Structuring (Smurfing): How to Detect Cash Transactions Designed to Evade Reporting

Structuring is one of the oldest and most enduring money laundering typologies. The mechanics are simple: take a large amount of cash that would trigger a reporting requirement if deposited or transferred in a single transaction, and break it into a series of smaller amounts that individually fall below the threshold. The goal is to move the funds into the financial system without creating a regulator-visible record at the deposit stage.

Despite its simplicity, structuring remains a top AML focus area for FinCEN, the FCA, AUSTRAC, and most major regulators. It is the entry point for cash from a wide range of underlying crimes, drug trafficking, illegal gambling, tax evasion, human smuggling, and unregistered money services, and it generates a recognizable footprint in transaction data.

The Reporting Thresholds That Drive Structuring

United States. Currency Transaction Reports (CTRs) are required for cash transactions over 10,000 in a single day. Structuring is a federal criminal offense under 31 U.S.C. § 5324 regardless of whether the underlying funds are illicit. The intent to evade is the offense.

United Kingdom. There is no equivalent automatic threshold for cash deposits, but unusual cash activity is subject to the Suspicious Activity Report regime under the Proceeds of Crime Act 2002.

Canada. Large cash transaction reports (LCTRs) are required for cash transactions of CAD 10,000 or more, with reporting obligations to FINTRAC.

Australia. Threshold transaction reports are required for cash transactions of AUD 10,000 or more, reported to AUSTRAC.

EU member states. The Sixth AML Directive sets the cash payments threshold at 10,000 euros, and from 2027 the new EU AML Regulation introduces a harmonized cash limit across the bloc.

Classic Structuring Patterns

Multiple small deposits in a single day. The same individual or related individuals make multiple cash deposits at the same branch, different branches, or across ATMs, each below the threshold but adding up to a substantially larger total.

Daily deposits just below the threshold. A pattern of deposits in the 9,000 to 9,900 range, day after day, particularly when the customer's known business does not generate that volume of cash.

Smurfing across multiple individuals. Several individuals, often friends or family of the actual depositor, each make smaller deposits which are subsequently transferred to a single account. This is the typology that gives "smurfing" its name.

Mixed channel structuring. Deposits split between in-branch cash, ATM cash, money orders, and prepaid cards, all below threshold individually, all credited to the same account.

Cash deposits followed by immediate wire transfer. The classic placement-then-layering pattern. Cash enters the account in structured amounts and is wired out shortly after, often to a different jurisdiction.

What Detection Looks Like

Structuring detection lives in transaction monitoring rules, but the rules need to be tuned thoughtfully. The most common rule families:

Sub-threshold velocity rules. Multiple cash deposits below threshold within a defined window (commonly 24 hours, 7 days, and 30 days), totaling above threshold.

Concentration rules. Cash deposits that consistently cluster in a narrow band just below the reporting threshold, particularly when the customer's expected activity does not explain the pattern.

Multi-account aggregation. Cash deposits across linked accounts (joint owners, shared addresses, recurring beneficiaries) that, when aggregated, suggest a single underlying source.

Channel mix rules. Combinations of cash deposits, money orders, and prepaid card loadings into the same destination account, particularly where the timing suggests coordinated placement.

Round-trip rules. Cash deposits followed promptly by outbound transfers of similar value, with little operational use of the funds in between.

Common Investigation Steps

When a structuring alert is opened, the investigator's job is to confirm or rule out evasion intent:

Look at 90 to 180 days of activity. A single sub-threshold deposit means little. A repeated pattern of sub-threshold deposits is the signal.

Compare to expected cash activity. A cash-intensive business (a restaurant, a hair salon, a small retailer) will legitimately deposit cash regularly. The question is whether the volumes and patterns match the business.

Map the destination of the funds. Funds that enter as cash and remain in the account for normal business use look very different from funds that enter as cash and exit as wire transfers within days.

Check for related individuals. If smurfing is suspected, look for shared addresses, joint accounts, recurring transfers between related parties, and patterns in deposit timing across multiple individuals.

Document the conclusion clearly. Whether the conclusion is "consistent with the business" or "inconsistent and suspicious," the rationale should be specific enough that a regulator could reproduce the analysis from the case file.

The Trap of Customer Explanations

Customers who are structuring will often have an explanation. Common explanations include: "I prefer to keep deposits below the reporting threshold to avoid bureaucracy"; "the cashier suggested smaller deposits would be processed faster"; "I split deposits to manage daily cash limits at my business."

None of these explanations are exculpatory. The intent to avoid the reporting threshold is itself the offense in jurisdictions like the United States. A customer who states the intent to stay below the threshold has provided evidence of structuring, regardless of the underlying source of the funds.

This is one of the few areas of AML compliance where the customer's explanation can actively strengthen the case for filing a SAR rather than weakening it.

The Bottom Line

Structuring is a foundational AML typology with a long history of enforcement. Detection is well understood, the rule patterns are mature, and the regulatory expectation is clear. Programs that combine sub-threshold velocity rules, concentration analysis, multi-account aggregation, and disciplined investigation produce reliable detection without excessive noise.

If you want to assess a specific transaction or set of transactions for structuring and other cash-typology indicators, the Red Flag Check transaction assessment covers structuring alongside the broader cash and placement red flag set.