Explore our services
Meeting increasingly complex compliance requirements while maintaining efficiency and supporting your community goals requires a proactive approach to risk. Wipfli’s tribal risk management solutions help you assess regulatory risk and apply practical recommendations for improving processes and controls.
When financial disputes or suspected misconduct arise, tribal leaders need experienced advisors who can provide clarity and defensible analysis. Wipfli’s forensic advisory professionals help you investigate complex issues, quantify financial impacts and navigate challenging situations with confidence.
Wipfli’s tribal governance support helps you mitigate risk across your organization and enterprises. Our advisors bring experience working within complex tribal environments, helping leadership balance oversight responsibilities, regulatory requirements and strategic priorities.
Wipfli helps you manage growing operational complexity and tribal risk with practical solutions built for your tribal mission. We work alongside leadership to evaluate your operations and deliver tailored recommendations for how you can strengthen performance, improve accountability and enhance sustainability.
Allegations of fraud, misuse of assets or financial misconduct can have significant consequences for tribal organizations. Wipfli provides independent investigative services to help tribal governments and enterprises respond quickly, objectively and confidentially when concerns arise.
Insights and resources
ARTICLE
Tribal gaming trends fall 2026: Four issues to watch | Wipfli
Explore tribal gaming trends for 2026, including NIGC credit card audits, AI strategy, construction monitoring and new GASB reporting requirements.
ARTICLE
How tribes can protect their investments with construction project monitoring
Construction projects often represent significant investments in tribal communities. As tribal governments and organizations continue to manage increasingly complex projects and funding sources, strong oversight is essential to ensuring that community resources are used responsibly and effectively. Effective construction monitoring protects financial resources and helps build confidence that projects are delivering the intended value for future generations. Here’s how your tribe can use construction project monitoring to protect its investments: What does construction monitoring mean? The primary goal of construction monitoring is to identify any instances of incorrect charges or inaccurate billings. For tribal governments and organizations, construction monitoring provides an added layer of oversight throughout the life of a project. Whether a project is funded through tribal resources, federal grants or other funding sources, monitoring helps leadership verify that payments align with work completed and that project costs remain within budget and well-documented. What are the benefits of construction monitoring? Construction monitoring provides tribal leadership with greater visibility into project progress, costs and risks. With effective monitoring, you’re better equipped to: Keep projects on track: Regular monitoring provides a clear picture of project status, completed work and upcoming milestones. This visibility helps tribal leaders identify delays early and work with the construction team to address issues before they impact timelines. Save on costs: Construction projects are costly, and those costs are often incurred over an extended period. Project monitoring helps ensure that payments and change orders are reasonably priced and paid appropriately for work that was contracted for. Stay within scope: Monitoring helps ensure that the contract is being carried out according to contract terms, helping prevent unauthorized work and unexpected costs. Align your teams: Monitoring establishes clear expectations and reporting, helping keep all stakeholders, including tribal leadership, project managers, contractors and architects aligned around project budgets and schedules. Identify risks: Regular reviews can reveal potential exposure related to insurance coverage, lien waivers, documentation requirements and other compliance matters. Avoid litigation: By reviewing costs and project documentation throughout construction, tribes can identify and negotiate issues before they move to arbitration or litigation. Support continuous improvement: Project monitoring provides valuable insight into how you can improve planning and management for future capital investments. When do you need construction monitoring? Not every construction project requires the same level of oversight. However, construction monitoring can provide significant value when a project involves substantial investments, multiple stakeholders or increased construction risk. Tribal leaders should consider the following factors when determining whether construction monitoring is appropriate: What is the experience or staffing level of your construction department? Construction has its own language and billing procedures. Construction monitoring provides professionals with construction knowledge to supplement their internal team before, during and after the construction process. What is the size and complexity of your project? Larger projects, higher-cost developments and projects with multiple phases or specialized requirements often benefit from clear oversight of costs, schedules and contract compliance. How long will the project take? Projects with long timelines or accelerated construction schedules can be difficult to manage without ongoing visibility into progress. How are contractors being paid? Contracts based on cost-plus, time-and-materials or other variable billing arrangements may require additional scrutiny. What level of risk does the project present? High-profile projects, first-time developments, projects with high levels of general contractor self-performed work or projects involving numerous contractors and subcontractors often carry greater financial and operational risk. How many change orders are involved? Scope changes are common in construction projects, but they can also create budget and schedule challenges. Monitoring helps track change orders, evaluate supporting documentation and confirm that additional costs are justified and properly managed. How to monitor a construction project Effective construction monitoring starts with a proactive approach. Tribal leaders should establish clear oversight practices from the outset and maintain visibility throughout the life of the project. Here are five ways you can protect community investments and reduce the risk of costly surprises: 1. Be proactive during the pre-construction phase Bring in construction professionals during the pre-construction phase to assist with: Project design Budgeting General contractor selection Contract selection and definition of terms Getting in front of the project helps set it up for success. Being involved in the planning phases and having the ability to establish policy and procedures that clearly define what your expectations are will serve both you and the project’s progress. 2. Build monitoring requirements into your construction contract A well-structured contract lays the foundation for successful monitoring. Clear expectations upfront can help minimize disputes later and provide tribal leaders with greater confidence that costs are appropriate and well-supported. Your construction monitoring checklist can include: Technology and equipment costs charged to the project, such as laptops, software and IT allocations Vehicle rental, fuel and maintenance costs for project personnel Mobile phone and communication expenses Sales tax treatment Labor burden and overhead percentages Reimbursable safety and compliance expenses Available discounts, rebates or construction tax credits Project management and executive oversight costs charged to the project Documentation requirements for invoices and change orders The tribe’s right to review or audit project costs and supporting records Monthly payment application and change order templates that the general contractor has agreed to provide with supporting documentation 3. Establish a monitoring timeline Construction monitoring can take place at several points during a project, including: Monthly or quarterly reviews Reviews at key project milestones or phase completions A final review after project completion While a post-project review can identify lessons learned and uncover issues that arose during construction, the greatest value comes from beginning monitoring before construction starts and continuing it throughout the project. Early involvement allows tribal leadership to establish contract terms that support transparency and accountability from the beginning. Ongoing monitoring provides regular insight into project performance, helping leaders identify concerns early, address them promptly and keep projects on schedule and within budget. 4. Ensure you have the right expertise Construction monitoring draws on a range of technical, financial and operational skills. Whether these capabilities exist internally or are provided through a trusted advisor, successful monitoring typically requires expertise in several areas: Audit and financial review: Verifying that costs are accurate and aligned with contract terms requires the skills to evaluate invoices, payment applications and support documentation. Construction knowledge: Understanding construction processes, industry terminology and common billing practices helps reviewers identify potential concerns. Contract administration: Team members should understand how contracts are structured and be able to assess whether contractors are complying with agreed-upon terms and requirements. Data analytics and reporting: Analyzing project data, budgets, schedules and cost trends can help leadership identify emerging risks and make informed decisions throughout the project life cycle. 5. Use a consistent framework for construction monitor reviews A structured review process helps ensure that project costs are evaluated consistently throughout construction. One useful framework is RAID, which can be applied to invoices, change orders and other project expenses. Reimbursable: Is the expense allowable under the contract and eligible for reimbursement? Accurate: Are the amounts billed mathematically correct and supported by appropriate documentation? Incurred: Has the cost been incurred, and does it relate directly to the project and the work performed? Documented: Is there sufficient documentation, such as invoices, receipts, payroll records or other supporting materials, to substantiate the expense? Read more: How IRS rules impact GWE and tribal corporation tax exemption Tribal ERP systems: Your post-implementation support guide Here’s why tribes should start succession planning now
ARTICLE
What tribal casinos need to know about upcoming Title 31/AML rule changes
Tribal casinos should begin preparing now for what is expected to be the most significant update to anti-money laundering (AML) rules in years. In April 2026, the U.S. Department of the Treasury’s Financial Crimes Enforcement Network (FinCEN) issued a Notice of Proposed Rulemaking that would fundamentally reshape AML requirements under the Bank Secrecy Act (BSA), commonly known as Title 31. The proposal is expected to be finalized in 2026, with an anticipated 12-month implementation period following publication of the final rule. For tribal casinos, the proposed changes signal a shift away from a compliance model focused primarily on filing currency transaction reports (CTRs) and suspicious activity reports (SARs) correctly and on time. Instead, regulators are emphasizing the effectiveness of an institution’s overall AML program and its ability to identify, assess and mitigate financial crime risk. For tribal casino leadership, the message is clear: Now is the time to begin assessing gaps, updating governance and evaluating whether current technology, staffing and monitoring processes are sufficient to meet heightened expectations. What are the Title 31 AML changes? While the proposal is still subject to public comment and revision, several themes are already clear. Enhanced AML program requirements The proposed rule places risk assessments at the center of AML compliance. Financial institutions, including casinos, would be required to design AML frameworks tailored to their specific risk profile, including customer types, gaming activities, geographic location and transaction patterns. Expanded reporting expectations Casinos are already required to file CTRs for qualifying cash transactions over $10,000 and SARs for suspicious transactions involving at least $5,000. CTR and SAR filing requirements are not going away. But more emphasis is being placed on effectively identifying suspicious behavior — not merely submitting reports correctly. Examples of suspicious activity can include: Patrons inserting large amounts of cash into slot machines with minimal play before cashing out Individuals buying chips, playing briefly and quickly leaving Attempts to structure transactions around gaming-day transitions Potential use of stolen credit cards or illicit funds The focus is shifting toward identifying the broader patterns behind these transactions and documenting investigations appropriately. Stronger internal controls and governance The proposal would require written AML programs to receive approval from a tribal casino’s leadership and reinforce expectations around oversight. It also clarifies accountability expectations for AML compliance officers. Leadership involvement is becoming increasingly important because regulators want to see an enhanced “culture of compliance” throughout the organization, not separate compliance teams operating siloed from operations. Technology and data requirements Most tribal casinos have monitoring technology, but are they using it or leveraging its full capabilities? Regulators are increasingly expecting integrated systems capable of monitoring activity across slots, table games, cage transactions and other financial touchpoints in real time. Alignment with broader financial institution standards FinCEN’s proposal reinforces that casinos are financial institutions under the BSA and should be held to standards closer to banks and fintech organizations. That means tribal casinos can expect greater scrutiny around governance, documentation, customer due diligence and program effectiveness moving forward. How will AML updates challenge tribal casinos? If the BSA/AML changes take effect, tribal casinos’ compliance efforts will be under more scrutiny. Additional regulatory pressure will be felt across many areas of your operation. Increased technology expectations Outdated technology that fails to provide adequate visibility into activity across the gaming floor will hurt your AML compliance posture. Casinos will need to consider investing in new surveillance technology and automation and analytics tools that improve monitoring of activity on the gaming floor. Greater scrutiny of cage operations The cage is where money is changing hands in your casino, whether it’s cash transactions, TITO ticket redemptions, front money deposits, markers, credit advances or chip transactions. Clearly, this area is a focal point for detecting potential money laundering. Real-time transaction monitoring and accurate aggregation of customer activity will be increasingly important. Pressure on finance and compliance teams While compliance officers and teams have traditionally carried much of the AML burden, the new framework emphasizes enterprise-wide accountability. Documentation, investigations, governance, reporting and record retention will require greater coordination among compliance, finance , operations, surveillance and executive leadership. For example, financial and compliance teams may need to work with IT and operations to help ensure systems capture all relevant activity across the gaming floor. Then they take that data and analyze it to determine suspicious activity. Policy, procedure and training updates Existing AML policies and procedures may need minor or significant revisions to reflect new risk-based requirements. Employee training programs must also evolve to help ensure personnel understand their roles in detecting and reporting suspicious activity. FinCEN specifically emphasizes ongoing employee training as a core pillar of an effective AML program. What should tribal casinos focus on for AML compliance? The following actions will help your casino adopt a more risk-based approach to preventing money laundering that regulators expect. Conduct a risk assessment tailored to your operation Every tribal casino faces a unique risk profile. Location, customer demographics, gaming offerings, transaction volumes and regional crime patterns all influence how you should approach your money laundering prevention efforts. You need to perform a risk assessment that accounts for all the aspects that create your casino’s risk profile. A few factors to consider in your risk assessment include: Is the casino located in a high drug-trafficking corridor? Does your area experience a lot of financial crime? How many large cash players visit your casino? How large is your gaming room floor? What types of games do you offer, and which are the most popular? What percentage of patrons use player cards versus remaining anonymous? Are there any historical trends related to criminal activity at your casino? A risk assessment should answer these questions and drive the design of the AML program. Regulators increasingly expect risk assessments to be dynamic and defensible and serve as a catalyst for resource allocation and control design. The risk assessment should not fall solely on your AML compliance officer. It’s a project your entire leadership team needs to be involved in. Implement a robust KYC program You want to know who is gambling on your property. FinCEN’s proposal puts greater emphasis on understanding who is on the casino floor and whether their activity aligns with legitimate sources of funds. There are many tools and strategies for implementing a KYC program, including: Purchasing an investigative or public records software Doing negative news searches on frequent guests Promote the use of players’ cards. These help casinos capture more information on their patrons. Looking for source-of-funds indicators Ensuring your compliance team has proper training on the tools they use Examples concerning scenarios that a KYC program can help your staff identify include: A patron’s employment status doesn’t align with the amount they are gambling. If someone is unemployed and gambling thousands of dollars, that should raise suspicion. Patrons on the floor with a history of charges related to drug dealing. Invest in the right tools and analytics The larger your casino is, the more challenging manual monitoring processes become. Leverage modern automation and data analytics tools to get a clearer picture of what’s happening on your gaming floor and to better recognize trends or anomalies that are suspicious. AML software can be integrated into systems that captures data from slot machines, table games, cage transactions and other activities on your floor. Having that data flow into a single program simplifies monitoring and analysis. Some benefits of an integrated AML system include: Aggregate transactions properly for CTR reporting Identify suspicious transaction patterns faster Maintain stronger audit trails Improve documentation and investigations Reduce information silos between departments Strengthen surveillance capabilities Surveillance technology plays an important role in AML compliance and general security at your casino. Not only does a surveillance system provide a real-time view of the entire gaming floor, but it can also be a valuable tool for AML investigations. For instance, if there’s suspicion of bill stuffing at a slot machine, surveillance teams can review footage from that time frame and attempt to identify the suspect. Investing in the right surveillance tools for your operation is important. But don’t overlook the value of training your surveillance staff to spot activity that could be tied to money laundering. Staff will also need to be trained on their role in SAR documentation. This should not be a one-time activity. Train all impacted employees AML compliance is not solely the responsibility of the compliance department. Cage employees, table games staff, slot attendants, surveillance personnel, hosts, finance teams and executives all play a role in identifying and escalating potential issues. Training programs should be tailored to specific job functions and aligned with the casino’s risk profile. Create an enhanced culture of compliance Title 31/AML compliance can no longer be treated as a simple reporting exercise. Tribal casino leadership must foster a culture of compliance and secure organization-wide buy-in. Schedule a recurring AML meeting for decision-makers from all impacted departments (compliance, IT, security, finance, etc.). These meetings will help break down any information silos and help ensure that important information is communicated to everyone who is impacted. What steps should tribal casinos take now? The 12-month implementation window that will kick in if the rule changes are finalized may feel like a long window. But for tribal casinos that delay taking the actions necessary for compliance, that timeline will get short in a hurry. If the IRS shows up at your property after the window has closed, you want to be sure you’re prepared for an audit or examination. Tribal casino leaders should be developing plans to take the following actions in the near term: Conduct a comprehensive AML risk assessment that identifies and documents your casino’s unique risks. Develop controls to account for those risks. Perform a gap assessment comparing current controls against proposed requirements. Update policies, procedures and documentation as needed. Evaluate whether current AML software provides complete visibility across gaming operations. Strengthen KYC and customer due diligence processes. Designate an AML compliance officer. Provide them with clear communication channels to leadership. Assess your surveillance and other technologies to determine where upgrades are needed. Review governance structures and board oversight practices. Expand AML training programs across all relevant departments. Read More Top security gaps in tribal casinos: What physical pen testing reveals Your tribal organization just implemented a new ERP. How do you maximize the success of your investment? Tribal gaming trends: What’s top of mind for gaming leaders in spring 2026?
Reach out to our team
We’re ready to help your tribal government and enterprises navigate complex risks with practical guidance and actionable solutions.
Tribal risk management FAQ
Risk management supports tribal self-governance by helping tribal leaders proactively protect the resources, programs and enterprises that help sustain their community.
Tribes are responsible for managing a complex mix of funding and responsibilities. With effective risk management, tribes can:
- Improve decision making: Being proactive about identifying risk across an organization, from finances and cybersecurity to regulations and compliance, makes it easier for leaders to be confident about their strategic decisions.
- Strengthen accountability: Understanding risk and roles helps ensure better resource management so that tribes can maintain essential services and preserve sovereignty.
- Execute strategic plans: When risks are identified and managed effectively, leaders are better positioned to carry out strategic priorities without disruption.
Wipfli’s risk management services for tribes include:
- Internal audit services to evaluate risks, strengthen governance, improve accountability and develop audit plans aligned with tribal priorities.
- Risk assessments and internal control reviews that help tribal leaders identify vulnerabilities, improve oversight and strengthen operational performance.
- Title 31/AML compliance services for tribal gaming organizations, including risk assessments, compliance program reviews and recommendations to help mitigate regulatory risk.
- MICS compliance and agreed-upon procedures to help casinos evaluate controls, test compliance and maintain effective gaming operations.
- Regulatory risk and compliance support to help tribes address evolving requirements, strengthen compliance programs and improve organizational resilience.
- Forensic accounting and investigative services to support fraud investigations, litigation matters, damage analysis and other situations requiring financial or digital forensic expertise.
- Construction risk and project oversight support to help manage project risks, monitor costs, improve contract compliance and address disputes when they arise.
LET'S CONNECT
See how Wipfli can help you implement risk management that supports compliance, productivity and long-term success.
