Chinese Money Laundering Networks: Mule and Account Red Flags in FinCEN Advisory FIN-2025-A003

In August 2025 the US Financial Crimes Enforcement Network (FinCEN) published advisory FIN-2025-A003, which warns financial institutions about Chinese money laundering networks, or CMLNs, that move cash for Mexico-based criminal organisations. Most commentary has focused on the trade side of the scheme. This guide looks at the other half: the money mules, the account-opening red flags, the insider risk and the real estate links, because that is where most firms will actually meet the problem. If you want the trade-based side, read our guide to trade-based money laundering red flags.

What FinCEN says a CMLN is

FinCEN describes CMLNs as professional money launderers. They take bulk cash from Mexico-based cartels, including the Sinaloa Cartel, CJNG and the Gulf Cartel, and turn it into usable funds. The advisory says they work through trust-based, decentralised relationships, often act as unregistered money services businesses, and broker deals within the Chinese underground banking system.

The business model rests on a simple mismatch. Cartels hold large amounts of US dollars that are hard to deposit in Mexico because of deposit limits. Many people in China want US dollars but face currency controls at home. A CMLN sits between the two, selling the cartel dollars to buyers who pay in renminbi inside China. The advisory notes that members are often Chinese nationals, including students and recruits from diaspora communities, and that some may not realise their conduct is illegal.

The main laundering methods in the advisory

FinCEN sets out several methods, and a single network may use more than one:

• Mirror transactions. A US-based network receives the cartel dollars, and a counterpart in Mexico credits equivalent pesos to cartel accounts, less a fee. No money crosses the border, which is the point. FinCEN says convertible virtual currency can be used instead.
• Selling dollars to Chinese buyers. The network sells dollars through social media or personal contacts, takes payment in China, and makes the funds available in the US.
• Money mules. Mules deposit illicit cash into accounts at US institutions. They may spread deposits across branches, buy cashier's cheques, use shell companies, buy property, or send peer-to-peer and wire transfers.
• Bulk cash. Cash is moved physically and deposited in amounts that can avoid reporting thresholds.
• Insiders. Networks may recruit bank employees, or place their own people inside institutions.
• Counterfeit identity documents. The advisory refers to counterfeit Chinese passports being used to open accounts for mules.

Red flags for possible mule accounts

This is the part of the advisory that matters most for onboarding and monitoring teams. FinCEN lists indicators including:

• Regular receipts of funds that do not fit the customer's stated occupation or income, with no payroll or other clear source.
• Low-income or low-activity occupations, such as student, retiree or housewife, paired with unexplained wealth.
• Student accounts receiving cash, or wires described as tuition or living expenses, that do not fit the profile and are followed by transfers to unrelated parties.
• Large cash or cheque deposits, or many incoming transfers, with no apparent business purpose, followed by cheque purchases or transfers to high-risk jurisdictions.
• Cash-funded cashier's cheques deposited at a different institution.
• Wires or cashier's cheques payable to real estate companies, sometimes with an agent present.
• US escrow companies receiving funds from unaffiliated foreign shell companies to buy US property.
• Reluctance or evasiveness about the source or purpose of funds.
• A Chinese passport and visa showing the same photograph even though they were issued years apart.

The advisory is clear that no single indicator is determinative. Firms are asked to look at the overall context and at several indicators together, which is the same risk-based thinking that sits behind our guide to money mules and account misuse.

The enforcement case FinCEN cites

FinCEN points to a June 2024 US Department of Justice superseding indictment, known as Operation Fortune Runner, involving Sinaloa-linked associates and Chinese underground banking groups. The indictment alleges that more than 50 million US dollars of drug proceeds moved through the network using trade-based laundering, structuring and cryptocurrency. These are allegations in a charging document, not findings of guilt, so describe them that way if you use the case in training.

The scale, according to FinCEN's trend analysis

FinCEN published a financial trend analysis alongside the advisory. According to FinCEN, it covered 137,153 Bank Secrecy Act reports filed between January 2020 and December 2024, describing about 312 billion US dollars in suspicious transactions. Within that data, FinCEN identified 17,389 reports involving more than 53.7 billion US dollars of suspicious real estate activity. The figures show why real estate and cash-intensive accounts get so much attention in the advisory.

What the advisory asks firms to do

FinCEN asks institutions to file suspicious activity reports where they know, suspect or have reason to suspect that funds are illicit or disguised, and to include the key term CMLN-2025-A003 in the filing note and narrative. The advisory also lists the SAR form fields to tick, so check the current advisory before you file. For an ongoing scheme, it says to notify law enforcement by phone as well as filing a timely report.

It also reminds readers of existing duties: keeping SARs and supporting documents for five years, filing currency transaction reports for cash over 10,000 US dollars, and filing Form 8300 where a trade or business receives more than 10,000 US dollars in cash. It points to ongoing customer due diligence and beneficial ownership checks, and it encourages voluntary information sharing under section 314(b), which we explain in our guide to FinCEN section 314(b) information sharing.

Practical takeaways for accountants and compliance teams

Even if you are not a bank, the pattern is useful. Check whether a client's declared occupation matches the money moving through their accounts. Be cautious where property purchases are funded by cash-based instruments or by foreign shell companies you cannot trace. Treat unexplained reluctance to describe a source of funds as a reason to escalate, not to move on. And make sure staff know that insider recruitment is a stated risk, so internal reporting routes matter as much as customer checks. If your team wants structured training on these controls, our CPD courses include AML content.

What we could not confirm

We worked from FinCEN's published advisory and news release. We have not reviewed the full financial trend analysis line by line, so the figures above are those FinCEN reports. Check the current advisory for the full list of indicators and the SAR fields before using this guide as a checklist.

Frequently asked questions

What is advisory FIN-2025-A003?

It is FinCEN's advisory of 28 August 2025 on the use of Chinese money laundering networks by Mexico-based transnational criminal organisations to launder illicit proceeds.

Does one red flag mean a firm must file a report?

No. FinCEN says no single indicator is determinative and asks firms to consider the overall context and several indicators together.

What key term does the advisory give for SARs?

FinCEN asks filers to use the key term CMLN-2025-A003.