AML compliance construction best practices are not optional for general contractors working on federally funded projects. FinCEN filed over $2 billion in construction-related suspicious activity reports in the most recent reporting period. The Corporate Transparency Act now affects roughly 32 million small businesses, including most of your subcontractors. If your compliance program does not account for anti-money laundering obligations, you are exposed, even if you have never thought of your company as a financial institution.

Key Takeaways

FinCEN has flagged over $2 billion in construction-related suspicious activity annually
The Corporate Transparency Act (effective 2024) requires beneficial ownership disclosure for ~32 million small businesses
OFAC maintains a sanctions list with over 13,000 entries; a single unscreened subcontractor can trigger federal penalties
Manual compliance tracking costs the average GC 15-20 hours per week
Top-quartile GCs achieve 95%+ subcontractor compliance rates through systematic pre-award screening
Government contractor whistleblower protections under 41 U.S.C. § 4712 apply to your subs, not just your employees
Davis-Bacon wage obligations on federal projects can overlap with AML recordkeeping requirements
78% of GCs in the SubcontractorAudit 2026 GC Compliance Report had at least one subcontractor with an incomplete beneficial ownership file

Pre-Award Phase Checklist

This is where most AML failures begin. You select a subcontractor before you know who actually controls them.

Beneficial Ownership Verification

Collect a completed Beneficial Ownership Certification form from every new subcontractor
Identify all individuals owning 25% or more of the entity
Document the name, date of birth, address, and ID number for each beneficial owner
Retain records for a minimum of 5 years after project closeout
Re-verify ownership if a subcontractor reports a change in controlling parties mid-project

The Corporate Transparency Act requires entities to disclose this information to FinCEN's database. Your obligation as a GC is to collect and document it independently. You cannot rely on the sub to have filed with FinCEN as confirmation.

OFAC Sanctions Screening

Screen every subcontractor against the OFAC Specially Designated Nationals (SDN) list before contract award
Screen key personnel (owners, officers, project managers) individually, not just the company name
Document the date, database version, and result of each screen
Screen against the Consolidated Sanctions List, not just the SDN list
Set a calendar trigger to re-screen any sub on a contract lasting more than 90 days

OFAC penalties are strict liability. You do not need intent to violate the rules. A single unscreened payment to a sanctioned entity can exceed $1 million per transaction in civil penalties.

Know Your Subcontractor (KYC) Documentation

Obtain a copy of the subcontractor's business license or state registration
Verify the EIN matches IRS records using the TIN matching program
Confirm the physical address is not a mail forwarding service or registered agent address only
Review the sub's references on at least 2 prior projects of similar scope
Check SAM.gov for debarment or suspension status

Use the prevailing wage lookup tool to cross-reference whether the sub has a history of certified payroll submissions on past federal work. A pattern of no prior federal work is not disqualifying, but it changes your due diligence approach.

Pre-Award Financial Red Flags

Watch for these patterns during subcontractor selection:

Subcontractor requests payment in cash or wire transfer only, refusing ACH
Entity is registered in a state with no nexus to the project or the sub's workforce
Subcontractor cannot produce a business bank account statement on request
Pricing is more than 25% below the next lowest bid with no clear explanation
Subcontractor was formed within 90 days of submitting a bid on a large federal project

Any single flag warrants additional documentation. Two or more flags together should trigger a formal review before contract award.

During-Project Phase Checklist

AML compliance does not stop at award. Money laundering schemes often activate once work is underway.

Cash Transaction Reporting

Maintain a log of all cash payments received or made on the project
File IRS Form 8300 for any single cash transaction exceeding $10,000
File Form 8300 for related transactions totaling more than $10,000 within a 12-month period
Notify the payer in writing that you filed a Form 8300 (required by law)
Do not tip off the payer that a Suspicious Activity Report (SAR) is being filed if you file one

The $10,000 threshold is per transaction, but structuring, which means intentionally breaking up transactions to stay below that threshold, is itself a federal crime. Train your project accounting staff on this rule.

Certified Payroll and Davis-Bacon Compliance

On federally funded projects, Davis-Bacon wage requirements create a paper trail that doubles as an AML audit trail. Proper certified payroll records show who worked, how many hours, and what they were paid. That documentation also helps you demonstrate that wage payments went to real workers, not shell entries.

Submit certified payroll weekly using Form WH-347 or an approved equivalent
Verify that subcontractor payroll submissions match their workforce on-site
Flag discrepancies where the number of certified payroll entries does not match the number of workers observed
Retain certified payroll records for 3 years after project completion (federal minimum)

Use the prevailing wage lookup tool to confirm the applicable wage determinations before your subs submit their first certified payroll. Errors that start in week one compound through the life of the project.

Change Order and Payment Scrutiny

Change orders are a known vector for financial manipulation on construction projects.

Review change orders above $50,000 for alignment with actual site conditions
Require subcontractor invoices to itemize labor hours, materials, and markup separately
Cross-check materials invoices against delivery receipts and site inspection logs
Do not approve change orders from a subcontractor who has an unresolved certified payroll discrepancy

Whistleblower Protections During the Project

Under 41 U.S.C. § 4712, employees of government contractors and their subcontractors have whistleblower protections. These are part of government contractor whistleblower compliance training requirements and apply to your entire subcontractor chain.

Post the required whistleblower rights notice in a visible location at the job site
Include whistleblower protection language in all subcontracts on federal projects
Train your project supervisors on retaliation prohibitions before project kickoff
Document any complaint a subcontractor worker raises, even if it seems minor

A whistleblower complaint that surfaces AML-related issues will receive federal attention. You want to have documentation showing your program was functioning before the complaint was filed.

Closeout Phase Checklist

Closeout is when compliance gaps become liability. Federal agencies often audit at the end of a project, not the beginning.

Recordkeeping and Retention

Archive all beneficial ownership documentation for 5 years post-closeout
Retain all Form 8300 filings and supporting cash logs for 5 years
Keep certified payroll records for a minimum of 3 years (Davis-Bacon requirement)
Store OFAC screening records with the date and database version used
Ensure electronic records are stored in a non-editable format with access logging

Final Subcontractor Audit

Before you release final payment, run one last check:

Re-screen all subcontractors against the OFAC SDN list (sanctions lists update daily)
Confirm all required certified payroll submissions are on file and complete
Verify that no subcontractor received aggregate payments that should have triggered unreported Form 8300 filings
Obtain a signed lien waiver and a compliance certification from each subcontractor

Reporting Obligations at Closeout

Determine whether any Suspicious Activity Reports need to be filed for activity identified during the project
If filing a SAR, do so within 30 days of identifying the suspicious activity
Coordinate with legal counsel before filing a SAR on a subcontractor still active on the project

AML Compliance Checklist at a Glance

Phase	Item	Regulatory Basis	Retention Period
Pre-Award	Beneficial ownership form	Corporate Transparency Act	5 years
Pre-Award	OFAC SDN screen	OFAC / 31 CFR Part 598	5 years
Pre-Award	SAM.gov debarment check	FAR 9.405	Duration of project
Pre-Award	EIN verification	IRS / FinCEN	5 years
During	Form 8300 (cash >$10K)	26 U.S.C. § 6050I	5 years
During	Certified payroll (WH-347)	Davis-Bacon Act	3 years
During	Change order documentation	Project contract terms	5 years
Closeout	Final OFAC re-screen	OFAC / 31 CFR Part 598	5 years
Closeout	SAR filing (if needed)	31 U.S.C. § 5318	5 years

Frequently Asked Questions

Does AML compliance apply to small GCs or only large firms? AML obligations under FinCEN, OFAC, and the Corporate Transparency Act apply based on the type of transaction and funding source, not company size. If you receive federal construction funding or work with international subcontractors, AML requirements apply regardless of your annual revenue. The SubcontractorAudit 2026 GC Compliance Report found that firms with under $10 million in annual revenue had higher rates of incomplete beneficial ownership files than larger peers.

What is the penalty for not filing Form 8300 on a cash transaction over $10,000? Failure to file Form 8300 carries civil penalties starting at $250 per violation and up to $50,000 per violation for intentional disregard. Criminal penalties can reach $500,000 and 5 years imprisonment for willful violations. The IRS and FinCEN conduct coordinated audits of construction firms specifically because cash transactions are common in the industry.

How often should we re-screen subcontractors against the OFAC list? OFAC updates its SDN list multiple times per week. For subcontractors on projects lasting more than 90 days, re-screen at least quarterly. For projects with international material suppliers or offshore-owned subcontractors, screen monthly. Document each re-screen with the date and the database version you used.

Do government contractor whistleblower protections apply to our subcontractors' employees? Yes. Under 41 U.S.C. § 4712, whistleblower protections extend to employees of subcontractors on federal contracts, not just the prime contractor's workforce. Government contractor whistleblower compliance training must address this. If a subcontractor worker reports an AML-related concern and you take adverse action against that worker or their employer, you face exposure under the same statute.

What counts as a "beneficial owner" under the Corporate Transparency Act? A beneficial owner is any individual who directly or indirectly owns or controls 25% or more of the company's equity, or who exercises substantial control over the company regardless of ownership percentage. Senior officers and individuals who direct major decisions typically qualify as beneficial owners even with no equity stake. Collect this information for every sub, not just new ones.

How does Davis-Bacon compliance connect to AML recordkeeping? Davis-Bacon certified payroll records document who received wages, in what amounts, for what work. That same documentation is the primary evidence that payments went to real workers rather than being siphoned through a shell subcontractor. Federal auditors increasingly review certified payroll as part of financial integrity audits. Accurate Davis-Bacon compliance, tracked through a tool like the prevailing wage lookup, creates the paper trail that an AML review would look for.

Build a Program That Actually Works

A checklist is only as good as the system behind it. Most GCs are spending 15-20 hours per week on manual compliance tracking that still misses items like OFAC re-screens and stale beneficial ownership files.

SubcontractorAudit automates the screening, tracks your documentation gaps, and flags compliance issues before they become federal problems.

See how it works at SubcontractorAudit.com/demo