Home › AML Case Studies › AML Case Scenarios & SAR Examples
AML Case Scenarios & SAR/STR Narrative Examples – Practical Guide
AML analysts, investigators, and financial crime teams deal with thousands of alerts. But very few know how to break down cases or write clean, high-quality SAR/STR narratives.
This guide provides simple, real-world AML case scenarios and beginner-friendly SAR examples commonly used across banks, fintech firms, and global institutions.
Note: These examples are educational and simplified for training purposes. Do not use real customer data. Always follow your institution’s AML policy.
Case Scenario 1 – Sudden High-Value Incoming Transfers (Layering Risk)
A personal account that was dormant for months suddenly receives three international transfers totaling USD 95,000 from unrelated offshore companies.
Red Flags:- Dormant → suddenly active
- Offshore companies with no relation to customer profile
- No declared business activity
- Immediate onward transfers
On 12 January 2025, three incoming international wire transfers totaling USD 95,000 were received from offshore entities
located in high-risk jurisdictions. The customer is a salaried individual with no declared business activity or
expected international connections.
Immediately after receipt, funds were transferred to multiple external accounts within 48 hours.
Due to inconsistent activity, lack of economic purpose, and high-risk counterparties, the activity is considered
suspicious and is being reported for further review.
Case Scenario 2 – Structuring / Smurfing Pattern
Customer deposits multiple cash amounts between 9,500–9,900 every week, always staying below the reporting threshold.
Red Flags:- Repeated just-below-threshold cash deposits
- Pattern designed to avoid reporting
- No clear source of cash income
Customer conducted 11 cash deposits between USD 9,500–9,900 from 02 January to 20 January 2025.
The pattern indicates an attempt to avoid CTR reporting.
Customer profile does not justify high cash turnover, and no supporting documents were provided upon inquiry.
Activity is consistent with structuring/smurfing and is escalated as suspicious.
Case Scenario 3 – Possible Money Mule Activity
A 22-year-old student receives multiple incoming payments from unrelated individuals, followed by quick ATM withdrawals.
Red Flags:- No legitimate reason to receive third-party transfers
- Immediate cash withdrawals
- Pattern typical of mule accounts
From 05 February to 12 February 2025, customer received 14 unrelated third-party transfers totaling USD 18,400.
All funds were withdrawn in cash within 24–48 hours.
Customer is a full-time student with no declared income source and could not explain the activity when contacted.
Activity is consistent with potential money mule behavior and is classified as suspicious.
Case Scenario 4 – High-Risk Corporate with Complex Ownership
A newly onboarded corporate customer routes large funds through multiple offshore holding companies with nominee directors.
Red Flags:- Layered offshore holding structure
- Nominee directors
- No clear beneficial ownership transparency
- High-value, rapid movements
Newly onboarded corporate entity received USD 420,000 through multiple offshore entities with nominee directors.
Ownership structure lacks transparency, and customer was unable to provide acceptable SoW/SoF documentation.
Fund movement shows circular transactions between related entities, commonly associated with layering.
Activity presents significant AML risk and is being escalated.
Frequently Asked Questions (FAQ)
How long should a SAR narrative be?
Ideally 2–5 paragraphs. Short, factual, and clear. Avoid opinions and speculation.
What makes a SAR “high quality”?
- Clear timeline
- Facts only — no assumptions
- Customer profile summary
- Specific transactions highlighted
- Explained why the activity is suspicious
Are these case scenarios realistic?
Yes — simplified versions of common patterns seen globally across banks and fintech institutions.
Want Real AML Case Studies & SAR Training?
Learn AML investigations, SAR writing, red flags, transaction monitoring and real-world scenarios inside the G-CAMO, and G-FCCI certifications — trusted across 180+ countries.
Explore AML Certifications →Visit the KYC Knowledge Hub
One central hub with 50+ KYC & AML guides, case studies, career paths, and interview resources.
50+
Guides & Resources
100K+
Professionals Trained
180+
Countries
KYC & CDD Basics
- KYC lifecycle & fundamentals
- CDD vs EDD, SoF vs SoW
Sanctions & AML
- Sanctions, PEP & adverse media
- AML risks & red flags
Careers & Interviews
- Career paths & salaries
- Full KYC/AML Q&A banks