If you broker commercial real estate loans in the US, no federal rule currently requires you to run a formal anti-money laundering (AML) program or file Suspicious Activity Reports. That is not the same as having no obligations. You must file IRS Form 8300 for large cash receipts, and the lenders you send deals to must verify every party on a loan. A broker whose files are thin on identity and source-of-funds detail gets declined, slowed down, or pulled into someone else's fraud case. This guide covers what is required, what is voluntary but smart, and a KYC routine you can run on every deal.
TL;DR
- Residential non-bank mortgage lenders and originators have been under FinCEN's AML and SAR rules since 2012. FinCEN's mortgage page does not extend that mandate to commercial-only brokers today.
- Form 8300 applies to you regardless: more than $10,000 in cash, in one transaction or related ones, triggers a filing within 15 days.
- Your lenders must run Customer Identification Programs and due diligence on principals and guarantors. Your KYC package is what lets them do it quickly.
- A voluntary KYC routine (identity, ownership, source of funds, purpose of the loan, a written file) is cheap insurance for your reputation.
Table of Contents
- AML vs. KYC: what each one means for a broker
- Where the formal AML rules stop for commercial brokers
- Form 8300: the rule that does apply to you
- What lenders must do, and why it lands on your desk
- Why commercial real estate attracts bad actors
- A voluntary KYC workflow for every commercial deal
- Red flags that should slow you down
- A perspective from our side of the desk
- Making KYC part of your pipeline
- Matching a clean file to the right lender
- Policies to put in writing this week
- FAQ
- Sources
AML vs. KYC: what each one means for a broker
Anti-money laundering is the body of law and practice meant to stop criminals from moving illegal proceeds through legitimate businesses. Know your customer (KYC) is the part of that effort focused on who you are dealing with: verifying identity, understanding ownership, and knowing where the money comes from and where it is going.
For a bank or a lender, both are mandatory and examined. For a commercial mortgage broker, the picture is split:
| Obligation | Applies to commercial brokers? | Source |
|---|---|---|
| Formal AML program and SAR filing under the Bank Secrecy Act | Not currently, per FinCEN's scope for mortgage companies and brokers | FinCEN |
| IRS/FinCEN Form 8300 for cash over $10,000 | Yes, any trade or business | IRS |
| Customer Identification Program and due diligence | Applies to the lender, but flows down to you as document requests | FFIEC manual |
| Voluntary KYC on principals and guarantors | Not mandated, strongly advisable | See below |
The gap between the second and fourth rows is where most brokers get into trouble. They assume that no AML mandate means no exposure.
Where the formal AML rules stop for commercial brokers
The Bank Secrecy Act defines "financial institution" to include a loan or finance company. FinCEN explains that the definition could reasonably reach any business that makes loans or finances purchases, but that it chose an incremental approach. The first step covered non-bank residential mortgage lenders and originators, and the structure allows other lending businesses to be added later.
In practice, FinCEN's 2012 final rule required those residential firms to set up AML programs and file SARs. The residential requirements have been in effect since August 13, 2012. If you originate only commercial loans, you sit outside that rule today.
Two cautions follow.
- A mixed book changes the answer. If you are a residential mortgage broker moving into commercial lending, your residential activity may still be covered. If any part of your business is residential origination, confirm your status with a compliance attorney, not a blog post.
- The scope can change. FinCEN built the rule so it could expand to other loan and finance businesses. Building KYC habits now means a future rule is a paperwork update, not a rebuild.
Form 8300: the rule that does apply to you
Any person in a trade or business who receives more than $10,000 in cash in a single transaction or related transactions must file Form 8300. The IRS says that "person" covers individuals, companies, corporations and partnerships, so a brokerage qualifies.
The details that trip up small firms, from the IRS reference guide:
- The threshold counts related transactions within a 12-month period, so two $6,000 cash payments from the same client can add up to a reportable event.
- The form is due within 15 days of the payment. If day 15 falls on a weekend or holiday, it is due the next business day.
- Cash handling is where firms lose track. Decide in advance who tracks cash receipts and where they are logged.
Most commercial brokers are paid by wire or check at closing, so Form 8300 rarely comes up. The simplest policy is also the safest: do not accept cash for fees or deposits at all. A written line in your engagement letter takes care of it.
What lenders must do, and why it lands on your desk
Banks and other regulated lenders maintain Customer Identification Programs and perform due diligence on everyone involved in a loan, including principals and guarantors. The FFIEC BSA/AML manual notes that due diligence on higher-risk loans often includes reference checks, credit verification, and investigation into the source of collateral and funds.
That shapes what lenders ask you for:
- Government ID for each principal and guarantor
- Entity documents and an ownership chart down to the individuals
- Evidence of the source of equity and liquidity
- A clear statement of loan purpose and the intended use of proceeds
A broker who sends this up front looks organized. A broker who sends a name and a rent roll invites a week of back-and-forth, and often a quiet decline. Our guides on the loan document checklist and the six files that map to lender needs cover the packaging side in detail.
Do not lean on beneficial ownership filings
A few years ago many brokers pointed lenders to a borrower's Corporate Transparency Act filing. That shortcut is gone. FinCEN removed beneficial ownership reporting requirements for US companies and US persons, so you cannot assume a federal filing documents who owns the borrowing entity. You have to collect ownership information yourself, from operating agreements, cap tables or org charts, and match it to IDs.
Why commercial real estate attracts bad actors
Commercial real estate is a recurring theme in federal fraud cases. The typical patterns are inflated valuations, fraudulent appraisals, straw buyers, and loan applications built on invented or borrowed assets. The brokers named in those cases are not always the planners. Sometimes they are the connector.
A federal indictment from the Eastern District of Pennsylvania describes a broker who referred customers to a firm that collected large advance fees, in some instances over $25,000. These are allegations in a charging document, and they do not describe your business. They do show how a broker's referrals can become evidence in someone else's case. A Justice Department release on a Missouri case involving licensed real estate brokers makes the same point: licensed professionals in the middle of a deal are in the frame when the deal turns out to be fraudulent.
The lesson is not that every broker is at risk. It is that documented diligence is your defense. If you can show what you verified, when, and what you did when something looked wrong, you are in a different position from a broker who simply forwarded files.
A voluntary KYC workflow for every commercial deal
The FFIEC manual treats lack of transparency about source and use of funds as the central money laundering risk in lending. A broker KYC routine should therefore aim at transparency. Here is a sequence that takes under an hour on a typical deal once you have templates.
1. Identify the people, not just the entity
Collect a government-issued photo ID for every principal and guarantor. Check that the name matches the credit authorization, the entity documents and the bank statements. Mismatches are the cheapest red flag to catch.
2. Map ownership to individuals
Get the operating agreement or cap table and build an ownership chart to the natural persons. Ask directly: does anyone else control this entity or fund the equity? Write the answer down.
3. Confirm source and use of funds
For the equity, ask for recent bank or brokerage statements and a short explanation of where the money came from (sale proceeds, retained earnings, a gift, a partner contribution). For the loan proceeds, confirm that the stated purpose matches the property, the budget and the sources and uses table.
4. Sanity-check the deal itself
- Does the purchase price or appraised value fit comparable sales?
- Is the borrower buying at a price that makes no economic sense, or from a related party?
- Is the borrower pushing for speed, secrecy, or a lender that seems unusually willing to skip diligence?
- Is anyone asking you to hold funds or take cash?
5. Check the other side of the table
KYC runs in both directions. Before you send documents or accept anything resembling a deposit, verify the lender. Our article on private lender red flags lists what to verify before money moves.
6. Keep a written file
Save a short KYC memo per deal: who you verified, which documents you saw, any open questions and how they were resolved. Keep it with the loan file for the retention period your attorney recommends.
7. Know when to walk away
If a borrower refuses to disclose owners, cannot explain the source of equity, or pushes you to alter documents, decline the file. Tell a compliance attorney if you believe a crime is involved. A lost commission is cheaper than a subpoena.
Red flags that should slow you down
| Red flag | Why it matters | What to do |
|---|---|---|
| Equity appears right before closing with no paper trail | Source of funds cannot be shown | Ask for a documented history of the funds |
| Borrower resists naming owners or uses layered entities with no business reason | Ownership is hidden | Require a full ownership chart and IDs |
| Purchase price far from comps, or seller tied to buyer | Possible inflated value or straw buyer | Ask for an independent valuation context |
| Requests to pay or receive fees in cash | Form 8300 exposure and traceability | Refuse cash, use wires or checks |
| Lender or intermediary wants large advance fees | Common in fee scams | Verify the lender and avoid upfront payments |
| Documents with inconsistent fonts, dates or names | Possible alteration | Get originals from the issuing institution |
A perspective from our side of the desk
We built BrokersConnect around a simple observation: most of the time brokers lose on a deal is before the lender ever reads the file. Compliance questions are a big part of that. Lenders have to verify every party, so the broker who answers those questions in the first submission moves to the front of the queue.
We also see brokers treat KYC as something that belongs to banks. We disagree. Not being legally required to run an AML program is a reason to run a lean version voluntarily, because your lender relationships are your business. One bad file can cost you a lender who would have funded your next ten.
The approach we recommend is consistency. Use the same intake checklist on every deal, the same ownership chart format, the same KYC memo. Consistency makes you faster, and it makes your files look like a professional's. For the packaging side, our commercial mortgage compliance playbook goes deeper.
— Theron
Making KYC part of your pipeline
KYC fails when it lives in a folder nobody opens. It works when it is a step in the pipeline that a deal cannot skip. BrokersConnect is a subscription platform for commercial real estate brokers that combines a deal pipeline CRM, a secure document vault, deal templates, AI tools for deal packaging, and lender matching against a database of 289+ verified lenders. You can keep IDs, ownership charts and KYC memos with the deal, and send a complete package when you reach out to lenders.
The plan is $50 per month, flat, with a free trial and no commissions or transaction fees. You can start at BrokersConnect.
Matching a clean file to the right lender
A complete KYC package helps only if it reaches a lender whose box the deal fits. Lenders differ on guarantor liquidity, leverage, property type and location, and sending a clean file to the wrong lender wastes the effort. Start with lender shortlist criteria such as DSCR and LTV, then use a fit-first approach to contact commercial lenders without cold calls. If you work on specialized products, the DSCR submission checklist and the construction lender requirements show what each lender type asks for on identity and funds.
Policies to put in writing this week
You do not need a 40-page manual. A two-page policy, reviewed by your attorney, covers most small brokerages:
- No cash policy. Fees, deposits and expenses are paid by wire or check only, with a Form 8300 escalation note in case something slips through.
- Intake standard. Which documents you collect for every principal and guarantor, and who reviews them.
- Ownership chart rule. No submission goes out without an ownership chart to individuals.
- Source-of-funds note. A short, dated explanation attached to every file.
- Escalation path. Who you call when something looks wrong, and a standing relationship with a compliance or securities-and-banking attorney.
- Record retention. How long you keep files and where.
If you also originate residential loans, ask your attorney whether the FinCEN residential rule applies to that part of your operation and whether you need a full AML program there.
FAQ
Do commercial mortgage brokers need an AML program?
Not under the current federal rule for mortgage companies and brokers, which covers non-bank residential lenders and originators. FinCEN designed the framework to be expanded over time, and brokers with any residential origination should confirm their status with counsel. Many commercial brokers adopt a lightweight voluntary program anyway.
Does Form 8300 apply to a brokerage?
Yes. Any trade or business that receives more than $10,000 in cash in one transaction or related transactions must file, and the IRS defines a person broadly enough to include a brokerage. The filing is due within 15 days. The easiest way to avoid it is to refuse cash payments.
What KYC documents will a commercial lender ask me for?
Expect IDs for principals and guarantors, entity formation documents, an ownership chart, bank or brokerage statements showing liquidity, and an explanation of the source of equity. Lenders use these for their own identification and due diligence obligations. Requirements vary by lender and loan size, so ask for each lender's checklist.
Can a broker be liable if a borrower lies?
Yes, in the worst cases. Federal cases have named brokers among defendants where fraudulent applications or appraisals were involved. A documented KYC file does not make you immune, but it shows what you verified and supports a good-faith defense. Talk to an attorney if you suspect a file contains false information.
Sources
- Mortgage Companies and Brokers, FinCEN
- Important Information for Mortgage Companies and Brokers, FinCEN
- FinCEN requires AML program and SAR filing for non-bank mortgage lenders and originators
- FinCEN removes beneficial ownership reporting requirements for US companies and US persons
- IRS Form 8300 reference guide
- Reporting cash transactions helps government combat criminal activities, IRS
- FFIEC BSA/AML manual: risks associated with money laundering and terrorist financing
- Remington Financial indictment, US Attorney's Office, Eastern District of Pennsylvania
- US Attorney's Office, Western District of Missouri, Walker sentencing release