Legal & Regulatory

How to Handle AML Compliance Construction Best Practices on Your Construction Projects

8 min read

AML compliance construction best practices protect general contractors from becoming unknowing participants in money laundering schemes. The Financial Action Task Force identified construction as a high-risk industry for illicit financial activity in its 2025 assessment. Cash-heavy transactions, complex subcontractor chains, and cross-border material purchases create the exact conditions money launderers exploit.

This listicle covers 12 practices that GCs should adopt to build anti-money laundering controls into daily project operations.

1. Know Your Subcontractors Beyond the Bid

Subcontractor due diligence is your first line of defense. Verify every sub's legal entity name, state registration, tax ID, and beneficial ownership before signing a contract.

The Corporate Transparency Act requires most companies to report beneficial owners to FinCEN. Cross-reference your sub's reported ownership against publicly available records. Shell companies with hidden ownership are a primary money laundering vehicle.

Check the SAM.gov exclusion list and OFAC sanctions list for every new subcontractor. This takes 10 minutes per sub and catches entities barred from federal contracting.

2. Implement a Suspicious Activity Monitoring Process

Train your accounting team to flag transactions that deviate from project norms. Red flags in construction include:

  • Change orders that inflate contract value without corresponding scope changes
  • Subcontractors requesting payment to entities different from the contracting party
  • Round-number invoices with no supporting documentation
  • Payments to companies registered in jurisdictions known for lax financial oversight
  • Unusually fast project completions that suggest work was never performed

Document every flagged transaction. You do not need to determine whether money laundering occurred. You need a process that identifies and escalates suspicious activity.

3. Verify Beneficial Ownership of Every Contracting Entity

The Corporate Transparency Act changed the landscape for AML compliance construction best practices in 2024. Companies must disclose individuals who own 25% or more of the entity or exercise substantial control.

Request beneficial ownership information from every subcontractor and material supplier with contract values over $50,000. Store this documentation securely with restricted access. Update ownership records annually or when you learn of changes.

Entity TypeOwnership Verification RequiredUpdate FrequencyDocumentation Standard
Subcontractor (domestic)Yes - CTA filing confirmationAnnualFinCEN BOI report receipt
Subcontractor (foreign-owned)Yes - enhanced due diligenceSemi-annualOwnership chain to natural persons
Material supplier (over $50K)Yes - CTA filing confirmationAnnualFinCEN BOI report receipt
Material supplier (under $50K)RecommendedAt contract renewalBusiness license + tax ID
Equipment rental companyRecommendedAnnualBusiness registration + tax ID
Consultant/design professionalYes - CTA filing confirmationAnnualFinCEN BOI report receipt

4. Separate Financial Controls by Project

Commingling funds across projects creates opportunities to disguise illegitimate payments. Maintain separate bank accounts or sub-accounts for each major project. This practice makes irregular cash flows visible at the project level.

Require dual authorization for payments over $25,000. No single person should be able to approve and execute a payment. This control prevents both internal fraud and external exploitation of your payment systems.

5. Document the Source of All Cash Payments

Construction still involves significant cash transactions, especially with smaller trades. Every cash payment over $10,000 triggers a Currency Transaction Report (CTR) filing requirement. Structuring payments to stay below $10,000 is itself a federal crime.

Record the source, amount, purpose, and recipient of every cash transaction regardless of size. Maintain a cash payment log at each project office. Digital payment methods reduce cash handling and create automatic audit trails.

6. Screen Against Sanctions and Watch Lists

Run every new vendor, subcontractor, and material supplier against four databases before executing a contract.

OFAC Specially Designated Nationals List. Updated frequently. Includes individuals and entities subject to U.S. economic sanctions.

SAM.gov Exclusion Records. Lists entities debarred or suspended from federal contracting.

FinCEN Advisories. Published when specific money laundering threats emerge in targeted industries.

State contractor licensing boards. Verify active licenses and check for disciplinary actions.

Automate these screenings through your compliance management platform. Manual screening costs 45 minutes per entity. Automated screening takes under 2 minutes.

7. Train Field Staff on Red Flag Recognition

Your project managers and superintendents see things that accounting never will. Train them to recognize physical indicators of money laundering on construction sites.

Watch for subcontractors who employ far fewer workers than their bid implies. Notice material deliveries that do not match invoiced quantities. Flag subcontractors who complete work suspiciously fast or who submit invoices for work not yet performed.

Field staff training takes one hour annually. Provide a laminated red flag reference card for every jobsite trailer. Connect field observations to your whistleblower compliance training reporting channels.

8. Audit Subcontractor Payroll Records

Davis-Bacon Act projects already require certified payroll submissions. Use these records as an AML screening tool. Compare reported worker counts against site sign-in logs. Verify that payroll bank accounts match the subcontractor's registered business accounts.

Ghost employees on payroll records indicate either prevailing wage fraud or money laundering through inflated labor costs. Either way, it is your problem as the prime contractor.

9. Control Change Order Processes

Change orders are the most common vehicle for inflating contract values to launder money. Require three elements for every change order approval.

Independent cost verification. A project manager who did not originate the change order must verify the pricing against market rates.

Scope documentation. Photographs, RFIs, or design revisions must support the claimed scope change. Verbal justifications are insufficient.

Owner notification. On public projects, change orders over a threshold (typically $50,000) require owner approval. Never process a change order that bypasses the owner's review process.

10. Maintain a Vendor Risk Rating System

Not every business relationship carries the same AML risk. Rate your vendors on a three-tier scale based on transaction volume, payment methods, entity structure, and geographic risk factors.

Low risk. Established companies with long operating histories, transparent ownership, and electronic payment preferences. Standard monitoring applies.

Medium risk. Newer companies, entities with complex ownership structures, or those operating in higher-risk jurisdictions. Enhanced monitoring with quarterly transaction reviews.

High risk. Companies with opaque ownership, those requesting unusual payment arrangements, or entities flagged by screening databases. Continuous monitoring with senior management oversight.

11. Establish a Written AML Policy

Document your anti-money laundering controls in a formal policy. Include your risk assessment methodology, screening procedures, monitoring processes, reporting obligations, and escalation protocols.

The policy must name a compliance officer responsible for AML oversight. This person reviews flagged transactions, coordinates with legal counsel, and maintains relationships with law enforcement contacts.

Update the policy annually. Distribute it to every project manager. Include AML compliance as a standing agenda item in your quarterly management reviews.

12. Integrate AML Controls With Existing Compliance Systems

AML monitoring works best when connected to your broader compliance infrastructure. Link your vendor screening to subcontractor prequalification. Connect transaction monitoring to your accounts payable workflow. Feed field observations into the same reporting system used for whistleblower complaints.

An integrated platform eliminates duplicate data entry and creates a single audit trail. GCs running integrated compliance systems detect suspicious activity 3x faster than those using separate tools.

FAQs

Are general contractors required to have AML compliance programs? Federal law does not currently mandate formal AML programs for construction companies the way it does for banks. However, GCs working on federal projects must comply with anti-fraud provisions that overlap with AML requirements. The Corporate Transparency Act's beneficial ownership rules apply to most construction entities. State laws may impose additional obligations.

What happens if a GC unknowingly facilitates money laundering? Unknowing facilitation can still result in civil liability, contract termination, and debarment from federal contracting. The government does not need to prove intent to pursue civil penalties. Demonstrating that you had reasonable AML controls in place provides a strong defense. Lack of any controls makes your firm an easier enforcement target.

How much does an AML compliance program cost for a mid-size GC? A basic program costs $15,000-$30,000 per year including screening software, training, and compliance officer time. Mid-tier programs with automated monitoring and integrated reporting run $40,000-$75,000. The cost of a single enforcement action averages $1.2 million, making prevention far cheaper than remediation.

Can we use the same reporting channels for AML and whistleblower compliance? Yes. Integrating AML and whistleblower reporting channels reduces costs and simplifies training. Employees use one hotline and one reporting process for all compliance concerns. Your compliance officer triages reports to the appropriate investigation track. Integrated channels reduce program costs by 25-35%.

How do we screen international material suppliers for AML risk? Run the supplier against the OFAC sanctions list and any applicable country-specific watch lists. Verify the company's registration in its home country. Request beneficial ownership documentation. For high-value contracts, engage a third-party due diligence firm to conduct enhanced background checks. Budget $500-$2,000 per international supplier screening.

What construction activities carry the highest AML risk? Cash-intensive trades, projects in areas with high real estate speculation, and contracts with unusually complex subcontractor chains carry the most risk. Renovation projects funded by private investors attract more scrutiny than public infrastructure work. Any project involving entities from countries on the FATF grey list warrants enhanced due diligence.

Strengthen Your AML Compliance Controls Today

SubcontractorAudit gives you automated vendor screening, subcontractor due diligence tracking, and compliance dashboards built for general contractors. Request a demo and see how the platform supports your AML compliance program.

aml compliance construction best practiceslegal-regulatorymofu
Javier Sanz

Founder & CEO

Founder and CEO of SubcontractorAudit. Building AI-powered compliance tools that help general contractors automate insurance tracking, pay application auditing, and lien waiver management.