Money Laundering Stages Explained

Money laundering is the process criminals use to disguise the origins of illegally obtained money so it can be spent, saved, invested or moved without raising suspicion. In the UK, it matters far beyond banks. Accountants, legal teams, estate agents, lenders, crypto firms, retailers and many other businesses can all be targeted because criminals need everyday services to ‘clean’ funds.

Understanding how money laundering typically works in practice helps staff spot risk earlier, ask better questions and protect both customers and the business. It also supports a risk-based approach under the UK’s anti-money laundering (AML) regime, which expects organisations to understand risk, record decisions and escalate concerns.

This guide explains the classic three stages of money laundering – placement, layering and integration – using plain English, real-world examples and practical warning signs that show up at each step. It also explores how ‘source of funds’ checks may differ depending on the stage of the laundering process, what good internal escalation to a Money Laundering Reporting Officer ( MLRO) looks like, and the basics of Suspicious Activity Report (SAR) reporting in the UK.

If you want to cross-check official guidance while reading, useful starting points include the Money Laundering Regulations 2017, the JMLSG guidance and the National Crime Agency overview of SARs.

What Are Money Laundering Stages?

Money laundering stages describe the journey from ‘dirty’ money to ‘apparently legitimate’ money. The classic model has three stages:

• Placement – Getting illegal funds into the financial system or into a spendable form.
• Layering – Moving funds around to break the trail and make it hard to trace.
• Integration – Bringing funds back into the economy as assets or income that looks lawful.

Criminals do not always follow the stages neatly. Some skip a stage, repeat stages or blend them together. For example, a fraudster who steals money through online banking may not need much ‘placement’ because the funds start as bank transfers. By contrast, a criminal group with large amounts of cash from drug dealing often spends serious effort on placement.

A useful way to think about the stages is to focus on what the criminal is trying to achieve at that moment:

• In placement, they are trying to reduce the risk of being caught with cash or identifiable proceeds.
• In layering, they are trying to confuse anyone who follows the money.
• In integration, they are trying to enjoy the value without explaining where it came from.

For UK businesses, the big takeaway is that different stages produce different clues. If you know what placement looks like, you will ask different questions than you would if you think you are seeing integration through property purchases or ‘investments’.

Placement Stage Explained

Placement is the moment illicit funds first enter the legitimate economy or financial system. It is often the riskiest stage for criminals because it is closest to the original crime and the funds are easiest to link to illegal activity.

Placement is most obvious when the proceeds are cash, but it can also involve items like gift cards, refunds or goods that can be resold.

Common placement examples in the UK include:

• Breaking up a large amount of cash into smaller deposits across branches or ATMs.
• Using cash-intensive businesses to mix dirty cash with genuine takings.
• Buying high-value goods (e.g. electronics) with cash and returning them for refunds.
• Paying off loans early using cash-like methods or unusual third-party payments.
• Using ‘money mules’ to receive transfers, then pass them on quickly.

Property and legal services can see placement in slightly different ways. You might not see the original cash deposit, but you may see a customer who insists on paying a deposit from an unfamiliar third party, or who cannot explain how they built up savings despite limited income.

A simple staff habit helps at this stage: ask “How did the money get from the real world into a form that can be used here?” If the story is vague, changes often or relies on multiple unexplained steps, you may be looking at early laundering activity.

Layering Stage: Common Methods

Layering is about distance and confusion. The criminal wants to make tracing the money difficult by creating multiple steps, multiple jurisdictions and multiple reasons for transfers. Each layer adds time, paperwork and uncertainty for anyone investigating.

Layering methods tend to look like ‘busy money’ – lots of movement, not much meaning.

Common layering methods include:

• Rapid transfers between accounts in different names, sometimes with identical amounts.
• Splitting funds into many smaller payments and then recombining them later.
• Moving value through multiple countries with no clear business reason.
• Using shell companies, trusts or nominees to hide beneficial ownership.
• Using invoice payments, loans or ‘consultancy fees’ to create a story around transfers.
• Using cryptoasset swaps, mixers or chains of wallets to blur origins.

Layering can also show up in everyday contexts. For example, a retailer might see repeated purchases and returns, or a fintech might see frequent inbound transfers followed by quick outbound transfers to unrelated parties.

When staff see layering indicators, it helps to focus on purpose and relationships:

• Do we understand why the money is moving?
• Do we understand the link between the parties?
• Does the pattern match the customer’s stated activity?

If the answer is ‘not really’, you do not need to jump to conclusions. However, you do need to slow down and ask for an explanation that matches the evidence.

Integration Stage Explained 

Integration is when laundered money re-enters the economy in a way that looks legitimate. At this point, the criminal wants to be able to spend or invest without suspicion, and ideally to show paperwork that makes the money look ‘earned’.

Integration often looks like normal financial life:

• Buying property and then selling it later.
• Starting or buying a business.
• Investing in portfolios or lending money as an ‘investor’.
• Paying dividends or salaries from a company that has been used to clean funds.
• Using cleaned funds to fund lifestyle spending that seems ‘supported’ by income.

For professionals, integration is tricky because the activity may look like a standard client matter. The risk sits in the backstory. If the funds are already layered, the customer may present a neat bundle of documents that appear plausible on the surface.

This is where ‘does it make sense?’ becomes your best tool. Integration red flags often show up as an economic mismatch. The asset purchase, investment or repayment is real, but it does not fit the customer’s known situation, or it relies on complex structures that add no business value.

If you work in high-value sectors, build muscle memory around the question: “If I met this person socially, would their story of how they can afford this feel coherent and evidence-backed?”

Placement vs Layering vs Integration

The three stages are easier to understand when you compare them side-by-side. A practical way is to compare what you see, what you ask and what evidence should exist.

Placement often involves:

• Cash, cash equivalents or unusual ‘first entry’ steps.
• Urgency, discomfort with questions and attempts to avoid checks.
• Evidence that should explain immediate origins, such as wages, takings, sale proceeds or savings.

Layering often involves:

• Complex movement of funds, multiple accounts, multiple parties and rapid changes.
• Explanations that sound like ‘finance theatre’ – lots of jargon, little clarity.
• Evidence that should show consistent links between parties and legitimate commercial rationale.

Integration often involves:

• Asset purchases, investment stories, business income or ‘clean’ funds arriving from reputable-looking sources.
• Well-prepared documents that still do not quite match the customer’s profile.
• Evidence that should connect wealth creation over time to the current activity.

A small but useful training exercise is to take a suspicious case and ask the team: “Which stage are we most likely seeing here?” The stage you choose changes your next step. If you think it is placement, you will focus on immediate origin and cash behaviour. If you think it is integration, you will focus on the overall wealth story and whether it is credible.

Money Laundering Cycle: Real Examples

Real laundering often blends the stages. Below are several realistic patterns that show how the cycle can play out, and what a UK business might see.

Example 1: Cash from crime into a ‘normal’ purchase

1. Placement: Cash is fed into a cash-intensive business, mixed with real takings and banked as ‘sales’.
2. Layering: Business money is transferred to a second company as ‘consulting’, then abroad as ‘supplier payments’.
3. Integration: Funds return as a director’s loan repayment, then are used to buy a vehicle or property.

What you might see:

• Unusual business banking patterns.
• Payments that do not match the business’s stated activity.
• Director’s loans or capital injections that appear suddenly.

Example 2: Fraud proceeds through mule accounts

1. Placement: Fraudulently obtained transfers hit mule accounts rather than the criminal’s main account.
2. Layering: Mules move funds to multiple accounts and payment platforms, sometimes across borders.
3. Integration: The criminal uses the funds to buy goods, invest in crypto or pay into a business.

What you might see:

• New customers receiving large incoming transfers with no clear reason.
• Immediate outbound transfers to unrelated third parties.
• Customers unable to explain why they are receiving funds.

Example 3: Cryptoasset laundering pattern

1. Placement: Cash is converted into crypto via peer-to-peer trades, vouchers or exchange accounts.
2. Layering: Crypto is moved through multiple wallets, swapped across assets and sometimes mixed.
3. Integration: Crypto is cashed out to fiat, then used as ‘investment proceeds’ for a purchase.

What you might see:

• Customers who want to fund a transaction after a recent crypto cash-out.
• Evidence gaps between wallet activity and bank receipts.
• Explanations that stay vague about platforms, counterparties or timing.

Example 4: Property as an integration tool

1. Placement: Criminal proceeds enter accounts via structured deposits or business takings.
2. Layering: Funds are routed through companies and offshore structures.
3. Integration: A property is bought, rented, then sold, producing apparently legitimate gains.

What you might see:

• Unusual funding routes into the conveyancing matter.
• Complex ownership structures for simple purchases.
• Resistance to explaining beneficial ownership or source of funds.

These examples show why one red flag is rarely enough. The risk becomes clearer when you see a chain: money appears, it moves in odd ways, and it ends up in an asset or ‘income’ that the person can enjoy.

Common Laundering Methods in the UK

The UK’s economy and financial system create opportunities that criminals exploit. Methods change over time, yet many rely on the same human weaknesses: urgency, complexity and reluctance to ask questions.

Common methods include:

• Cash laundering through hospitality, car washes and other cash-heavy businesses.
• Use of mule accounts and payment platforms to move fraudulent proceeds quickly.
• Abuse of company formation, shell entities and nominee directors to hide owners.
• Trade-based laundering using manipulated invoices, false shipments or over and under invoicing.
• Property purchases to store value and create a respectable asset trail.
• Professional enablers who knowingly or unknowingly provide services that add credibility.
• Cryptoasset movement to add speed and cross-border reach, especially where monitoring is weaker.
• High-value goods, including luxury items, vehicles and jewellery, to convert funds into portable value.

A key point for staff is that criminals prefer ‘normal’ channels. They do not want to stand out. That is why controls must be consistent. When staff apply checks only to people who look suspicious, criminals adapt. When checks are applied fairly and routinely, criminals find it harder to exploit your business.

Cash Deposits and Structuring Signs

Cash and structuring are closely linked to placement. Structuring, sometimes called ‘smurfing’, involves breaking up cash or transactions into smaller amounts to avoid attention and thresholds.

In practice, structuring signs include:

• Many cash deposits just below internal review thresholds.
• Deposits made at different locations in a short period.
• Deposits made by different people on behalf of the same customer.
• Sudden changes in cash volume that do not match the business story.
• Customers who ask about limits and then adjust their behaviour to sit just under them.

Cash-heavy businesses can also show signs through their records:

• Sales volumes that seem too high for the location or footfall.
• Refunds that are higher than expected.
• Frequent changes in banking patterns, such as banking more often in smaller amounts.

When you see these patterns, focus on the basics:

• Why is this much cash being generated?
• What is the underlying activity?
• Does it match what we know about the customer and their sector?

You can often resolve genuine cases with a calm request for supporting evidence, such as till records, contracts or business accounts. If the customer cannot provide anything coherent, the concern increases.

Trade-Based Laundering Stage Examples

Trade-based money laundering uses trade flows, invoices and shipping to move value. It can be used at layering and integration stages because it creates plausible paperwork.

Here are some stage-based examples.

Placement through trade activity

A cash-heavy business is used to purchase goods for export. The purchase is funded with mixed cash, then justified as ‘inventory spend’.

Layering through invoices

Fake or inflated invoices are used to move money between companies and countries, often described as ‘consultancy’, ‘marketing’ or ‘components’.

Integration through ‘legitimate’ profits

A business shows apparently normal revenue and profits, allowing owners to extract funds as dividends, salaries or loan repayments.

Warning signs often involve mismatches:

• The goods do not match the company’s stated business.
• The pricing is unusual with no credible explanation.
• Shipping routes are complicated for no clear reason.
• Payments are made by third parties not named on the paperwork.

Trade can be complex, so staff do not need to become logistics experts. Instead, train staff to look for coherence. A legitimate trade story should connect the parties, the goods, the route and the payment terms in a way that makes sense.

Property Laundering: How It Works

Property is attractive because it can absorb large amounts of money and provide a respectable explanation for wealth. It can play a role at integration, yet you can also see placement and layering elements in the funding routes.

Typical property laundering patterns include:

• Using layered funds to purchase property via companies, trusts or overseas structures.
• Paying deposits from third parties or multiple accounts, then asking for refunds to different accounts.
• Overpaying on completion and requesting the surplus back.
• Rapid flipping, where a property is bought and sold quickly without an obvious reason.
• Renovation and development narratives used to justify cash injections.

From a professional services perspective, the risk often sits in the funding chain and the ownership story. Property transactions generate lots of documents, which can give a false sense of comfort. The question is not “do we have documents?”, it is “do the documents tell one consistent story?”.

Practical steps that help:

• Confirm beneficial ownership early, using sources like Companies House for UK entities.
• Ask clear source of funds questions at the instruction stage, not the day before completion.
• Treat last-minute changes in funding route as a reason to pause and reassess.

Crypto Laundering: Typical Patterns

Cryptoasset laundering is not one thing. It includes many techniques, some simple and some technical. However, the patterns that show up in day-to-day business often have a familiar theme: the customer cannot, or will not, provide a clear chain of funds.

Common patterns include:

• Cash to crypto to fiat – Using crypto as a bridge to create distance between cash and the eventual purchase.
• Multiple wallet hops – Moving assets through many wallets to frustrate tracing.
• Asset swapping – Repeatedly swapping between tokens to make activity harder to follow.
• Use of high-risk services – Including mixers or privacy tools, where the intent can be to obscure provenance.
• Rapid cash-outs – Large fiat receipts shortly before a high-value purchase, with limited explanation.

A practical tip for non-crypto firms is to focus on the ‘fiat landing point’. If the customer says, “I made money in crypto”, you still need to see how that value became spendable funds in an account they control. Exchange statements and bank statements should align on dates, amounts and ownership.

If the evidence is partial, heavily cropped or contradictory, treat that as a red flag. It may be incompetence, but it may also be deliberate obfuscation.

Red Flags at Each Stage

Red flags become easier to manage when you attach them to the stage you think you are seeing. Below are practical stage-based indicators that staff can learn and apply.

Placement red flags

• Unexplained cash deposits or cash-like funding routes.
• Reluctance to explain how funds were obtained.
• Multiple small deposits, especially across locations or by different people.
• A new customer who wants to carry out high-value activity immediately.
• Refund requests to different accounts or third parties.

Layering red flags

• High volumes of transfers with unclear purpose.
• Multiple intermediaries with no clear link to the underlying deal.
• Funds moving through multiple jurisdictions without commercial logic.
• Complex ownership structures that do not fit the transaction.
• Payments described as ‘loans’ or ‘consultancy’ with thin documentation.

Integration red flags

• High-value purchases inconsistent with customer profile.
• Sudden ‘investment proceeds’ or ‘business profits’ with weak evidence.
• Use of property, businesses or luxury assets to store value.
• Customers seeking respectability through professional services while resisting transparency.
• Structures that appear designed to conceal beneficial ownership.

Across all stages, one red flag matters most: inconsistency. If the story changes, the documents do not line up, or the customer’s behaviour becomes evasive, treat that as a strong signal to escalate.

Source of Funds Checks by Stage

Source of funds checks work best when you tailor them to the laundering stage you are likely dealing with. In UK guidance, ‘source of funds’ refers to the origins of the money used in a particular transaction, while ‘source of wealth’ refers to the customer’s overall wealth and how it was accumulated over time. You can read a clear definition in the HMRC Economic Crime Supervision Handbook.

Placement-focused source of funds checks

At placement, the core question is: “Where did this money come from right before it arrived here?” Useful evidence often includes:

• Recent bank statements showing the build-up of funds.
• Payslips and employment evidence for salary savings.
• Business accounts and sales records for genuine takings.
• Sale agreements and completion statements for asset sales.
• Gift letters and donor evidence where funds are gifted.

What you are looking for is a clean chain, not a pile of documents. The chain should show origin, movement and control.

Layering-focused source of funds checks

At layering, the money may have moved several times. Your focus becomes:

• Why did it move this way?
• Who controlled it at each step?
• Does the explanation match dates and amounts?

Evidence might include:

• Contracts that justify payments between parties.
• Invoices with clear scope, not vague labels.
• Corporate structure documents showing ownership and control.
• Statements from relevant accounts showing the path, not just the final balance.

Integration-focused source of funds checks

At integration, funds may arrive from apparently reputable sources. The question becomes:

• Is the explanation for the ‘clean’ funds credible?
• Does it align with the customer’s profile and source of wealth?

Evidence often includes:

• Investment statements paired with proof of purchase and sale.
• Business financials that show genuine revenue generation.
• Loan agreements with evidence of lender legitimacy and capacity.
• Property sale proceeds paired with evidence of original purchase funding.

A practical rule: when the stage moves towards integration, your checks often need to include more source of wealth context, especially if the customer’s profile does not match the activity.

When to Escalate to the MLRO

Escalation is not a punishment for the customer. It is a safety mechanism for staff and the business. The aim is to ensure concerns are reviewed by the nominated officer or MLRO, decisions are documented and legal obligations are considered.

Escalate when:

• You cannot reconcile the customer’s explanation with evidence.
• The customer refuses to provide basic information or tries to rush you past controls.
• You see repeated inconsistencies across documents, statements and communications.
• The transaction involves high-risk indicators such as complex ownership, unusual third-party funding or unexplained cross-border routing.
• You suspect funds are criminal property or linked to fraud, corruption or sanctions evasion.

When escalating, quality matters more than length. A strong internal report to the MLRO includes:

• A clear summary of what happened and why it concerns you.
• The specific red flags observed, not general feelings.
• What questions were asked and what answers were given.
• What documents were reviewed and what did not align.
• Any time pressure or upcoming transaction deadlines.

Also record what you did not do. If you chose not to ask a question because it might risk tipping off, note that for the MLRO. Professional judgement often sits in these small choices.

For legal and professional services, it is also important to understand ‘tipping off’ risk once suspicion exists and especially once a SAR is made. The Law Society guidance on tipping off is a helpful explainer for how to manage client interactions carefully.

SAR Reporting Basics

A Suspicious Activity Report, or SAR, is a report made to the UK Financial Intelligence Unit within the National Crime Agency. SARs alert law enforcement to potential money laundering or terrorist financing and are a key part of the UK’s intelligence picture. The NCA summarises this clearly on its SARs information page.

For many staff, SAR reporting feels intimidating. It helps to break it into practical ideas.

1. Internal reporting comes first
   In most regulated firms, staff report suspicions internally to the MLRO or nominated officer. The MLRO then decides whether an external SAR is required, and if so, submits it. This protects staff and ensures consistency.
2. SARs are about suspicion, not proof
   You do not need to prove laundering. The threshold is knowledge or suspicion. The practical skill is to describe the facts and why they lead to suspicion, without speculation.
3. How SARs are submitted in practice
   SARs are submitted through the NCA’s SAR Portal. The older SAR Online system has been permanently revoked for reporting, so firms should ensure they are registered and ready on the Portal. 
4. Sometimes you may need a defence request (DAML)
   If you think proceeding with a transaction might involve a money laundering offence, you may need to request a defence against money laundering, known as a DAML, through the SAR process. The UKFIU explains that after submission there is an initial 7 working day notice period, and a moratorium period may apply depending on the response. (National Crime Agency) If your business operates in contexts where you may need to proceed with activity while suspicious, it is worth reading the UKFIU SARs Best Practice Guidance on DAMLs and DATFs.

Practical tips for good SAR-related records

Even if you do not submit a SAR, your internal file should show:

• What you saw and when.
• What you asked and what you were told.
• What evidence you reviewed and what it showed.
• Your decision and the MLRO decision, with rationale.
• Any actions taken, such as enhanced monitoring or exiting the relationship.

One more modern point that affects many firms is sanctions compliance. As of 28 January 2026, the UK government moved to a single list for UK sanctions designations, with the UK Sanctions List becoming the only source since the closure of the OFSI Consolidated List. 

Conclusion

The placement, layering and integration model is simple, but it gives staff a powerful way to spot risk earlier. Placement tends to leave clues around cash, first entry into the system and hurried behaviour. Layering tends to leave clues in complexity, movement and unclear relationships. Integration tends to leave clues in high-value purchases, investment stories and wealth that does not match the customer’s profile.

When you train teams to ask stage-appropriate questions, you improve real-world detection without turning staff into investigators. You also protect the business by creating a consistent habit: clarify purpose, follow the chain of funds, document decisions, and escalate early to the MLRO when things do not add up.

If you build that habit into onboarding, transaction handling and day-to-day customer contact, you reduce compliance breaches, fraud exposure and reputational harm, while making it harder for criminals to use your services as part of the laundering cycle.