Investment Red Flags

FinCEN Red Flags for Investment Advisers

25+ verified BSA red flags for investment firms under 31 CFR § 1024. Every flag traces to FIN-2015-G001 or the FFIEC Investment Adviser Examination Manual.

FinCEN-verified sources
SAR checkbox mapping
CFR citations included
Full-text searchable
About These Red Flags

FinCEN Red Flags for Investment Advisers: What Compliance Officers Need to Know

Investment advisers were brought under BSA/AML requirements by FinCEN in 2015 under 31 CFR § 1024. The investment industry faces unique money laundering risks due to the complexity of investment products, the ease of cross-border fund movement, and the high value of transactions. Criminals exploit investment accounts for layering through penny stocks, early redemption schemes, and margin loan offshore transfers.

FinCEN's FIN-2015-G001 advisory provides specific guidance on investment adviser red flags, including in-and-out transactions, early redemptions despite lock-up periods, unrelated sector investments by corporate clients, income diversion to different payees, and unorthodox funding methods like cash delivered to the adviser's office.

This page covers the most critical FinCEN red flags for investment advisers, including synthetic identity onboarding, opaque feeder fund structures, penny stock layering, sanctions evasion through nominee fund structures, and PEP investments sourced from government bank accounts.

Featured Red Flags

27+ Verified BSA Red Flags

View All 27 in Library
CriticalInvestment|identity/KYC

Synthetic identity passes initial onboarding but the client has no verifiable employment history, credit report, or prior banking relationships, despite claiming significant wealth.

FinCEN FTA Identity 2024|Identity theft
CriticalInvestment|identity/KYC

PEP client opens an investment account but the stated source of wealth cannot be verified through independent sources, and the assets appear disproportionate to known salary or business income.

Kleptocracy Advisory|PEP concern
CriticalInvestment|transaction monitoring

Client wires funds to the advisory account and immediately requests liquidation and wire-out to a different beneficiary, with no stated investment objective or time horizon.

FIN-2015-G001 Investment Advisers|Money laundering
CriticalInvestment|transaction monitoring

Client requests that dividends, interest, or capital gains be paid to a different account or payee than the original funding source, with no documented gift, family, or legal reason for the diversion.

FIN-2015-G001 Investment Advisers|Suspicious activity
CriticalInvestment|transaction monitoring

Advisory account for a corporate client shows investments in sectors completely unrelated to the client’s business, with no board resolution or documented investment policy authorizing the allocation.

FIN-2015-G001 Investment Advisers|Suspicious activity
CriticalInvestment|beneficial ownership

Investment vehicle is owned by a series of shell companies in different jurisdictions, with each layer adding opacity, and the ultimate beneficial owner is a sanctioned individual or entity.

FIN-2024-A002 Israeli Settler Violence|Beneficial ownership
CriticalInvestment|customer behavior

Client introduces another prospective investor who is a PEP or sanctioned individual, and attempts to facilitate account opening by vouching for them or offering to co-sign.

Kleptocracy Advisory|PEP concern
CriticalInvestment|cyber/fraud

Adviser receives an email purportedly from the client requesting a wire transfer of account assets to a new bank, but the email address contains a subtle domain variation and bypasses verbal confirmation.

FIN-2016-A003 Cyber Events|Cyber event
CriticalInvestment|sanctions evasion

Foreign national uses a U.S.-domiciled investment fund to hold assets that are effectively controlled by a sanctioned individual, with the nominee structure designed to avoid OFAC screening.

FIN-2022-RUSSIABIS Export Evasion|Sanctions evasion
CriticalInvestment|customer behavior

PEP invests in a private equity fund with capital sourced from a government development bank in their home country, where the investment terms are disproportionately favorable and lack independent valuation.

Kleptocracy Advisory|PEP concern
HighInvestment|identity/KYC

Client provides a passport or driver’s license that fails document authentication checks, with the photo appearing artificially generated or manipulated using AI tools.

FIN-2024-A001 Deepfake Fraud|Identity verification concerns
HighInvestment|identity/KYC

Investment fund client is a legal entity registered in a secrecy jurisdiction with no audited financials, no website, and no verifiable officers or employees.

FIN-2015-G001 Investment Advisers|Identity verification concerns
FAQ

Common Questions About FinCEN Red Flags for Investment Advisers

What FinCEN red flags apply to investment advisers?

Investment advisers must watch for: clients who wire funds and immediately request liquidation and withdrawal; early redemptions despite stated lock-up periods; investments in unrelated sectors with no board authorization; dividends diverted to accounts different from the funding source; unorthodox payment methods like cash or third-party checks; penny stock purchases immediately sold at a loss; margin loan proceeds wired offshore; and PEP clients whose wealth cannot be traced to legitimate sources.

Do investment advisers have to file SARs?

Yes. Under 31 CFR § 1024.320, investment advisers must file SARs for suspicious transactions of $5,000 or more. This requirement took effect in 2016 and covers all SEC-registered investment advisers. Advisers must also maintain a written AML program, designate a compliance officer, provide ongoing training, conduct independent testing, and perform customer due diligence.

What are "in-and-out" transactions in investment accounts?

In-and-out transactions occur when a client wires funds to an investment account and immediately requests liquidation and wire-out to a different beneficiary, with no stated investment objective or time horizon. This pattern suggests the account is being used as a pass-through for money laundering rather than for legitimate investment purposes. FinCEN's FIN-2015-G001 specifically identifies in-and-out transactions as a primary investment adviser red flag.

How do criminals use investment accounts for layering?

Criminals layer funds through investment accounts by: purchasing thinly traded penny stocks and immediately selling at a loss to generate a paper trail; using margin accounts to borrow against securities and wire proceeds offshore; investing in private placements and requesting early redemption to extract funds; and directing dividends and capital gains to different accounts or payees than the original funding source. Each step creates a layer of separation between the illicit origin and the final destination.

What are PEP red flags for investment advisers?

PEP red flags for investment advisers include: clients whose stated wealth cannot be verified through independent sources; investments in private equity funds with terms disproportionately favorable to the PEP; funds sourced from foreign government-owned banks or ministries; family members or close associates used as account signatories to distance the PEP from transactions; and investments in sectors where the PEP's government role creates apparent conflicts of interest.

AML Red Flag Library

Browse All 25+ Investment Red Flags

Access the complete AML Red Flag Library. Filter by investment-specific categories including in-and-out transactions, penny stock layering, and PEP concerns.

Talk with Us