AML Red Flags: 30+ Warning Signs of Money Laundering (2026)

Quick answer: AML red flags are warning signs that suggest a customer or transaction may be linked to money laundering, terrorist financing, or other financial crime. Typical examples are activity that doesn't fit the customer's profile, cash deposits kept just under reporting thresholds, money moved in and out quickly with no clear purpose, hidden or unclear ownership, and links to high-risk countries. A red flag doesn't prove a crime, but it should trigger a review and, if suspicion remains, a suspicious activity report.

Regulated businesses rely on red flags in three parts of their AML program: the risk-based approach to customers, customer due diligence, and ongoing transaction monitoring.

Related Solutions

PEP Screening APIKnow your customerAML Program

What is a red flag in AML?

Like most red flags, in the context of AML compliance too, a red flag is an alert signal that suggests possible illegal activity like money laundering.

Common examples are large transactions that don't match a customer's known income or business, and payments involving companies or banks in sanctioned or high-risk jurisdictions.

An AML red flag’s primary objective is to alert businesses and law enforcement to potentially suspect money laundering activity.

A successful AML program must be able to recognise red flags.

Thus, regulated organisations must have a clear procedure for recognising and looking into concerns that have been reported.

But wait, an alert signal doesn’t automatically paint the client or business as dishonest.

In the US, banks and other covered institutions must file a Suspicious Activity Report (SAR) with FinCEN when they know, suspect, or have reason to suspect that a transaction involves illegal funds or is designed to evade reporting rules. Other countries have similar suspicious transaction reporting duties.

Categories of red flags

Regulators and the FATF group AML red flags into a few broad categories. The FFIEC BSA/AML Examination Manual gives US examples, and FATF publishes sector-specific indicator lists, for example for virtual assets, trade, and terrorist financing.

• Customer red flags: incomplete, inconsistent, or unverifiable identification; reluctance to name beneficial owners or explain the purpose of the account; use of nominees or proxies without a clear reason.
• Transaction red flags: activity that doesn't match the customer's profile, funds pooled from many people and quickly sent elsewhere, unexplained repeated transfers, and round-number amounts with no business logic.
• Geographic red flags: transfers to or from high-risk or sanctioned jurisdictions with no apparent business reason.
• Business and entity red flags: shell or front companies with unclear purpose or ownership, payments unrelated to any goods or services, and shared addresses with no plausible explanation.

Indicators of red flags

Let’s have a look at a few indicators of red flags as mentioned below –

1. Unusual transaction trends

Any abnormal trends in the transactions reveal the possibility of money laundering.

Bizarre activities may be indicated by –

• fast-moving transactions taking place,
• notable increases in frequency or value,
• structuring of schemes to break down deposits, or
• inconsistencies in the client’s activities/dealings.
  

In the US, cash transactions over $10,000 in one business day require a currency transaction report. Splitting deposits to stay under that limit is called structuring, a crime in itself. But FinCEN's October 2025 FAQs make clear that a transaction near $10,000 doesn't require a SAR on its own; the institution must know, suspect, or have reason to suspect evasion. Our guide to smurfing in money laundering covers this pattern.

2. Cash-intensive activities

Cash-related companies like casinos, eateries, and grocery stores are frequent target for money launderers.

Why?

Cash is the primary facilitator of money laundering.

They provide an unmatched chance to transfer money with incredibly little oversight and comparatively simple means of getting over regulations.

A warning sign in the other direction is a business that doesn't normally handle much cash, such as a consultancy or software firm, suddenly depositing large amounts of it.

3. Specific geographic areas

Because of lax government monitoring and regulatory frameworks, certain nations are more vulnerable to organised crime, corruption, and money laundering than others.

Geolocation data may serve as a signal of questionable activity when it comes to transaction monitoring.

Useful references include FATF's lists of high-risk and other monitored jurisdictions, updated after each plenary, as well as the Basel AML Index and Transparency International's Corruption Perceptions Index. Our list of AML high-risk countries explains how to use them.

4. Relations with third parties

Determining the beneficial ownership of corporations located in tax havens is and will continue to be a challenging task, particularly in nations with less well-defined regulatory frameworks.

To hide the route and source of illegal payments, money launderers may enlist the help of third parties to set up sophisticated transaction chains involving several accounts or middlemen.

To hide the beneficial ownership, money launderers sometimes also use intricate global ownership structures and employ shell or offshore corporations with nominees.

Checking for indications of money laundering also requires considering transactions involving politically exposed persons (PEPs).

5. Inadequate financial systems

Certain financial systems make it simpler to launder money than others.

Why so?

Either due to regulatory framework weaknesses, improper KYC/AML program execution, or corruption.

Specifically, insufficient due diligence procedures or feeble internal controls at a financial institution are particularly intriguing to those seeking to conceal the origin of their funds.

6. Presence in unfavourable media

Businesses must keep an eye out for unfavourable media coverage of their clients.

Adverse media means negative information about a customer found in news outlets, court and regulatory records, international organization databases, and other public sources.

An appropriate negative media investigation can reveal involvement in financial fraud, organised crime, money laundering, financing of terrorism, and racketeering, among other things.

7. Technology-driven money laundering

Money laundering has been greatly facilitated by the advancement of technology and digitalisation, and there are endless options.

In addition to decentralised or peer-to-peer exchanges, the rise of cryptocurrencies and virtual assets offers an extra degree of anonymity that may be taken advantage of.

For instance, transferring money through an account and being changed into cryptocurrency right away might raise red flags.

💡 Related Blog:

AML Watchlist Screening Guide

New Red Flags From FinCEN in 2025 and 2026

FinCEN regularly publishes alerts and advisories with fresh red flags. Recent ones worth building into your monitoring:

• Bulk cash smuggling by Mexico-based cartels (alert, March 2025)
• Cartel-linked oil and fuel smuggling across the southwest border (alert, May 2025; supplemental alert on fuel smuggling and tax evasion, June 2026)
• Chinese money laundering networks used by Mexico-based cartels (advisory, August 2025)
• Crypto ATMs, or convertible virtual currency kiosks, used for scam payments, often targeting older adults (notice, August 2025)
• IRGC front companies and digital-asset infrastructure used to evade sanctions (alert, May 2026)
• Money laundering linked to digital-asset investment scam centers (alert, September 2026)

FATF added to this in June 2025 with a comprehensive update on terrorist financing risks and a report on complex proliferation financing and sanctions evasion schemes, both with indicator lists.

Industry-wise AML Red Flags

AML warning signs might differ between sectors. It is critical to comprehend industry-specific indications.

Here are a few AML warning signs industry-wise:

• Crypto industry: Unique difficulties facing the call for closer examination:
  • Unusual transaction volume, destination, or trend
  • Usage of fake swaps and mixing services
  • Dividing big transactions into smaller ones in a structured manner
  • Suspicious user actions
• Financial institutions: banks and payment firms see the widest range of red flags because money from almost every scheme passes through them. Effective watchlist screening and transaction monitoring are the main defenses.

Money laundering usually moves through three stages, and red flags can appear at each:

• Placement: getting illicit cash into the financial system, for example through many small deposits or cash-heavy businesses.
• Layering: moving the money through complex chains of transfers, accounts, and companies to hide its source.
• Integration: bringing the money back into the legitimate economy so it looks clean, for example through property or business investments.
• Real Estate – susceptible to money laundering in the following ways:
  • Purchasing from strangers and using shell corporations
  • Buyers or funding from nations with lax anti-money laundering laws or high levels of corruption
  • Difference between the purchaser’s income and the property’s worth
  • Unknown separation between the purchaser and the property
  • Overpriced or undervalued real estate
  • Significant sums of money were spent

Red flags work best when your systems catch them automatically. Signzy's AML screening checks customers against sanctions, PEP, and adverse media data, and its transaction monitoring flags unusual activity for review. For a full program view, see our AML compliance checklist and our guide to transaction screening vs transaction monitoring.