By Robert JonesThe hum of the wax warmer at “Glow & Go” usually meant calm, but for Sarah Chen in early 2026, it was the sound of a ticking clock. A single $200 payment for a service package, something that happened a dozen times a day at her Midtown Atlanta salon, got flagged by her bank. The reason? A potential sanctions AML violation. SunTrust’s notification about that one transaction from a new client put her entire business on the line and forced her to learn about financial crime compliance the hard way.
Key Takeaways
- You have to screen clients against government blacklists like OFAC’s SDN list *before* you provide any service. Use a subscription software to make this automatic so you can identify high-risk people from the start.
- Give your staff a simple checklist of AML red flags, like a client wanting to pay for a personal facial with a corporate card, using multiple payment methods for one service, or asking weird questions about your bank, so they can spot trouble early.
- Create a documented procedure for reporting anything suspicious. Staff need to know exactly who to tell (you, or a designated manager) the moment a red flag pops up, without making a scene.
- Keep everything. You need secure digital records of all transactions, copies of client IDs, and any notes about suspicious activity reports for at least five years. It’s not optional, it’s a regulatory requirement.
- Don’t guess. Hire a lawyer who specializes in financial compliance to draft AML policies and procedures that actually fit your salon’s size and risk profile. A boilerplate template won’t cut it.
Sarah’s nightmare started innocently. A new client, “Elena Petrova,” booked a bunch of treatments and paid for them upfront with a credit card. The card worked, the appointment was set. Elena was perfectly nice. Like most salon owners, Sarah was focused on giving great service, not acting as a financial cop. That one blind spot almost destroyed her business.
A week later, a blunt email from her SunTrust business manager landed in her inbox. Subject: “Urgent: Transaction Review.” The email got straight to the point: a payment from “Elena Petrova” triggered an alert because of a possible link to someone on the Office of Foreign Assets Control (OFAC) Specially Designated Nationals (SDN) List. OFAC is the arm of the U.S. Treasury that enforces sanctions against terrorists, drug traffickers, and other threats to the country. A 2024 report from the Financial Crimes Enforcement Network (FinCEN) had already warned that small service businesses were becoming targets for money laundering because criminals assume they aren’t paying attention.
The shock was immediate and deep. Sarah was a licensed aesthetician. Fifteen years in the business. She’d built Glow & Go from a single chair in a shared studio into a real salon with five employees. Her focus was on her clients and her craft, not on global financial crime. Now her bank was talking about freezing her accounts, with the threat of fines that could easily run into six figures.
Her first call was to her lawyer, David Miller, over on Peachtree Street. He knew exactly how bad this was. “Sarah,” he said, “the government does not mess around with sanctions. You can face huge penalties even if you didn’t know what you were doing. FinCEN’s rules now apply to basically any business handling money, no matter how small you are.” He sent her to Maria Rodriguez, a compliance specialist at “Global Risk Solutions” in Buckhead.
Smooth skin that lasts, the easy way
Expert waxing that leaves you smooth for weeks. Find a top-rated studio near you.
Find a Wax Center Near You →Maria’s first move was to tear down Glow & Go’s client intake process. It was what you’d expect: name, phone, email, credit card. Nothing more. No checks against sanctions lists, no training for the staff on what to look for. “This is the classic mistake small businesses make,” Maria told Sarah right there in the salon. “You think AML is for banks, but if you’re taking payments, you’re part of the system. And the beauty industry, with all its cash and sometimes anonymous clients, has some serious vulnerabilities.”
Maria laid out the immediate action plan. First, Sarah had to give SunTrust everything they wanted on Elena Petrova, appointment notes, receipts, any emails or texts. Total cooperation. Second, she had to get a client screening program running immediately. This meant using a service to check new clients against the OFAC SDN list and other government watchlists. “You don’t have to be a detective,” Maria said, “but you have to do your homework. Just running a name through the free OFAC Sanctions List Search tool can save you from a disaster like this.”
The bank’s investigation confirmed it: “Elena Petrova” was a fake name for someone on the SDN list for international drug trafficking. That little $200 payment wasn’t so little. It was a test run, part of a bigger scheme to launder money by breaking it into small, random-looking payments at businesses like Sarah’s. That’s a textbook money laundering method called structuring. In the end, Sarah wasn’t charged with a crime, but the incident forced a mandatory AML compliance overhaul at her salon.
Maria then helped Sarah build a real Anti-Money Laundering (AML) policy from the ground up, one made for a salon, not a bank. It had a few core parts:
- Client Identification and Verification (CIP): For new clients, especially those booking expensive packages or trying to pay in weird ways, Glow & Go now required a driver’s license or other government ID. A 2025 bulletin from FinCEN had specifically pointed to the need for better ID checks in non-financial businesses.
- Sanctions Screening: Every new client’s name got run through a screening tool. Maria had her sign up for a service like Refinitiv World-Check One, which automates the checks and keeps them updated.
- Suspicious Activity Reporting (SAR) Procedures: The staff got trained to spot red flags. (Things like clients paying for a $150 facial with a giant wad of small bills, or trying to use three different credit cards.) Any weirdness was to be written down and reported to Sarah, who would then decide with her advisors if a formal SAR filing with FinCEN was necessary. Filing a SAR is what gives you legal safe harbor.
- Employee Training: All staff now have required training on AML basics and what to do if a client seems suspicious (without freaking them out).
- Record Keeping: They now keep detailed, secure records of client IDs, services, payments, and all compliance checks for at least five years, just as FinCEN requires.
One of Sarah’s biggest hurdles was putting these new rules in place without making her regulars feel like criminals. She just told them straight up that new security measures were needed to protect the business and its clients. Most people got it and even respected the professionalism.
The new costs weren’t trivial for a small business. The screening software subscription, the lawyer’s bills, the time for training, it was a new, unwelcome expense. But Sarah saw it as the cost of staying in business, and it was a lot cheaper than the fines and reputational ruin she’d just dodged. “It’s about being a responsible business owner,” Sarah told Maria later. “You pour your heart into a place that makes people feel good. The last thing you want is for it to be used by criminals.”
The whole mess proved one thing: financial crime regulations apply to everyone now, and no business is too small or too “niche” to get caught in the net. Because beauty services often deal with lots of transactions and personal client relationships, they have to be especially careful.
Small businesses like Glow & Go are on the front lines in the fight against financial crime whether they like it or not. Taking proactive steps, screening clients, training staff, and having a clear reporting plan, is the only way to protect your business and the financial system itself. Ignoring these duties leads to severe penalties, from massive fines to having your bank accounts frozen and your reputation destroyed.
It was a painful process, but turning Glow & Go into a fully compliant operation made the business stronger. The salon now runs with a different level of professionalism, proving that you can provide great beauty services while also maintaining financial integrity. Sarah’s close call is a lesson for every business owner out there, from the solo practitioner to the big salon chain: get your AML and sanctions compliance in order now to protect your future.
What is AML and how does it apply to beauty services?
AML (Anti-Money Laundering) is the legal framework that stops criminals from washing dirty money through legitimate businesses. It applies to beauty services because salons handle many financial transactions, making them a potential place to launder funds. Your business is expected to identify and report suspicious payments to avoid becoming complicit in a crime.
What are sanctions and why are they relevant for beauty businesses?
Sanctions are basically economic penalties, like a blacklist, that governments (like the U.S. Office of Foreign Assets Control, or OFAC) use against specific people, groups, and countries. They’re relevant to your salon because you’re legally forbidden from doing business with anyone on that list. You have to screen clients to make sure you’re not accidentally taking money from or providing services to a sanctioned individual involved in terrorism or drug trafficking, or you’ll face serious legal and financial trouble.
What specific steps can a beauty salon take to comply with AML and sanctions regulations?
To comply, a salon needs a solid Client Identification Program (CIP), which means actually verifying who your clients are, and you have to screen them against government watchlists like the OFAC SDN list. You also need to train your staff to recognize red flags (like structuring payments or using weird payment methods) and have a clear, written process for reporting those red flags to management so they can be escalated to FinCEN if needed.
Are small beauty businesses exempt from AML and sanctions compliance?
No, small beauty businesses are not exempt. While the intensity of your compliance program might scale with your size, every business that takes money is expected to have controls in place to prevent financial crime. Regulators like FinCEN are looking more closely at non-financial businesses, making it clear this responsibility goes way beyond just banks.
What are the potential penalties for non-compliance with AML and sanctions regulations?
The penalties are bad. They range from huge fines (hundreds of thousands or even millions of dollars) to jail time if the violation was intentional. On top of that, you can expect your bank accounts to be frozen, your business reputation to be ruined, and you could even lose your operating licenses. Compliance isn’t just a good idea. It’s critical for survival.
“Emma Richards, operations manager at Data Privacy Advisory Service, says businesses can collect more than just your date of birth when you sign up for a freebie.”
