Money Laundering Red Flags: The Complete Detection Guide
427+ money laundering indicators organized by the three stages: placement, layering, and integration. Each flag cites a FinCEN or federal source and shows its attribution tier.
Money Laundering Red Flags: What Compliance Officers Need to Know
Money laundering red flags are the indicators that illicit funds may be entering, moving through, or exiting the financial system. They map to the three stages of laundering: placement, layering, and integration. Recognizing which stage a pattern fits helps a compliance team decide what to investigate.
Money laundering is the process of making illegally obtained proceeds appear legal through a three-stage cycle: placement (introducing dirty cash into the financial system), layering (obscuring the trail through complex transactions), and integration (reintroducing the now-laundered funds into the legitimate economy). Each stage has distinct red flags that financial institutions must recognize.
Placement red flags are most common at MSBs, casinos, auto dealers, and precious metals dealers - businesses that handle large cash volumes. Layering red flags appear across all industries, particularly in wire transfers, cryptocurrency transactions, trade-based schemes, and shell company networks. Integration red flags often involve real estate purchases, luxury goods, investment accounts, and insurance policies.
This page covers the complete spectrum of money laundering red flags, from classic cash structuring to emerging threats like virtual currency mixing, cross-chain bridges, deepfake-enabled identity fraud, and sanctions evasion through offshore exchanges.
427+ BSA Red Flags
Customer attempts to split a large cash transaction into multiple smaller transactions below the $3,000 recordkeeping threshold to avoid creating a paper trail.
Multiple customers visit the same location in rapid succession and each conducts a cash transaction just below the reporting threshold, suggesting a coordinated structuring scheme.
Wire transfers sent to or received from high-risk jurisdictions known for money laundering, with no apparent business or family connection to those countries.
Customer provides identification that appears altered, forged, or inconsistent with the person presenting it, including mismatched photos or expired credentials.
Corporate customer sends wires on behalf of undisclosed principals, or the stated beneficial owner is a nominee shareholder with no independent wealth or employment.
Transaction patterns show sudden and significant changes in volume, frequency, or typology that are inconsistent with the customer’s established activity profile.
Politically Exposed Person (PEP) or a close associate conducts large cash transactions that appear disproportionate to their known sources of income or legitimate wealth.
Multiple individuals use the same phone number or address to receive wire transfers, with none able to explain the source or purpose of the funds independently.
Funds are sent to or received from individuals, entities, or charities linked to designated terrorist organizations or individuals on OFAC SDN lists.
Customer uses virtual currency exchanges or mixers to obfuscate the origin or destination of funds, particularly involving sanctioned jurisdictions or SDN-listed individuals.
Customer reports that their online account was compromised and unauthorized wire transfers were initiated, with rapid fund movement to overseas accounts.
Customer receives funds and is instructed to convert them to virtual currency and send to a specific wallet address as part of a job offer, romance scheme, or investment opportunity.
What to Do When a Red Flag Appears
Not every red flag is suspicious activity, and a single indicator never automatically requires a Suspicious Activity Report. What matters is a consistent, documented process for evaluating indicators before deciding whether to escalate or file. The steps below describe that process.
- 1
Observe and record
Capture what you saw: the customer, the transaction, the amount, the date, and the specific indicator that caught your attention. Contemporaneous notes are far more useful than a reconstruction weeks later.
- 2
Compare against the expected profile
Weigh the activity against what you already know about the customer, their business, and their normal transaction pattern. A single red flag outside context means much less than a pattern that contradicts the profile.
- 3
Investigate before deciding
A red flag is a reason to look closer, not a conclusion. Gather the supporting facts, ask reasonable questions, and review related activity across accounts, products, and time periods.
- 4
Escalate through your procedure
Route the review to your designated compliance officer or BSA officer using the escalation path documented in your program. Staff should never be left to decide on their own whether to report.
- 5
Document the decision and the reasoning
Whether you file or not, write down what you found, what you concluded, and why. Examiners look for a documented, consistent decision process, not a perfect outcome on every case.
- 6
File a SAR when the facts support it
If the facts meet the filing threshold and suggest illegal activity, evasion of the BSA, or no apparent lawful purpose, file the Suspicious Activity Report within the required timeframe. Filing is confidential.
- 7
Retain records for the required period
Keep the investigation notes, supporting documents, and a copy of any SAR filed for at least five years, consistent with BSA recordkeeping expectations for your industry.
This is an educational framework, not legal or regulatory advice. Your program and your regulator determine the exact escalation, filing, and retention requirements that apply to your business.
More AML Red Flags by Industry
Common Questions About Money Laundering Red Flags
What are the three stages of money laundering and their red flags?
Placement involves introducing illegal cash into the financial system - red flags include large cash deposits just below CTR thresholds, business cash mismatches, and drug-tainted currency. Layering obscures the audit trail - red flags include rapid inflow/outflow, wire transfers through shell companies, cryptocurrency mixing, and trade-based invoice manipulation. Integration reintroduces funds as legitimate - red flags include real estate purchases by shell companies, luxury goods bought with unexplained wealth, and investment accounts funded by opaque sources.
What are the most common money laundering typologies?
Common money laundering typologies include: trade-based money laundering (over/under invoicing, ghost shipments); shell company networks (layered ownership concealing beneficial controllers); cryptocurrency laundering (mixers, privacy coins, cross-chain bridges); real estate laundering (all-cash purchases by opaque entities); casino laundering (minimal play chip buy-ins followed by check cash-outs); and MSB structuring (splitting transactions across locations and days).
How does cryptocurrency enable money laundering?
Cryptocurrency enables money laundering through several mechanisms: pseudonymous wallet addresses hide identity; mixing services and privacy coins break the blockchain audit trail; cross-chain bridges move funds between blockchains to obscure tracing; decentralized exchanges allow trades without KYC; and offshore exchanges in weak-AML jurisdictions provide exit ramps for dirty funds. FinCEN's FIN-2019-G001 guidance and FIN-2021-A004 ransomware advisory address these risks.
What is trade-based money laundering and what are its red flags?
Trade-based money laundering (TBML) uses international trade transactions to move and disguise illicit funds. Red flags include: invoices with pricing significantly different from commodity market values; payments for goods that are never shipped (ghost shipments); multiple related entities trading the same goods in circular transactions; and bills of lading that do not match the stated cargo. TBML is particularly prevalent in import/export businesses and cross-border investment funds.
How do shell companies facilitate money laundering?
Shell companies facilitate money laundering by providing a legitimate-looking facade for illicit transactions. Red flags include: companies with no physical office, website, or employees; beneficial owners who are nominees with no traceable employment or assets; businesses registered in secrecy jurisdictions with minimal disclosure requirements; and companies whose stated revenue is incompatible with their transaction volume or industry norms. Layered shell ownership - with companies owned by other companies in different jurisdictions - is a particularly sophisticated laundering technique.
More BSA Red Flags & Compliance Resources
BSA Red Flags List
427+ Bank Secrecy Act red flags covering every compliance category, industry, and risk level. Each flag cites a FinCEN, FFIEC, or federal so...
SAR Red Flags List
427+ BSA red flags organized by SAR checkbox category. Each red flag includes the SAR checkbox it maps to, its source document, and its CFR ...
Cryptocurrency Money Laundering Red Flags
40+ red flags for detecting money laundering in cryptocurrency transactions. Drawn from FIN-2019-G001, FIN-2021-A004, and FinCEN virtual cur...
AML Red Flag Library
Browse all 427+ BSA red flags across 13 regulated industries. Searchable by keyword, filter by category, industry, or risk level.
Explore related AML-BSA compliance resources
Regulatory sources and guidance
Official Guidance
The indicators on this page draw on primary FinCEN, FFIEC, and federal regulatory material rather than third-party commentary. Always confirm current requirements against the official source.
31 U.S.C. § 5318(h) is the statutory basis requiring every "financial institution" to establish anti-money laundering programs. This Bank Secrecy Act provision is the foundation for all industry-specific AML regulations issued by FinCEN, including those for MSBs, mortgage lenders, casinos, and insurance companies.
The FFIEC Bank Secrecy Act/Anti-Money Laundering Examination Manual provides detailed examination procedures used by federal and state regulators to evaluate financial institution BSA/AML compliance programs across all four pillars: internal controls, independent testing, designated BSA officer, and training.
FinCEN's Customer Due Diligence (CDD) Rule requires covered financial institutions to identify and verify beneficial owners of legal entity customers, understand the nature and purpose of customer relationships, and conduct ongoing monitoring to detect and report suspicious transactions. Codified at 31 CFR § 1010.230.
OFAC administers and enforces U.S. economic and trade sanctions. All U.S. persons, including nonprofits, must comply with OFAC sanctions. Screening donors, grantees, vendors, and counterparties against the SDN List and other sanctions lists is the standard control, and they may need an OFAC license before operating in or sending funds to comprehensively sanctioned jurisdictions.
Knowing the red flags is only part of an effective AML program
Understanding the stages of laundering helps, but an effective program also needs a risk assessment, written controls, monitoring, and escalation procedures that reflect your specific business.
Browse All 427+ Money Laundering Red Flags
Access the complete AML Red Flag Library with 427+ indicators. Filter by placement, layering, and integration stages across all 13 regulated industries.