What AML means and why banks do it

AML stands for Anti-Money Laundering. It is a set of rules and processes that banks use to detect, report, and stop money that comes from crime or is being moved to hide its origin. Banks are required by law to watch for suspicious account activity and report it to government authorities.

The goal is straightforward: prevent criminals from using the financial system to clean dirty money or fund illegal activity. When someone commits a crime—fraud, drug trafficking, theft, corruption—they often need to move that money through banks to spend it without drawing attention. AML rules are designed to make that harder and to catch it when it happens.

Banks do not decide whether money is actually illegal. That is a job for law enforcement. What banks do is flag transactions that look unusual or risky, document them, and send reports to the government. The bank's job ends with the report. What happens next is up to investigators.

Key Takeaways

  • AML is a legal requirement for banks to monitor accounts for suspicious activity and report findings to the Financial Crimes Enforcement Network (FinCEN), a U.S. Treasury bureau.
  • Banks use automated systems to watch for red flags like large cash deposits, frequent transfers to high-risk countries, or patterns that do not match a customer's normal behavior.
  • A Suspicious Activity Report (SAR) is filed when a bank detects activity that might involve money laundering, and the customer is not told the report was filed.
  • AML compliance costs banks money and time, which is why some banks have closed accounts or refused service to certain customers to reduce their risk.
  • Being flagged in an AML report does not mean you have done anything wrong—it means the activity looked unusual enough to warrant investigation by authorities.

How banks actually monitor accounts

Banks use software that runs 24/7 to watch for patterns and transactions that do not fit normal behavior. The software compares what you do with your account against what you have done before and against what similar customers typically do. If something stands out, it gets flagged for a human to review.

The red flags vary depending on the type of account and the customer's profile. A large cash deposit might be normal for a restaurant owner but suspicious for a salaried employee who has never deposited cash before. A wire transfer to a country with weak financial oversight might be routine for someone who has family there, but unusual for someone with no history of international transfers.

Banks also watch for specific patterns that are known to be associated with money laundering: deposits just under $10,000 (called "structuring"), rapid movement of money in and out of an account, transfers to countries known for financial crime, and transactions that do not match the stated purpose of the account. None of these alone proves anything. But together, or in combination with other factors, they trigger a closer look.

What happens when a bank files a Suspicious Activity Report

When a bank's compliance team decides that an account or transaction meets the threshold for suspicion, they file a Suspicious Activity Report (SAR) with FinCEN, the Financial Crimes Enforcement Network. FinCEN is part of the U.S. Treasury Department and is the central hub for receiving these reports from financial institutions across the country.

The bank has 30 days from the date they detect the suspicious activity to file the report. The report includes details about the transaction, the account holder, the amounts involved, and the reason the bank found it suspicious. The bank must keep the report confidential—they cannot tell you that they filed one, and doing so is actually illegal in most cases.

Once FinCEN receives the report, they analyze it alongside other reports and data to look for patterns that might indicate organized financial crime. They share relevant information with law enforcement agencies like the FBI, DEA, and IRS. Whether anything happens next depends on whether investigators see enough evidence to open a case.

The difference between AML and KYC

AML and KYC (Know Your Customer) are related but separate. KYC is the process banks use to verify who you are when you open an account. They collect your name, address, Social Security number, and sometimes other information. They may ask what you do for work and what you plan to use the account for.

AML is what happens after the account is open. It is the ongoing monitoring of what you actually do with the account. KYC is the front door; AML is the security camera inside. A bank cannot do AML well without good KYC, because they need to know who they are watching. But the two are distinct processes with different purposes.

Why banks sometimes close accounts or deny service

AML compliance is expensive. Banks have to hire compliance staff, buy monitoring software, train employees, and file reports. If a customer or type of customer is seen as high-risk—meaning they are more likely to trigger AML concerns—some banks decide the cost of monitoring them outweighs the profit from their account.

This is why some banks have closed accounts for people who work in certain industries (like cannabis retailers, even in states where it is legal), who receive frequent international transfers, or who conduct a lot of cash business. The bank is not accusing them of anything. The bank is managing its own compliance risk by deciding not to serve them.

If your account is closed for AML reasons, the bank is required to tell you, but they do not have to explain in detail. You can ask, but they may not provide specifics. The decision is the bank's to make, and you have limited recourse.

AML rules across different countries

The United States has its own AML framework, centered on the Bank Secrecy Act and enforced by FinCEN. Other countries have their own versions. The European Union has the Anti-Money Laundering Directive. Canada has the Proceeds of Crime (Money Laundering) and Terrorist Financing Act. Australia has the Anti-Money Laundering and Counter-Terrorism Financing Act.

The rules vary in detail—thresholds for reporting, which transactions trigger scrutiny, how long records must be kept—but the basic principle is the same everywhere: banks must watch for suspicious activity and report it to authorities. International banks often have to comply with multiple sets of rules at once, which is one reason they sometimes take a conservative approach to who they serve.

What you should know if your account is flagged

If your account activity triggers an AML review, you will not necessarily know it happened. The bank's compliance team may investigate and close the matter without ever contacting you. You might only learn about law enforcement shows up with questions, or if the bank decides to close your account.

If you are contacted by your bank asking about a transaction, answer honestly and provide documentation if you can. If you are contacted by law enforcement, you have the right to speak with a lawyer before answering questions. Being flagged does not mean you are guilty of anything—it means the activity looked unusual enough to warrant a closer look.

If you believe your account was closed unfairly or if you want to understand why your activity was flagged, you can ask the bank directly. They may not give you a detailed explanation, but it is worth asking. You can also file a complaint with your bank's regulator—the Office of the Comptroller of the Currency (OCC) for national banks, the Federal Reserve for state member banks, or the Federal Deposit Insurance Corporation (FDIC) for state nonmember banks.

Frequently Asked Questions

Does being in an AML report mean I am under investigation?

Not necessarily. A Suspicious Activity Report is filed when activity looks unusual, but it does not mean law enforcement has opened a case or is investigating you. FinCEN receives millions of SARs each year. Many are reviewed and closed without further action. You would typically only know you are under investigation if law enforcement contacts you directly.

Can I see the AML report filed about me?

No. SARs are confidential and not shared with the person being reported. You cannot request to see one under the Freedom of Information Act. If you are concerned about why your account was flagged, you can ask your bank what activity triggered their review, though they may not provide specifics.

What is structuring and why do banks care about it?

Structuring is making multiple deposits just under $10,000 to avoid triggering a Currency Transaction Report (CTR), which banks file for any single cash deposit over $10,000. Banks watch for this pattern because it is a known technique used to hide the true amount of money moving through an account. Structuring itself is illegal, even if the money is legitimate.

Will my bank tell me if they file a SAR about me?

No. Banks are legally prohibited from telling you that they have filed a Suspicious Activity Report. If they do tell you, they can face penalties. You might only learn about law enforcement contacts you or if your account is closed and the bank cites compliance reasons.

Can I move my money to another bank to avoid AML monitoring?

No. Every bank in the United States is required to follow AML rules. Moving your account will not change that. If your activity is genuinely suspicious, a new bank's monitoring systems will likely flag it too. If your activity is legitimate, there is no reason to worry about AML monitoring at any bank.