AML Red Flags by Industry: The Complete Reference
427+ BSA red flags organized by 13 regulated industries. Each entry is sourced from a FinCEN advisory, FFIEC manual, or federal regulation, and shows its attribution tier.
AML Red Flags by Industry: What Compliance Officers Need to Know
AML red flags vary by industry because money laundering risks differ by sector. A cash-intensive MSB, a mortgage lender, a casino, and a crypto exchange each face different typologies. This page organizes verified indicators by regulated industry and links to the dedicated red flag guide for each.
Different industries face different money laundering risks. A red flag that is critical for a cryptocurrency exchange may be irrelevant for an insurance company. The AML Red Flags by Industry reference organizes 427+ BSA red flags into 13 regulated industry categories, making it easy for compliance officers to find the indicators that matter most for their business type.
Each industry section includes red flags drawn from the specific FinCEN guidance and regulatory framework that applies to that sector. MSB red flags reference the FFIEC manual and FinCEN advisories. Mortgage red flags reference FIN-2012-A009. Title company red flags reference the GTO orders and Part 1031. Crypto red flags reference FIN-2019-G001. Bank red flags reference the FFIEC Core Examination Manual.
This page serves as the index to all industry-specific red flag collections, with direct links to filtered views of the full AML Red Flag Library for each sector.
427+ BSA Red Flags
Customer attempts to split a large cash transaction into multiple smaller transactions below the $3,000 recordkeeping threshold to avoid creating a paper trail.
Multiple customers visit the same location in rapid succession and each conducts a cash transaction just below the reporting threshold, suggesting a coordinated structuring scheme.
Wire transfers sent to or received from high-risk jurisdictions known for money laundering, with no apparent business or family connection to those countries.
Customer provides identification that appears altered, forged, or inconsistent with the person presenting it, including mismatched photos or expired credentials.
Corporate customer sends wires on behalf of undisclosed principals, or the stated beneficial owner is a nominee shareholder with no independent wealth or employment.
Transaction patterns show sudden and significant changes in volume, frequency, or typology that are inconsistent with the customer’s established activity profile.
Politically Exposed Person (PEP) or a close associate conducts large cash transactions that appear disproportionate to their known sources of income or legitimate wealth.
Multiple individuals use the same phone number or address to receive wire transfers, with none able to explain the source or purpose of the funds independently.
Funds are sent to or received from individuals, entities, or charities linked to designated terrorist organizations or individuals on OFAC SDN lists.
Customer uses virtual currency exchanges or mixers to obfuscate the origin or destination of funds, particularly involving sanctioned jurisdictions or SDN-listed individuals.
Customer reports that their online account was compromised and unauthorized wire transfers were initiated, with rapid fund movement to overseas accounts.
Customer receives funds and is instructed to convert them to virtual currency and send to a specific wallet address as part of a job offer, romance scheme, or investment opportunity.
What to Do When a Red Flag Appears
Not every red flag is suspicious activity, and a single indicator never automatically requires a Suspicious Activity Report. What matters is a consistent, documented process for evaluating indicators before deciding whether to escalate or file. The steps below describe that process.
- 1
Observe and record
Capture what you saw: the customer, the transaction, the amount, the date, and the specific indicator that caught your attention. Contemporaneous notes are far more useful than a reconstruction weeks later.
- 2
Compare against the expected profile
Weigh the activity against what you already know about the customer, their business, and their normal transaction pattern. A single red flag outside context means much less than a pattern that contradicts the profile.
- 3
Investigate before deciding
A red flag is a reason to look closer, not a conclusion. Gather the supporting facts, ask reasonable questions, and review related activity across accounts, products, and time periods.
- 4
Escalate through your procedure
Route the review to your designated compliance officer or BSA officer using the escalation path documented in your program. Staff should never be left to decide on their own whether to report.
- 5
Document the decision and the reasoning
Whether you file or not, write down what you found, what you concluded, and why. Examiners look for a documented, consistent decision process, not a perfect outcome on every case.
- 6
File a SAR when the facts support it
If the facts meet the filing threshold and suggest illegal activity, evasion of the BSA, or no apparent lawful purpose, file the Suspicious Activity Report within the required timeframe. Filing is confidential.
- 7
Retain records for the required period
Keep the investigation notes, supporting documents, and a copy of any SAR filed for at least five years, consistent with BSA recordkeeping expectations for your industry.
This is an educational framework, not legal or regulatory advice. Your program and your regulator determine the exact escalation, filing, and retention requirements that apply to your business.
More AML Red Flags by Industry
Common Questions About AML Red Flags by Industry
How many AML red flags are there by industry?
The Soflo AML Red Flag Library contains 427+ BSA red flags across 13 regulated industries: Money Services Businesses (45+), Mortgage Companies (35+), Title & Escrow (30+), Fintech (35+), Cryptocurrency (40+), Casinos (30+), Insurance (25+), Investment Advisers (25+), Dealers in Precious Metals (20+), Real Estate (25+), Banks (40+), Nonprofits (20+), and Auto Dealers (15+).
Which industry has the most AML red flags?
Banks and Money Services Businesses have the most AML red flags due to their high transaction volumes, diverse product offerings, and direct exposure to cash-based money laundering. MSBs have 45+ red flags covering structuring, wire activity, identity fraud, human trafficking, and sanctions evasion. Banks have 40+ red flags covering CTR structuring, wire fraud, ACH anomalies, account takeover, and trade-based money laundering.
Do all industries use the same SAR checkbox categories?
While the SAR form uses standardized checkbox categories across all industries, the specific red flags that map to each checkbox vary significantly by industry. For example, a "Cyber event" SAR in a bank might involve account takeover via credential stuffing, while the same checkbox in a title company might involve BEC wire fraud. The AML Red Flag Library tags each red flag with both the industry and the exact SAR checkbox.
Are there industry-specific FinCEN guidance documents for red flags?
Some. Examples include FIN-2012-A009 (mortgage loan fraud), FIN-2019-G001 (convertible virtual currency) and FIN-2017-A003 (real estate), along with the FFIEC BSA/AML Examination Manual for banks. Not every sector has a dedicated document. Real estate GTOs ended February 28, 2026, and the Residential Real Estate Rule at Part 1031 was vacated on March 19, 2026, and is on appeal.
Can I filter the red flag library by multiple industries?
Yes. The AML Red Flag Library supports multi-select industry filtering with OR logic within the industry filter type. You can view red flags for both "MSB" and "Crypto" simultaneously, or expand your search to include "Fintech" and "Bank" for a broader financial services perspective. Active filters display as removable chips above the results grid.
More BSA Red Flags & Compliance Resources
BSA Red Flags List
427+ Bank Secrecy Act red flags covering every compliance category, industry, and risk level. Each flag cites a FinCEN, FFIEC, or federal so...
Money Laundering Red Flags
427+ money laundering indicators organized by the three stages: placement, layering, and integration. Each flag cites a FinCEN or federal so...
SAR Red Flags List
427+ BSA red flags organized by SAR checkbox category. Each red flag includes the SAR checkbox it maps to, its source document, and its CFR ...
AML Red Flag Library
Browse all 427+ BSA red flags across 13 regulated industries. Searchable by keyword, filter by category, industry, or risk level.
Explore related AML-BSA compliance resources
Regulatory sources and guidance
Official Guidance
The indicators on this page draw on primary FinCEN, FFIEC, and federal regulatory material rather than third-party commentary. Always confirm current requirements against the official source.
The FFIEC Bank Secrecy Act/Anti-Money Laundering Examination Manual provides detailed examination procedures used by federal and state regulators to evaluate financial institution BSA/AML compliance programs across all four pillars: internal controls, independent testing, designated BSA officer, and training.
31 CFR Chapter X contains the full set of FinCEN regulations implementing the Bank Secrecy Act. Part 1022 covers MSBs, Part 1029 covers mortgage lenders, Part 1023 covers broker-dealers, Part 1024 covers mutual funds, Part 1025 covers insurance companies, Part 1027 covers dealers in precious metals/stones/jewels, Part 1028 covers operators of credit card systems, and Part 1021 covers casinos and card clubs.
FinCEN's Customer Due Diligence (CDD) Rule requires covered financial institutions to identify and verify beneficial owners of legal entity customers, understand the nature and purpose of customer relationships, and conduct ongoing monitoring to detect and report suspicious transactions. Codified at 31 CFR § 1010.230.
FinCEN publishes advisories, alerts, and guidance that describe the red flags and typologies for specific financial crimes, industries, and emerging threats. Advisories are the primary source for industry-specific suspicious activity indicators and are frequently updated as new schemes emerge.
Knowing the red flags is only part of an effective AML program
Because risk is industry-specific, the strongest AML programs start with a documented risk assessment that reflects the products, customers, and geographies of the business.
Browse 427+ Red Flags Across 13 Industries
Access the complete, searchable AML Red Flag Library. Filter by any combination of industries, categories, risk levels, and source documents.