The top AML red flags new advisors should recognize on sight. (1) Structuring -- multiple cash deposits just under $10K, especially across consecutive days or branches. (2) Unexplained source of funds -- a client wires in $500K without ever discussing where it came from, and dodges the question. (3) Third-party transfers -- money arrives from or departs to accounts in names different from the client, with no documented business reason. (4) High-risk geographies -- funds routed through jurisdictions on the FATF grey list, or to/from sanctioned countries. (5) PEPs (Politically Exposed Persons) -- foreign government officials, their immediate families, and close associates; not illegal but require enhanced due diligence. (6) Inconsistency between KYC profile and activity -- a retiree with stated low income suddenly trading $100K daily. (7) Reluctance to provide documentation -- a client who balks at routine account-opening paperwork or refuses to explain a transaction. None of these alone is proof of a crime; each is a flag that triggers a closer look and a compliance-officer conversation.
The 'no tipping off' rule is non-negotiable and personal. Once you have decided (or your compliance officer has decided) that a SAR is being filed, you do NOT tell the client. You do not hint, do not refuse the transaction in a way that signals you are reporting, do not change your normal pattern of communication in a way the client could read as a tell. Tipping off is itself a federal crime under 31 U.S.C. 5318(g) and exposes both you and the firm to criminal liability. If a client asks why a transaction is delayed, the standard answer is 'our compliance team is reviewing this transaction as part of our standard procedures' -- the truth without the tell. New advisors instinctively want to be helpful and transparent with clients; this is the one place that instinct must be overridden by the rule.
Going Deeper -- the AML failure modes that get firms fined. (1) The escalation gap: front-line staff saw the red flag, raised it informally, and the AML officer never got the formal report. Fix: written escalation templates, mandatory acknowledgment. (2) The training stale problem: AML training is annual, but the typology of laundering evolves faster (crypto on-ramps, NFT wash trading, third-party processors). Fix: scenario-based refreshers tied to recent FinCEN advisories. (3) The volume problem: large firms generate so many alerts that the queue becomes the bottleneck; legitimate SARs sit unfiled past the 30-day deadline. Fix: tiered triage and staffing tied to alert volume. (4) The relationship-protection instinct: a long-tenured advisor reluctant to flag a client they have known for 15 years. Fix: SAR-filing performance metrics that do not penalize for filings (good-faith filings are statutorily protected; the only AML metric that should hurt an advisor is failing to escalate). AI prompt for self-review: 'For this transaction, name three plausible legitimate explanations and three plausible suspicious explanations. Which set is better supported by the documentation, and what additional documentation would change the assessment?' The next module turns from the regulatory backdrop to the document that operationalizes a KYC into a real portfolio plan -- the Investment Policy Statement.
Sit with the ideas.
A client deposits cash into their brokerage account on three consecutive business days: $9,500, $9,200, and $9,800. The total is $28,500 -- above the $10,000 single-day threshold for a Currency Transaction Report (CTR), but each individual deposit is below it. The client mentions casually that they 'split it up to avoid the paperwork.' What is the disciplined response under the Bank Secrecy Act and FINRA Rule 3310?