Contents
Contents
Money laundering hides the origin of criminal proceeds. Insiders may know the controls that failed: the customer whose business cannot explain its payments, the alert that management suppressed, or the warning that changed nothing. The transaction tells part of the story. The person who knows why the business kept processing it may supply the part that matters most to a whistleblower case.
Money laundering disguises the illegal origin of criminal proceeds. Fraud can generate the money, and laundering can conceal where it came from. Anti-money laundering controls address how institutions identify customers, monitor transactions and report suspicious activity.
A real shipment can carry the scheme. The factual attachment to HSBC’s criminal deferred prosecution agreement describes peso brokers using cartel dollars to buy legitimate goods for Colombian businesses. Those businesses sold the goods for pesos, while cartel leaders received pesos through the arrangement. The goods existed. The question was whose money bought them.
Trade-based money laundering can also hide transfers in falsely priced imports and exports. A 2002 report for the Asian Development Bank, The Negative Effects of Money Laundering on Economic Development, describes that use of invoices during layering.
Placement introduces criminal proceeds into the financial system. Layering moves or converts them to obscure their source. Integration brings them into apparently legitimate economic activity, including property or businesses. The Financial Action Task Force’s Money Laundering policy brief, published by the OECD in 1999, describes this conventional model.
The tell is the gap between the customer’s stated business and the money moving through it. Concealed owners, unexplained transfers and internal warnings can connect a suspicious transaction to decisions inside the institution.
For a monitoring employee, the revealing record may be a rule change. For onboarding staff, it may be the ownership information left out of an account review. For an auditor, it may be the same finding returning after management said it had been fixed. We examine those connections with the person who understands the business.
AML transaction monitoring red flags include activity that does not fit the customer’s stated business, wires involving high-risk jurisdictions, sequential money orders and payments of third-party credit card balances. Excluded payment categories, alert caps, untested suppression rules and growing backlogs can keep that activity from being identified or investigated. The settings, testing results and decisions behind them explain what the system was allowed to see.
Under its criminal deferred prosecution agreement, HSBC admitted cutting AML resources despite known deficiencies. Its statement of facts describes executives freezing staffing to cut costs and improve return on equity. The staffing decision belonged to the business whose transactions needed review.
A false-positive decision treats an alert as something that needs no further investigation. We examine the testing, closure reason and approval behind that decision. The Treasury’s Office of Foreign Assets Control identified erroneous false-positive decisions and alert suppression in Bank of America’s sanctions resolution.
The five pillars of a bank’s BSA AML program are:
Customer identification establishes who opens the account. Due diligence adds the purpose of the relationship, expected activity and ongoing review. Bank Secrecy Act violations can involve ineffective controls, inadequate correspondent due diligence or missed and inaccurate suspicious activity reports.
Bank of America’s October 2026 resolution with the Financial Crimes Enforcement Network addressed failures in monitoring, correspondent due diligence and suspicious activity reporting. The bank admitted the facts and violations for that civil resolution. The agency assessed $1.2 billion for those civil violations.
The consent order describes testing that found substantial suspicious activity below the bank’s investigation threshold. The bank kept that threshold until December 2023. Its software could generate alerts while its rules kept the activity out of an investigation.
The Office of the Comptroller of the Currency separately found monitoring and reporting deficiencies. The Office of Foreign Assets Control resolved apparent sanctions violations involving payment screening, delayed list updates and dismissed alerts.
The Financial Crimes Enforcement Network’s industry statistics record 2,037,214 depository-institution suspicious activity reports in calendar 2024. The harder question is whether the system identifies useful information and gets it acted on.
The Wharton Initiative on Financial Policy and Regulation’s 2024 paper, Anti-Money Laundering: Opportunities for Improvement, examines effectiveness alongside cost. Its opening assessment is blunt:
The current anti-money laundering regime is complicated, expensive and seems far from effective.
For someone inside the institution, the connection is practical: what happened to the warning after the system produced it?
Correspondent banking lets one financial institution use another’s services, including dollar payments. A foreign bank may also provide access to downstream institutions, putting the account holder and the underlying customer in different places.
In its criminal plea agreement, Danske Bank admitted misleading U.S. banks to maintain or open dollar accounts for transactions from high-risk nonresident customers in Estonia. The correspondent questionnaire and the bank’s internal knowledge can therefore tell different stories about the same customers.
Casino intermediaries can conceal the customer behind the money. Under its criminal non-prosecution agreement, Wynn Las Vegas admitted a scheme involving unlicensed transmitters. Third parties routed patrons’ funds through nominee companies into a Wynn-controlled account and then the casino cage, while proxy gamblers concealed the actual patron.
Remittance networks create another set of handoffs. MoneyGram admitted under its criminal deferred prosecution agreement that managers rejected fraud staff’s recommendations to terminate agents and that fraud and AML information did not flow adequately. The internal recommendation can explain why a known problem stayed in business.
Ownership, account-control and source-of-funds records can connect a company name to the people directing its payments. Danske Bank’s admitted conduct included shell-company customers and false assurances to correspondents. The identity behind an account can matter as much as the account’s transaction history.
The August 2026 federal beneficial-ownership reporting rule retained exemptions for domestic companies and U.S. beneficial owners. Bank customer due diligence remains a separate obligation. The Financial Crimes Enforcement Network’s February 2026 relief removed repeated beneficial-owner checks at every new account while retaining first-account, reliability-triggered and risk-based ongoing checks.
Sanctions evasion can involve removing identifiers from payment messages, concealing ownership or using front companies and false shipping documents. The evidence connects the payment or cargo to the party whose involvement was hidden.
An entity owned at least 50% in aggregate, directly or indirectly, by blocked persons is itself blocked even when its name is absent from the sanctions list. The Office of Foreign Assets Control’s ownership guidance makes the ownership chain part of screening.
Blocking freezes property. Rejecting declines a prohibited transaction where blocking is not required. A screening override, ownership alert or license decision may explain why a payment went through.
The Financial Crimes Enforcement Network can restrict access to U.S. correspondent accounts through special measures. Its Huione rule restricts correspondent access through covered U.S. institutions, including indirect access through foreign correspondents. The account relationship becomes the enforcement point.
A suspicious activity report describes activity meeting the institution’s suspicion standard and reporting threshold. A currency transaction report records qualifying cash transactions above the applicable threshold. For banks, the currency reporting rule covers more than $10,000, aggregating known transactions for the same person during a business day.
A SAR supplies an investigative lead. An employee’s whistleblower submission concerns the information that employee can contribute about wrongdoing inside or through the institution.
Banks and casinos have a $5,000 threshold with qualifying suspicion. Covered money services business activity has a $2,000 threshold, with a separate $5,000 rule for specified issuer review. The transaction history matters when activity that should have prompted a report went unreported.
Banks must file when activity meets the suspicion standard and reporting threshold. Missed required reports can lead to civil enforcement and a review of past transactions for reports that should have been filed.
The $3000 bank rule requires identifying and transaction records for certain funds transfers of $3,000 or more. Cash purchases of covered monetary instruments from $3,000 to $10,000 carry their own records. Those records can connect the payment to the person behind it.
Cash structuring means arranging transactions to evade reporting requirements. In its criminal guilty plea, Latam Games admitted that its officers divided cash into smaller deposits for that purpose. The deposit history and the instruction behind it belong together.
Yes. The Financial Crimes Enforcement Network’s virtual-currency guidance applies the Travel Rule to covered institutional transfers at the equivalent value threshold. Required information accompanies the transfer order between institutions. Hosted-wallet records can connect that message to the customer account.
Banks retain suspicious activity reports and supporting documents for five years from filing. The Office of Foreign Assets Control requires transaction records for at least ten years. Missing records can leave a gap where an investigator needs to connect the customer and the payment.
Money transmission turns on accepting funds or substitute value from one person and transmitting it to another person or location. That function can occur through an agent network, an exchange or a hosted wallet. Federal registration and state licensing are separate requirements.
Covered precious metal dealers need an AML program suited to their business. Purchase records, customer information and internal controls can show how the business handled the money moving through it.
Useful evidence connects transactions, customer identities and internal decisions. Payment messages, account records, monitoring settings, testing results, audit findings and management responses can show who knew about a problem and what followed.
An onboarding employee may know the owner. An engineer may know which payment category never reached monitoring. An investigator may know why an alert was closed. We bring those accounts together around the conduct they explain.
The Financial Crimes Enforcement Network’s published guidance asks for how the information was learned, evidence held and the location of additional evidence. Your knowledge of where the records sit can itself help identify the next part of the story.
SAR confidentiality belongs in the conversation with our whistleblower experts and the whistleblower lawyers we bring in. We address what can be shared as part of assessing your evidence.
Federal investigative agencies and the Justice Department pursue money-laundering offenses. The Financial Crimes Enforcement Network administers Bank Secrecy Act rules and financial intelligence, the Office of Foreign Assets Control administers sanctions, and banking supervisors oversee their institutions’ controls. The network’s work includes wires, accounts and covered virtual-currency businesses as well as cash.
The Securities and Exchange Commission and the Commodity Futures Trading Commission also have whistleblower programs for conduct within securities and commodities law. The Justice Department’s corporate whistleblower pilot covers designated corporate crimes, including qualifying financial-institution conduct, under a separate award policy. We assess the conduct against the program it fits.
Start with our whistleblower experts and the transactions or control decisions you know. We assess the evidence, the potential reward route and the money laundering whistleblower lawyers your case needs. Questions about earlier reports, an investigation already underway or your own part in the conduct belong in that conversation.
Speak with our whistleblower experts about reporting anonymously while still employed. We address confidentiality and your employment circumstances with you and the whistleblower lawyers suited to your case.
We identify money laundering whistleblower attorneys who know bank monitoring, correspondent payments or exchange controls, as your case requires. Representation, fees, confidentiality and handling company records are part of that discussion with us.
The Financial Crimes Enforcement Network’s whistleblower program provides qualifying whistleblowers collectively 10% to 30% of qualifying collected monetary sanctions when voluntary, original information leads to successful covered enforcement with monetary penalties exceeding $1 million.
Yes. Treasury’s Financial Crimes Enforcement Network administers the program for Bank Secrecy Act and specified sanctions violations.
The Anti-Money Laundering Act created the enhanced framework in 2021. The Anti-Money Laundering Whistleblower Improvement Act of 2022 added the minimum award, established the Financial Integrity Fund and expanded sanctions coverage.
Yes. Qualifying information can come from job duties, including compliance work. The program welcomes U.S. and non-U.S. whistleblowers, so an employee at a foreign branch can bring us the internal decisions behind its transactions.
We assess the applicable program and claim timing with you. Your information and the enforcement action shape that assessment, and we work through the award requirements with the whistleblower lawyers suited to your case.
A qui tam case under the False Claims Act concerns fraud against the federal government. That is a separate basis for a case from the agency whistleblower programs discussed here. A whistleblower case under the False Claims Act can pay 15% to 30% of what the government recovers.
In its criminal guilty plea, Binance admitted failures involving AML controls, unlicensed transmission and sanctions. Its conduct included retaining U.S. business, coaching valuable users to use offshore entities, failing to file suspicious activity reports and permitting U.S.-Iran trading. The exchange’s onboarding instructions and internal account decisions explain how that business continued.
Hosted exchanges also record customer transfers on internal ledgers. We examine wallet-control records, customer credits and screening decisions alongside the public blockchain trail. Token offerings, crypto investment schemes and exchange customer-fund fraud are covered separately in our writing about crypto fraud.
The government’s civil complaint concerning Prince Group alleges that scam compounds generated proceeds laundered through its network of seemingly legitimate businesses.
If you know which alert was suppressed, whose identity was hidden or why a suspicious customer kept its accounts, speak with our Whistleblower Experts about the decisions behind the money. We build the case with you, bring in money laundering whistleblower lawyers who understand the institution and its controls, and stay beside you through the pursuit of a recovery and your share.