Red Flags & What to Do

In the previous lesson, you learned what money laundering is, why real estate is a target, and what the law requires of you as a sujeto obligado under Ley 10/2010. This lesson moves from theory to practice. You will learn how to recognise the warning signs of money laundering in your day-to-day work, how to verify source of funds, how to report suspicious activity, and what the cash restrictions mean for you in practice. We will work through realistic scenarios so that by the end of this lesson, you will know exactly what to do when something does not feel right.

AML Red Flags in Spanish Real Estate

A “red flag” is not proof of money laundering. It is a warning sign that something may be wrong and that further investigation or escalation is required. A single red flag may have an innocent explanation. Multiple red flags in the same transaction should put you on high alert. Your job is not to investigate crimes — it is to recognise when a situation requires closer scrutiny and, where necessary, to report it.

Client Red Flags

Refusal to provide identification: Any client who is reluctant to provide their DNI, NIE, or passport — or who provides excuses for why they cannot — is raising the most basic red flag. Under Ley 10/2010, you cannot proceed without formal identification. If a client refuses, you must decline the business relationship.
Suspicious or inconsistent documentation: Documents that appear altered, inconsistent (name spelled differently on different documents), or that do not match the person presenting them. Be alert to documents from jurisdictions known for weak identity verification.
Use of different names or identities: A client who introduces themselves by one name but whose identification shows another, or who uses different names in different contexts during the transaction.
Politically Exposed Person (PEP) status: A client who is or has recently been a senior public official, or who is a close family member or associate of such a person. PEP status does not mean the person is a criminal — but it means the risk of corruption-derived funds is elevated and Enhanced Due Diligence is legally required.
Connection to a high-risk jurisdiction: A client who is a national of, resident in, or whose funds originate from a country on the FATF grey or blacklist, or a country subject to EU sanctions.
Unusual secrecy about source of funds: A client who becomes evasive, aggressive, or deflective when asked straightforward questions about where their money is coming from. Legitimate buyers expect to be asked these questions and can answer them.
Use of intermediaries with no clear reason: A person who claims to be acting on behalf of the buyer but cannot clearly explain the relationship, or where the actual buyer never appears in person and communication is always through third parties.
Inability to explain the economic logic: A buyer whose stated occupation, age, or apparent financial situation does not match the value of the property they want to purchase. A 25-year-old with no declared employment seeking to buy a three-million-euro villa warrants serious questions.

Transaction Red Flags

Price significantly above or below market value: Overpaying can be a way to move more money through the transaction. Underpaying can indicate that part of the price is being paid “off the books” in cash. Either should prompt further enquiry.
Cash payments above legal limits: Any attempt to introduce cash into the transaction above the limits set by Ley 7/2012 (detailed below) is both a red flag and a legal violation.
Multiple purchases in quick succession: A buyer who acquires several properties in a short period, particularly if there is no obvious investment strategy or the properties are in different locations with no apparent connection.
Purchase through complex corporate structures: A property bought through a chain of companies, particularly if those companies are registered in different jurisdictions and the beneficial owner is difficult to identify.
Rapid resale at significantly different prices: A property bought and then sold within months at a substantially higher or lower price, with no renovation or other obvious reason for the price change.
Third-party payments: The purchase price (or part of it) is paid by someone other than the buyer — a friend, a business associate, or a company with no apparent connection to the transaction. Always ask: why is this person paying?
Refusal to use the banking system: A buyer who insists on avoiding bank transfers, wants to use cryptocurrency, bearer instruments, or other payment methods that are harder to trace.
Structuring to avoid reporting thresholds: Any attempt to break a transaction into smaller parts to stay below reporting or cash limits. This is itself a criminal offence in many jurisdictions.

Property-Specific Red Flags

Luxury properties purchased by buyers with no apparent means: The mismatch between the buyer’s profile and the property’s value is one of the most reliable indicators of potential laundering.
Properties bought and left empty: A buyer who acquires a property with no intention to live in it, rent it, or develop it — the property simply sits empty. This can indicate that the purchase was about moving money, not acquiring a home.
Rural land purchases at inflated prices: Agricultural or rural land bought at prices far above its productive value, with no development plan. This can be used to justify the movement of large sums.
Properties used to park money: Multiple properties acquired as a “store of value” with no apparent income strategy, rental plan, or personal use — particularly by buyers from high-risk jurisdictions.

Source of Funds Verification

Asking about source of funds is not optional — it is a legal requirement under your CDD obligations. But many agents find this the most uncomfortable part of AML compliance. Here is how to approach it professionally and effectively.

What Documents to Request

Depending on what the client tells you about the source of their funds, you should request supporting documentation:

Mortgage approval: A mortgage offer letter from a recognised bank. This is one of the strongest forms of source-of-funds evidence, because the bank will have conducted its own due diligence on the borrower.
Bank statements: Recent bank statements (typically 3-6 months) showing the accumulation of funds. The statements should be from an identifiable bank and should be consistent with the stated source.
Proof of property sale: If the buyer says the funds come from selling another property, request the completion statement or escritura from that sale.
Salary or business income: Payslips, tax returns, or audited business accounts that demonstrate the client has the income to support the purchase.
Inheritance or gift: Documentation of the inheritance (probate documents, will) or gift (deed of gift, tax declaration). In Spain, inheritances and gifts are subject to tax, so documentation should exist.
Investment proceeds: Statements from investment accounts showing the liquidation of assets.

What Is Acceptable vs What Is Not

Acceptable source-of-funds evidence has three characteristics: it is from an identifiable institution, it is consistent with the stated source, and it accounts for the amount being invested. A mortgage approval from Banco Santander is strong evidence. A handwritten note from the buyer’s cousin confirming they lent the money is not.

Be particularly cautious of:

Funds from bank accounts in jurisdictions with weak AML controls
Funds that have been moved through multiple accounts before arriving at the buyer’s account (potential layering)
Explanations that keep changing — the source of funds story should be consistent
Amounts that do not add up — if the buyer says the money is from savings but the account shows a single large deposit from an unknown source, that requires explanation

Cryptocurrency-Funded Purchases

An increasing number of buyers, particularly in the luxury segment, are seeking to fund property purchases with proceeds from cryptocurrency investments. This is a legitimate source of funds, but it presents specific AML challenges because of the difficulty in tracing the origin of crypto assets.

If a buyer states that their funds come from cryptocurrency, you should request:

Evidence of the original crypto acquisition (exchange account records)
Evidence of the conversion to fiat currency (bank statements showing the deposit from a regulated exchange)
An explanation of the investment history — when were the assets acquired, on which platforms, and how were they converted?

If the buyer cannot provide a clear chain from crypto acquisition to fiat conversion through regulated exchanges, this should be escalated to your compliance officer. Under 5AMLD, cryptocurrency exchanges operating in the EU are themselves obliged entities and should be able to provide transaction records.

The Suspicious Activity Report (SAR) Process in Spain

When you identify activity that you suspect may be related to money laundering or terrorist financing, you have a legal obligation to report it. In Spain, this is called a comunicacion por indicio — a report based on suspicion — and it is filed with SEPBLAC.

When to File

You must file a SAR whenever you have reasonable grounds to suspect that a transaction or attempted transaction is related to money laundering or terrorist financing. You do not need proof. You do not need to be certain. If the facts available to you give rise to a reasonable suspicion, the obligation to report is triggered.

The threshold is deliberately low. SEPBLAC would rather receive a report that turns out to be unfounded than miss a genuine case of laundering because an agent decided the evidence was not strong enough. If in doubt, report.

How to File

SARs are filed through the SEPBLAC online portal (accessible at www.sepblac.es). Your agency’s compliance officer will typically have access credentials. The report is submitted electronically and is encrypted and confidential. In practice, the compliance officer — not the individual agent — normally files the report, but every agent must know the process and must escalate concerns promptly so that the compliance officer can act.

What to Include

A SAR should contain:

Full identification details of the person or entity being reported
A description of the transaction or attempted transaction
The specific facts that give rise to the suspicion — be factual and detailed
Any supporting documentation (copies of ID, transaction records, correspondence)
The dates and amounts involved
Any other information that may be relevant to SEPBLAC’s analysis

Timeline

The law requires that a SAR be filed immediately upon the suspicion arising. “Immediately” means without undue delay — not next week, not when you get around to it. If you identify a red flag today, it should be escalated to your compliance officer today, and the SAR should be filed as soon as practicable thereafter.

The Tipping Off Prohibition

This is one of the most important rules in AML law, and breaching it is a criminal offence. Once you have filed a SAR — or once you suspect that a SAR may be filed — you must not inform the client that a report has been or will be made. You must not tell the client that they are under suspicion. You must not tell any third party outside your compliance function.

This prohibition exists because tipping off a suspect allows them to destroy evidence, move funds, or flee. If you tell a client that you have reported them to SEPBLAC, you are committing a criminal offence under Spanish law and you are potentially obstructing a criminal investigation.

In practice, this means you must be careful about how you communicate. If you decide not to proceed with a transaction because of AML concerns, you should give a neutral reason — “we are unable to proceed at this time” — without referencing suspicion, SEPBLAC, or money laundering.

Protection for Reporters

Spanish law provides legal protection for persons who file SARs in good faith. If a client later discovers they were reported and brings a civil claim against you or your agency, the fact that you filed a SAR in good faith is a complete defence. You cannot be held liable for reporting a genuine suspicion, even if the suspicion ultimately proves unfounded. This protection is essential — it ensures that agents and compliance officers are not deterred from reporting by fear of litigation.

Internal Escalation Process

Not every red flag leads directly to a SAR. Your agency should have an internal escalation process that ensures concerns are properly assessed before a filing decision is made. Here is how that process should work:

Step 1: Document the Concern

As soon as you notice something that concerns you, write it down. Record the date, the specific facts, what was said, what documents you reviewed, and why you are concerned. Be factual and precise. Do not speculate about whether the client is a criminal — record the observable facts that triggered your concern.

Step 2: Escalate to Your Compliance Officer

Report your concern to your agency’s internal compliance officer or Organo de Control Interno. Provide them with your written notes and any supporting documentation. Do this promptly — ideally the same day the concern arises.

Step 3: Compliance Officer Assessment

The compliance officer will assess the concern, potentially request additional information, and determine whether a SAR should be filed with SEPBLAC. This decision should be documented. If the compliance officer decides not to file, the reasons should be recorded in writing.

Step 4: Cooperate but Do Not Proceed

While the assessment is ongoing, you should cooperate with internal requests for information but you should not proceed with the suspicious transaction. Do not complete the sale, do not transfer deposits, and do not sign any documents that advance the transaction. If the client pressures you to move forward, use the time needed for “administrative processes” as a neutral explanation.

Cash Restrictions in Detail

Spain has some of the strictest cash payment restrictions in Europe, and they apply directly to real estate transactions.

Ley 7/2012: The Cash Limits

Ley 7/2012 prohibits cash payments of more than 2,500 euros in any transaction where at least one party is acting in a professional capacity. Since you, as a real estate agent, are a professional, this limit applies to every transaction you are involved in. A buyer cannot pay any portion of the purchase price in cash above this threshold.

For transactions where one party is a non-resident of Spain (not tax-resident), the limit is raised to 15,000 euros. However, this higher limit is the exception, not the rule, and it does not apply if the non-resident is acting through a Spanish entity.

Practical Implications

In practice, the cash limit means that virtually all property transactions must be conducted through the banking system — by bank transfer, cheque, or mortgage disbursement. This is by design: it creates a traceable record of every significant payment.

If a client asks to pay any portion of the purchase price in cash:

Explain the legal limit clearly and professionally.
Do not accept cash above the legal threshold under any circumstances.
Document the request. A client who asks to pay in cash above the limit is displaying a red flag that should be escalated.
Be aware that notaries will refuse. The notary who completes the property transfer (escritura publica) is legally required to verify compliance with cash limits. If cash rules are breached, the notary will refuse to complete the transaction.

Penalties for Cash Limit Violations

Breaching the cash payment limits is punishable by a fine of 25% of the cash amount involved. Both the payer and the recipient can be held jointly liable. As an agent, if you facilitate a cash payment above the limit, you are exposing yourself and your agency to penalties.

Practical Scenarios

The following scenarios are based on situations that real estate agents in Spain encounter regularly. Work through each one and consider what you would do before reading the analysis.

Scenario 1: Corporate Buyer from a High-Risk Jurisdiction

The situation: A Russian national contacts you about purchasing a villa in Marbella for 2 million euros. He says the funds will come by bank transfer from a company registered in Cyprus. He provides his Russian passport as identification but says the property will be in the company’s name. He is friendly and cooperative but becomes vague when you ask about the Cyprus company’s activities or other shareholders.

The red flags:

Buyer is a national of a jurisdiction subject to extensive EU sanctions (Russia)
Funds originating from a company in a jurisdiction historically associated with shell company activity (Cyprus)
Purchase through a corporate structure where beneficial ownership is unclear
Vagueness about the company’s activities and ownership

What to do: This situation requires Enhanced Due Diligence at a minimum. You must verify the buyer’s identity and check against EU sanctions lists — as of 2025, many Russian nationals are subject to asset freezes and transaction prohibitions. You must identify the beneficial owners of the Cyprus company and verify its legitimate business activity. Request the company’s registration documents, shareholder register, and financial statements. If the buyer cannot or will not provide transparent beneficial ownership information, or if sanctions screening reveals a match, you must decline the transaction and file a SAR with SEPBLAC. Do not proceed on the basis that “the money is coming from a bank so it must be clean” — banks in other jurisdictions may have different AML standards.

Scenario 2: Under-Declaration of the Purchase Price

The situation: You are representing a property listed at 400,000 euros. A Spanish buyer offers the full asking price but asks if the seller would agree to declare only 350,000 euros in the escritura, with the remaining 50,000 euros paid in cash “under the table.” The buyer explains this is to reduce the ITP (Impuesto de Transmisiones Patrimoniales — the property transfer tax).

The red flags:

Request to under-declare the purchase price (tax fraud)
Cash payment of 50,000 euros — far above the 2,500-euro legal limit
Request to structure the transaction to avoid legal obligations

What to do: Refuse immediately and clearly. Under-declaration is tax fraud, and facilitating it makes you an accessory. The cash payment of 50,000 euros violates Ley 7/2012. You should explain to the buyer that this is illegal and that you cannot participate. Document the conversation, including the date, what was requested, and your refusal. Escalate to your compliance officer. Depending on the circumstances, a SAR may be appropriate — particularly if this appears to be a pattern rather than a naive request. Remember: even if under-declaration was once common practice in certain parts of the Spanish property market, it is illegal and it is a clear AML red flag.

Scenario 3: BVI Company Buyer

The situation: You are working with an elderly British couple who are selling their apartment on the Costa Blanca. A buyer emerges: a company registered in the British Virgin Islands (BVI). The company’s representative is a Spanish lawyer who says he is acting on instructions from the company’s director. The lawyer provides the company’s BVI registration certificate but says the shareholder information is confidential under BVI law.

The red flags:

Purchase through an offshore company (BVI) — a classic layering structure
Beneficial ownership is deliberately obscured (“confidential under BVI law”)
The actual buyer never appears — only a representative
BVI is a jurisdiction associated with shell companies and opacity

What to do: Under Spanish law, you have an absolute obligation to identify the beneficial owner regardless of what another jurisdiction’s privacy laws say. If the BVI company cannot provide transparent beneficial ownership information, you cannot proceed. Explain to the lawyer that Spanish AML law requires identification of the titular real and that this is not negotiable. If the information is provided, verify it independently where possible — check the named individuals against sanctions and PEP lists. If the lawyer insists that ownership is confidential and will not provide the information, decline the transaction and file a SAR. The structure itself — an opaque offshore company purchasing European real estate — is one of the classic money laundering typologies identified by the FATF.

Scenario 4: Non-Resident Buyer Who Will Not Explain Source of Funds

The situation: A buyer provides a Portuguese NIF (tax number) and a Portuguese passport. However, in conversation it emerges that he actually lives in Dubai. He wants to buy a 1.5-million-euro apartment in Barcelona. When you ask about the source of funds, he says it is “personal savings” but will not provide bank statements, cannot name the bank where the funds are held, and becomes irritated when you press the point. He says he will have his “financial advisor” send the money when the time comes.

The red flags:

Discrepancy between stated nationality/documents and actual country of residence
Resident in a jurisdiction (UAE/Dubai) that, while not blacklisted, has been on the FATF grey list and has specific AML risk factors
Refusal to provide source-of-funds documentation
Irritation and evasion when asked standard CDD questions
Funds to come from an unnamed third party (“financial advisor”)

What to do: You cannot proceed without adequate source-of-funds verification. The Portuguese NIF is not sufficient identification on its own — you need the passport copy and must verify the identity. The Dubai residence and the Portuguese documents create a complex jurisdictional picture that requires careful assessment. Explain to the buyer, calmly and professionally, that Spanish law requires you to verify the source of funds and that this is a standard requirement for all buyers, not a personal investigation. If he continues to refuse, you must decline the business relationship. Escalate to your compliance officer and document the interaction in detail. A SAR is likely appropriate given the combination of red flags.

Scenario 5: The Agent Is Offered a Bribe

The situation: You have been working with a buyer who wants to purchase a large rural finca for 800,000 euros. The buyer’s associate takes you aside and says: “We’d like to offer you a personal bonus of 20,000 euros, in addition to your normal commission. All we ask is that you don’t get too deep into the paperwork. Just keep things simple and move the deal forward quickly.”

The red flags:

Offer of an undeclared personal payment outside normal commission structures
Explicit request to reduce due diligence (“don’t get too deep into the paperwork”)
Pressure to expedite the transaction without proper process
The “bonus” is itself potentially a bribe, which is a criminal offence

What to do: Decline the offer immediately and unambiguously. Do not negotiate, do not consider it, do not treat it as a joke. This is an attempt to compromise your compliance obligations and potentially to make you complicit in money laundering. Document exactly what was said, by whom, when, and where. Report the incident to your compliance officer immediately. A SAR should be filed with SEPBLAC. You should also consider whether this constitutes an attempted bribe under the Codigo Penal, in which case a report to law enforcement may also be appropriate. Under no circumstances should you continue the business relationship with this buyer.

What Happens After You File a SAR

After your compliance officer files a SAR with SEPBLAC, the report enters the intelligence system. SEPBLAC will analyse the information, potentially combining it with intelligence from other sources — other SARs, law enforcement data, information from foreign FIUs. If SEPBLAC determines that the suspicion is well-founded, they will refer the case to the relevant law enforcement agency or public prosecutor.

You will not normally receive feedback on the outcome of your SAR. SEPBLAC does not routinely inform reporting entities of the result of their analysis or whether an investigation was opened. This can be frustrating, but it is necessary to protect ongoing investigations. What matters is that you fulfilled your legal obligation by filing the report.

In some cases, SEPBLAC may contact you to request additional information about the transaction or the client. You are legally obliged to cooperate fully with any such request.

Common Mistakes Agents Make with AML

Based on supervisory experience and enforcement actions, these are the most frequent AML compliance failures among real estate agents in Spain:

Not performing CDD at all: Some agents treat AML as something that happens at the notary stage and do not conduct their own due diligence. This is a breach of the law — your obligation is independent of the notary’s.
Accepting photocopies instead of verifying originals: You must see the original identity document and take the copy yourself. A photocopy emailed by the client is insufficient.
Failing to identify beneficial owners: When a company is the buyer, agents often identify the company representative but do not trace the ownership chain to find the natural persons who ultimately own and control the entity.
Not documenting source of funds: Agents ask about source of funds verbally but do not request or retain documentary evidence. Verbal assurances are not sufficient.
Ignoring red flags because the commission is large: This is the most dangerous mistake. A large commission on a suspicious transaction is not worth the criminal liability, the fines, or the destruction of your professional reputation.
Not having written procedures: Many smaller agencies operate without formal written AML procedures. This is itself a breach of the law, regardless of whether the agents are informally doing the right things.
Failing to keep records for 10 years: Documents are lost, systems are changed, and old files are deleted. You must have a system that ensures records are retained and accessible for the full 10-year period.
Tipping off: Telling a client — sometimes inadvertently — that a report has been filed or that there is a suspicion. Even a casual comment like “there were some compliance issues with your file” can constitute tipping off.

How The NLS AML Workflow Supports You

The NLS platform provides practical tools to help you meet your AML obligations without slowing down legitimate transactions:

Client onboarding checklists: When you register a new buyer or seller, the platform prompts you through the required identification and due diligence steps, ensuring nothing is missed.
Document upload and storage: Upload copies of identity documents, source-of-funds evidence, and corporate documentation directly into the client’s file. These are securely stored and retained for the required period.
Risk assessment prompts: The platform includes risk indicators that help you assess whether standard or enhanced due diligence is appropriate for each client.
Transaction audit trail: Every significant action in a transaction is logged, creating a compliance-ready record that can be provided to SEPBLAC or other authorities if required.
Escalation workflows: If you identify a concern, the platform supports internal escalation to your compliance officer with full documentation attached.

Use these tools consistently. They exist to protect you, your agency, and the integrity of the market you work in.

Summary: Your AML Responsibilities in Practice

As a real estate professional in Spain, your AML obligations come down to five core practices:

Know your client. Identify every client with valid documentation before you begin working with them. If they are a company, identify the beneficial owners.
Know the money. Understand and document where the funds are coming from. If the explanation does not make sense, ask more questions. If the client will not answer, do not proceed.
Recognise the red flags. Be alert to the warning signs covered in this lesson. A single red flag requires closer attention. Multiple red flags require escalation.
Report when necessary. If you have a reasonable suspicion, escalate internally and support the filing of a SAR with SEPBLAC. Do not tip off the client. You are legally protected when you report in good faith.
Keep records. Document everything. Retain everything for 10 years. Your records are your evidence of compliance.

Money laundering is not an abstract problem. It is happening in the Spanish property market, and the agents who facilitate it — whether knowingly or through wilful blindness — face criminal prosecution, substantial fines, and the end of their careers. The agents who take their obligations seriously protect themselves, protect their clients, and protect the market that provides their livelihood.

You now have the knowledge to do the right thing. The next step is to apply it, every day, with every client.