6 Common AML Reporting Mistakes That Put Your Dealer License at Risk

Most dealers think AML reporting is just a compliance checkbox, and that's exactly why they're getting it wrong. Anti-Money Laundering (AML) reporting thresholds aren't some buried regulatory detail you hand off to your office manager once a year. They're operational decisions that touch your sales floor, your F&I process, your dealer license, and your legal exposure in ways many principals don't fully appreciate.

The problem is widespread. Dealers misunderstand what triggers reporting requirements, fail to document cash transactions properly, skip the structured transaction red flags entirely, and then act surprised when compliance audits surface gaps. We're not talking about isolated incidents here. This is a pattern that shows up across independent stores and multi-rooftop groups alike.

Let's walk through where dealers commonly stumble and what it actually costs when they do.

1. Confusing the $10,000 Cash Threshold with Actual Reporting Obligations

The biggest misconception is that AML compliance only kicks in at $10,000 in cash. That's the currency transaction reporting (CTR) threshold, sure. But that's not the whole picture, and stopping there is how dealers end up in trouble.

Here's what actually matters: the $10,000 threshold is for FinCEN CTR filings. But the real risk for a dealership is detecting and reporting suspicious activity that suggests money laundering or other financial crimes, regardless of the dollar amount. A customer paying $6,000 in cash for a vehicle with inconsistent story details, multiple attempted structure payments, or no clear legitimate income source? That's reportable as a Suspicious Activity Report (SAR). The dollar amount isn't the gating factor. The suspicious pattern is.

A typical scenario: Say you're looking at a 2019 Honda Civic sale for $12,500. Customer walks in, wants to pay cash, asks if there's any way to split the transaction into two separate deals "for financing purposes." Red flag. That's structuring. It doesn't matter if each transaction is under $10,000. The intent to avoid reporting is what triggers the suspicious activity reporting requirement.

Dealers who miss this distinction often don't file SARs when they should. That's a direct regulatory violation and creates serious liability.

2. Failing to Document the Source of Funds

Documentation is where compliance lives or dies. The FTC's Safeguards Rule requires dealers to implement controls that protect customer information and, by extension, establish clear audit trails on high-risk transactions. Many dealers skip the documentation step entirely, assuming that running a standard credit application covers it. It doesn't.

When a customer pays primarily or entirely in cash, you need to document the stated source of those funds. Is it from a business? Personal savings? A recent inheritance? Loan from a family member? This isn't busywork. This is your defense against both regulatory scrutiny and future liability if that transaction is later flagged by law enforcement.

The gap usually shows up like this: F&I team processes the sale, takes the cash, deposits it. No written note of where the customer said the money came from. Six months later, an audit happens and your RO (repair order or in this case, sales order) has zero documentation linking the customer to the source of funds. You can't prove you exercised reasonable care. That's a compliance failure.

Tools like Dealer1 Solutions that integrate sales, customer data, and transaction documentation in one place help close this gap. Your team documents the source of funds as part of the deal workflow, it stays attached to the customer record, and auditors can actually see the full picture.

3. Ignoring Structuring Patterns (The Real Compliance Killer)

Structuring is the practice of breaking a transaction into smaller amounts to avoid the $10,000 CTR reporting threshold. It's illegal. Period. Customers do it. Dealers who don't catch it are complicit in the eyes of regulators.

The classic structuring scenario involves multiple transactions over a short window. A customer buys a vehicle for $8,000 in cash on Tuesday. Same customer returns Thursday wanting to buy a second vehicle for $7,500 in cash. These might look like separate deals on your books, but structuring rules treat them as parts of a single scheme if the pattern suggests intent to avoid reporting.

What makes this worse is that many dealerships don't have systems flagging these patterns. Actually — scratch that. The better way to say this is that many dealerships have no systematic way to identify when the same customer or related customers are making multiple cash transactions across the same or different locations. If you're running a multi-rooftop operation, this gets exponentially harder without a unified customer and transaction database.

Regulators absolutely focus on structuring. It's a crime, and dealers who facilitate it (even unknowingly) can face civil penalties and potential criminal referrals. That's not a compliance ding. That's dealer license territory.

4. Underestimating Privacy and Data Security in Compliance

The Safeguards Rule updated enforcement in 2023. Dealers now face explicit requirements around data privacy, customer information protection, and disclosure of what data you're collecting and how you're using it.

This connects directly to AML because suspicious activity reports and currency transaction reports contain sensitive customer and financial information. If your systems aren't properly secured, if you're not encrypting customer data in transit and at rest, if you don't have clear policies on who can access what, you're violating the Safeguards Rule. That's a separate FTC enforcement vector on top of AML compliance failures.

Many dealers haven't updated their privacy disclosures to reflect current Safeguards Rule language either. If a customer asks what data you're collecting and why, can your office manager point them to a clear, current disclosure? Most can't.

5. No Formal AML Policy or Training Program

You can't comply with something you haven't documented. FinCEN expects dealers to have a written AML compliance program that includes policies, procedures, designated responsible persons, and ongoing staff training. Many dealerships simply don't have this on file.

What does that look like? A written policy covering how your dealership identifies high-risk customers and transactions. Clear thresholds for when cash payments trigger extra documentation or escalation. Training schedule for sales, F&I, and office staff. Someone assigned as the AML compliance officer (could be the general manager, could be a compliance hire). Annual testing and audits of the program's effectiveness.

The lack of a formal program doesn't just create regulatory risk. It creates operational inconsistency. One sales manager follows a process another doesn't know exists. F&I handles a cash deal differently than the sales team expects. That's where mistakes compound.

6. Miscommunication Between Sales, F&I, and Back Office

Sales closes a deal with a cash customer. F&I processes the paperwork. Back office deposits the money and reconciles inventory. Three teams, three different information flows, zero coordination on whether red flags were noted or documented.

This is operational and compliance at the same time. Sales might notice something odd about the customer's stated income. F&I might hear the customer ask about splitting the deal. Back office has no way to know either of these happened because nothing was flagged in the deal jacket.

A unified transaction management system where all three teams are working from the same deal record, with documented notes and flags visible to everyone who needs them, eliminates this problem. That's exactly the kind of workflow Dealer1 Solutions was built to handle, but the principle applies whether you're using software or a more manual process. The point is integration. One source of truth.

What's Actually at Stake

Regulatory enforcement around AML is increasing. The FTC has actively pursued dealer compliance cases. FinCEN has issued guidance specific to the auto retail industry. State regulatory bodies reviewing dealer license renewals are now asking for AML program documentation.

A compliance failure doesn't just mean a fine (though that's part of it). It means reputational damage, potential dealer license suspension or revocation, customer data breach liability, and operational disruption while regulators investigate and you scramble to fix the gaps.

The fix isn't complicated. Document your process. Train your team. Flag the red flags. Implement a system that lets everyone see what's happening in the deal from start to finish. Keep your privacy disclosures current and your customer data secure.

That's compliance. That's also good business.