — and its attribution strength

Each red flag is linked to a related FinCEN, FFIEC or regulatory source. The wording is Soflo's summary, not a quotation, so confirm any indicator against the source before relying on it. Reviewed records also carry an attribution tier, so you can see whether the source names the indicator directly or whether it was adapted from that source.

Citations are shown, not summarized away

Where a record maps to a regulation, the 31 CFR citation is displayed with a direct link so you can read the operative text yourself instead of trusting a paraphrase.

Each record carries a last-reviewed date

Records show the date they were last checked against the source document. The library is reviewed periodically against current FinCEN advisories, FFIEC manual updates, and the Code of Federal Regulations.

SAR categories are mapped, not implied

Where applicable, records show the corresponding FinCEN SAR Form 111 checkbox category and key term, so the link between an indicator and a filing decision is explicit.

How we signal the strength of each citation

Not every entry is a literal, named FinCEN indicator \u2014 some are FinCEN indicators applied to a new industry context, and some are generalized training scenarios. Rather than blur those distinctions, each reviewed record is tagged with one of three attribution tiers:

Direct FinCEN

Direct FinCEN indicator

Restates an indicator that the cited FinCEN advisory or guidance itself identifies.

Adapted

Adapted from FinCEN advisory

Applies an indicator from a FinCEN advisory to this industry’s context rather than quoting it verbatim.

Composite

Composite training scenario

A generalized compliance scenario assembled from multiple concepts or standard practice. Useful for training; it is not a single named advisory indicator.

Tagging is being applied sector by sector as each industry\u2019s records are re-checked against their source documents. Insurance and Fintech are classified first; records without a tier are still being reviewed and carry no attribution claim until they are.

Red flags are educational indicators drawn from official sources. They do not establish that suspicious activity, criminal conduct, or a violation has occurred, and this library is not legal or compliance advice.

Browse compliance resources

Educational & Informational Use Only

This library is a training aid and reference tool. It is not legal, regulatory, or compliance advice. Results are a self-reported estimate, not a formal examination or audit. There is no guarantee of regulatory compliance, and this is not a substitute for an independent BSA audit by a qualified professional. No attorney-client or consulting relationship is established. No warranties are made regarding the accuracy, completeness, or fitness for purpose of the content herein. Always consult a licensed compliance professional for guidance specific to your situation.

Red Flag Reference by Topic

Deep-dive guides for specific red flag categories and industries. Each page includes expanded explanations, regulatory context, and related training resources.

Title & Escrow Red Flags

AML Red Flags for Title Companies

30+ BSA red flags specifically for title companies, escrow agents, and closing attorneys. Sourced from FinCEN advisories...

Browse red flags
MSB Red Flags

MSB Suspicious Activity Indicators

45+ suspicious activity indicators specifically for money services businesses. Drawn from the FFIEC Exam Manual and rela...

Browse red flags
Crypto Red Flags

Cryptocurrency Money Laundering Red Flags

40+ red flags for detecting money laundering in cryptocurrency transactions. Drawn from FIN-2019-G001, FIN-2021-A004, an...

Browse red flags
SAR Filing Reference

SAR Red Flags List

427+ BSA red flags organized by SAR checkbox category. Each red flag includes the SAR checkbox it maps to, its source do...

Browse red flags
Bank Structuring Red Flags

Structuring Red Flags for Banks

25+ structuring indicators specifically for banks. Sourced from the FFIEC Core Examination Manual, FinCEN advisories, an...

Browse red flags
Industry-Specific Red Flags

AML Red Flags by Industry

427+ BSA red flags organized by 13 regulated industries. Each entry is sourced from a FinCEN advisory, FFIEC manual, or ...

Browse red flags
BSA Compliance Reference

BSA Red Flags List

427+ Bank Secrecy Act red flags covering every compliance category, industry, and risk level. Each flag cites a FinCEN, ...

Browse red flags
Money Laundering Detection

Money Laundering Red Flags

427+ money laundering indicators organized by the three stages: placement, layering, and integration. Each flag cites a ...

Browse red flags
Mortgage Red Flags

FinCEN Red Flags for Mortgage Companies

35+ BSA red flags for mortgage companies under 31 CFR § 1029. Drawn from FIN-2012-A009 and FinCEN mortgage fraud reporti...

Browse red flags
Fintech Red Flags

FinCEN Red Flags for Fintech Companies

35+ BSA red flags for fintech companies under 31 CFR § 1022. Drawn from FIN-2020-A007, the 2024 Financial Trend Analysis...

Browse red flags
Casino Red Flags

FinCEN Casino AML Red Flags Examiners Look For

30+ BSA red flags for casinos under 31 CFR § 1021. Adapted from FinCEN casino guidance and advisories, each record shows...

Browse red flags
Insurance Red Flags

FinCEN Red Flags for Insurance

25+ BSA red flags for insurance under 31 CFR § 1025. Based on FinCEN's insurance rule and related FinCEN advisories, eac...

Browse red flags
Investment Red Flags

FinCEN Red Flags for Investment Advisers

25+ red flags for investment firms. Based on FinCEN's investment adviser rule and related guidance, each record shows it...

Browse red flags
DPMS Red Flags

FinCEN Red Flags for Precious Metals Dealers

20+ BSA red flags for DPMS under 31 CFR § 1027. Based on FinCEN's dealer rule at 31 CFR Part 1027 and related guidance, ...

Browse red flags
Real Estate Red Flags

FinCEN Red Flags for Real Estate

25+ BSA red flags for real estate under the FIN-2017-A003 Real Estate Advisory and GTO Orders. Sourced from 31 CFR § 101...

Browse red flags
Nonprofit Red Flags

FinCEN Red Flags for Charities and Nonprofit Organizations

20+ red flags for nonprofits. Drawn from FIN-2014-A005, FinCEN's Hizballah financing alert (FIN-2024-Alert003), and FinC...

Browse red flags
Auto Dealer Red Flags

FinCEN Red Flags for Auto Dealers

15+ red flags for auto dealers, tied to Form 8300 and OFAC duties. Each flag includes its SAR checkbox and source citati...

Browse red flags

Need Help Building Your AML Program?

Soflo Consulting provides end-to-end BSA/AML compliance solutions for regulated businesses across 13 industries. From risk assessments to annual training, we have you covered.

Explore real estate AML requirements