Free video course
10 AML Red Flags Every Investigator Should Know
A practical walkthrough of the ten AML red flags investigators encounter most often, from round-dollar transactions and rapid fund movement to complex ownership structures and threshold structuring.
✓ Red flag definitions cross-checked against standard FATF and FinCEN guidance on money laundering indicators.
10 AML Red Flags Every Investigator Should Know
▶ Start the courseWhat you’ll learn
- ✓ Recognize the transaction-level red flags that signal structuring and layering
- ✓ Identify customer profile mismatches and unexplained wealth patterns
- ✓ Evaluate high-risk jurisdictions and complex corporate structures for AML risk
- ✓ Apply investigative judgment to separate genuine red flags from false positives
Before you start
- □ Basic familiarity with anti-money laundering (AML) concepts
- □ General understanding of customer due diligence and transaction monitoring
Course curriculum
- 01 What are the most common transaction-based AML red flags? Learn to spot round-dollar transactions, high-cash activity, rapid fund movement, and mismatched customer profiles as core AML red flags. Four transaction-level red flags open the list: round-dollar amounts near reporting thresholds, frequent high-cash activity inconsistent with a customer's business, rapid in-and-out fund movement suggesting layering, and transactions that do not match the customer's declared occupation or purpose. · Red flags earn a closer look, they do not on their own prove money laundering.· Round, repeated transaction amounts near a reporting threshold can signal deliberate structuring.· Rapid in-and-out fund movement to unrelated accounts is a classic signature of layering.· A customer's transaction pattern should always be checked against their declared occupation and business purpose. 4 min · 1 assets · checkpoint
- 02 How do geographic risk, unexplained wealth, and corporate structures signal money laundering? Learn how high-risk jurisdictions, unexplained wealth, and complex corporate ownership structures signal money laundering risk in AML investigations. Three further red flags: transactions tied to high-risk jurisdictions, unexplained wealth where income does not match transaction volume, and overly complex corporate structures such as shells, nested ownership, or trusts that obscure who truly benefits from an account. · A link to a high-risk jurisdiction only becomes a red flag when it forms a pattern or contradicts the customer's normal profile.· Unexplained wealth is a sustained gap between declared income and observed financial activity, not a single unusual transfer.· Complex ownership structures are a red flag when combined with resistance to identifying the ultimate beneficial owner. 3 min · 1 assets · checkpoint
- 03 What do client non-cooperation, large wire transfers, and threshold structuring reveal? Learn how client non-cooperation, large wire transfers, and threshold structuring reveal money laundering risk, and how to separate signal from noise. The final three red flags: a customer's reluctance to cooperate treated as a standalone signal, wire transfers judged by pattern and counterparty rationale rather than size, and threshold structuring detected by aggregating transactions over time rather than reviewing them individually. · A customer's reluctance to provide information is a red flag on its own, independent of the activity that prompted the request.· Wire transfer red flags depend on pattern and counterparty rationale, not on transaction size alone.· Structuring near a reporting threshold requires monitoring that aggregates transactions over time, not just single transactions. 3 min · 1 assets · checkpoint
Frequently asked questions
Does a single red flag mean a customer is laundering money?
No. A red flag is a signal that warrants closer investigation, not proof of wrongdoing. Most red flags have innocent explanations, and investigators typically look for a combination of several red flags, or a red flag combined with an inability to provide a credible explanation, before escalating a case.
Why do transaction monitoring systems generate so many false positives?
Threshold-based and pattern-based rules are deliberately set broad enough to catch genuine structuring or layering, which means they also catch legitimate customers whose activity happens to resemble those patterns. Investigative judgment is what filters a large volume of system-generated alerts down to the small number that genuinely warrant escalation.
What should an investigator do when a customer refuses to provide requested documentation?
Document the refusal or evasiveness thoroughly, since a pattern of non-cooperation across multiple requests is itself a red flag independent of the original activity being reviewed. Persistent, unexplained non-cooperation is grounds for escalation or, in serious cases, exiting the relationship.
Are complex corporate ownership structures always suspicious?
No. Multinational businesses and estate planning arrangements legitimately use layered ownership and trusts for tax and succession purposes. The red flag is not complexity itself, but complexity combined with an inability or unwillingness to identify the ultimate beneficial owner.