Smurfing in Money Laundering: Structuring Explained

Smurfing, also called structuring, is a money laundering technique where someone breaks a large sum into many smaller transactions so that each one stays below a reporting or checking threshold, such as the US $10,000 cash reporting limit. The name comes from using many people, the "smurfs", to make the deposits. In the US, structuring is a federal crime in itself, even if the money was earned legally.

This guide covers the legal basis, how smurfing looks in crypto, the "cuckoo smurfing" variant, and how banks and exchanges detect it. (In gaming, "smurfing" means something else entirely: an experienced player using a new account to play against beginners. This article is about the financial meaning.)

What is smurfing in money laundering?

Most anti-money laundering systems rely on thresholds. Above a certain amount, a bank must file a report, or an exchange must collect more information. Smurfing tries to keep every individual transaction under that line.

A classic example: someone holding $45,000 in cash recruits five people, who each deposit $9,000 at different branches over two days. No single deposit exceeds $10,000, so the hope is that no currency transaction report is filed and nobody looks closer.

Smurfing usually happens at the placement stage, when illicit cash first enters the financial system. See our guide to the three stages of money laundering for how it fits the wider process.

The legal basis in the US

The $10,000 currency transaction report

Under 31 CFR 1010.311, financial institutions other than casinos must file a report for each deposit, withdrawal, exchange or other transfer involving more than $10,000 in currency. This is the currency transaction report (CTR). Under 31 CFR 1010.313, multiple cash transactions must be added together and treated as one if the institution knows they are by or for the same person and total more than $10,000 in a single business day.

The structuring offence: 31 USC 5324

31 USC 5324(a)(3) makes it illegal to "structure or assist in structuring, or attempt to structure or assist in structuring" any transaction with domestic financial institutions for the purpose of evading those reporting requirements. FinCEN's regulatory definition in 31 CFR 1010.100(xx) adds three important details:

• it covers transactions "in any amount, at one or more financial institutions, on one or more days, in any manner";
• breaking a sum above $10,000 into amounts at or below $10,000 is the textbook example;
• the transactions "need not exceed the $10,000 reporting threshold at any single financial institution on any single day".

Note what the law does not require: the money does not have to come from crime. The offence is the purpose of evading the report. Someone who splits legitimately earned cash into $9,000 deposits because they don't want a CTR filed can still be committing structuring.

Penalties under section 5324(d) are up to 5 years in prison and a fine. In aggravated cases, where the structuring happens while breaking another federal law or as part of a pattern of illegal activity involving more than $100,000 in 12 months, the maximum rises to 10 years and the fine doubles.

Other thresholds smurfs target

The CTR is not the only line. US money services businesses must file a suspicious activity report (SAR) for suspicious transactions of at least $2,000, and 31 CFR 1022.320 lists transactions "designed, whether through structuring or other means, to evade" Bank Secrecy Act requirements as reportable. Non-bank financial institutions must also record and pass on sender and recipient information for funds transfers of $3,000 or more under 31 CFR 1010.410, the US "Travel Rule". See our guide to suspicious activity reports.

Structuring outside the US

The idea is the same elsewhere, though thresholds differ.

• Australia: AUSTRAC defines structuring as deliberately splitting large cash transactions into smaller ones to avoid threshold reporting of $10,000 or more, or splitting cash between travellers in a group to avoid reporting. It calls structuring a money laundering technique that is against the law.
• European Union: the Anti-Money Laundering Regulation, Regulation (EU) 2024/1624, which applies from 10 July 2027, repeatedly closes the splitting loophole by applying thresholds "whether the transaction is carried out in a single operation or through linked transactions". Article 19(3) requires crypto-asset service providers to apply full customer due diligence on occasional transactions of EUR 1,000 or more, including linked transactions. Article 80 caps cash payments for goods or services at EUR 10,000, again counting operations "which appear to be linked".

What is cuckoo smurfing?

Cuckoo smurfing is a variant where criminals use innocent people's accounts without their knowledge, like a cuckoo laying its eggs in another bird's nest. Commonwealth Bank of Australia describes how it works:

1. Someone overseas uses a money transfer business to send legitimate money to a bank account in Australia.
2. Instead of moving that money, the transfer business passes the transaction details to a laundering syndicate.
3. The syndicate deposits criminal cash, in smaller amounts, into the intended recipient's account.
4. The recipient receives the expected total, and the syndicate keeps the clean money sent from overseas.

Often neither sender nor recipient knows they are involved. CommBank lists warning signs for anyone expecting money from abroad: multiple cash deposits under $10,000, several deposits on the same day or within a short period, deposits across various branches, ATMs or states, and cash deposits from multiple third parties.

Smurfing in crypto

Crypto exchanges are part of the same system. FinCEN's 2019 guidance says exchangers and administrators of convertible virtual currency generally qualify as money transmitters, which brings them under the Bank Secrecy Act. Structuring in crypto tends to take a few forms:

• Fiat on-ramp splitting. Breaking a large purchase into many card or bank deposits just under an exchange's verification tier or a reporting threshold.
• Many accounts, many people. Using several exchange accounts, often opened with recruited "smurfs" or money mules, so no single account looks large.
• Crypto kiosks. Feeding cash into crypto ATMs in small amounts across machines or days.
• Withdrawal splitting. Cashing out through many small withdrawals to different bank accounts, or many small transfers to different wallets, to stay under monitoring rules or the Travel Rule threshold.

Splitting funds across many wallets on-chain is a related tactic, but it is usually about layering, hiding the trail, rather than avoiding a cash report. It still shows up in analytics. See AML red flags in crypto for the wider list of warning signs.

How banks and exchanges detect smurfing

Smurfing beats a single fixed threshold. It rarely beats a monitoring system built for it. Common techniques:

• Aggregation and velocity rules. Summing a customer's activity over rolling windows such as 24 hours, 7 days or 30 days, and alerting when the total crosses a line even though each transaction is small. Transaction monitoring tools such as iDenfy's transaction monitoring software run these sliding-window velocity rules on every transaction.
• Just-below-threshold patterns. Repeated amounts clustered just under $10,000, $3,000 or EUR 1,000 are a recognised signal.
• Linking accounts. Matching shared devices, IP addresses, phone numbers, bank accounts or withdrawal addresses to reveal one person behind many accounts.
• Many-to-one flows. Many senders paying into one account, or one account paying out to many, especially when the senders have no clear connection.
• Blockchain analytics. Clustering addresses and tracing funds as they fan out and recombine. See blockchain analytics explained.

When a pattern looks like structuring, a US firm files a SAR. SARs are confidential, and a firm may not disclose that one exists, which is why a user may see an account restriction without a detailed explanation. For a fuller view of how monitoring programmes work, read our guide to AML transaction monitoring in crypto.

What this means for ordinary users

If you have a large, legitimate amount to deposit or withdraw, do it openly and keep documents that show where it came from. Deliberately splitting it to avoid a report is the one thing that turns a lawful transaction into a possible offence. And if someone offers to pay you to receive and forward deposits, treat it as mule recruitment.

JewelSwap's DeFi apps are non-custodial and don't hold customer funds or run transaction monitoring themselves. See KYC in DeFi explained.

Frequently asked questions

What is smurfing in money laundering?

Smurfing is breaking a large sum of money into many smaller transactions, often made by several people, so each stays below a reporting threshold such as the US $10,000 currency transaction report. It is also called structuring.

Is structuring illegal if the money is legal?

In the US, yes. 31 USC 5324 makes structuring illegal when it is done to evade reporting requirements. The law does not require the money to come from crime; the offence is the purpose of avoiding the report.

What is the penalty for structuring in the US?

Up to 5 years in prison and a fine. In aggravated cases, such as structuring while breaking another federal law or as part of a pattern of illegal activity involving more than $100,000 in 12 months, the maximum is 10 years and the fine doubles.

What is cuckoo smurfing?

A scheme where criminals deposit illicit cash into the account of someone expecting a legitimate overseas transfer, while keeping the legitimate money that was sent. The account holder usually has no idea their account was used.

Does smurfing happen in crypto?

Yes. Examples include splitting fiat deposits or withdrawals to stay under exchange or reporting thresholds, using many accounts opened by recruited people, and feeding cash into crypto kiosks in small amounts. Exchanges use aggregation rules and account linking to detect it.

How do banks detect structuring?

They add up a customer's transactions over rolling time windows, look for amounts clustered just below thresholds, link accounts that share devices or details, and flag many-to-one payment flows. Suspected structuring is reported to the authorities.

Keep reading

• The three stages of money laundering
• Suspicious activity reports (SARs) explained
• AML red flags in crypto
• AML transaction monitoring in crypto
• Crypto money mules

This article is educational and is not legal or financial advice. Legal references are to 31 USC 5324, 31 CFR 1010.100, 1010.311, 1010.313, 1010.410 and 1022.320, FinCEN guidance FIN-2019-G001, Regulation (EU) 2024/1624, AUSTRAC's glossary and Commonwealth Bank of Australia's guidance on cuckoo smurfing, all checked on 9 October 2026. Rules change; check current versions before relying on them.