Criminals pay wages in physical cash rather than through formal payroll channels, merging illicit funds with ostensibly legitimate payroll outlays. By circumventing standard documentation, these disbursements reduce transparency and obscure the true origin of the money. This technique is particularly common in small or medium-sized cash-intensive businesses, which may under-report revenues and avoid social insurance or income tax obligations by using off-the-books payments. For example, some employers exploit local norms or preferences for cash usage, especially in culturally or linguistically diverse communities, to minimize scrutiny and facilitate untracked wage payouts. Such practices allow criminals to embed illicit funds in ordinary payroll expenses and further reduce the visibility of suspicious financial activity. This method also appears in sectors where on-site payouts are routine, reinforcing a cycle of decreased recordkeeping and limited oversight. (Note: The previously listed service “Cryptocurrency Transaction” has been removed.)
Cash Wage Payments
Under-the-Table Payment
Tactics
Criminals use physical cash wage payments to introduce illicit funds as regular payroll expenses, blending them seamlessly with legitimate wages and thereby integrating them into the legitimate financial sphere.
Risks
Criminals exploit the minimal record-keeping and off-the-books wage practices of cash-intensive businesses to embed illicit funds within ordinary payroll expenses, bypassing standard documentation and oversight.
By relying on physical cash, an anonymity-enabling medium, criminals avoid standard banking channels and associated AML controls. This facilitates clandestine wage payments that obscure the true origin of funds.
Indicators
Discrepancies in employee records, such as an unusually high number of temporary or ghost employees receiving cash wages, which do not match actual staffing levels.
Frequent disbursement of wages in cash without corresponding electronic or documented payroll records, indicating a deliberate bypass of standard payment channels.
Publicly accessible job postings or recruitment data referencing off-the-books cash wage arrangements or no official documentation required for new hires.
Multiple cash transactions structured in amounts just below internal reporting thresholds, suggestive of deliberate segmentation to avoid detection.
Inconsistencies between officially reported payroll figures and the actual wage distributions, such as missing payslips or incomplete payroll documentation.
Business profiles that rely heavily on cash-in-hand wage payments, despite operating in industries normally characterized by formal, traceable payroll systems.
A marked shift from electronic wage payments to predominantly cash payments without an attendant operational justification, hinting at a behavioral adjustment to obscure fund origins.
Data Sources
- Include tax returns, financial statements, and official filings of revenue and expenses.
- Comparing reported payroll expenses and tax liabilities with observed cash wage payouts helps detect under-reported income or hidden wage distributions.
- Provide a detailed record of cash withdrawals and transfers, including timestamps, amounts, and account details.
- Tracking frequent or large cash withdrawals aligned with payroll cycles can detect illicit wage disbursements concealing illegal funds.
- Contains data on employee identities, roles, salaries, and employment status.
- Comparing actual staffing levels with reported payroll outlays can expose ghost employees or inflated headcounts, revealing off-the-books payments indicative of potential money laundering or tax evasion.
- Details the nature, scope, and operational scale of a business, including revenue patterns and expense structures.
- Identifying excessive reliance on untracked cash wage payments compared to industry norms can reveal concealed or illicit payroll practices.
- Include independent examinations of financial statements, focusing on payroll accuracy and related internal controls.
- Detect hidden wage liabilities or significant cash outflows not reflected in formal records.
- Strengthen AML investigations by verifying that official accounting aligns with actual wage expenditures.
- Encompasses job postings and candidate information referencing off-the-books or cash-based wages.
- Identifies businesses advertising or attracting undocumented workers, uncovering potential hidden payroll schemes.
- Consolidate verified customer data, ownership structures, and declared payroll figures.
- Cross-check official payroll information with actual wage outflows to highlight discrepancies, revealing off-the-books transactions.
Mitigations
Apply deeper scrutiny to businesses with significant cash wage disbursements. Request official employee rosters, cross-check tax documents, and confirm social insurance contributions to ensure that claimed payroll matches actual operations. Engage in on-site visits or interviews to validate legitimate staffing levels when concerns about untracked wage payments persist.
During onboarding and periodic reviews, request detailed payroll structures from businesses operating in cash-intensive sectors. Compare officially reported staff rosters or wage statements against the frequency and volume of cash withdrawals to identify hidden or under-the-table wage payments.
Implement tailored monitoring rules for business accounts to detect atypical cash wage withdrawals. For example, flag consecutive or high-value withdrawals labeled as wages that do not align with the business’s reported workforce size or normal payroll schedule. Investigate abrupt spikes or structuring below reporting thresholds, and request supporting payroll documentation when anomalies arise.
Ensure all significant or repeated cash wage payouts exceeding reporting thresholds are documented and promptly reported in compliance with local regulations. Maintain clear records of wage-related cash withdrawals to support investigations into potential untracked payroll practices.
Provide frontline teams with scenario-based instruction on detecting off-the-books wage indicators, such as abrupt shifts toward heavy cash disbursements or multiple mini-withdrawals close to known pay dates. Train staff to corroborate wage transactions with documented payroll data and escalate discrepancies promptly.
Classify clients who rely heavily on cash wage payouts as higher risk, particularly if their industry typically uses formal payroll channels. Assign closer monitoring to identify indicators such as escalating cash withdrawals, non-existent payroll records, or a growing number of unregistered employees claiming wages.
Review publicly available job postings or local advertisements indicating "cash-in-hand" or "off-the-books" wage offers. Cross-reference third-party sources, such as social media or labor forums, to validate whether the client promotes unrecorded wage policies. Flag evidence of active under-the-table recruitment for further scrutiny.
If recurring concerns arise, such as unexplained or unverified cash payroll outlays, restrict the client’s access to high-volume cash withdrawals or require the use of traceable wage payment platforms. If requests for transparency are unmet, suspend or limit applicable services until the business demonstrates legitimate, documented payroll processes.
Conduct periodic re-checks of business clients’ payroll outlays, verifying the consistency of cash withdrawals with declared employee headcount, tax filings, and labor cost structures. Investigate anomalies such as sudden increases in wage-related cash flows or a high volume of ghost employees lacking official documentation.
Instruments
- Criminals directly pay wages in tangible currency, inserting illicit proceeds into seemingly legitimate payroll expenses without triggering payroll records or automated AML checks.
- By settling wages off the books, they avoid documentation requirements such as pay stubs or electronic transfers, making it harder for authorities or financial institutions to trace the funds’ origin.
- These cash payments seamlessly blend with everyday cash-intensive operations (e.g., restaurants, retail) where large volumes of currency transactions are common, further obscuring the source of the illicit money.
Service & Products
- Facilitate frequent, undocumented withdrawals of physical cash, enabling off-the-books wage payments without leaving reliable payroll records.
- Allow structuring of cash transactions under reporting thresholds, reducing transparency over disbursements labeled as legitimate wages.
- Enable businesses to make large-volume cash deposits and withdrawals, allowing criminals to commingle illicit proceeds with legitimate income before disbursing them as wages.
- Provide counting and safekeeping mechanisms that reduce scrutiny over the true source of funds, facilitating under-the-table cash payrolls.
Actors
Cash-intensive businesses enable cash wage payments that merge illicit proceeds with legitimate payroll expenses:
- They underreport revenues and off-the-books wages, reducing transparency and obscuring the true source of funds.
- They exploit local norms or preferences for cash usage, minimizing scrutiny by financial institutions and tax authorities.
- By avoiding standard payroll channels, these businesses embed illicit funds in ordinary payroll outlays, complicating the monitoring of suspicious activity.
References
Sands, P., Campbell, H., Keatinge, T., Weisman, B. (2017, September). Limiting the use of cash for big purchases: Assessing the case for uniform cash thresholds. Royal United Services Institute for Defence and Security Studies. https://www.rusi.org/explore-our-research/publications/occasional-papers/limiting-use-cash-big-purchases-assessing-case-uniform-cash-thresholds
AUSTRAC (Australian Transaction Reports and Analysis Centre). (2022). Money laundering and terrorism financing risk assessment: Remittance network providers and affiliates. AUSTRAC. https://www.austrac.gov.au/business/how-comply-guidance-and-resources/guidance-resources/remittance-network-providers-and-their-affiliates-australia-risk-assessment-2022