FinCEN Red Flags for Insurance Companies
25+ BSA red flags for insurance under 31 CFR § 1025. Based on FinCEN's insurance rule and related FinCEN advisories, each record shows its attribution tier.
FinCEN Red Flags for Insurance: What Compliance Officers Need to Know
FinCEN red flags for insurance companies are the indicators that a policy may be used to launder money or store illicit value. Examples include premiums paid by unrelated third parties, single-premium policies surrendered during the free-look period, and policy loans wired overseas. Life insurance and annuity providers are covered under 31 CFR Part 1025.
Insurance companies - particularly life insurance and annuity providers - are subject to BSA/AML requirements under 31 CFR § 1025. The insurance industry faces unique money laundering risks because policies can be used as vehicles for converting illicit funds into legitimate-looking assets, extracting cash through policy loans, or storing value for later retrieval.
Common insurance red flags include premium payments from third parties with no documented relationship, single-premium policies surrendered during the free-look period, policy loans immediately wired overseas, and corporate-owned life insurance (COLI) purchased for low-level employees with disproportionate death benefits.
This page covers the most critical FinCEN red flags for insurance companies, including synthetic identity applications, offshore premium wires, premium financing loops, agent churning, and elder financial exploitation through annuity coercion.
28+ BSA Red Flags
Customer uses a synthetic identity combining a real SSN with fabricated personal details to purchase a high-value whole life or universal life policy with minimal health underwriting.
Policyholder pays the first premium with a large wire from a third party who is not a documented family member or employer, and the wire memo provides no explanation for the payment.
Customer purchases a single-premium life insurance policy with a large wire transfer and requests surrender or policy loan within the free-look period, effectively using the policy as a money laundering vehicle.
Corporate-owned life insurance (COLI) policy is purchased with company funds but the insured employees are low-level workers with no executive role, and the death benefit is disproportionate to their compensation.
Policyholder wires premiums from an account in a jurisdiction subject to OFAC sanctions, routed through an intermediary bank, and requests the policy benefits be paid to a beneficiary in the same sanctioned country.
Multiple individuals listed as beneficiaries on separate life insurance policies all share the same address and phone number, with the policies purchased by a single agent associated with a massage parlor or escort service.
Foreign national uses a U.S. life insurance policy as a store of value, funding it with wires from a sanctioned jurisdiction and planning to surrender it later to receive clean U.S. dollars from the insurer.
PEP purchases a high-value life insurance policy with premiums paid via wire from a foreign government bank account, and the coverage amount far exceeds any documented legitimate salary or assets.
Policy applicant provides identification that appears altered or forged, with mismatched holograms, incorrect fonts, or a photo that does not resemble the person presenting the document.
Applicant for a life insurance policy uses a Social Security number that belongs to a deceased individual, or the number shows no credit history or prior tax filings.
Corporate policyholder is a shell company with no physical office, website, or employees, and the stated business purpose is inconsistent with the type or amount of insurance requested.
Customer pays premiums using sequentially numbered checks from multiple unrelated bank accounts, suggesting the policy is being funded by a network of nominees or shell accounts.
What to Do When a Red Flag Appears
Not every red flag is suspicious activity, and a single indicator never automatically requires a Suspicious Activity Report. What matters is a consistent, documented process for evaluating indicators before deciding whether to escalate or file. The steps below describe that process.
- 1
Observe and record
Capture what you saw: the customer, the transaction, the amount, the date, and the specific indicator that caught your attention. Contemporaneous notes are far more useful than a reconstruction weeks later.
- 2
Compare against the expected profile
Weigh the activity against what you already know about the customer, their business, and their normal transaction pattern. A single red flag outside context means much less than a pattern that contradicts the profile.
- 3
Investigate before deciding
A red flag is a reason to look closer, not a conclusion. Gather the supporting facts, ask reasonable questions, and review related activity across accounts, products, and time periods.
- 4
Escalate through your procedure
Route the review to your designated compliance officer or BSA officer using the escalation path documented in your program. Staff should never be left to decide on their own whether to report.
- 5
Document the decision and the reasoning
Whether you file or not, write down what you found, what you concluded, and why. Examiners look for a documented, consistent decision process, not a perfect outcome on every case.
- 6
File a SAR when the facts support it
If the facts meet the filing threshold and suggest illegal activity, evasion of the BSA, or no apparent lawful purpose, file the Suspicious Activity Report within the required timeframe. Filing is confidential.
- 7
Retain records for the required period
Keep the investigation notes, supporting documents, and a copy of any SAR filed for at least five years, consistent with BSA recordkeeping expectations for your industry.
This is an educational framework, not legal or regulatory advice. Your program and your regulator determine the exact escalation, filing, and retention requirements that apply to your business.
More AML Red Flags by Industry
Common Questions About FinCEN Red Flags for Insurance
What FinCEN red flags apply to insurance companies?
Insurance companies must watch for: premiums paid by third parties with no documented relationship; single-premium policies surrendered during the free-look period; policy loans immediately wired overseas with no stated purpose; COLI policies with death benefits disproportionate to employee compensation; round-dollar premium payments with no supporting documentation; and elderly customers coerced into policy loans or annuity surrenders by caregivers.
Do insurance companies have to file SARs?
Yes. Under 31 CFR § 1025.320, insurance companies must file SARs for suspicious transactions of $5,000 or more. This includes suspicious premium payments, policy loans, surrenders, refunds, and transfers. Insurance companies have been subject to SAR filing requirements since 2006 and must maintain a written AML program with the five BSA pillars.
How do criminals use life insurance for money laundering?
Criminals use life insurance for money laundering through several methods: purchasing single-premium policies with illicit cash and surrendering them during the free-look period to receive "clean" refunded premiums; borrowing the maximum against policy cash value and wiring proceeds overseas; using premium financing arrangements to create circular fund flows between related entities; and purchasing COLI policies on low-level employees to extract tax-advantaged cash through policy loans and surrenders.
What is a "free-look surrender" and why is it a red flag?
A free-look surrender occurs when a customer purchases a single-premium life insurance policy and requests surrender within the statutory free-look period (typically 10-30 days), receiving a full or nearly full refund. This is a classic money laundering technique because the customer effectively converts illicit cash into a "clean" refund check from a legitimate insurance company. This is a widely recognized insurance red flag.
What are elder financial exploitation red flags in insurance?
Elder financial exploitation red flags in insurance include: elderly policyholders pressured by caregivers to take out policy loans or change beneficiary designations; seniors who purchase deferred annuities with long surrender periods at the direction of newly acquainted "financial advisors"; elderly customers who add non-relatives as authorized signers after attending free seminars; and seniors who liquidate retirement holdings to fund high-risk alternative investments recommended by unlicensed advisors.
More BSA Red Flags & Compliance Resources
FinCEN Red Flags for Investment Advisers
25+ red flags for investment firms. Based on FinCEN's investment adviser rule and related guidance, each record shows its attribution tier.
BSA Red Flags List
427+ Bank Secrecy Act red flags covering every compliance category, industry, and risk level. Each flag cites a FinCEN, FFIEC, or federal so...
AML Red Flags by Industry
427+ BSA red flags organized by 13 regulated industries. Each entry is sourced from a FinCEN advisory, FFIEC manual, or federal regulation, ...
AML Red Flag Library
Browse all 427+ BSA red flags across 13 regulated industries. Searchable by keyword, filter by category, industry, or risk level.
Explore related AML-BSA compliance resources
Regulatory sources and guidance
Official Guidance
The indicators on this page draw on primary FinCEN, FFIEC, and federal regulatory material rather than third-party commentary. Always confirm current requirements against the official source.
31 U.S.C. § 5318(h) is the statutory basis requiring every "financial institution" to establish anti-money laundering programs. This Bank Secrecy Act provision is the foundation for all industry-specific AML regulations issued by FinCEN, including those for MSBs, mortgage lenders, casinos, and insurance companies.
The FFIEC Bank Secrecy Act/Anti-Money Laundering Examination Manual provides detailed examination procedures used by federal and state regulators to evaluate financial institution BSA/AML compliance programs across all four pillars: internal controls, independent testing, designated BSA officer, and training.
FinCEN's Customer Due Diligence (CDD) Rule requires covered financial institutions to identify and verify beneficial owners of legal entity customers, understand the nature and purpose of customer relationships, and conduct ongoing monitoring to detect and report suspicious transactions. Codified at 31 CFR § 1010.230.
FinCEN publishes advisories, alerts, and guidance that describe the red flags and typologies for specific financial crimes, industries, and emerging threats. Advisories are the primary source for industry-specific suspicious activity indicators and are frequently updated as new schemes emerge.
Knowing the red flags is only part of an effective AML program
For insurers, red flag monitoring is one element of a documented program covering premium payments, surrenders, policy loans, and third-party relationships.
Browse All 25+ Insurance Red Flags
Access the complete AML Red Flag Library. Filter by insurance-specific categories including premium fraud, policy abuse, and elder exploitation.