How we help you
From gaming regulations and federal funding requirements to construction oversight and cybersecurity, leaders must navigate a growing range of tribal compliance obligations.
Stay ahead of shifting regulations.
Streamline compliance and audits.
Uphold transparency for members and stakeholders.
Improve controls and processes.
Protect your assets and sustainability
Wipfli’s regulatory compliance consulting for tribes takes a proactive approach, helping you mitigate risk and uncover opportunities to enhance compliance and long-term performance.
Explore our services
Wipfli provides comprehensive risk assessments that include a detailed evaluation, analysis and review of your casino’s BSA/ Title 31 compliance program. We also help you strengthen your program with tailored recommendations for corrective actions and training to help your teams complete annual updates.
Navigating construction projects, contracts and costs on tribal lands can be unique, time-consuming and complex. Wipfli’s dedicated team combines extensive construction industry experience with deep knowledge of how tribal entities operate. We can help you manage the schedule, define contracts terms and ensure appropriate cost compliance according to contract terms that allows you to complete projects within budget and on time. If the projects do not proceed as planned, Wipfli is also experienced with dispute resolution, including litigation support.
Our audit professionals bring extensive tribal experience and an advisory mindset to help you identify risks, strengthen governance and develop an internal audit plan aligned with your priorities. We provide practical guidance, not just a checklist, helping you implement solutions that support tribal gaming and tribal government compliance, protect tribal assets and advance long-term community goals.
Make sure your controls are current and compliant with help from Wipfli. Our team provides the structure, analysis and training required to help ensure a successful and compliant casino operation. We also offer internal control risk assessments, departmental walk-throughs, effectiveness testing and transaction testing by department.
Wipfli’s Casino Knowledge Hub is a user-friendly online learning platform that allows your staff to meet compliance training requirements on your schedule. With decades of experience and deep knowledge dedicated to the gaming industry, our professionals continually review our course offerings to bring you relevant topics and the information you need most. Our customized learning tracks include BSA report filing, cybersecurity, Title 31/AML, currency transaction reporting and suspicious activity reporting.
From casino floor transactions to online payments, protecting cardholder data is essential to your operation. Our cybersecurity team helps you maintain a secure environment and navigate PCI compliance requirements by helping you identify security gaps and implement targeted solutions to reduce risk.
Insights and resources
ARTICLE
Tribal gaming trends fall 2026: Four issues to watch | Wipfli
Explore tribal gaming trends for 2026, including NIGC credit card audits, AI strategy, construction monitoring and new GASB reporting requirements.
ARTICLE
How tribes can protect their investments with construction project monitoring
Construction projects often represent significant investments in tribal communities. As tribal governments and organizations continue to manage increasingly complex projects and funding sources, strong oversight is essential to ensuring that community resources are used responsibly and effectively. Effective construction monitoring protects financial resources and helps build confidence that projects are delivering the intended value for future generations. Here’s how your tribe can use construction project monitoring to protect its investments: What does construction monitoring mean? The primary goal of construction monitoring is to identify any instances of incorrect charges or inaccurate billings. For tribal governments and organizations, construction monitoring provides an added layer of oversight throughout the life of a project. Whether a project is funded through tribal resources, federal grants or other funding sources, monitoring helps leadership verify that payments align with work completed and that project costs remain within budget and well-documented. What are the benefits of construction monitoring? Construction monitoring provides tribal leadership with greater visibility into project progress, costs and risks. With effective monitoring, you’re better equipped to: Keep projects on track: Regular monitoring provides a clear picture of project status, completed work and upcoming milestones. This visibility helps tribal leaders identify delays early and work with the construction team to address issues before they impact timelines. Save on costs: Construction projects are costly, and those costs are often incurred over an extended period. Project monitoring helps ensure that payments and change orders are reasonably priced and paid appropriately for work that was contracted for. Stay within scope: Monitoring helps ensure that the contract is being carried out according to contract terms, helping prevent unauthorized work and unexpected costs. Align your teams: Monitoring establishes clear expectations and reporting, helping keep all stakeholders, including tribal leadership, project managers, contractors and architects aligned around project budgets and schedules. Identify risks: Regular reviews can reveal potential exposure related to insurance coverage, lien waivers, documentation requirements and other compliance matters. Avoid litigation: By reviewing costs and project documentation throughout construction, tribes can identify and negotiate issues before they move to arbitration or litigation. Support continuous improvement: Project monitoring provides valuable insight into how you can improve planning and management for future capital investments. When do you need construction monitoring? Not every construction project requires the same level of oversight. However, construction monitoring can provide significant value when a project involves substantial investments, multiple stakeholders or increased construction risk. Tribal leaders should consider the following factors when determining whether construction monitoring is appropriate: What is the experience or staffing level of your construction department? Construction has its own language and billing procedures. Construction monitoring provides professionals with construction knowledge to supplement their internal team before, during and after the construction process. What is the size and complexity of your project? Larger projects, higher-cost developments and projects with multiple phases or specialized requirements often benefit from clear oversight of costs, schedules and contract compliance. How long will the project take? Projects with long timelines or accelerated construction schedules can be difficult to manage without ongoing visibility into progress. How are contractors being paid? Contracts based on cost-plus, time-and-materials or other variable billing arrangements may require additional scrutiny. What level of risk does the project present? High-profile projects, first-time developments, projects with high levels of general contractor self-performed work or projects involving numerous contractors and subcontractors often carry greater financial and operational risk. How many change orders are involved? Scope changes are common in construction projects, but they can also create budget and schedule challenges. Monitoring helps track change orders, evaluate supporting documentation and confirm that additional costs are justified and properly managed. How to monitor a construction project Effective construction monitoring starts with a proactive approach. Tribal leaders should establish clear oversight practices from the outset and maintain visibility throughout the life of the project. Here are five ways you can protect community investments and reduce the risk of costly surprises: 1. Be proactive during the pre-construction phase Bring in construction professionals during the pre-construction phase to assist with: Project design Budgeting General contractor selection Contract selection and definition of terms Getting in front of the project helps set it up for success. Being involved in the planning phases and having the ability to establish policy and procedures that clearly define what your expectations are will serve both you and the project’s progress. 2. Build monitoring requirements into your construction contract A well-structured contract lays the foundation for successful monitoring. Clear expectations upfront can help minimize disputes later and provide tribal leaders with greater confidence that costs are appropriate and well-supported. Your construction monitoring checklist can include: Technology and equipment costs charged to the project, such as laptops, software and IT allocations Vehicle rental, fuel and maintenance costs for project personnel Mobile phone and communication expenses Sales tax treatment Labor burden and overhead percentages Reimbursable safety and compliance expenses Available discounts, rebates or construction tax credits Project management and executive oversight costs charged to the project Documentation requirements for invoices and change orders The tribe’s right to review or audit project costs and supporting records Monthly payment application and change order templates that the general contractor has agreed to provide with supporting documentation 3. Establish a monitoring timeline Construction monitoring can take place at several points during a project, including: Monthly or quarterly reviews Reviews at key project milestones or phase completions A final review after project completion While a post-project review can identify lessons learned and uncover issues that arose during construction, the greatest value comes from beginning monitoring before construction starts and continuing it throughout the project. Early involvement allows tribal leadership to establish contract terms that support transparency and accountability from the beginning. Ongoing monitoring provides regular insight into project performance, helping leaders identify concerns early, address them promptly and keep projects on schedule and within budget. 4. Ensure you have the right expertise Construction monitoring draws on a range of technical, financial and operational skills. Whether these capabilities exist internally or are provided through a trusted advisor, successful monitoring typically requires expertise in several areas: Audit and financial review: Verifying that costs are accurate and aligned with contract terms requires the skills to evaluate invoices, payment applications and support documentation. Construction knowledge: Understanding construction processes, industry terminology and common billing practices helps reviewers identify potential concerns. Contract administration: Team members should understand how contracts are structured and be able to assess whether contractors are complying with agreed-upon terms and requirements. Data analytics and reporting: Analyzing project data, budgets, schedules and cost trends can help leadership identify emerging risks and make informed decisions throughout the project life cycle. 5. Use a consistent framework for construction monitor reviews A structured review process helps ensure that project costs are evaluated consistently throughout construction. One useful framework is RAID, which can be applied to invoices, change orders and other project expenses. Reimbursable: Is the expense allowable under the contract and eligible for reimbursement? Accurate: Are the amounts billed mathematically correct and supported by appropriate documentation? Incurred: Has the cost been incurred, and does it relate directly to the project and the work performed? Documented: Is there sufficient documentation, such as invoices, receipts, payroll records or other supporting materials, to substantiate the expense? Read more: How IRS rules impact GWE and tribal corporation tax exemption Tribal ERP systems: Your post-implementation support guide Here’s why tribes should start succession planning now
ARTICLE
What tribal casinos need to know about upcoming Title 31/AML rule changes
Tribal casinos should begin preparing now for what is expected to be the most significant update to anti-money laundering (AML) rules in years. In April 2026, the U.S. Department of the Treasury’s Financial Crimes Enforcement Network (FinCEN) issued a Notice of Proposed Rulemaking that would fundamentally reshape AML requirements under the Bank Secrecy Act (BSA), commonly known as Title 31. The proposal is expected to be finalized in 2026, with an anticipated 12-month implementation period following publication of the final rule. For tribal casinos, the proposed changes signal a shift away from a compliance model focused primarily on filing currency transaction reports (CTRs) and suspicious activity reports (SARs) correctly and on time. Instead, regulators are emphasizing the effectiveness of an institution’s overall AML program and its ability to identify, assess and mitigate financial crime risk. For tribal casino leadership, the message is clear: Now is the time to begin assessing gaps, updating governance and evaluating whether current technology, staffing and monitoring processes are sufficient to meet heightened expectations. What are the Title 31 AML changes? While the proposal is still subject to public comment and revision, several themes are already clear. Enhanced AML program requirements The proposed rule places risk assessments at the center of AML compliance. Financial institutions, including casinos, would be required to design AML frameworks tailored to their specific risk profile, including customer types, gaming activities, geographic location and transaction patterns. Expanded reporting expectations Casinos are already required to file CTRs for qualifying cash transactions over $10,000 and SARs for suspicious transactions involving at least $5,000. CTR and SAR filing requirements are not going away. But more emphasis is being placed on effectively identifying suspicious behavior — not merely submitting reports correctly. Examples of suspicious activity can include: Patrons inserting large amounts of cash into slot machines with minimal play before cashing out Individuals buying chips, playing briefly and quickly leaving Attempts to structure transactions around gaming-day transitions Potential use of stolen credit cards or illicit funds The focus is shifting toward identifying the broader patterns behind these transactions and documenting investigations appropriately. Stronger internal controls and governance The proposal would require written AML programs to receive approval from a tribal casino’s leadership and reinforce expectations around oversight. It also clarifies accountability expectations for AML compliance officers. Leadership involvement is becoming increasingly important because regulators want to see an enhanced “culture of compliance” throughout the organization, not separate compliance teams operating siloed from operations. Technology and data requirements Most tribal casinos have monitoring technology, but are they using it or leveraging its full capabilities? Regulators are increasingly expecting integrated systems capable of monitoring activity across slots, table games, cage transactions and other financial touchpoints in real time. Alignment with broader financial institution standards FinCEN’s proposal reinforces that casinos are financial institutions under the BSA and should be held to standards closer to banks and fintech organizations. That means tribal casinos can expect greater scrutiny around governance, documentation, customer due diligence and program effectiveness moving forward. How will AML updates challenge tribal casinos? If the BSA/AML changes take effect, tribal casinos’ compliance efforts will be under more scrutiny. Additional regulatory pressure will be felt across many areas of your operation. Increased technology expectations Outdated technology that fails to provide adequate visibility into activity across the gaming floor will hurt your AML compliance posture. Casinos will need to consider investing in new surveillance technology and automation and analytics tools that improve monitoring of activity on the gaming floor. Greater scrutiny of cage operations The cage is where money is changing hands in your casino, whether it’s cash transactions, TITO ticket redemptions, front money deposits, markers, credit advances or chip transactions. Clearly, this area is a focal point for detecting potential money laundering. Real-time transaction monitoring and accurate aggregation of customer activity will be increasingly important. Pressure on finance and compliance teams While compliance officers and teams have traditionally carried much of the AML burden, the new framework emphasizes enterprise-wide accountability. Documentation, investigations, governance, reporting and record retention will require greater coordination among compliance, finance , operations, surveillance and executive leadership. For example, financial and compliance teams may need to work with IT and operations to help ensure systems capture all relevant activity across the gaming floor. Then they take that data and analyze it to determine suspicious activity. Policy, procedure and training updates Existing AML policies and procedures may need minor or significant revisions to reflect new risk-based requirements. Employee training programs must also evolve to help ensure personnel understand their roles in detecting and reporting suspicious activity. FinCEN specifically emphasizes ongoing employee training as a core pillar of an effective AML program. What should tribal casinos focus on for AML compliance? The following actions will help your casino adopt a more risk-based approach to preventing money laundering that regulators expect. Conduct a risk assessment tailored to your operation Every tribal casino faces a unique risk profile. Location, customer demographics, gaming offerings, transaction volumes and regional crime patterns all influence how you should approach your money laundering prevention efforts. You need to perform a risk assessment that accounts for all the aspects that create your casino’s risk profile. A few factors to consider in your risk assessment include: Is the casino located in a high drug-trafficking corridor? Does your area experience a lot of financial crime? How many large cash players visit your casino? How large is your gaming room floor? What types of games do you offer, and which are the most popular? What percentage of patrons use player cards versus remaining anonymous? Are there any historical trends related to criminal activity at your casino? A risk assessment should answer these questions and drive the design of the AML program. Regulators increasingly expect risk assessments to be dynamic and defensible and serve as a catalyst for resource allocation and control design. The risk assessment should not fall solely on your AML compliance officer. It’s a project your entire leadership team needs to be involved in. Implement a robust KYC program You want to know who is gambling on your property. FinCEN’s proposal puts greater emphasis on understanding who is on the casino floor and whether their activity aligns with legitimate sources of funds. There are many tools and strategies for implementing a KYC program, including: Purchasing an investigative or public records software Doing negative news searches on frequent guests Promote the use of players’ cards. These help casinos capture more information on their patrons. Looking for source-of-funds indicators Ensuring your compliance team has proper training on the tools they use Examples concerning scenarios that a KYC program can help your staff identify include: A patron’s employment status doesn’t align with the amount they are gambling. If someone is unemployed and gambling thousands of dollars, that should raise suspicion. Patrons on the floor with a history of charges related to drug dealing. Invest in the right tools and analytics The larger your casino is, the more challenging manual monitoring processes become. Leverage modern automation and data analytics tools to get a clearer picture of what’s happening on your gaming floor and to better recognize trends or anomalies that are suspicious. AML software can be integrated into systems that captures data from slot machines, table games, cage transactions and other activities on your floor. Having that data flow into a single program simplifies monitoring and analysis. Some benefits of an integrated AML system include: Aggregate transactions properly for CTR reporting Identify suspicious transaction patterns faster Maintain stronger audit trails Improve documentation and investigations Reduce information silos between departments Strengthen surveillance capabilities Surveillance technology plays an important role in AML compliance and general security at your casino. Not only does a surveillance system provide a real-time view of the entire gaming floor, but it can also be a valuable tool for AML investigations. For instance, if there’s suspicion of bill stuffing at a slot machine, surveillance teams can review footage from that time frame and attempt to identify the suspect. Investing in the right surveillance tools for your operation is important. But don’t overlook the value of training your surveillance staff to spot activity that could be tied to money laundering. Staff will also need to be trained on their role in SAR documentation. This should not be a one-time activity. Train all impacted employees AML compliance is not solely the responsibility of the compliance department. Cage employees, table games staff, slot attendants, surveillance personnel, hosts, finance teams and executives all play a role in identifying and escalating potential issues. Training programs should be tailored to specific job functions and aligned with the casino’s risk profile. Create an enhanced culture of compliance Title 31/AML compliance can no longer be treated as a simple reporting exercise. Tribal casino leadership must foster a culture of compliance and secure organization-wide buy-in. Schedule a recurring AML meeting for decision-makers from all impacted departments (compliance, IT, security, finance, etc.). These meetings will help break down any information silos and help ensure that important information is communicated to everyone who is impacted. What steps should tribal casinos take now? The 12-month implementation window that will kick in if the rule changes are finalized may feel like a long window. But for tribal casinos that delay taking the actions necessary for compliance, that timeline will get short in a hurry. If the IRS shows up at your property after the window has closed, you want to be sure you’re prepared for an audit or examination. Tribal casino leaders should be developing plans to take the following actions in the near term: Conduct a comprehensive AML risk assessment that identifies and documents your casino’s unique risks. Develop controls to account for those risks. Perform a gap assessment comparing current controls against proposed requirements. Update policies, procedures and documentation as needed. Evaluate whether current AML software provides complete visibility across gaming operations. Strengthen KYC and customer due diligence processes. Designate an AML compliance officer. Provide them with clear communication channels to leadership. Assess your surveillance and other technologies to determine where upgrades are needed. Review governance structures and board oversight practices. Expand AML training programs across all relevant departments. Read More Top security gaps in tribal casinos: What physical pen testing reveals Your tribal organization just implemented a new ERP. How do you maximize the success of your investment? Tribal gaming trends: What’s top of mind for gaming leaders in spring 2026?
Reach out to our team
Discover how our team can help you turn regulatory requirements into opportunities for stronger operations and governance.
Regulatory compliance consulting FAQ
Wipfli’s key areas of compliance support for tribes include:
- Tribal gaming compliance: We help tribal gaming organizations navigate complex regulatory requirements through Title 31/AML compliance assessments, MICS compliance reviews, agreed-upon procedures, internal audits and PCI compliance support. We understand the critical role your operations play in your community and help you strengthen controls and maintain compliance while minimizing disruption to your business.
- Tribal government compliance: We help tribal governments address a wide range of compliance needs related to federal funding, governance, financial oversight, construction projects, cybersecurity and internal controls. Our services support stronger compliance and help you improve transparency and governance.
LET'S CONNECT
See how Wipfli can help you implement risk management that supports compliance, productivity and long-term success.
