AML Reporting Thresholds: A Compliance Checklist That Actually Works for Dealerships

You're sitting in your office on a Tuesday morning, and your receptionist walks in with a question you've been dreading: "Hey, is there a form I'm supposed to fill out when somebody pays cash for a vehicle?" You pause. You're not entirely sure. And suddenly you're wondering what else you might be missing on the compliance side.

Anti-Money Laundering (AML) reporting isn't the sexiest part of running a dealership, but it's the part that can shut you down if you get it wrong.

What Are AML Reporting Thresholds and Why They Matter to Your Dealership

The Financial Crimes Enforcement Network (FinCEN) sets the rules here, and they're tied to the Bank Secrecy Act. Here's the bottom line: if a customer makes a vehicle purchase (or series of purchases) totaling $10,000 or more in cash within a 12-month period, you're required to file a Currency Transaction Report (CTR) with FinCEN within 15 days. No exceptions. No "I forgot" allowance.

But there's a second threshold that keeps a lot of dealers up at night: the Suspicious Activity Report (SAR). If you suspect someone is intentionally structuring transactions to stay below the $10,000 reporting threshold, or if there's something else about the transaction that smells off, you need to file a SAR within 30 days. This gets filed with FinCEN as well.

The FTC's Safeguards Rule and Standards for Safeguarding Customer Information also apply to dealerships, which means you need to protect customer data and have processes in place to verify identity and prevent fraud. Actually — scratch that. The Safeguards Rule applies if you're a financial institution or involved in financial activities. For dealerships specifically, what matters more is having documented procedures to identify suspicious activity and knowing when you're legally required to report it.

Why does this matter? Because failing to file a CTR or SAR can result in civil penalties up to $100,000 per violation, criminal charges, and yes, loss of your dealer license. The FTC and state regulators don't mess around on this.

The Compliance Checklist That Actually Works

Step 1: Know Your Thresholds Cold

Post this somewhere your team can see it. Better yet, laminate it and put it in the back office next to your computer monitor.

$10,000+ in a single transaction (cash, cashier's checks, money orders, or combination): File a CTR within 15 calendar days.
$10,000+ in multiple related transactions within 12 months: File a CTR for the cumulative amount.
Structured transactions (intentional avoidance of the $10,000 threshold): File a SAR within 30 days, regardless of the dollar amount.
Any suspicious activity (fraud indicators, mismatched ID, false documentation, etc.): File a SAR within 30 days.

Your front desk, your finance manager, your sales team, and your general manager should all understand these numbers. A typical scenario: a customer comes in and buys a 2019 Ford F-150 for $18,000 cash. Your finance manager needs to know immediately that a CTR is being triggered. No guesswork.

Step 2: Document Every Cash Transaction Over $5,000

Don't wait until you hit $10,000 to start paying attention. The moment a customer offers cash, you need to document it.

Create a simple cash transaction log with these fields:

Date of transaction
Customer name and driver's license number
Vehicle description (year, make, model, VIN)
Cash amount received
Form of payment (currency, cashier's check, money order, wire, combination)
Customer signature and printed name
Staff member who processed the transaction (signature)
Notes on anything unusual (customer demeanor, refusal to provide ID, third-party intermediary, etc.)

This log becomes your audit trail. When FinCEN asks to see documentation, you can produce it. And if you ever get audited by your state's dealer licensing board, this log proves you're taking compliance seriously.

Step 3: Train Your Finance Manager on Structuring Red Flags

This is the sneaky threshold. Structuring is when someone intentionally splits transactions to avoid the $10,000 reporting requirement. It's a federal crime, and if you knowingly facilitate it, you can be held liable.

Red flags your finance manager should know:

A customer comes back three times in two weeks, each time buying a vehicle for $8,000 cash, each time with a different name or family member
Someone brings in a third party to "help" with payment and suddenly the deal is split into two smaller transactions
A customer explicitly says something like "I want to keep this under $10,000 to avoid paperwork"
Multiple cash transactions from the same person over a short period that add up to well over $10,000

If you see this pattern, you're looking at a SAR, not a CTR. The distinction matters. A CTR is routine. A SAR is saying you observed suspicious activity.

Step 4: Build a Filing System (Digital, Not Shoebox)

You need a place where you can pull up every CTR and SAR you've filed, the date it was filed, and confirmation that it actually went to FinCEN. A spreadsheet works. Better yet, a system that integrates your transaction data with your compliance tracking. This is exactly the kind of workflow Dealer1 Solutions was built to handle — you document the transaction once, and your compliance checklist auto-flags transactions that meet reporting thresholds, giving you visibility into what needs to be filed and when.

At minimum, your spreadsheet should track:

Transaction date
Customer name and ID
Vehicle and amount
Report type (CTR or SAR)
Date filed with FinCEN
FinCEN confirmation number (you'll get one)
Staff member responsible for filing

Keep this for a minimum of five years. Regulators can ask to see it.

Step 5: Verify Identity Every Single Time

Non-negotiable. For any cash transaction, especially over $5,000, you must verify identity with a government-issued photo ID. Driver's license, passport, military ID. Write down the ID number and expiration date. Make a copy if your state allows it (check your dealer license rules on this).

If someone refuses to provide ID for a high-value cash transaction, you don't do the deal. Period. That's a SAR waiting to happen.

And if the ID doesn't match the person in front of you, or if something feels off, document it. Your notes might be the only thing protecting you in an audit.

Step 6: Know the Privacy and Disclosure Rules

The FTC requires you to disclose how you handle customer information. This ties into AML because you're collecting ID information, address data, and payment details. You need a clear privacy policy that explains what you collect, how you use it, how long you keep it, and who you might share it with (like FinCEN, if required).

When you file a CTR or SAR, you're disclosing customer information to the government. Your privacy policy should state this. Customers don't have to like it, but they need to understand it's happening.

Review your privacy disclosures annually. Make sure they're accurate and that your actual practices match what you've promised.

Step 7: File CTRs and SARs Correctly

You file these with FinCEN through their online system, the Bank Secrecy Act E-Filing System (BSA E-Filing). You'll need to register your dealership, get login credentials, and familiarize yourself with the form fields.

For a CTR, you'll need:

Your dealership's identifying information
Customer name, address, and ID information
Vehicle details and purchase price
Form of payment
Exact amount in U.S. currency

For a SAR, you'll need all of the above plus a detailed narrative explaining why you're filing it. "Suspicious activity observed" won't cut it. You need to explain the specific red flags you saw and why you believe the activity warrants reporting.

And here's the thing: if you file a SAR, you cannot tell the customer you filed it. That's called "tipping off," and it's illegal. You file it quietly and keep it in your records.

Step 8: Audit Your Own Compliance Quarterly

Don't wait for a regulator to catch you. Sit down every three months and review your cash transaction log. Did you file a CTR for that $12,000 cash deal in March? Do you have a SAR on file for the customer who came in four times with cash under the $10,000 threshold? Are there any gaps?

This self-audit serves two purposes. First, it catches your own mistakes before they become problems. Second, it shows regulators (if they ever ask) that you take compliance seriously and have internal controls in place.

Step 9: Document Your Safeguards and Security Measures

Your dealership should have written policies on how you protect customer information. This includes:

Who has access to customer files and payment information
How you store sensitive documents (locked cabinet, password-protected files, etc.)
How long you retain information before destroying it
What you do if there's a data breach or suspected fraud
Employee training on data privacy and AML procedures

These don't have to be 50-page documents. A simple one-page policy for each area works fine. But they need to exist, and your team needs to follow them.

Step 10: Train Your Team Annually (and Document It)

Everyone who touches a cash transaction needs to understand AML reporting thresholds. Your sales team, finance manager, general manager, even your receptionist if she's collecting down payments. One training session per year, minimum. Have people sign a sheet confirming they attended and understood the material.

This training documentation is your legal protection. If someone on your team files a transaction incorrectly, you can show that you provided proper training and they failed to follow it.

The Regulatory Reality: FTC, State Licensing, and Legal Risk

The FTC doesn't directly regulate AML reporting, but your state's dealer licensing board does. And your state attorney general cares about consumer protection and fraud prevention. If your dealership becomes known as a place where cash deals happen without proper documentation, or if you fail to file required reports, you're looking at license suspension or revocation.

One misstep doesn't end your business. But a pattern of non-compliance does. So does willful negligence.

And if law enforcement suspects your dealership is being used for money laundering, they can seize vehicles, freeze assets, and open a criminal investigation into you personally. This isn't theoretical. It happens.

The Bottom Line

AML compliance isn't complicated. It's just methodical. Use this checklist, document everything, train your team, and audit yourself quarterly. You'll stay compliant, protect your dealer license, and avoid the kind of legal risk that keeps dealers awake at night.

Print this checklist. Laminate it. Use it.