Skip to main content
Banks File 3% of Smuggling SARs, 61% of the DollarsFraud Detection Analytics
5 min readFor Bank Information Security Officers

Banks File 3% of Smuggling SARs, 61% of the Dollars

You've heard it in every AML training: human smuggling looks different from other financial crimes. It's cross-border, violent, and involves organized networks moving people, not just money.

That framing is wrong, and it's costing you alerts.

FinCEN’s latest analysis of 2023-2025 Suspicious Activity Reports shows that when banks do catch human smuggling activity, they're catching the big money, 61% of the suspicious dollar volume from just 3% of the filings. But most of your transaction monitoring rules aren't calibrated to see it, because the typologies look exactly like ordinary retail banking: funnel accounts, structured withdrawals, border ATM traffic. The myths about what smuggling "looks like" are keeping these patterns below your alert thresholds.

Myth 1: Human smuggling transactions cross international borders

Reality: 98% of the subjects named in bank-filed human smuggling SARs were located in the United States. Only 2% referenced Mexico, the next most common country.

Smugglers collect fees inside the U.S., typically from relatives of the person being moved. The transaction your monitoring system sees, a $3,200 Zelle payment from a construction worker in Phoenix to an account in El Paso, crosses no border at all. Your cross-border wire monitoring won't flag it. Your high-risk geography rules won't flag it. It looks domestic because it is domestic.

This matters for your rule design. If you're relying on international transfer flags or foreign correspondent banking alerts to surface smuggling risk, you're filtering out 98% of the actual activity. The crime crosses borders; the money often doesn't.

Myth 2: Smuggling accounts show unusual merchant categories or exotic payment types

Reality: One institution reported a funnel account receiving more than 500 transactions from over 30 people between March and July 2023, totaling $68,000. The account holder moved the money into savings, then withdrew it in structured amounts below $10,000 from various branches and ATMs.

No wire transfers. No cryptocurrency. No suspicious merchant category codes. Just deposits, savings transfers, and cash withdrawals, the same activity profile as a small business owner or a family pooling money for a major purchase.

Your MCC-based rules and exotic payment type filters won't catch this. You need velocity rules that count unique senders per account, combined with withdrawal pattern analysis that flags repeated sub-threshold cash-outs across multiple locations. The typology is volume and fragmentation, not transaction type.

Myth 3: Negative news screening is a nice-to-have control for PEP monitoring, not a core AML tool

Reality: FinCEN's analysis specifically noted that many filings flagged "excessive travel purchases or negative news on subjects of the filings." One bank identified nearly $30,000 in purchases from a company selling thermal binoculars and night vision equipment, goods that "could aid in human smuggling operations", by customers whose profiles (a student and a produce company owner) didn't match the purchase pattern.

Negative news screening isn't just for sanctions and PEP lists. It's a detective control that surfaces context your transaction rules can't see. If a customer is named in local press coverage about smuggling arrests, or if their LinkedIn profile claims to run a travel agency but their account shows no payroll activity, that's signal.

Integrate adverse media screening into your alert disposition workflow, not just your customer onboarding. Run it when velocity rules fire on funnel accounts or when you see unusual merchant purchases. Daniel Stipano, a partner at Davis Polk and former OCC deputy chief counsel, told American Banker that banks "usually include a consideration of negative news" during alert investigations. Make it standard procedure, not an afterthought.

Myth 4: Travel agencies in your customer base are low-risk service businesses

Reality: FinCEN's analysis found travel agencies "ranging from sham operations to legitimate businesses that may be unwittingly facilitating" human smuggling. One filer flagged a travel agency in Juarez, Mexico, whose account drew nearly all its funding from cash deposited along the southwest border and had no payroll activity at all.

No payroll means no employees. No employees means it's not operating as a business. It's a funnel.

If you have travel agencies in your customer base, your periodic review process should verify payroll activity, merchant processing (do they actually sell tickets?), and deposit patterns. Cash-intensive funding with no corresponding payroll or card processing is a red flag, not a business model. The legitimate agencies in your portfolio need this scrutiny too, they may not know their booking systems are being used to move people instead of tourists.

Myth 5: Smuggling activity is steady; monitoring thresholds should be static

Reality: Suspected human smuggling SARs peaked around 29,000 in 2024, then dropped to roughly 11,000 in 2025, a 62% decrease. This correlates with southwest border apprehensions falling to their lowest level in 55 years, according to U.S. Customs and Border Protection.

Your monitoring rules need to account for this volatility. If you set funnel account thresholds based on 2024 alert volumes, you're likely seeing far fewer alerts now, not because your controls improved, but because the underlying activity decreased. When border enforcement shifts or policy changes, the financial patterns shift with them.

Review your AML rule performance quarterly, not annually. Compare your alert rates to external indicators like CBP apprehension data or FinCEN trend reports. If your alerts are falling but the external context suggests activity is rising, your thresholds may have drifted out of calibration.

What to do instead

Recalibrate your transaction monitoring to catch ordinary-looking activity at scale:

Build composite rules that flag funnel patterns. Alert when an account receives deposits from more than 15 unique senders in 30 days, especially if withdrawals fragment across branches or stay below $10,000.

Layer geographic and merchant analysis. ATM withdrawals concentrated along the southwest border, combined with purchases from tactical equipment suppliers or travel agencies, deserve investigation even if no single transaction breaks a threshold.

Integrate negative news into alert workflows. Don't wait for annual reviews. When a funnel account alert fires, screen the account holder for adverse media before you close it as a false positive.

Verify business legitimacy for high-risk customer types. Travel agencies, transportation companies, and logistics providers should show payroll activity and merchant processing consistent with their stated business model. No payroll means no business.

Track your performance against external benchmarks. When FinCEN publishes trend data or CBP reports apprehension figures, compare them to your internal alert volumes. If the trends diverge, investigate why.

Banks filed one human smuggling SAR for every 3,000 total SARs between 2023 and 2025. That's rare enough that you might never see one, but when you do, you're likely looking at serious money. The $3 billion in suspicious volume banks reported didn't come from exotic transaction types or cross-border wires. It came from deposits, savings transfers, and ATM withdrawals that your rules already monitor. You just need to tune them to see the pattern.

You Might Also Like