# Money Laundering Red Flags in Bank Statements

- Author: PreciseBankFlow (https://precisebankflow.com)
- Published: 2026-10-17
- Category: Fraud and forensic review
- Canonical: https://precisebankflow.com/blog/money-laundering-red-flags-in-bank-statements

> Money laundering red flags in bank statements: rapid in-and-out flows, third-party deposits, structuring and layering, and when to escalate a concern.
Money laundering red flags in bank statements include money that arrives and leaves within days, deposits from third parties with no link to the account holder's work, cash split into amounts under reporting thresholds, and transfers that hop through several accounts. Any one can be innocent. A cluster, without a business reason, is grounds to escalate.

## Which money laundering red flags appear in bank statements?

Bank statements show where money came from by name, where it went, when and how much. Laundering red flags are the patterns in that data that fit hiding the source of funds better than they fit the account holder's stated business. A statement cannot show intent, the identity behind a name or what happened in cash outside the bank.

Laundering is usually described in three stages: placement, where illicit cash enters the banking system; layering, where it moves through transactions that blur its origin; and integration, where it returns as apparently clean money. Statements show traces of all three, but placement and layering leave the clearest marks.

This post looks at laundering signals. The patterns of internal theft, such as fake vendors and kiting, are a different set, covered in [bank statement red flags for embezzlement and kiting](/blog/fraud-detection-bank-statements-red-flags). The two lists overlap in places, and a review should keep both in mind.

## Rapid in-and-out flows through a pass-through account

A pass-through account receives money and sends nearly all of it out again within a short time, leaving a low balance between cycles. Real businesses hold working cash, pay many small suppliers and keep a buffer. An account that behaves like a pipe, with large credits followed by matching debits, needs an explanation.

### A worked example

The figures below are invented to show the shape.

| Date | Description | Credit | Debit | Balance |
| --- | --- | ---: | ---: | ---: |
| 03-02 | Opening balance | | | 1,210.00 |
| 03-04 | Wire in, Example Trading Ltd | 48,000.00 | | 49,210.00 |
| 03-05 | Wire out, Harbor Goods LLC | | 23,500.00 | 25,710.00 |
| 03-05 | Wire out, R. Cole | | 23,400.00 | 2,310.00 |
| 03-11 | Wire in, Example Trading Ltd | 51,000.00 | | 53,310.00 |
| 03-12 | Wire out, Harbor Goods LLC | | 50,200.00 | 3,110.00 |

Three things stand out. The money stays a day or two. The outgoing amounts nearly equal the incoming ones, less a small amount that could be a fee. And there are no payroll, rent, utilities or supplier payments, which a trading business would have.

### Measuring it

Compute the share of each month's credits that left within five days, and the average end-of-day balance as a share of monthly credits. A business with 90 percent of inflows gone in five days and almost no daily balance is acting as a conduit. A related pattern is the funnel account, which [FinCEN's 2024 alert on deepfake fraud schemes](https://www.fincen.gov/sites/default/files/shared/FinCEN-Alert-DeepFakes-Alert508FINAL.pdf) describes as an account that collects deposits, often cash from several people, in various locations; the alert reports criminals opening such accounts with GenAI-made identity documents.

## Third-party deposits that do not fit the account holder

Third-party deposits are credits from people or companies the account holder does not appear to do business with. A plumber's account receiving wires from an overseas electronics exporter, or a student's account receiving dozens of transfers from strangers, raises the question of whose money it is. The payer names on the statement are the evidence.

List every payer by name and total. Then ask whether each one fits the account holder's known work. For a business, compare payers against its customer list and invoices. For a person, compare against payroll, family and known sources.

Watch especially for:

- Many small transfers from many different people, each a first-time payer.
- Payers in industries or countries unrelated to the holder's business.
- Deposits described as loans or gifts with no repayment and no paperwork.
- Payments from a company that shares an officer or address with the holder but does no visible business with them.

Payer names can be faked on a forged statement just as easily as amounts. If the statement came from the account holder, test it first; [AI generated fake bank statements and how to catch them](/blog/ai-generated-fake-bank-statements) covers documents that look perfect but are not the bank's.

## Structuring and cash deposit patterns in laundering cases

Structuring means splitting cash transactions into smaller amounts to avoid a bank's reporting duty. The [IRS Internal Revenue Manual section on structuring](https://www.irs.gov/irm/part4/irm_04-026-013) ties it to the $10,000 currency reporting threshold and notes that structured amounts need not exceed that threshold at any single institution.

The IRS manual also describes "smurfing," where several third parties make small transactions on someone's behalf. How these patterns look line by line, with a worked two-week schedule, is set out in [structured cash deposits in bank statements](/blog/structured-cash-deposits#structured-deposits-spread-across-days-branches-and-accounts).

### A quick test

1. Filter credits to cash deposits only.
2. Count deposits between 8,000.00 and 9,999.99, and compare with the count between 10,000.00 and 11,999.99.
3. Sum cash deposits by rolling three-day window and list windows above 10,000.00 where no single deposit is.

A business that takes a lot of cash, such as a restaurant, will produce some hits honestly. The question is whether the pattern matches its sales records.

## How does layering look across several bank statements?

Layering is the movement of money through a chain of accounts, entities and transfers so that its source becomes hard to follow. On statements, it looks like money leaving one account and arriving in another under a different name, often several times, sometimes returning to where it began. You only see it by laying statements side by side.

Build one table of transfers from every account you hold, with date, amount, counterparty and account. Then pair each outgoing transfer with an incoming one by amount and date, allowing for fees and a day or two of delay. Draw the chain:

- Account A sends 40,000.00 to Company B.
- Company B's statement shows 40,000.00 in, then 39,800.00 out to Company C the next day.
- Company C sends 39,500.00 to an account held by the same person who controls A.

Each link is ordinary. The chain is the finding.

Small shrinkage along the chain is typical, because each hop may pay a fee or a cut. Matching on exact amounts will miss it. Allow a tolerance of a percent or two, and widen the date window to several days, then review the candidate pairs by hand. A chain that loses a little at every step and ends near its starting point is worth a written note even before the missing statements arrive. Statements for B and C are often out of reach without legal process; [how to subpoena bank records and check the production](/blog/subpoena-bank-records) explains what to request so the chain can be completed.

## Laundering red flags that have an ordinary explanation

Most laundering red flags have an innocent version, and treating every one as suspicious wastes time and damages trust. Pass-through flows, third-party deposits and round cash all appear in ordinary businesses. The test is whether the pattern fits what you know about the account holder, backed by documents.

| Red flag | How it looks on the statement | Common innocent explanation | Next test |
| --- | --- | --- | --- |
| Rapid in-and-out | Large credits, matching debits within days | Escrow, payment agent, freight forwarder | Compare with contracts and client list |
| Many third-party payers | Dozens of first-time payers | Online seller, event organizer | Match payers to orders or tickets |
| Cash just under 10,000.00 | Repeated deposits in the 9,000s | Daily takings of a cash business | Compare with register tapes and sales |
| Transfers through related companies | Same amount moving through several names | Group treasury or intercompany loans | Obtain intercompany agreements |
| Round wires in | Whole-thousand credits from abroad | Family support, property sale | Ask for the source document |
| Dormant then busy | Quiet account suddenly active | New business, inheritance | Ask what changed and when |

The values and explanations are examples. The useful habit is to write the innocent explanation down before you test it, then see whether the documents support it. A risk-based plan helps decide how far to go; [running a fraud risk assessment for cash and bank accounts](/blog/fraud-risk-assessment) shows how to rate likelihood and impact before you choose tests.

## When to escalate a money laundering concern from statement review

Escalate a money laundering concern when red flags cluster, the explanations offered do not match the documents, and the amounts matter. Preserve the records first, write down what you saw and what you tested, and take the concern to the person your engagement or employer names, usually counsel, a compliance officer or the engagement partner.

Who reports to the authorities depends on who you are. Banks and other financial institutions have reporting duties under the Bank Secrecy Act. An accountant outside a bank should not assume either a duty to report or a right to disclose client information; professional confidentiality rules apply, so take legal advice before saying anything outside the engagement.

What not to do:

- Do not confront the account holder or ask questions that reveal your concern.
- Do not alter, annotate or delete the files you were given. Work on copies.
- Do not keep working on a transaction you believe may be criminal without advice.

For the analysis itself, a clean, line-level table from every statement saves days. [PreciseBankFlow](/get-started) reads each statement into lines and checks that it foots before anything else, which gives you a reliable base for the transfer pairing and cash tests above; deciding what the patterns mean remains your work.