The Dealer's Playbook for AML Reporting Thresholds: Compliance Without the Chaos

Why Your Dealership's AML Program Isn't Optional (And What to Do About It)

The first anti-money laundering law in the U.S. came down in 1970, born from a simpler time when tracking cash meant handwritten ledgers and filing cabinets. More than 50 years later, dealerships are still figuring out what those rules actually mean for them.

Here's the uncomfortable truth: many dealership principals and general managers treat AML compliance like a checkbox. You file a form, you move on. But the FTC, FinCEN, and state regulators have been tightening their grip on dealer-level reporting thresholds and verification requirements. One missed threshold, one undisclosed cash deal, and you're facing license suspension, fines, or worse.

This post walks through the practical playbook for getting AML right at your dealership, where the legal risks are real and the operational headaches are avoidable.

The Threshold Triggers Every Dealer Needs to Know

Let's start with the basics, because they matter. The $10,000 currency transaction reporting threshold is the one everybody knows. It's been the headline rule for so long that many dealers think it's the only one.

Actually, scratch that. It's more nuanced than that.

Under the Bank Secrecy Act (which the FTC and FinCEN enforce), dealers are considered "money services businesses" in certain states and situations. That means you're watching for:

Currency transactions over $10,000. A customer walks in with $11,000 in cash to buy a vehicle. You're filing a Currency Transaction Report (CTR) with FinCEN within 15 days. No exceptions.
Suspicious activity reporting. This is where most dealers get fuzzy. If you suspect someone is structuring transactions to avoid the $10,000 threshold (buying a $6,000 car on Monday, then a $5,500 car on Friday with different paperwork), that's a Suspicious Activity Report (SAR). The threshold is $5,000 in suspicious transactions, and the window is 30 days.
State-specific thresholds. Some states have their own reporting floors. New Jersey, for example, requires dealers to report cash transactions over $5,000 to the state, not just the federal government. If you're multi-state, this gets complicated fast.
Vehicle title and disclosure requirements. Dealers must verify identity and record personally identifiable information before the sale closes. This isn't just an AML thing, it's tied to your dealer license and state motor vehicle regulations.

The point: know your state's rules before you assume federal thresholds cover you.

Identity Verification and the Privacy Balancing Act

Here's where compliance collides with customer experience.

AML rules require you to verify a customer's identity before accepting large cash payments. That means government-issued ID, address confirmation, and documentation. But customers hate this. They walk in wanting to buy a car, not fill out a compliance questionnaire.

The trick is building verification into your process without making it feel like a bank interrogation.

A typical scenario: a customer wants to buy a $7,500 used Honda Civic with $7,500 in cash. You're not at the $10,000 threshold, so some dealers skip the full verification. Mistake. If that customer comes back three weeks later and buys another vehicle with $3,000 more cash, you now have potential structuring. You should have documented the first transaction fully, tied it to an identity, and flagged the pattern if it emerged.

Best practice is to verify everyone, regardless of payment amount. It sounds aggressive, but it protects you. Document the customer's name, address, date of birth, and a copy of their ID. Keep it in your compliance file. If the FTC or a state regulator ever comes calling, you've got proof you were paying attention.

Privacy concerns are legitimate. The Safeguards Rule (which applies to dealers under FTC jurisdiction) requires you to protect customer information and have a written privacy policy. That policy should explain why you're collecting ID information and how it's stored. Don't hide it. Be transparent. Most customers understand that dealerships have to follow rules.

And honestly, if a customer refuses to provide ID, you can refuse the sale. That's your right and your protection.

The Structuring Problem and How to Spot It

Structuring is the sneaky cousin of the $10,000 rule.

It's illegal to deliberately break up transactions to stay under reporting thresholds. A customer who buys four vehicles in two weeks, each just under $5,000 in cash, with different family members as the buyers? That's structuring. It's a federal crime, and dealers can face liability for facilitating it.

The hard part is that structuring isn't always obvious. Some customers legitimately buy multiple vehicles over time. But if you see a pattern, you need to stop and think.

Red flags worth watching:

Same customer (or obviously related customers) making multiple large cash purchases in a short window.
Transactions that consistently fall just under your state's reporting threshold.
Customers who are vague about who the vehicle is actually for.
Purchases that don't match the customer's profile (a utility worker suddenly buying three luxury SUVs in cash).
Requests to split invoices or use different paperwork to make deals look separate.

If you see these patterns, file a SAR. Yes, there's paperwork involved. But it takes maybe 30 minutes, and it moves liability from you to the regulators. You've documented your suspicion and acted on it. That's what they want to see.

Building a Compliance Workflow That Actually Works

Here's the operational piece most dealership GMs care about: how do you build this into your day-to-day process without creating chaos?

The answer is systems and checklists. You can't rely on your finance manager remembering to file a CTR or your sales team spotting structuring patterns. You need a process.

A solid playbook looks like this:

Document everything at the point of sale. When a customer completes an application, capture name, address, date of birth, ID information, and payment method. Don't guess. Write it down.
Flag transactions over your state's thresholds. If it's cash over $5,000, $10,000, or whatever your state requires, it gets a flag. It doesn't get processed until someone verifies it.
Check for patterns in your inventory system. If you're tracking sales by customer and payment method (which you should be), you can spot repeat cash buyers. This is exactly the kind of workflow tools like Dealer1 Solutions were built to handle, giving you a single view of every transaction and customer profile so patterns don't slip through the cracks.
File CTRs and SARs on schedule. Use FinCEN's online system or work with a filing service. Don't let these pile up. Timeliness matters.
Keep a compliance file. Every CTR filed, every SAR filed, every identity verification document. Store them securely (digital is fine, but password-protected). If an audit happens, you're ready.
Train your team annually. Your sales staff, finance team, and managers need to understand why this matters. It's not bureaucratic red tape. It's legal protection for the dealership and them personally.

The goal is to make compliance automatic, not an afterthought.

The Real Cost of Getting It Wrong

Let's talk about what actually happens when a dealership misses AML compliance.

In 2022, a multi-state dealership group was fined over $1.2 million for AML violations. They'd missed CTR filings on multiple large cash transactions and hadn't documented customer identity information. The FTC found they'd essentially ignored the rules for years.

The penalties included the fine, legal fees, remediation costs, and damage to their reputation. But the real hit was operational: regulators can suspend your dealer license pending corrective action. You can't sell cars with a suspended license. That's not a $1.2 million problem anymore. That's an existential problem.

State regulators take dealer license compliance seriously. If the FTC or FinCEN refer your dealership to your state motor vehicle commission for AML violations, that agency views it as a character and fitness issue. Your license renewal could be denied. You could lose your business.

It's not theoretical. It happens.

The Safeguards Rule and Privacy Overlap

Here's where AML compliance intersects with the FTC's Safeguards Rule, and it matters.

The Safeguards Rule requires you to protect customer information and have policies in place to do so. When you're collecting ID information for AML purposes, you're holding sensitive data. That data needs to be encrypted, password-protected, and accessible only to people who need it. If you're storing scanned ID copies on a shared drive that half your dealership can access, you're violating Safeguards Rule requirements.

This isn't separate from AML. It's part of the same compliance ecosystem. Build your identity verification process with data security in mind from day one.

Multi-State Dealers: The Complexity Multiplier

Running dealerships in multiple states means you're living under multiple AML frameworks.

Texas thresholds differ from New York thresholds. California has its own privacy requirements on top of federal rules. A sale that's fully compliant in one state might be under-documented in another.

The safest approach for multi-state operations is to use the strictest standard across all locations. If your most demanding state requires $5,000 cash transaction reporting, do that at all your stores. It's redundant in some places, sure. But it's cheaper than defending a compliance violation in the one state where you cut corners.

Documentation and training need to be standardized too. One playbook, one process, rolled out across all locations.

Your Compliance Checklist

Here's what to do this week:

Research your state's specific AML thresholds and reporting requirements. Don't assume federal rules are enough.
Review your current cash transaction process. Are you documenting identity? Are you filing CTRs on time?
Audit your last 12 months of sales for structuring patterns. If you find any, consider filing late SARs now.
Create a written compliance policy. Include how you verify identity, how you file CTRs and SARs, how you store customer information, and who's responsible for each step.
Train your team. Make sure finance, sales, and management understand the rules and the consequences.
If you're multi-state, standardize your process across all locations.

AML compliance isn't fun. It's not a revenue driver. But it's non-negotiable. Your dealer license depends on it, your reputation depends on it, and the regulators are paying attention.

Get ahead of it now, and you'll never have to worry about it later.