Money Laundering Red Flags in Bank Statements
Money laundering leaves patterns in bank statements: structured cash, rapid pass-through, odd third parties. See the typologies and red flags for each.
- Published
- Updated
Money laundering red flags in bank statements include repeated cash deposits below the reporting threshold, rapid onward transfers and payments from unexplained third parties. Each pattern starts an investigation into where the money came from and why it moved. A cash deposit or international transfer alone does not establish laundering.
For investigators in a confiscation matter, the useful question is whether the whole transaction history supports the respondent’s explanation. The examples below use fictional accounts and Australian dollars.
Money Laundering Red Flags That Show in Bank Statements
The strongest statement patterns combine unusual amounts or timing with activity that the account holder’s known income and business cannot explain. AUSTRAC’s banking indicators identify structured cash and rapid movement through accounts among the signals to investigate.
| Statement pattern | What to test | Possible innocent explanation |
|---|---|---|
| Repeated cash deposits just under $10,000 | Combined value, depositor identity and deposit locations | Recorded daily business takings |
| Funds leave soon after arriving | Matching debits, receiving accounts and reason for transfer | A documented settlement or supplier payment |
| Many unrelated people pay one account | Relationship between payers and account holder | Customer receipts or a documented collection |
| Round-sum international transfers | Contracts, invoices and origin of funds | Agreed instalments or family support |
A run of near-threshold deposits deserves review across days, branches and accounts. A single statement might show only part of the total. Branch information often requires deposit records beyond the statement itself.
Test the innocent explanation before treating the pattern as evidence of laundering. For example, match a claimed supplier payment to the invoice and confirm that the recipient is the supplier. Record whether the explanation accounts for the amount and timing, including any remaining difference.
Common Money Laundering Typologies
Money laundering typologies describe how funds are introduced, moved or made to appear legitimate. AUSTRAC’s national risk assessment describes the three stages as placement, layering and integration.
In a fictional example, criminal cash enters a café’s Account A through deposits. Account A transfers the money to Company B’s Account B, which pays Company C’s Account C. Company C then funds a property purchase, describing its payment as an investment.
| Stage | Purpose in the fictional scheme | Statement evidence |
|---|---|---|
| Placement | Put criminal cash into the financial system | Cash credits to Account A |
| Layering | Conceal the origin through further movements | Matching transfers from A to B and B to C |
| Integration | Give the funds an apparently legitimate use | Payment from C towards property settlement |
These stages can overlap. An investigation can start with money already in the banking system, so a missing cash entry does not exclude laundering.
Structuring divides cash transactions to avoid reporting. Cuckoo smurfing substitutes criminal cash for an innocent recipient’s expected overseas remittance. Their statement patterns differ, as explained below.
A mule network uses other people’s accounts to receive and forward funds. Its statement pattern can include payments from many sources followed by transfers to a common destination. Keep account ownership and the holder’s knowledge separate from what the transfer history proves.
Loan-back arrangements return a person’s own illicit funds through an apparent lender. Statements can show an earlier payment out, a later loan credit and subsequent repayments. Test the lender’s funding and the loan documents alongside the banking trail.
Round Tripping in a Fictional Ledger
Round tripping moves money out and brings it back with a different explanation, such as a loan, investment or sale proceeds. The return can be domestic or international. A matching amount is a lead to follow, because unrelated transactions can share the same value.
| Elapsed time | Account | Entry | Amount | Description |
|---|---|---|---|---|
| First movement | A | Debit to overseas Company B | $120,000 | Investment |
| Same movement | B | Credit from A | $120,000 | Capital contribution |
| Two weeks later | B | Debit to A | $118,500 | Loan advance |
| Return movement | A | Credit from B | $118,500 | Loan advance |
The fictional difference is $1,500. Reconcile it to fees or other supported movements before describing the return as the same funds. Identify who controls Company B and whether the loan has a genuine commercial basis.
For schemes involving invoice values and shipments, examine trade-based money laundering separately. The statement trail supplies the payments, while the trading records explain what those payments purchased.
Cash Intensive Business Red Flags
A cash intensive business can mix criminal cash with genuine takings and deposit both as sales revenue. Restaurants and car washes provide plausible reasons for regular cash credits. The question is whether the recorded trading activity can produce the cash deposited.
Compare cash deposits with card settlement credits over the same period. Reconcile settlement delays and fees before comparing card receipts with recorded sales. Then compare total receipts with declared turnover and the business’s supplier payments.
In a fictional restaurant, one four-week period has $80,000 in cash deposits and $20,000 in card settlement credits. The sales records show $60,000 in total takings. The apparent $40,000 difference needs reconciliation for transfers, owner funding and banking of earlier takings.
If the extra cash continues across periods while food purchases and trading capacity stay stable, the business explanation requires further evidence. A shift towards cash customers or a genuine increase in sales can explain a changed mix. Retain those explanations when the records support them.
Banking totals alone do not measure turnover. Transfers between business accounts can inflate receipts unless they are removed from the sales comparison. The source of funds review tests the origin of the money behind the business explanation.
Real Estate Money Laundering Red Flags
Real estate red flags include unexplained third-party deposits and rapid resales at changed prices. A trust or company buying property without visible income also requires investigation into its funding. Legitimate gifts, finance and capital contributions can explain each pattern.
The Financial Action Task Force’s real estate report describes third-party funding and misuse of corporate vehicles. It also examines successive transactions at unusual prices and loan arrangements used to disguise funds.
Start with the settlement statement and identify each payment towards the purchase. Match those payments to debits in the buyer’s accounts. Trace backwards from each debit to the credits that funded it, then continue through the supplying accounts where records are available.
For an unrelated third party’s deposit, identify the payer and obtain the documented reason. For a corporate buyer, establish the person who ultimately owns or controls it. A holding company can legitimately have little operating income, so its capital funding requires its own explanation.
When a property sells again quickly, compare the sale contracts and amounts with improvements, valuation evidence and any relationship between the parties. A price change requires context before it supports an inference about laundering. Connect the traced funds to the relevant asset for proceeds of crime analysis.
Testing a Suspicion Against the Full Ledger
Categorise every transaction across the supplied accounts, then total each suspected pattern by account and period. This turns scattered cash credits or pass-through payments into a history that can be tested. Preserve the source statement reference for every entry.
Separate internal transfers from external receipts to avoid counting the same money twice. Record the total cash deposited and how much moves onward, with the elapsed time between credits and debits. Compare that history with the account holder’s income, contracts and explanations.
Bank anti-money laundering (AML) transaction monitoring scenarios generate alerts from configured rules. Those rules can detect rapid movement, repeated sub-threshold cash transactions or volume outside a customer’s usual activity. AUSTRAC’s threshold reporting guidance gives an example of automated monitoring detecting repeated deposits below the threshold.
Bank AML tools also maintain customer-risk profiles and send monitoring alerts to staff for assessment. Staff examine the activity against what the bank knows about the customer and escalate unexplained activity for further review. The findings can update the customer’s risk profile. AUSTRAC’s downloadable major banks risk assessment PDF explains transaction-monitoring systems and alert escalation in the banking sector.
A forensic review reconstructs the ledger across the matter and tests the meaning of the movements. An alert identifies a rule match. The forensic analysis establishes which supplied accounts are involved and whether supporting records explain the pattern.
Record findings that do not support the initial suspicion. For example, a $70,000 credit followed by a matching debit might be a documented property settlement. Retain the source references and state that the settlement records explain the movement.
FinTrace saves forensic accountants and investigators hours of statement conversion and review. The service turns large PDF bundles into one categorised Excel ledger and a clear report that flags suspicious transactions. Every finding cites the source PDF filename and page, putting the evidence beside the analysis.
FinTrace processes thousands of PDFs through staged AI workflows with source-grounding checks and independent reviews. The service delivers statement analysis at a fraction of the cost of manual review or engaging a forensic accountant for the same work. Forensic accountants use it to free time for interpretation and their wider investigations.
When the evidence raises a reporting question, apply the relevant suspicious matter report requirements. Reporting and the ultimate legal finding have different tests.
Smurfing and Cuckoo Smurfing
Smurfing splits cash into many deposits, often using several people or branches. Statements can show runs of deposits below $10,000 across days and accounts that together total a much larger amount. The near-threshold pattern can suggest structuring, although smaller deposits can also form part of a scheme.
In a fictional example, cash deposits of $9,700, $9,600, $9,800 and $9,500 arrive across two accounts over four days. The combined amount is $38,600. Compare deposit records and the account holder’s explanation to test whether the transactions were arranged to avoid reporting.
Under section 142 of Australia’s Anti-Money Laundering and Counter-Terrorism Financing Act, structuring can itself be an offence. The test concerns two or more non-reportable transactions conducted for the sole or dominant purpose of avoiding threshold reporting. The cash can come from a lawful source and still be deliberately structured to avoid reporting.
Cuckoo smurfing uses an innocent person’s account in place of an expected overseas transfer. A complicit remittance provider arranges criminal cash deposits into that account and an equivalent payment to the criminal overseas. The recipient can receive the expected total while remaining unaware of the substitution.
For a fictional expected remittance of $30,000, several cash credits from unknown depositors might total $30,000. Compare those credits with the remittance instruction and the sender’s payment records. Establish the identity of the depositors through bank records where the statement does not name them.
The Cash Reporting Threshold Is Not a Deposit Cap
Australia has no general legal cap on how much cash a person can deposit into a bank account. A cash transaction of $10,000 or more triggers the bank’s threshold transaction reporting obligation. The equivalent value in foreign currency is also covered.
ATM deposit limits are bank operating rules. They do not replace the reporting threshold or determine whether a structuring offence occurs. Preserve any evidence that a bank limit explains separate deposits.
The proposed Currency (Restrictions on the Use of Cash) Bill did not proceed. Its proposed cash-payment restriction must not be treated as an enacted deposit limit.
Hawala and Informal Value Transfer
Hawala is an informal value transfer system in which a broker receives money in one country and a partner pays the recipient in another. The brokers settle their balances later. Often, the customer’s money never crosses the border.
For example, a customer pays a broker in Australia to support a relative overseas. The overseas partner pays the relative from local funds. Later settlement between the brokers can use banking transfers or trading arrangements.
AUSTRAC’s remittance risk assessment describes this offsetting mechanism and its legitimate uses. Hawala does not by itself establish criminal activity.
In Australia, a provider of registrable remittance services must be registered with AUSTRAC. Providing those services without the required registration is an offence under section 74 of the AML/CTF Act. AUSTRAC’s unregistered remittance guidance expressly includes hawala.
Possible statement patterns include cash deposits from many unrelated customers and later settlement payments to import or trading businesses. Outbound banking transfers might not match individual amounts received because brokers settle net balances. Test that explanation against the provider’s customer records and settlement accounts.
A missing cross-border transfer can fit an offsetting arrangement. Establish who received value overseas, how the brokers settled and whether the customer records reconcile with the bank ledger before drawing a conclusion.
FinTrace
Statements in. Evidence out.
FinTrace turns your bank statements into one searchable Excel ledger and a written findings report, with every finding cited to its source page.
FinTrace
See how FinTrace works