Title 31 audits for Tribal casinos
Independent testing of your Bank Secrecy Act compliance program: currency transaction reporting, suspicious activity monitoring, recordkeeping, and the flow of transactions across sample weeks.

What the regulation requires
Tribal gaming operations with more than $1 million in gross annual gaming revenue are treated as casinos under the Bank Secrecy Act. Under 31 CFR 1021.210, each must maintain a written compliance program that includes internal controls, independent testing, training, a designated compliance officer, procedures for using all available information, and automated systems where the casino uses them.
The rule calls for the scope and frequency of independent testing to match the money laundering and terrorist financing risks of the casino’s products and services. A Title 31 audit is that independent test.
What we test
- ✓Currency transaction reporting. Aggregation of cash-in and cash-out activity, multiple transaction logs, and timely, complete CTR filings.
- ✓Suspicious activity. How unusual activity is identified, escalated, reviewed and reported, and how decisions not to file are documented.
- ✓Customer identification and recordkeeping. Identification and verification when required, and retention of the records the regulations call for.
- ✓The flow of transactions. Cash activity traced across cage, table games, gaming machines and kiosks over sample weeks.
- ✓The program itself. The written program, risk assessment, compliance officer role, training records and use of automated systems.
What you receive
A report of exceptions tied to the regulation, separated from recommendations, written for management, the compliance officer and the Tribal gaming regulatory authority. The results also give you a documented basis for the program when it is examined.
How the engagement runs
Program review
We read your written compliance program, risk assessment and procedures, and interview the compliance officer about how they work in practice.
Sample selection
We select sample periods in seven-day increments so cash activity can be followed from one gaming day to the next.
Transaction testing
We trace cash activity across the cage, table games, gaming machines and kiosks to the multiple transaction logs, CTRs, the negotiable instrument log and SAR decisions, and test training records.
Report
Exceptions are tied to the regulation and separated from recommendations, in a report for management, the compliance officer and the regulatory authority.
Questions
How often should a Title 31 audit be performed?
The regulation does not set a fixed interval. It requires the scope and frequency of testing to be commensurate with the casino’s risks. Many operations test annually; your TICS or regulatory authority may set a schedule.
Can internal audit perform the independent test?
The rule allows internal or external testing. What matters is that the people testing are independent of the BSA functions being tested.
Do you train staff on Title 31 as well?
Yes. Training is a required element of the program, and we provide Title 31 training for compliance staff, internal auditors and regulators.

