Money Laundering Red Flags: A Guide for Seven Countries

The warning signs that regulators in Panama, Mexico, Colombia, Guatemala, the Dominican Republic, Venezuela and Ecuador share, and how each country names the report and who receives it.

Talk to us on WhatsApp See every service

A red flag is not proof: it is a reason to look closer, document what you found and, if the suspicion holds, report it to the financial intelligence unit of your country.

Each law names the offence its own way: capital laundering (blanqueo de capitales) in Panama, capital legitimation (legitimación de capitales) in Venezuela, transactions with resources of illicit origin in Mexico, laundering of money or other assets in Guatemala, and asset laundering (lavado de activos) in Colombia, the Dominican Republic and Ecuador.

The Red Flags Regulators Share

Each one appears in the FATF standard or in the official guidance of at least one regulator of the region.

The customer

Reluctance to provide identification, or identification that is inconsistent.
Refusal to explain the origin or destination of the funds.
A politically exposed person who avoids completing the due diligence.
Negative news linking the customer to laundering, drug trafficking, terrorism or corruption.
Someone who acts on another's instructions, or who presses for deadlines with no reason.

Payments and cash

Cash in amounts or with a frequency unusual for the service.
Split or structured payments.
Payments received from unknown or unrelated third parties.
A change of payment method at the last minute.
Payment in virtual assets that preserves anonymity.

Companies and beneficial owners

An ownership structure that is unusual or excessively complex.
Nominee shareholders or bearer shares.
Shell, front or inactive companies with large operations.
Legal persons with no identified beneficial owner, or offshore entities.
Trusts or arrangements that separate the legal owner from the beneficial owner.

Operations, countries and lists

Operations that do not match the customer's economic profile or declared activity.
Complex or structured transactions with no apparent economic reason.
Assets placed in the name of third parties.
Countries subject to sanctions, embargoes or similar measures.
A customer or beneficial owner who appears on risk or control lists.

How Each Country Names the Report

Country	Report	Received by	Deadline
Panama	Suspicious operation report (ROS)	UAF	Immediately, from detection
Mexico	24-hour notice (Aviso) of a vulnerable activity; there is no ROS	UIF, through the SAT	Within 24 hours of the suspicion, even if the operation did not take place; sending waits for the official formats
Colombia	Suspicious operation report (ROS), through SIREL	UIAF	Immediately
Guatemala	Suspicious transaction report (RTS)	IVE, of the Superintendency of Banks	Promptly; the procedure and terms will be set by the regulation of Decree 15-2026
Dominican Republic	Suspicious operation report (ROS), through goAML	UAF	Within five business days of the operation, carried out or attempted
Venezuela	Suspicious activity report (RAS)	UNIF	Expeditiously, as the law says; the UNIF's instructions for each sector specify the term
Ecuador	Suspicious operation report (ROS)	UAFE	Within five days of learning of the operation, whatever the amount

In all seven, the rules forbid telling the customer, or anyone else, that a report was filed or that an operation is being examined.

What to Do When a Red Flag Appears

Analyse it against what you know of the customer: their activity, their income, the purpose of the relationship and their risk level.
Record the analysis and its conclusion in the customer's file, with the date and who made it, also when there is nothing to report.
Apply enhanced due diligence when the risk calls for it: origin of the funds, beneficial owner, senior management approval.
If the suspicion holds, file the report your country asks for, with the unit and within the term of the table above.
Say nothing to the customer about the report or the analysis.

Red Flags With a Trail, in COX

List and PEP screening with a certificate, adverse media for the negative news, beneficial owners and the ownership chain in the file, a risk matrix that weighs country, activity and payment method, and every analysis kept with its date and author. The platform speaks the words of each country: ROS in Panama, RAS in Venezuela, Avisos in Mexico.

See every service

Frequently Asked Questions

No. It obliges you to analyse the operation and document what you found. The report is filed when, after that analysis, the suspicion holds.

Not for vulnerable activities. Under the LFPIORPI a suspicion is reported with a 24-hour notice (Aviso) to the UIF through the SAT, even if the operation did not take place or does not reach the threshold.

No, in any of the seven countries. The rules of each one forbid revealing that a report was sent or that an operation is being examined, and in the Dominican Republic revealing it is also a crime.

In the guidance of your regulator and in your own prevention manual, which should add the ones of your business. For Panama, COX has a guide with the red flags the SSNF presents to professionals and to the mixed sector.

This guide is for informational purposes only and does not constitute legal advice. Deadlines and procedures change: confirm the ones that apply to you in your country's law, with your regulator or with a local adviser.

Detect It, Document It, Report It

Each red flag analysed and recorded in the customer's file, in the words of your country.

Your country:

Panama Mexico Colombia Guatemala Dominican Republic Venezuela Ecuador

Related guides:

SSNF red flags Due diligence and KYC What a PEP is What a compliance officer does