Money Laundering Detection

Money Laundering Red Flags: The Complete Detection Guide

427+ verified money laundering indicators organized by the three stages: placement, layering, and integration. Every flag traces to official FinCEN and federal sources.

FinCEN-verified sources
SAR checkbox mapping
CFR citations included
Full-text searchable
About These Red Flags

Money Laundering Red Flags: What Compliance Officers Need to Know

Money laundering is the process of making illegally obtained proceeds appear legal through a three-stage cycle: placement (introducing dirty cash into the financial system), layering (obscuring the trail through complex transactions), and integration (reintroducing the now-laundered funds into the legitimate economy). Each stage has distinct red flags that financial institutions must recognize.

Placement red flags are most common at MSBs, casinos, auto dealers, and precious metals dealers - businesses that handle large cash volumes. Layering red flags appear across all industries, particularly in wire transfers, cryptocurrency transactions, trade-based schemes, and shell company networks. Integration red flags often involve real estate purchases, luxury goods, investment accounts, and insurance policies.

This page covers the complete spectrum of money laundering red flags, from classic cash structuring to emerging threats like virtual currency mixing, cross-chain bridges, deepfake-enabled identity fraud, and sanctions evasion through offshore exchanges.

Featured Red Flags

427+ Verified BSA Red Flags

View All 427 in Library
CriticalMSB|structuring

Customer attempts to split a large cash transaction into multiple smaller transactions below the $3,000 recordkeeping threshold to avoid creating a paper trail.

FIN-2014-G001 MSB Expectations|Structuring
CriticalMSB|structuring

Multiple customers visit the same location in rapid succession and each conducts a cash transaction just below the reporting threshold, suggesting a coordinated structuring scheme.

FIN-2014-G001 MSB Expectations|Structuring
CriticalMSB|wire activity

Wire transfers sent to or received from high-risk jurisdictions known for money laundering, with no apparent business or family connection to those countries.

FIN-2022-RUSSIABIS Export Evasion|Wire transfer
CriticalMSB|identity/KYC

Customer provides identification that appears altered, forged, or inconsistent with the person presenting it, including mismatched photos or expired credentials.

FIN-2024-A001 Deepfake Fraud|Identity verification concerns
CriticalMSB|beneficial ownership

Corporate customer sends wires on behalf of undisclosed principals, or the stated beneficial owner is a nominee shareholder with no independent wealth or employment.

FIN-2024-A002 Israeli Settler Violence|Beneficial ownership
CriticalMSB|transaction monitoring

Transaction patterns show sudden and significant changes in volume, frequency, or typology that are inconsistent with the customer’s established activity profile.

FFIEC Exam Manual MSB Section|Transaction exceeds CTR threshold
CriticalMSB|customer behavior

Politically Exposed Person (PEP) or a close associate conducts large cash transactions that appear disproportionate to their known sources of income or legitimate wealth.

Kleptocracy Advisory|PEP concern
CriticalMSB|human trafficking

Multiple individuals use the same phone number or address to receive wire transfers, with none able to explain the source or purpose of the funds independently.

FIN-2018-A001 Human Trafficking|Human trafficking
CriticalMSB|terrorist financing

Funds are sent to or received from individuals, entities, or charities linked to designated terrorist organizations or individuals on OFAC SDN lists.

Hizballah Financing Alert|Terrorist financing
CriticalMSB|sanctions evasion

Customer uses virtual currency exchanges or mixers to obfuscate the origin or destination of funds, particularly involving sanctioned jurisdictions or SDN-listed individuals.

FIN-2022-RUSSIABIS Export Evasion|Sanctions evasion
CriticalMSB|cyber/fraud

Customer reports that their online account was compromised and unauthorized wire transfers were initiated, with rapid fund movement to overseas accounts.

FIN-2021-A001 Ransomware|Cyber event
CriticalMSB|cyber/fraud

Customer receives funds and is instructed to convert them to virtual currency and send to a specific wallet address as part of a job offer, romance scheme, or investment opportunity.

FIN-2021-A001 Ransomware|Cyber event
FAQ

Common Questions About Money Laundering Red Flags

What are the three stages of money laundering and their red flags?

Placement involves introducing illegal cash into the financial system - red flags include large cash deposits just below CTR thresholds, business cash mismatches, and drug-tainted currency. Layering obscures the audit trail - red flags include rapid inflow/outflow, wire transfers through shell companies, cryptocurrency mixing, and trade-based invoice manipulation. Integration reintroduces funds as legitimate - red flags include real estate purchases by shell companies, luxury goods bought with unexplained wealth, and investment accounts funded by opaque sources.

What are the most common money laundering typologies?

Common money laundering typologies include: trade-based money laundering (over/under invoicing, ghost shipments); shell company networks (layered ownership concealing beneficial controllers); cryptocurrency laundering (mixers, privacy coins, cross-chain bridges); real estate laundering (all-cash purchases by opaque entities); casino laundering (minimal play chip buy-ins followed by check cash-outs); and MSB structuring (splitting transactions across locations and days).

How does cryptocurrency enable money laundering?

Cryptocurrency enables money laundering through several mechanisms: pseudonymous wallet addresses hide identity; mixing services and privacy coins break the blockchain audit trail; cross-chain bridges move funds between blockchains to obscure tracing; decentralized exchanges allow trades without KYC; and offshore exchanges in weak-AML jurisdictions provide exit ramps for dirty funds. FinCEN's FIN-2019-G001 and FIN-2022-A001 advisories detail these risks extensively.

What is trade-based money laundering and what are its red flags?

Trade-based money laundering (TBML) uses international trade transactions to move and disguise illicit funds. Red flags include: invoices with pricing significantly different from commodity market values; payments for goods that are never shipped (ghost shipments); multiple related entities trading the same goods in circular transactions; and bills of lading that do not match the stated cargo. TBML is particularly prevalent in import/export businesses and cross-border investment funds.

How do shell companies facilitate money laundering?

Shell companies facilitate money laundering by providing a legitimate-looking facade for illicit transactions. Red flags include: companies with no physical office, website, or employees; beneficial owners who are nominees with no traceable employment or assets; businesses registered in secrecy jurisdictions with minimal disclosure requirements; and companies whose stated revenue is incompatible with their transaction volume or industry norms. Layered shell ownership - with companies owned by other companies in different jurisdictions - is a particularly sophisticated laundering technique.

AML Red Flag Library

Browse All 427+ Money Laundering Red Flags

Access the complete AML Red Flag Library with 427+ verified indicators. Filter by placement, layering, and integration stages across all 13 regulated industries.

Talk with Us