Layering: burying the money trail

The economics of the trail

Once money is inside the financial system, the question changes. It is no longer “how do I deposit this?” but “can anyone connect this balance to the crime?” Layering attacks the connection itself. Every transfer between entities, every currency conversion, every border crossed adds friction for an investigator: another institution to subpoena, another jurisdiction’s cooperation to secure, another ledger in another format.

The launderer doesn’t need the trail to disappear, only to cost more to follow than the money is worth. That is the whole strategy, and it usually works: most of the world’s laundered money is never traced.

How layering works

Layering techniques

• Art, antiques and luxury goods: Turning illicit funds into paintings, antiques, watches, or cars that are portable, hard to price, and easy to resell, so the money comes back as a sale.
• Black Market Peso Exchange: A peso broker buys a cartel's US drug dollars at a discount and uses them to pay US exporters for Latin American importers, who repay the broker in pesos at home.
• Casinos and gambling: Dirty cash buys chips; minimal play and a cash-out turn it into documented gambling proceeds, a source of funds banks rarely question.
• Chain hopping and cross-chain bridges: Swapping illicit crypto across blockchains through bridges and no-KYC swap services so that no single chain's analytics tell the whole story.
• Correspondent banking and wire layering: Small or weakly supervised banks reach the dollar system through accounts at big correspondent banks, and rapid wires through many accounts and countries bury the origin of the money.
• Crypto ATMs and peer-to-peer trades: Turning cash into cryptocurrency at a kiosk or with a peer-to-peer trader, so that dirty cash or scam payments land in a wallet the criminal controls.
• Cuckoo smurfing: Cuckoo smurfing hijacks a legitimate international transfer: criminal cash is deposited into an unwitting recipient's account while the clean money stays offshore.
• Currency exchanges and MSBs: Using currency exchange houses, remitters, and other money services businesses to convert and send cash abroad, either through complicit operators or through firms whose controls are too weak to notice.
• Flying money: Chinese underground banks: Chinese underground banks match cartel cash in the US with Chinese clients who want dollars outside China's capital controls: two mirrored payments, and no money crosses a border.
• Funnel accounts and money mules: Recruited or deceived account holders receive and forward criminal money, so the bank's customer checks land on a real person who isn't the criminal.
• Gaming currencies and skins: Buying in-game currency, items or gambling balances with stolen or illicit funds, then trading them on for clean-looking cash or crypto.
• Hawala and informal value transfer: Moving value across borders through trusted brokers who pay out locally and settle with each other later: no money actually crosses, and no transaction record exists.
• Insurance products: Cash-value life policies and annuities can turn unexplained money into an insurer's cheque, which looks like an ordinary maturity, loan, or surrender payout.
• Loan-back schemes: A loan-back scheme sends a person's own money offshore and returns it as a documented loan from a lender they secretly control, so the funds arrive with a paper explanation.
• Mirror trading: Two matched securities trades in different currencies and offices, placed by connected parties, work as a hidden currency swap that moves money out of a country with no transfer to flag.
• Mixers, tumblers, and CoinJoin: Services that pool many users' coins and pay out equivalent amounts from the pool, breaking the on-chain link between where crypto came from and where it went.
• NFT wash trading: Buying and selling an NFT between wallets you control to fake a price, or to give illicit crypto the paper trail of an ordinary sale.
• Peel chains: Splitting a large crypto balance into a long series of transactions, each sending a small amount onward and the rest to a new address, so the trail is slow and tedious to follow.
• Prepaid cards and gift cards: Turning cash or stolen funds into prepaid and gift cards that are easy to carry, hand over, and resell, so the value moves without a bank account or a wire.
• Privacy coins: Cryptocurrencies with built-in features that hide who sent, who received, or how much, so a public blockchain no longer shows the whole story.
• Professional enablers: Lawyers, accountants, company formation agents, and real estate professionals whose ordinary services, knowingly or not, give illicit money a respectable paper trail.
• Round-tripping and fake foreign investment: Money leaves a country, passes through an offshore company, and returns as foreign investment or a foreign loan, gaining a clean-looking origin and often better legal or tax treatment.
• Sanctions evasion: Hiding who really owns or benefits from assets and payments so sanctions do not bite, using many of the same tools as money laundering but often with lawfully earned money.
• Securities and brokerage: Brokerage accounts, offshore nominee accounts, and thinly traded microcap stocks can move and disguise value, because markets shift money instantly and legitimately.
• Shell companies and nominees: Companies with no real operations hold accounts and assets while nominee directors and stacked ownership across jurisdictions hide the true beneficial owner.
• Stablecoins and OTC brokers: Moving illicit value through dollar-pegged stablecoins (above all USDT on Tron) and converting it to cash through over-the-counter brokers and guarantee marketplaces with little or no KYC.
• Trade based money laundering (TBML): Moving value across borders through trade paperwork: over- or under-invoicing goods, double-invoicing shipments, or invoicing shipments that never happened.
• Transaction laundering: Running card payments for a hidden business through another merchant's legitimate processing account so the payment system sees only the front.
• Unlicensed exchanges and nested services: Crypto exchanges that skip licensing and identity checks, and small services hidden inside big exchanges, that let criminals convert coins to cash without questions.

How layering gets caught

Layering fails at its chokepoints. Correspondent banks see aggregate flows that individual banks miss. Financial intelligence units match reports across institutions. Blockchain analytics firms cluster addresses that were supposed to be anonymous. And when the system fails, leaks and whistleblowers (the Panama Papers, the FinCEN Files, Danske’s Howard Wilkinson) publish the trail wholesale. Every layering technique page describes the specific seam where that technique tears.

Next stage: integration, spending it.

First published August 28, 2026 · Last updated August 28, 2026