FinCEN BSA/AML Requirements

Bank Secrecy Act and Anti-Money Laundering requirements for US financial institutions and crypto businesses.

Quick Answer FinCEN (Financial Crimes Enforcement Network) enforces the Bank Secrecy Act (BSA) for crypto businesses, requiring money services businesses — including crypto exchanges — to register with FinCEN, implement AML/KYC programs, file Currency Transaction Reports (CTRs) for transactions over $10,000, and file Suspicious Activity Reports (SARs) for potentially illicit activity.

What is FinCEN BSA/AML?

The Financial Crimes Enforcement Network (FinCEN), a bureau of the US Department of the Treasury, administers the Bank Secrecy Act (BSA), the primary US anti-money laundering (AML) law. The BSA requires financial institutions to assist government agencies in detecting and preventing money laundering by maintaining records and filing reports that are useful in criminal, tax, or regulatory proceedings.

For cryptocurrency businesses, FinCEN has issued specific guidance clarifying that convertible virtual currency (CVC) administrators and exchangers are money services businesses (MSBs) subject to BSA registration, AML program requirements, and suspicious activity report (SAR) filing obligations. This regulatory framework creates significant compliance obligations for crypto exchanges, wallet providers, and other virtual asset service providers (VASPs) operating in or serving US customers.

FinCEN has been increasingly active in enforcing BSA requirements against crypto companies, issuing guidance on CVC mixing, peer-to-peer transactions, and the application of the travel rule to virtual asset transfers. The agency has also proposed significant rulemaking on crypto mixing and AML program requirements that will reshape the compliance landscape for the industry.

Key Requirements

MSB Registration

Cryptocurrency exchanges and administrators must register as Money Services Businesses with FinCEN and renew registration annually.

AML Program

Must develop, implement, and maintain an effective anti-money laundering program reasonably designed to prevent money laundering.

Suspicious Activity Reports

File SARs for transactions involving at least $2,000 in CVC where suspicious activity is identified, within 30 days of detection.

Currency Transaction Reports

File CTRs for transactions in currency (physical cash) exceeding $10,000, and aggregate structuring reports for multiple cash transactions.

Recordkeeping

Maintain records of CVC transactions including correspondent accounts, customer identification, and transaction details.

Travel Rule

Transmit originator and beneficiary information for CVC transfers exceeding $3,000 to counterparties.

Who Must Comply?

Crypto Exchanges — Centralized exchanges converting fiat to cryptocurrency and vice versa
CVC Administrators — Entities that issue and redeem convertible virtual currency
Crypto ATMs — Bitcoin ATM operators facilitating cash-to-crypto transactions
Wallet Providers — Custodial wallet services holding CVC on behalf of customers
Money Transmitters — Entities transmitting value in currency, funds, or value that substitutes for currency
DeFi Protocols — Decentralized finance platforms that may qualify as MSBs under FinCEN guidance

Compliance Challenges

Jurisdictional Reach

Determining when a foreign crypto business triggers US jurisdiction through customer relationships creates complex compliance questions.

DeFi and Decentralization

Applying traditional AML frameworks to decentralized protocols and anonymous transactions presents significant challenges.

Travel Rule Implementation

Implementing the travel rule for CVC transfers requires technical solutions and coordination with counterparty institutions.

Evolving Regulatory Expectations

FinCEN frequently updates guidance on new products and services, requiring compliance programs to adapt quickly.

How RegPulse Monitors FinCEN

RegPulse provides comprehensive FinCEN monitoring to keep you informed of BSA/AML regulatory changes.

Enforcement Actions

Tracking FinCEN enforcement actions, civil monetary penalties, and consent orders involving crypto businesses.

Guidance Documents

Monitoring FinCEN advisories, guidance, and interpretive letters on CVC and AML requirements.

Rulemaking

Tracking FinCEN proposals, comment letters, and final rules affecting crypto AML obligations.

FinCEN Director

Monitoring statements and priorities from FinCEN leadership on crypto AML policy.

Geographic Targeting Orders

Tracking GTOs imposing additional AML requirements on jurisdictions or transaction types.

Industry Engagement

Monitoring FinCEN outreach, meetings, and working groups with the crypto industry.

Related Regulations

Frequently Asked Questions

Do crypto companies need to register with FinCEN?
Yes, crypto exchanges and other money services businesses (MSBs) must register with FinCEN within 180 days of beginning operations. This applies to any business that exchanges, transmits, or administers virtual currency. Failure to register is a federal crime.
What AML requirements apply to crypto companies?
Crypto companies classified as MSBs must: register with FinCEN, implement a written AML program, conduct KYC on customers, file CTRs for transactions over $10,000, file SARs for suspicious activity, maintain records for 5 years, and comply with the Travel Rule for transfers over $3,000.

Start Monitoring FinCEN with RegPulse

Get real-time alerts for FinCEN BSA/AML regulatory changes and enforcement actions.

Start Free Trial
Use code FOUNDING67 for 67% off founding member pricing

📖 Related Glossary Terms

Bank Secrecy Act (BSA) · Anti-Money Laundering (AML) · Currency Transaction Report (CTR) · Suspicious Activity Report (SAR) · AMLD6

⚖️ Related Regulations

FATF Travel Rule

Stay ahead of regulatory changes — monitor this regulation automatically

Start Free Trial →