What tribal casinos need to know about upcoming Title 31/AML rule changes

Tribal casinos should begin preparing now for what is expected to be the most significant update to anti-money laundering (AML) rules in years.

In April 2026, the U.S. Department of the Treasury’s Financial Crimes Enforcement Network (FinCEN) issued a Notice of Proposed Rulemaking that would fundamentally reshape AML requirements under the Bank Secrecy Act (BSA), commonly known as Title 31. The proposal is expected to be finalized in 2026, with an anticipated 12-month implementation period following publication of the final rule.

For tribal casinos, the proposed changes signal a shift away from a compliance model focused primarily on filing currency transaction reports (CTRs) and suspicious activity reports (SARs) correctly and on time. Instead, regulators are emphasizing the effectiveness of an institution’s overall AML program and its ability to identify, assess and mitigate financial crime risk.

For tribal casino leadership, the message is clear: Now is the time to begin assessing gaps, updating governance and evaluating whether current technology, staffing and monitoring processes are sufficient to meet heightened expectations.

What are the Title 31 AML changes?

While the proposal is still subject to public comment and revision, several themes are already clear.

Enhanced AML program requirements

The proposed rule places risk assessments at the center of AML compliance. Financial institutions, including casinos, would be required to design AML frameworks tailored to their specific risk profile, including customer types, gaming activities, geographic location and transaction patterns.

Expanded reporting expectations

Casinos are already required to file CTRs for qualifying cash transactions over $10,000 and SARs for suspicious transactions involving at least $5,000. CTR and SAR filing requirements are not going away. But more emphasis is being placed on effectively identifying suspicious behavior — not merely submitting reports correctly.

Examples of suspicious activity can include:

• Patrons inserting large amounts of cash into slot machines with minimal play before cashing out
• Individuals buying chips, playing briefly and quickly leaving
• Attempts to structure transactions around gaming-day transitions
• Potential use of stolen credit cards or illicit funds

The focus is shifting toward identifying the broader patterns behind these transactions and documenting investigations appropriately.

Stronger internal controls and governance

The proposal would require written AML programs to receive approval from a tribal casino’s leadership and reinforce expectations around oversight. It also clarifies accountability expectations for AML compliance officers.

Leadership involvement is becoming increasingly important because regulators want to see an enhanced “culture of compliance” throughout the organization, not separate compliance teams operating siloed from operations.

Technology and data requirements

Most tribal casinos have monitoring technology, but are they using it or leveraging its full capabilities? Regulators are increasingly expecting integrated systems capable of monitoring activity across slots, table games, cage transactions and other financial touchpoints in real time.

Alignment with broader financial institution standards

FinCEN’s proposal reinforces that casinos are financial institutions under the BSA and should be held to standards closer to banks and fintech organizations.

That means tribal casinos can expect greater scrutiny around governance, documentation, customer due diligence and program effectiveness moving forward.

How will AML updates challenge tribal casinos?

If the BSA/AML changes take effect, tribal casinos’ compliance efforts will be under more scrutiny. Additional regulatory pressure will be felt across many areas of your operation.

Increased technology expectations

Outdated technology that fails to provide adequate visibility into activity across the gaming floor will hurt your AML compliance posture. Casinos will need to consider investing in new surveillance technology and automation and analytics tools that improve monitoring of activity on the gaming floor.

Greater scrutiny of cage operations

The cage is where money is changing hands in your casino, whether it’s cash transactions, TITO ticket redemptions, front money deposits, markers, credit advances or chip transactions. Clearly, this area is a focal point for detecting potential money laundering. Real-time transaction monitoring and accurate aggregation of customer activity will be increasingly important.

Pressure on finance and compliance teams

While compliance officers and teams have traditionally carried much of the AML burden, the new framework emphasizes enterprise-wide accountability. Documentation, investigations, governance, reporting and record retention will require greater coordination among compliance, finance, operations, surveillance and executive leadership.

For example, financial and compliance teams may need to work with IT and operations to help ensure systems capture all relevant activity across the gaming floor. Then they take that data and analyze it to determine suspicious activity.

Policy, procedure and training updates

Existing AML policies and procedures may need minor or significant revisions to reflect new risk-based requirements. Employee training programs must also evolve to help ensure personnel understand their roles in detecting and reporting suspicious activity. FinCEN specifically emphasizes ongoing employee training as a core pillar of an effective AML program.

What should tribal casinos focus on for AML compliance?

The following actions will help your casino adopt a more risk-based approach to preventing money laundering that regulators expect.

Conduct a risk assessment tailored to your operation

Every tribal casino faces a unique risk profile. Location, customer demographics, gaming offerings, transaction volumes and regional crime patterns all influence how you should approach your money laundering prevention efforts. You need to perform a risk assessment that accounts for all the aspects that create your casino’s risk profile.

A few factors to consider in your risk assessment include:

• Is the casino located in a high drug-trafficking corridor?
• Does your area experience a lot of financial crime?
• How many large cash players visit your casino?
• How large is your gaming room floor?
• What types of games do you offer, and which are the most popular?
• What percentage of patrons use player cards versus remaining anonymous?
• Are there any historical trends related to criminal activity at your casino?

A risk assessment should answer these questions and drive the design of the AML program. Regulators increasingly expect risk assessments to be dynamic and defensible and serve as a catalyst for resource allocation and control design.

The risk assessment should not fall solely on your AML compliance officer. It’s a project your entire leadership team needs to be involved in.

Implement a robust KYC program

You want to know who is gambling on your property. FinCEN’s proposal puts greater emphasis on understanding who is on the casino floor and whether their activity aligns with legitimate sources of funds. There are many tools and strategies for implementing a KYC program, including:

• Purchasing an investigative or public records software
• Doing negative news searches on frequent guests
• Promote the use of players’ cards. These help casinos capture more information on their patrons.
• Looking for source-of-funds indicators
• Ensuring your compliance team has proper training on the tools they use

Examples concerning scenarios that a KYC program can help your staff identify include:

• A patron’s employment status doesn’t align with the amount they are gambling. If someone is unemployed and gambling thousands of dollars, that should raise suspicion.
• Patrons on the floor with a history of charges related to drug dealing.

Invest in the right tools and analytics

The larger your casino is, the more challenging manual monitoring processes become. Leverage modern automation and data analytics tools to get a clearer picture of what’s happening on your gaming floor and to better recognize trends or anomalies that are suspicious.

AML software can be integrated into systems that captures data from slot machines, table games, cage transactions and other activities on your floor. Having that data flow into a single program simplifies monitoring and analysis.

Some benefits of an integrated AML system include:

• Aggregate transactions properly for CTR reporting
• Identify suspicious transaction patterns faster
• Maintain stronger audit trails
• Improve documentation and investigations
• Reduce information silos between departments

Strengthen surveillance capabilities

Surveillance technology plays an important role in AML compliance and general security at your casino. Not only does a surveillance system provide a real-time view of the entire gaming floor, but it can also be a valuable tool for AML investigations.

For instance, if there’s suspicion of bill stuffing at a slot machine, surveillance teams can review footage from that time frame and attempt to identify the suspect.

Investing in the right surveillance tools for your operation is important. But don’t overlook the value of training your surveillance staff to spot activity that could be tied to money laundering. Staff will also need to be trained on their role in SAR documentation. This should not be a one-time activity.

Train all impacted employees

AML compliance is not solely the responsibility of the compliance department.

Cage employees, table games staff, slot attendants, surveillance personnel, hosts, finance teams and executives all play a role in identifying and escalating potential issues. Training programs should be tailored to specific job functions and aligned with the casino’s risk profile.

Create an enhanced culture of compliance

Title 31/AML compliance can no longer be treated as a simple reporting exercise. Tribal casino leadership must foster a culture of compliance and secure organization-wide buy-in.

Schedule a recurring AML meeting for decision-makers from all impacted departments (compliance, IT, security, finance, etc.). These meetings will help break down any information silos and help ensure that important information is communicated to everyone who is impacted.

What steps should tribal casinos take now?

The 12-month implementation window that will kick in if the rule changes are finalized may feel like a long window. But for tribal casinos that delay taking the actions necessary for compliance, that timeline will get short in a hurry. If the IRS shows up at your property after the window has closed, you want to be sure you’re prepared for an audit or examination.

Tribal casino leaders should be developing plans to take the following actions in the near term:

• Conduct a comprehensive AML risk assessment that identifies and documents your casino’s unique risks. Develop controls to account for those risks.
• Perform a gap assessment comparing current controls against proposed requirements.
• Update policies, procedures and documentation as needed.
• Evaluate whether current AML software provides complete visibility across gaming operations.
• Strengthen KYC and customer due diligence processes.
• Designate an AML compliance officer. Provide them with clear communication channels to leadership.
• Assess your surveillance and other technologies to determine where upgrades are needed.
• Review governance structures and board oversight practices.
• Expand AML training programs across all relevant departments.

How Wipfli can help

Preparing for Title 31/AML changes requires more than updating policies. It requires building an effective, risk-based and defensible program. At Wipfli, we have a team of experienced professionals who can guide leadership at your casino through all aspects of implementing a Title 31/AML compliance program that will withstand scrutiny. Start a conversation

Build a defensible AML compliance program

Read More

• Top security gaps in tribal casinos: What physical pen testing reveals
• Your tribal organization just implemented a new ERP. How do you maximize the success of your investment?
• Tribal gaming trends: What’s top of mind for gaming leaders in spring 2026?