Legal & Regulatory

Aml Compliance Construction Best Practices: Common Questions Answered for General Contractors

7 min read

Understanding aml compliance construction best practices is no longer optional for general contractors managing large-scale projects. The Financial Crimes Enforcement Network (FinCEN) reported that construction-related suspicious activity reports increased 34% between 2023 and 2025. Federal regulators now treat construction as a high-risk sector for money laundering because of cash-intensive transactions, complex subcontractor chains, and cross-border material purchases.

This guide answers the questions GCs ask most about building an anti-money laundering program that works in a construction environment.

What Is AML Compliance in Construction?

Anti-money laundering (AML) compliance in construction refers to the policies, procedures, and controls that prevent illicit funds from flowing through construction projects. The Bank Secrecy Act (BSA) requires businesses that handle large cash transactions to file Currency Transaction Reports (CTRs) for any cash exchange above $10,000.

Construction firms face additional scrutiny because of how money moves through projects. A single commercial build can involve 30-80 subcontractors, each receiving payments that pass through multiple tiers. Without proper controls, bad actors can layer illicit funds through change orders, inflated invoices, or shell subcontracting companies.

GCs that operate on federally funded projects carry even higher obligations. The government contractor whistleblower compliance training requirements under the National Defense Authorization Act (NDAA) add reporting duties that overlap with AML programs.

How AML Red Flags Show Up on Construction Projects

Knowing what to watch for prevents compliance failures before they start. These red flags appear regularly in construction settings.

Unusual payment patterns. A subcontractor requests payment in cash or cryptocurrency for work that typically runs through standard invoicing. Any sub asking to split payments across multiple accounts or entities without a clear business reason should trigger review.

Shell company structures. A subcontractor operates through multiple LLCs with no visible workforce, equipment, or physical office. FinCEN's Corporate Transparency Act now requires beneficial ownership reporting, making shell company detection easier.

Inflated change orders. Change orders that exceed the original scope by more than 25% without documented justification can mask fund layering. A 2024 DOJ case involved a GC who processed $4.2M in fraudulent change orders to move funds for a criminal network.

Mismatched financials. A subcontractor's bid comes in 40% below market rate, yet they request full mobilization payment upfront. Bids that defy market logic often signal either fraud or money laundering.

AML Red FlagRisk LevelRecommended Action
Cash payment requests above $10,000HighFile CTR, investigate sub
Sub operating through multiple shell LLCsHighRequest beneficial ownership docs
Change orders exceeding 25% without justificationMediumAudit scope documentation
Below-market bids with upfront payment demandsMediumVerify sub financials and references
Payments routed through foreign accountsHighEnhanced due diligence required
Sub refuses to provide W9 or tax IDHighDo not engage, report
Rapid sub turnover on a single projectMediumReview subcontracting patterns
Invoices with round-number amounts consistentlyLowMonitor for pattern escalation

Building an AML Compliance Program for Your GC Firm

A functional AML program for a general contracting firm includes five elements.

Written policies. Document your firm's AML procedures in a policy manual. Cover vendor onboarding, payment controls, cash handling limits, and reporting obligations. Update the manual annually.

Designated compliance officer. Assign one person responsibility for AML oversight. This person reviews flagged transactions, files SARs (Suspicious Activity Reports) when required, and coordinates with legal counsel. Firms with fewer than 50 employees can assign this as a dual role.

Subcontractor due diligence. Screen every subcontractor before contract execution. Verify their business registration, tax ID, beneficial ownership, and insurance status. Cross-check names against OFAC's Specially Designated Nationals (SDN) list.

Transaction monitoring. Track payment patterns across projects. Flag transactions that match known money laundering typologies. Software tools can automate pattern detection across your accounts payable system.

Training. Train project managers, accountants, and procurement staff to recognize AML red flags. Annual training satisfies most regulatory expectations. Document attendance and training content for audit purposes.

State-by-State AML Enforcement Trends

AML enforcement in construction varies significantly by state. Some states have added construction-specific reporting requirements on top of federal obligations.

StateKey AML Construction RequirementEnforcement Agency
New YorkLicensing checks for subs on public projects over $1MNY DFS + AG Office
CaliforniaContractor license bond plus AML screening for public worksCSLB
FloridaEnhanced due diligence for projects in designated high-risk zonesFDLE
TexasCash transaction reporting for construction above $10KTexas DPS
IllinoisBeneficial ownership disclosure for subs on state-funded projectsIL Comptroller
NevadaAML training required for gaming-related constructionNevada GCB
New JerseySubcontractor financial disclosure on public contracts over $500KNJ DCA
MassachusettsAnti-fraud certifications on public construction bidsMA OIG

States with active construction fraud task forces (New York, California, Florida, New Jersey) prosecute AML violations more aggressively. GCs operating across state lines should map their obligations per jurisdiction.

How AML Compliance Connects to Subcontractor Prequalification

AML screening fits naturally into your existing prequalification workflow. When you already collect W9 forms, proof of insurance, and safety records from subcontractors, adding an AML screening step takes minimal effort.

The screening step verifies beneficial ownership, checks OFAC sanctions lists, and reviews the sub's financial history for irregularities. Firms using automated prequalification platforms complete AML screening in under 10 minutes per subcontractor.

This aligns with broader compliance training efforts. See our guide on training programs for how to integrate AML awareness into your existing safety and compliance training calendar.

Common Penalties for AML Non-Compliance in Construction

The cost of non-compliance far exceeds the cost of building a program.

Civil penalties under the BSA range from $25,000 to $100,000 per violation. Willful violations carry criminal penalties of up to $500,000 in fines and 10 years imprisonment. Corporate liability can extend to officers and directors who knew about deficiencies and failed to act.

Beyond direct penalties, GCs face debarment from federal projects, loss of bonding capacity, and reputational damage that closes doors with project owners. A 2025 AGC survey found that 78% of project owners now include AML compliance questions in their GC prequalification questionnaires.

FAQs

Do general contractors need a formal AML compliance program? GCs working on federally funded projects or handling cash transactions above $10,000 must comply with BSA requirements. Even GCs on private projects benefit from AML controls because project owners increasingly require them during prequalification. A formal program protects your firm from liability if a subcontractor launders funds through your project.

What is the $10,000 cash reporting threshold for construction firms? Any cash transaction (or series of related transactions) totaling $10,000 or more in a single business day requires a Currency Transaction Report filed with FinCEN. This applies to payments received from clients and payments made to subcontractors. Structuring transactions to avoid the threshold is a federal crime.

How often should GCs train staff on AML compliance? Annual training meets the minimum regulatory expectation. Firms operating in high-risk states (New York, California, Florida) or on federal projects should train semi-annually. Training should cover red flag recognition, reporting procedures, and recent enforcement trends. Document all training sessions for audit purposes.

Can a GC be held liable for a subcontractor's money laundering? Yes. If a GC knew or should have known about suspicious activity and failed to report it, the firm faces both civil and criminal liability. The "should have known" standard means GCs must conduct reasonable due diligence. Courts have held GCs liable when they ignored obvious red flags like shell company subcontractors or inflated invoicing.

What is the difference between a CTR and a SAR in construction AML? A Currency Transaction Report (CTR) is mandatory for cash transactions above $10,000 and involves no suspicion. A Suspicious Activity Report (SAR) is filed when you detect activity that suggests money laundering, fraud, or terrorist financing regardless of dollar amount. Both are filed with FinCEN. Filing a SAR does not require proof of criminal activity.

How does the Corporate Transparency Act affect GC subcontractor screening? The Corporate Transparency Act requires most LLCs and corporations to report their beneficial owners to FinCEN. GCs can use this database to verify who actually owns their subcontracting companies. This makes it harder for bad actors to hide behind shell entities. Starting in 2025, GCs should request beneficial ownership documentation as part of standard prequalification.

Protect Your Projects with Proactive AML Screening

SubcontractorAudit helps general contractors screen subcontractors, track compliance documentation, and flag risk indicators before they become problems. Request a demo to see how automated prequalification fits into your AML compliance program.

aml compliance construction best practiceslegal-regulatorytofu
Javier Sanz

Founder & CEO

Founder and CEO of SubcontractorAudit. Building AI-powered compliance tools that help general contractors automate insurance tracking, pay application auditing, and lien waiver management.