The 3 Stages of Money Laundering, With Real Examples
Money laundering usually happens in three stages. In placement, criminals move illegal cash into the financial system. Layering then hides its origin through a chain of transfers, companies, and assets. In integration, the money returns to the economy looking legitimate. Each stage leaves different traces, so each one calls for different controls.
The Three Stages at a Glance
The three-stage model is a simplification, since real schemes often blur or skip stages. Even so, it remains the standard way regulators and investigators describe how dirty money becomes clean.
| Stage | Goal | Typical methods | Where it is easiest to catch |
|---|---|---|---|
| 1. Placement | Get illegal cash into the system | Cash deposits, structuring, cash-heavy fronts, money mules | Onboarding and cash reporting |
| 2. Layering | Break the link to the crime | Rapid transfers, shell companies, crypto hops, trade fraud | Transaction monitoring and business checks |
| 3. Integration | Use the money openly | Property, luxury goods, business investment, fake loans | Source of wealth checks and asset-sector due diligence |
In fact, think of it as a cycle. Once integrated, the money can fund more crime, which then produces new proceeds to launder.
How Big Is the Problem
Laundering is hard to measure because criminals design it to stay hidden. Still, UNODC estimates that it equals 2 to 5% of global GDP, roughly USD 800 billion to 2 trillion a year. That figure is old and broad, yet regulators still cite it because no better global estimate exists.
Meanwhile, enforcement shows the cost to firms that miss it. In 2023, the crypto exchange Binance agreed to pay USD 4.3 billion in US penalties and forfeiture. A year later, TD Bank pleaded guilty and accepted penalties of about USD 3 billion for program failures that let laundering networks move funds through it. Both cases turned on weak controls, not on any single clever scheme.
Stage 1: Placement
Placement is the riskiest step for criminals, because cash from crime is bulky and draws attention. So the aim is to turn it into bank balances, wallet credits, or other assets that can move electronically.
Common placement methods
- Structuring. Splitting cash into deposits just under reporting thresholds, for example across many branches or accounts.
- Cash-heavy front businesses. For instance, restaurants, car washes, or shops that mix illegal cash with real takings.
- Money mules. People who open accounts, or lend their own, and then pass funds on.
- Fake or stolen identities. Accounts opened with synthetic or borrowed identities, which is a form of new account fraud.
Placement red flags
Watch first for repeated cash deposits just below the reporting line. Also look for a new account that receives large sums soon after opening. Similarly, many accounts linked to the same device, address, or face suggest a mule ring. Finally, cash volumes that do not fit the customer’s stated job or business deserve a closer look.
For this reason, identity controls matter most here. A face match with a liveness check confirms each applicant is a real, present person. Meanwhile, Verihubs face recognition can also run one-to-many searches, so a firm can spot the same face behind several accounts, a common sign of multi-accounting and mule networks.
Stage 2: Layering
Once money is inside the system, criminals try to make its trail impossible to follow. Layering is usually the most complex stage, because it often crosses borders.
Common layering methods
- Rapid transfers. Moving funds through many accounts and countries, one after another, so the trail fragments.
- Shell companies. Routing money through firms with no real business, especially in secrecy jurisdictions.
- Trade-based laundering. Billing goods at false prices, so that value shifts between companies.
- Crypto hops. Swapping between assets and wallets, sometimes through mixers, so that the chain breaks.
- Loan-back schemes. Lending money to oneself through a company abroad.
Layering red flags
For instance, funds that arrive and leave almost at once, with no clear purpose, point to layering. Likewise, payments that involve firms lacking any online presence, employees, or track record should raise questions. Ownership chains with no business reason are another sign. Then there are invoice values far from market prices for the goods, which often hide trade-based laundering.
Transaction monitoring is the main control at this stage, and it runs in dedicated systems. Business checks also help, because layering relies on companies that hide their owners. For Indonesian companies, business verification confirms registration data, and screening the people behind each firm then exposes sanctioned or politically exposed owners.
Stage 3: Integration
In the final stage, laundered money comes back into the open economy as apparently clean wealth. At this point, it is hardest to tell apart from legitimate funds.
Common integration methods
- Real estate. Buying property, often through companies, then later selling or renting it.
- Luxury assets. Art, jewelry, cars, and yachts that hold value and move easily.
- Business investment. Buying stakes in legitimate firms, then drawing salaries or dividends afterward.
- Fake income. Sham consulting fees, false invoices, or invented gambling wins.
Integration red flags
Here, the key warning is a high-value purchase with no clear source of wealth. Likewise, watch for property bought in cash or through layered companies. Income from firms where the customer has no visible role is also suspect. And finally, a lifestyle far beyond declared earnings often gives the game away.
Source of wealth checks during enhanced due diligence are the main defense here. That is why regulators now extend AML duties to real estate agents, dealers in high-value goods, and other businesses where integration happens.
Where the Three-Stage Model Strains
The model was built around drug cash in the 1980s and 1990s, so it fits physical money best. Today, much criminal income starts life as digital money, and that changes the picture in three ways.
- Placement can disappear. Proceeds from online fraud, ransomware, or scams often land straight in a bank account or crypto wallet. So there is no cash to place, and the first control point becomes the account that receives the money.
- Layering can take minutes. Instant payments and crypto swaps let criminals move funds through dozens of accounts before any human reviews an alert.
- Stages overlap. A mule network may place, layer, and cash out in a single day, which makes the neat sequence hard to see.
For that reason, many firms now treat account opening as the key choke point, whatever stage the money is in. If criminals cannot open or rent accounts easily, every stage gets harder.
Modern Laundering Channels
New channels have not replaced the three stages. Instead, they give criminals faster ways to run each one.
| Channel | Stage it serves most | Example method |
|---|---|---|
| Digital wallets and instant payments | Placement and layering | Many small top-ups, then rapid transfers between wallets |
| Crypto assets | Layering | Chain hopping, mixers, and swaps across exchanges |
| Online gaming and betting | Placement and integration | Depositing dirty funds, then withdrawing them as winnings |
| Rented and fake accounts | Placement | Accounts bought from mules or opened with deepfake selfies |
| E-commerce and marketplaces | Layering and integration | Fake sales between linked sellers and buyers |
| Property and high-end assets | Integration | Purchases through companies or nominees |
Two of these channels depend on fake or borrowed identities. So stronger identity checks at signup, including liveness and deepfake detection, cut off a growing share of modern schemes.
Who Runs a Laundering Operation
Large schemes rarely depend on one person. Instead, they split the work across roles, which also spreads the risk of arrest.
- The controller. The criminal who owns the proceeds and decides where the money should end up.
- Professional launderers. Specialists who design the route and charge a fee, often serving several criminal groups at once.
- Mule recruiters and herders. People who find, pay, and manage money mules, frequently through social media job ads.
- Money mules. Account holders who receive and pass on funds, some knowingly and some deceived.
- Gatekeepers. Lawyers, accountants, company formation agents, or real estate agents whose services, willingly or not, give the scheme legitimacy.
Each role touches a different part of the financial system. So controls work best when they target the weakest link, which is usually the mule accounts at placement and the gatekeepers at integration.
Money Laundering vs Terrorist Financing
The two often appear together in law, yet the money moves in opposite directions. Money laundering takes dirty money and makes it look clean. Terrorist financing often takes clean money, such as donations or business income, and sends it toward a criminal purpose. That is why people sometimes call it reverse money laundering.
The amounts also differ. Terrorist financing can involve small sums that look ordinary, so threshold-based rules miss it more easily. In practice, screening against sanctions and terrorism lists is the main control, because the warning sign is usually who receives the money, not how much moves.
Real Cases Mapped to Each Stage
For example, three well-known cases each show one stage clearly.
| Case | Main stage | What happened |
|---|---|---|
| HSBC (2012) | Placement | US prosecutors said at least USD 881 million in drug proceeds passed through the bank between 2006 and 2010. Traffickers reportedly used cash boxes built to fit teller windows. |
| Danske Bank Estonia (2022) | Layering | The bank admitted that its Estonian branch moved about USD 160 billion through US banks for high-risk non-resident clients, a large share of whom used front companies to hide. |
| 1MDB (2016 onward) | Integration | The US Justice Department said officials and associates took more than USD 4.5 billion from a Malaysian state fund, then spent on luxury property, art, and film production. |
Yet in each case, the failure began earlier than the stage that made headlines. Weak onboarding and screening let the wrong customers in, and that made every later stage easier.
Which Control Breaks Which Stage
No single control stops all three stages. Instead, each one does its best work at a particular point, as shown below.
| Control | Strongest against | Also helps with |
|---|---|---|
| Identity verification with face match and liveness | Placement | Layering through mule accounts |
| One-to-many face search across accounts | Placement | Mule networks during layering |
| Sanctions and PEP screening, plus monitoring | Every stage | Owners of companies in the chain |
| Business and beneficial owner checks | Layering | Integration through company purchases |
| Transaction monitoring (separate system) | Layering | Structuring at placement |
| Source of wealth and enhanced due diligence | Integration | Complex layering structures |
Notably, screening is the only control that runs across the whole cycle. Verihubs watchlist screening checks customers at onboarding, and Monitor then keeps watching afterward, so a customer who becomes listed or takes a public role mid-scheme still gets flagged.
Frequently Asked Questions
What are the three stages of money laundering?
The three stages are placement, which moves illegal cash into the financial system; layering, which hides its origin; and integration, which returns it to the economy as apparently legitimate wealth.
Which stage of money laundering is the hardest to detect?
Integration is usually the hardest, because by then the money looks like normal income or assets. Layering is often the most complex, while placement is where criminals face the most risk of detection.
Do all money laundering schemes follow the three stages?
No. After all, the model is a simplification. Some schemes skip placement, for example when the proceeds are already digital, and others repeat layering many times.
What is an example of placement?
For example, a common case is structuring, where someone splits a large amount of cash into many smaller deposits to stay under reporting thresholds.
What is the purpose of layering?
Layering breaks the link between illegal money and its source. Criminals move funds through many accounts, companies, countries, or assets so investigators cannot trace the trail back to the crime.
Does money laundering always involve cash?
No. Many schemes now start with digital proceeds from fraud or scams, which skip the cash placement step and move straight into accounts or wallets.
What is reverse money laundering?
Reverse money laundering usually describes terrorist financing, where clean money from legal sources gets channeled toward an illegal purpose.
How do banks stop money laundering at each stage?
Banks use identity verification and screening at onboarding, transaction monitoring to catch layering, and source of wealth checks for integration, all supported by reporting to the authorities.
The Cheapest Place to Break the Cycle Is the Front Door
Placement, layering, and integration each leave different traces, but they share one dependency: an account that a criminal can control. When firms verify every face, search for repeat identities, screen customers and owners at onboarding and after, and back that up with monitoring and source of wealth checks, the cycle loses its footing. So the strongest AML programs do not wait for integration to reveal the problem; they stop the money before it ever gets in.
Want to close the placement gap with face matching and screening? Start a conversation with Verihubs about your onboarding controls.
