Money Laundering Schemes

Why Money Laundering Schemes Matter for the CFE Exam

Money laundering is the engine that makes most financial crime profitable. Fraud, embezzlement, drug trafficking, corruption, and tax evasion all generate illicit proceeds that are worthless to the criminal unless they can be spent without attracting attention. For this reason, the ACFE places money laundering squarely within the Financial Transactions and Fraud Schemes section of the CFE Exam, and candidates are expected to recognize how laundering works, which vehicles are used, and what red flags indicate that funds are being cleaned.

Understanding money laundering is also central to a fraud examiner's practical work. Tracing stolen assets, supporting asset recovery, assisting with anti-money laundering (AML) compliance programs, and preparing Suspicious Activity Reports (SARs) all depend on recognizing laundering patterns. Globally, the Financial Action Task Force (FATF) estimates that laundered funds represent roughly 2 to 5 percent of world GDP, so the stakes for institutions, regulators, and examiners are enormous.

What Is Money Laundering?

Money laundering is the process of disguising the existence, nature, source, ownership, or control of illegally obtained money so that it appears to have come from a legitimate source. The term is often traced to Prohibition-era gangsters who allegedly mixed illegal liquor profits with the cash receipts of laundromats, although the practice itself is ancient.

Three key points define laundering for exam purposes:
1. There must be a predicate offense, meaning an underlying crime that generated the dirty money (fraud, drug trafficking, bribery, tax evasion, etc.).
2. The launderer must know, or in many jurisdictions be willfully blind to the fact, that the funds are criminally derived.
3. The purpose is to conceal the illegal origin and make the funds appear legitimate so they can be used openly.

In the United States, the primary criminal statute is the Money Laundering Control Act of 1986 (18 U.S.C. sections 1956 and 1957), which made money laundering a federal crime for the first time. The Bank Secrecy Act (BSA) of 1970 established record-keeping and reporting requirements for financial institutions, and the USA PATRIOT Act of 2001 significantly expanded AML obligations, including customer identification programs and enhanced due diligence for correspondent and private banking accounts. Internationally, FATF issues the 40 Recommendations that serve as the global AML standard.

How Money Laundering Works: The Three Stages

The classic model of money laundering has three stages. You should know them cold, including the order and the purpose of each.

1. Placement
Placement is the initial entry of illicit cash into the financial system or the legitimate economy. This is the riskiest stage for the launderer because large volumes of cash are hard to explain and because reporting thresholds exist. Methods include depositing cash into bank accounts, purchasing monetary instruments such as cashier's checks or money orders, buying chips at a casino, exchanging currency, or mixing cash with the receipts of a legitimate business.

2. Layering
Layering involves a series of complex transactions designed to separate the funds from their criminal source and obscure the audit trail. Examples include wire transfers among multiple accounts and jurisdictions, conversion of cash into monetary instruments and then into other assets, purchases and resales of securities or real estate, use of shell companies, and transfers through offshore accounts in secrecy jurisdictions. The more layers, the harder the trail becomes to follow.

3. Integration
Integration is the final stage, in which laundered funds re-enter the legitimate economy in a form that appears to be normal business or personal wealth. Examples include investing in real estate, buying luxury assets, funding legitimate businesses, or receiving the money back as a fictitious loan, salary, dividend, or consulting fee. At this point the money looks clean and can be spent freely.

A helpful mnemonic is P-L-I: Placement puts it in, Layering loses the trail, Integration brings it back as legitimate wealth.

Common Money Laundering Schemes and Vehicles

Structuring (Smurfing)
Structuring is the deliberate breaking of a large cash transaction into smaller amounts to avoid triggering reporting requirements. In the U.S., banks must file a Currency Transaction Report (CTR) for cash transactions exceeding 10,000 dollars. A launderer may deposit 9,500 dollars at several branches or on several days to stay below the threshold. When multiple individuals (called smurfs) make these deposits on behalf of the launderer, the scheme is called smurfing. Structuring is itself a federal crime even if the underlying funds are legitimate. Banks are expected to aggregate related transactions and file CTRs or SARs when structuring is suspected.

Front Businesses and Cash-Intensive Businesses
A front business is a legitimate-appearing enterprise used to commingle dirty cash with real revenue. Cash-intensive businesses such as restaurants, bars, car washes, laundromats, vending operations, parking lots, nail salons, and convenience stores are ideal because reported sales are difficult to verify. The launderer simply inflates daily receipts, deposits the combined cash, and pays taxes on the phony income as the cost of cleaning the money. Red flags include revenues that are inconsistent with the size, location, or capacity of the business, unusually high profit margins compared with industry norms, and cash deposits that do not fluctuate with seasonal or economic patterns.

Shell Companies and Nominees
Shell companies are entities with no significant operations or assets, often formed in jurisdictions with strong corporate secrecy. They are used to hold accounts, own property, and issue invoices that provide a paper justification for fund transfers. Nominee directors and shareholders conceal the true beneficial owner. Layered structures of shells owning shells across several countries make tracing extremely difficult. Regulators have responded with beneficial ownership rules such as the U.S. Corporate Transparency Act.

Trade-Based Money Laundering (TBML)
TBML uses international trade transactions to move value. Techniques include over-invoicing (the importer pays more than goods are worth, transferring value to the exporter), under-invoicing (transferring value to the importer), multiple invoicing of the same shipment, over- or under-shipment, phantom shipments where no goods move at all, and misrepresenting the quality or type of goods. The Black Market Peso Exchange is a well-known TBML variant in which drug dollars in the U.S. are used to buy goods that are exported to Latin America and sold for local currency, delivering clean pesos to the cartel.

Real Estate
Real estate is attractive for integration because of high values, relative price subjectivity, and the ability to hold title through entities. Schemes include buying property with cash through a shell company, undervaluing the recorded purchase price and paying the difference under the table, rapid flipping between related parties to justify gains, and using rental income from illicit-funded property as a legitimate income stream. Mortgage loan-back schemes, where the launderer borrows against the property and repays with dirty money, also appear.

Securities and Investment Products
Launderers may purchase securities with illicit funds and later sell them, receiving a brokerage check that appears legitimate. Mirror trading, wash trades, and the use of multiple brokerage accounts can further obscure the trail. Bearer securities, where still available, are particularly dangerous because ownership is anonymous.

Insurance Products
Single-premium life insurance policies and annuities can be purchased with illicit funds and then surrendered early. The launderer accepts the surrender penalty as a cost and receives a check from a reputable insurer. Overpaying premiums and requesting refunds, or assigning policies to third parties, are related techniques.

Casinos and Gaming
Cash is converted into chips, minimal gambling takes place, and the chips are cashed out for a casino check or wired to an account, often with a request for the proceeds to be described as winnings. Casinos in the U.S. are defined as financial institutions under the BSA and must file CTRs and SARs. Online gaming and offshore sportsbooks present similar risks with less oversight.

Money Services Businesses, Currency Exchanges, and Prepaid Cards
Money transmitters, check cashers, and currency exchangers can be used to convert cash into wire transfers, money orders, or foreign currency. Stored-value and prepaid cards allow value to be loaded in one place and withdrawn at ATMs anywhere in the world, making them a modern cash smuggling tool.

Alternative Remittance Systems (Hawala)
Hawala and similar informal value transfer systems move money without physically transferring funds. A customer gives cash to a hawaladar in one country; a counterpart in another country pays out the equivalent to the recipient. The brokers settle among themselves later, often through trade or offsetting transactions. Because records are minimal and trust-based, these systems are difficult to monitor.

Virtual Currencies and Digital Assets
Cryptocurrencies offer pseudonymity, cross-border speed, and limited intermediary oversight. Launderers use mixing or tumbling services, chain hopping between different coins, privacy coins, peer-to-peer exchanges, and unregulated foreign exchanges. FinCEN treats most virtual currency exchangers as money services businesses subject to AML rules.

Loan-Back Schemes
The launderer deposits illicit funds in an offshore entity and then borrows the money back from that entity, documented as a legitimate loan. Repayments with interest create additional cover, and the loan proceeds appear as clean capital.

Bank Complicity and Correspondent Banking
Launderers sometimes bribe or recruit bank employees to ignore reporting duties, or they exploit correspondent accounts, where a foreign bank holds an account at a domestic bank, to move funds with reduced scrutiny of the ultimate customer. Payable-through accounts and nested correspondent relationships are especially high risk.

Red Flags of Money Laundering

Fraud examiners should be able to recognize common indicators, including:
- Cash transactions just below reporting thresholds or multiple deposits on the same day at different branches.
- Frequent exchanges of small bills for large bills.
- A business that deposits far more cash than similar businesses or has few legitimate suppliers and expenses.
- Reluctance to provide identification or beneficial ownership information.
- Wire transfers to or from secrecy jurisdictions with no apparent business purpose.
- Rapid movement of funds in and out of accounts (pass-through activity).
- Transactions inconsistent with the customer's stated occupation or business.
- Loans secured by assets of unknown origin or repaid unexpectedly early with cash.
- Early surrender of insurance policies or purchase of single-premium products with cash.
- Use of multiple shell companies with common addresses, agents, or signatories.

Detection and Investigation Techniques

Examiners detect laundering through a combination of regulatory reporting, transaction analysis, and traditional investigative work. Key tools include analyzing CTRs, SARs, and Reports of International Transportation of Currency or Monetary Instruments (CMIRs); conducting Know Your Customer (KYC) and enhanced due diligence reviews; performing net worth and bank deposit analyses to identify unexplained wealth; tracing funds through bank records and wire transfer messages; comparing invoiced prices with market values to uncover TBML; and using link analysis software to map relationships among accounts, entities, and individuals. Public records, corporate registries, and property records are essential for identifying beneficial owners behind shell companies.

Exam Tips: Answering Questions on Money Laundering Schemes

1. Master the three stages and their order. Many questions describe a scenario and ask which stage it represents. Ask yourself: is cash entering the system (placement), is the trail being obscured through transfers and conversions (layering), or is clean-looking money returning as apparent legitimate wealth (integration)? Remember that placement is considered the most vulnerable stage for the launderer.

2. Know the reporting thresholds and forms. The CTR is filed for cash transactions over 10,000 dollars. SARs are filed for suspicious activity and the customer must not be told. The CMIR applies to physically transporting more than 10,000 dollars across the U.S. border. Form 8300 applies to trades or businesses receiving more than 10,000 dollars in cash. Questions frequently test these numbers and which party files.

3. Understand structuring precisely. Structuring is a crime regardless of whether the money is legitimate. A question describing someone splitting deposits to avoid a CTR is testing structuring, and smurfing refers to using multiple people to do so.

4. Distinguish the scheme by its vehicle. If the question mentions invoices and shipments, think trade-based money laundering. If it mentions chips or markers, think casinos. If it mentions single-premium policies or early surrender, think insurance. If it mentions brokers paying out in another country without funds crossing borders, think hawala. Matching the key vocabulary to the vehicle resolves most scheme-identification questions.

5. Watch for the term willful blindness. Laundering statutes do not require that the defendant have actual knowledge of the specific predicate crime; deliberately avoiding knowledge of suspicious facts can satisfy the knowledge element. Questions about the mental state of a banker or professional often hinge on this concept.

6. Recognize that laundering requires a predicate offense. Simply moving money secretly is not laundering unless the funds are derived from specified unlawful activity. If an answer choice describes hiding legitimately earned money from a spouse, it is not laundering in the legal sense (though it could be structuring or tax evasion depending on facts).

7. Apply red-flag reasoning to scenario questions. When a scenario describes a business with cash deposits far above industry norms, inconsistent sales and inventory, or wire transfers to offshore shells, the exam expects you to identify a front business or layering activity. Pick the answer that explains the anomaly in laundering terms.

8. Remember the examiner's response. When asked what a fraud examiner or compliance officer should do, the correct answer almost always involves documenting the activity, escalating within the institution, and filing a SAR without tipping off the customer. Confronting the customer or closing the account without reporting is usually a distractor.

9. Know the major laws by purpose, not just name. BSA equals record keeping and reporting; Money Laundering Control Act equals criminalization; USA PATRIOT Act equals expanded KYC, correspondent banking rules, and information sharing; FATF equals international standards. Questions often ask which law first made laundering a crime or which law introduced customer identification programs.

10. Eliminate answers using stage logic. If a question asks for an example of integration and one choice describes depositing cash into a bank, eliminate it immediately because depositing cash is placement. Using the stage framework to rule out choices is one of the fastest ways to improve accuracy.

Summary

Money laundering converts the proceeds of crime into apparently legitimate wealth through placement, layering, and integration. Launderers exploit cash-intensive businesses, structuring, shell companies, trade transactions, real estate, securities, insurance, casinos, money services businesses, informal remittance networks, and digital assets. Fraud examiners counter these schemes by understanding reporting requirements, recognizing red flags, tracing funds, and identifying beneficial owners. For the CFE Exam, focus on the three stages, the regulatory thresholds and forms, the distinguishing features of each scheme, and the appropriate professional response when suspicious activity is detected. Candidates who can quickly classify a scenario by stage and vehicle will handle this topic with confidence.