AML / Financial Crime in United States

Key dates

2026-08-21

Request for Comment published in the Federal Register.

2026-10-20 Deadline

Comments are due, calculated as 60 days after Federal Register publication.

2026-10-05

Reported target date for CME Group and Silicon Data to list two compute or GPU-rental futures contracts, subject to regulatory review; this date is not established by the CFTC Request for Comment.

Suggested considerations

• Compliance teams may wish to determine whether the firm has relevant empirical data on compute prices, volumes, counterparties, supplier concentration, utilization, capacity commitments, or bilateral contract terms that could support a CFTC submission.
• Potential DCM and SEF applicants should consider mapping proposed contract specifications and settlement methodologies against CEA section 5(d), Core Principles 2, 3, 4, 5, 9, and 11, 17 CFR 38.150-38.160, 38.200-38.201, 38.250-38.258, 38.500, and 38.603, and the guidance in 17 CFR part 38 appendices B and C.
• Firms developing or contributing data to a compute index should consider documenting data provenance, publication practices, governance, auditability, contributor concentration, observation-window controls, fallback mechanisms, and safeguards against manipulation by capacity providers.
• FCMs, introducing brokers, and other intermediaries may wish to assess whether existing BSA/AML, KYC, onboarding, suitability, disclosure, and market-conduct controls address the risks identified for compute derivatives, including opaque bilateral markets and geopolitically sensitive supply.
• Market participants may wish to submit comments by the applicable deadline, clearly referencing RIN 3038-AF77 and the Request for Comment on the Listing of Compute Derivatives Contracts, while avoiding unnecessary personal or confidential business information because submissions will be publicly posted.
• Firms tracking product development should consider monitoring any subsequent DCM self-certification or Commission-approval filing, as the consultation itself does not authorize trading or postpone a proposed listing.

What changed

No final rule, approval, prohibition, or new compliance obligation was introduced. The CFTC is requesting comment on compute cash-market size, liquidity, transparency, supplier concentration, fungibility, benchmark methodology, deliverable supply, manipulation risks, surveillance feasibility, customer protection, heightened BSA/AML and KYC issues, retail protections, and the design and risks of perpetual compute futures.

Key dates

2025-09-10

Tricolor and affiliates filed for Chapter 7 bankruptcy and moved toward liquidation.

2025-12-17

The U.S. Attorney’s Office for the Southern District of New York announced criminal charges against Tricolor executives in connection with the alleged fraud.

2026-08-18

The SEC announced the civil enforcement action against Daniel Chu, Jerome Kollar, and Ameryn Seibold in the U.S. District Court for the Southern District of New York.

Suggested considerations

• Firms should consider performing a targeted review of whether the same receivable, loan, vehicle, inventory item, or other asset can be pledged across multiple warehouse facilities, securitizations, lenders, or managed accounts, including through affiliates and special-purpose vehicles.
• Compliance teams may wish to test collateral eligibility and borrowing-base reporting back to source-level records, payment histories, lien and ownership data, servicing systems, and independent third-party evidence rather than relying solely on management certifications.
• Securitization sponsors, underwriters, and investors should consider reviewing controls for detecting loans that are delinquent, charged off, non-paying, fictitious, materially impaired, or otherwise ineligible but reported as current or eligible.
• Firms should consider reconciling loan-level collateral tapes across all funding channels and establishing exception escalation, independent sign-off, segregation of duties, and documented remediation for duplicate identifiers or inconsistent pledging data.
• Finance and compliance functions may wish to assess whether offering documents, investor presentations, lender certificates, and management meetings accurately describe liquidity constraints, funding needs, collateral encumbrances, and portfolio performance.
• Boards and senior-management committees should consider reviewing governance over collateral operations, securitization disclosures, liquidity reporting, related-party or affiliate financing, and controls over executive certifications.
• Investment managers and lenders may wish to incorporate independent collateral verification, borrowing-base audit rights, data-access rights, concentration and duplication analytics, and covenant triggers into new and renewed transactions.
• Firms with relevant exposure should consider preserving records, communications, collateral tapes, system audit trails, certifications, underwriting files, and exception reports in light of parallel SEC and criminal proceedings.

What changed

The publication does not introduce a new rule, threshold, filing requirement, or compliance deadline. It announces an enforcement complaint under the antifraud provisions of the Securities Act of 1933 and Securities Exchange Act of 1934, including alleged control-person liability against Chu and aiding-and-abetting liability against all three defendants. The SEC seeks injunctions, disgorgement with prejudgment interest, civil penalties, and officer-and-director bars against Chu and Kollar.

Key dates

2026-08-14

Effective date of FinCEN final rule "Beneficial Ownership Information Reporting Requirement Revision" (91 FR 52508; RIN 1506-AB67), permanently narrowing CTA BOI reporting to foreign reporting companies and codifying exemptions for U.S. persons and domestic reporting companies.

Suggested considerations

• Compliance teams at foreign reporting companies should review the revised 31 CFR 1010.380 definition of "reporting company" and confirm that their entity meets the narrowed criteria (foreign formation plus registration to do business in a U.S. State or Tribal jurisdiction), updating BOI reporting inventories and scoping accordingly.
• Foreign reporting companies should update BOI reporting procedures to ensure that reports capture beneficial owners who are non-U.S. persons while excluding U.S. person beneficial owners, including revising data collection forms, internal instructions, and system logic to avoid collecting or transmitting U.S. person BOI under the CTA framework.
• Firms involved in foreign pooled investment vehicles registered in the United States may wish to revise governance and reporting processes so that BOI reports for such vehicles identify only the individual exercising substantial control (or greatest authority over strategic management) who is not a U.S. person, and cease including U.S. controllers where they qualify as U.S. persons.
• Corporate secretarial and entity management functions should update CTA/BOI scoping matrices to remove domestic corporations, LLCs, and similar entities from BOI reporting obligations and to reflect that only qualifying foreign entities remain in scope, while maintaining awareness of other AML and KYC obligations that may still apply independently of the CTA.
• Onboarding and registration workflows for foreign entities should be reviewed so that BOI reporting triggers, timelines, and responsibilities are aligned with the final rule’s foreign-only scope, including any remaining deadlines tied to registration dates, and that staff understand that U.S. person company applicant information is no longer required for CTA reporting.
• Firms maintaining records of U.S. person beneficial owners and company applicants for CTA purposes may wish to reassess retention policies, ensuring that any continued collection or storage of such data is for other legal or risk-management purposes rather than CTA compliance, and that privacy notices and data minimization practices reflect the updated regulatory position.
• Compliance teams should revise CTA-related policies, procedures, and training materials to incorporate the exemptions for U.S. persons holding FinCEN IDs, clarifying that these individuals are no longer required to update or correct BOI previously provided to obtain the identifier, and documenting any residual obligations under other BSA or AML rules.
• Banks, broker-dealers, and other AML-regulated firms should consider the impact of reduced BOI availability for U.S. persons on their own customer due diligence, beneficial ownership, and risk assessment frameworks, and evaluate whether internal KYC standards or other regulatory requirements (such as customer due diligence rules) necessitate separate collection of U.S. person ownership information irrespective of FinCEN’s CTA exemptions.

What changed

The definition and scope of "reporting company" under 31 CFR 1010.380, as implemented under 31 U.S.C. 5336, are now permanently narrowed so that entities previously defined as domestic reporting companies are exempt from BOI reporting requirements, including initial, updated, and corrected BOI reports. Foreign reporting companies remain subject to BOI reporting, but the rule confirms that they are exempt from reporting beneficial ownership information for any U.S. person beneficial owners; those U.S.

Key dates

2019-11-01

Approximate start of the alleged fraudulent conduct described by the SEC

2023-06-30

Approximate end of the alleged fraudulent conduct described by the SEC

2026-08-13

SEC announced the enforcement action

Suggested considerations

• Compliance teams may wish to review whether any compensated solicitors or referral sources are engaging in broker-like activity without registration.
• Firms should consider testing whether solicitation, negotiation, and fund-collection roles could create broker-registration exposure under Exchange Act Section 15.
• Firms may wish to reassess use-of-proceeds controls and verify that investor funds are not being diverted outside disclosed purposes.
• Firms should consider enhancing monitoring for Ponzi-like payout patterns, especially where distributions appear funded by new investor money rather than operating cash flow.
• Compliance functions may wish to review marketing and fundraising materials for consistency with the firm’s actual registration status and authority.
• Firms operating in relationship-driven communities may wish to evaluate affinity-based fraud risk and strengthen independent verification of investors, counterparties, and cash flows.

What changed

This is an enforcement action, not a rulemaking or guidance release. The SEC complaint alleges that Leor Moshe solicited investments through Capital Funding ASAP LLC by claiming investor money would fund short-term business loans, while allegedly diverting more than $11 million for personal use and more than $850,000 for Ponzi-like payments to earlier investors.

Key dates

2019-04-01

Start of the period covered by the SEC’s findings on untimely SAR investigations and filings

2024-03-31

End of the period covered by the SEC’s findings on untimely SAR investigations and filings

2024-08-12

SEC press release and administrative order were posted

2024-09-11 Deadline

Civil penalty payment due within 30 days of the order’s entry, assuming the posted order date reflects the entry date

Suggested considerations

• Compliance teams may wish to review SAR investigation aging standards against current internal procedures, especially for matters involving subpoenas, law-enforcement requests, or regulatory inquiries.
• Firms should consider whether escalation triggers, ownership, and sign-off responsibilities for SAR determinations are clearly documented across surveillance, legal, and compliance functions.
• Broker-dealers may wish to test whether case-management tools can identify stalled investigations and flag items approaching internal filing deadlines or reasonable-period expectations.
• Dual registrants may wish to assess whether broker-dealer and advisory compliance workflows are coordinated for suspicious-activity matters that cut across business lines.
• Training for relevant personnel may wish to be reviewed to ensure that SAR timeliness expectations and escalation protocols are understood by front office, surveillance, legal, and operations staff.

What changed

The publication does not create new rules or thresholds. It documents an enforcement action under Exchange Act Section 17(a) and Rule 17a-8, which require broker-dealers to file SARs for suspicious transactions and related activity. The SEC’s order emphasizes that firms must conduct and complete SAR investigations within a reasonable period of time, especially when the activity is connected to law-enforcement or regulatory inquiries. The outcome also shows that the SEC may treat delayed investigation and filing as a standalone compliance failure even without a substantive fraud finding.

Key dates

2026-08-11

Effective date of the Geographic Targeting Order

2027-02-06 Deadline

Order period ends after 180 days unless renewed

Suggested considerations

• Compliance teams may wish to identify all branches, subsidiaries, and offices in Hennepin and Ramsey Counties and map which payment flows meet the Order’s definition of a Covered Transaction.
• Firms may wish to update transaction-monitoring and customer due diligence workflows to capture the additional data elements required for bank or money transmitter reports, including beneficiary or recipient contact details and government-benefits-related funding questions.
• Operational teams may wish to confirm readiness to submit reports through the FI Portal and to generate the required CSV files using the Minnesota Fraud GTO template and naming convention.
• Records-management teams may wish to set a retention control ensuring all reports and related compliance records are preserved for five years from the last day the Order is effective.
• Banks and money transmitters may wish to review whether any existing BSA or sanctions screening processes can be leveraged to identify covered international transfers meeting the $3,000 threshold.
• Compliance teams may wish to test month-end reporting processes so filings occur by the end of the month following the month in which each Covered Transaction took place.

What changed

The Order creates a temporary, geographically targeted recordkeeping and reporting regime under 31 CFR Part 1010 for covered institutions in Hennepin and Ramsey Counties. A “Covered Business” is any bank under 31 CFR 1010.100(d) or money transmitter under 31 CFR 1010.100(ff)(5) with a branch, subsidiary, or office in the covered area.

Key dates

2026-07-31

Policy becomes effective for authorized financial services provided to persons or entities located in Venezuela

2027-01-29 Deadline

End of the stated commitment period for the agencies’ enforcement-policy non-action position

Suggested considerations

• Compliance teams may wish to confirm whether any Venezuela-related activity is specifically authorized under applicable OFAC sanctions licenses or other authorizations before relying on the policy.
• Institutions may wish to verify that their BSA/AML compliance program is currently in place and that they continue to make reasonable efforts to meet applicable BSA Requirements during the relief period.
• Firms may wish to review whether they have had a final BSA-related enforcement action by FinCEN or their primary federal regulator within the prior 24 months, as that would disqualify reliance on the commitment.
• Operational teams may wish to document the basis for treating transactions as covered authorized financial services in Venezuela and retain evidence supporting reliance on the enforcement-policy statement.

What changed

The agencies announced a temporary enforcement-policy commitment covering authorized financial services provided to persons or entities located in Venezuela from 2026-07-31 through 2027-01-29. During that period, the agencies state they will not take supervisory action, including citing a violation of law, or pursue an enforcement action against a supervised financial institution for BSA Requirement issues arising from such authorized services. The commitment applies only if the institution is currently compliant with an applicable BSA compliance program requirement and continues to make...

Key dates

2026-06-24

Venezuela experienced a pair of strong earthquakes off the northern coast west of Caracas, triggering the humanitarian crisis referenced by the agencies.

2026-07-27

FinCEN issued a substantively similar statement of enforcement policy regarding Venezuela-related financial services.

2026-07-31

The OCC, Federal Reserve, FDIC, and NCUA issued the joint enforcement policy.

2026-07-31

Start of the period during which authorized financial services to persons or entities in Venezuela are covered by the enforcement commitment.

2027-01-29 Deadline

End of the covered period for the joint enforcement commitment.

Suggested considerations

• Compliance teams may wish to confirm whether current Venezuela-related activity falls within the scope of authorized financial services covered by the joint statement.
• Institutions may wish to verify that their BSA compliance program remains current and that ongoing controls reflect reasonable efforts to comply during the relief period.
• Firms may wish to check whether they have had any final FinCEN or OCC enforcement action involving BSA violations in the prior 24 months before relying on the policy.
• Sanctions teams may wish to confirm continued compliance with all applicable OFAC-administered sanctions regulations and authorizations.
• Institutions with Venezuela exposure may wish to document how they will evidence reliance on the policy and monitor the January 29, 2027 end date.

What changed

The agencies stated that eligible U.S. financial institutions that choose to provide authorized financial services to persons or entities in Venezuela will not be subject to supervisory action, including a citation for a violation of law, or enforcement action related to a Bank Secrecy Act requirement, for those services. The commitment is limited to authorized financial services provided from 2026-07-31 through 2027-01-29 and applies only to statutes or regulations specifically addressed in the joint statement.

Key dates

2026-06-25

FinCEN published the underlying NPRM to amend the Huione Group definition

2026-06-25

Electronic comment filing became unavailable due to a portal issue

2026-06-30

Portal issue period ended after six days of blocked electronic filing

2026-07-22

FinCEN dated the comment-period extension notice

2026-07-24

Federal Register publication of the extension notice at 91 FR 46761

2026-08-02 Deadline

Extended deadline for written comments on the NPRM

Suggested considerations

• Consider whether to submit comments on the NPRM by the extended deadline of 2026-08-02.
• Review customer, correspondent, and payment relationships for any exposure to Huione Group, H-Pay Service PLC, or entities that may be treated as successor entities if the proposal is finalized.
• Assess whether internal screening, escalation, and due diligence procedures would need updates if FinCEN finalizes the expanded definition.
• Monitor FinCEN’s final action on the NPRM and any resulting special-measures scope changes under 31 CFR 1010.

What changed

This publication does not impose a new final obligation; it extends the public comment deadline for an existing NPRM. The underlying proposal would amend FinCEN’s definition of Huione Group, a financial institution operating outside the United States of primary money laundering concern, to include H-Pay Service PLC and to add a defined term for “successor entity.” The extension was granted because a technological issue with the comment portal prevented electronic filing from June 25 through June 30, 2026.

Key dates

2026-07-09

OCC Bulletin 2026-30 was issued, highlighting FinCEN’s updated Section 314(b) Fact Sheet.

Suggested considerations

• Compliance teams may wish to review whether current Section 314(b) registration status is current and whether the institution has designated internal points of contact for information-sharing requests.
• Firms may wish to assess whether existing BSA/AML and fraud-monitoring procedures explicitly cover the newly highlighted examples of shareable information, including cyber-related data and video surveillance footage.
• Institutions may wish to confirm that information-sharing protocols limit disclosures to permissible Section 314(b) purposes and maintain security and confidentiality controls over information received from peers.
• Banks may wish to refresh training for BSA, fraud, and investigations staff on when sharing is permissible, including the safe-harbor conditions and the scope of eligible counterparties.
• Compliance teams may wish to verify that procedures for responding to requests and documenting reliance on Section 314(b) remain aligned with FinCEN’s updated fact sheet.

What changed

FinCEN’s updated Section 314(b) Fact Sheet clarifies that a participating financial institution may share information about suspected fraud, money laundering, terrorist financing, or other specified unlawful activities with any other financial institution eligible to participate in the Section 314(b) program.

Key dates

2026-07-07

Federal Reserve Board issued the request for comment on the proposed AML program amendments

2026-09-05 Deadline

Indicative comment deadline if the proposal is published in the Federal Register on July 7, 2026; the Federal Reserve states comments are due 60 days after Federal Register publication

Suggested considerations

• Compliance teams may wish to review current AML/CFT program governance against the proposed minimum program components, including risk-based controls, independent testing, training, and designated accountable oversight.
• Firms may wish to map their current risk assessment methodology to the FinCEN AML priorities referenced in the proposal and identify any gaps in documentation or calibration.
• Banks may wish to assess whether resources are demonstrably weighted toward higher-risk customers, products, services, and activities, since the proposal emphasizes risk-based allocation.
• Compliance functions may wish to track the Federal Register publication date closely so the 60-day comment clock can be calculated once the notice is published.
• Commenting stakeholders may wish to compare the Federal Reserve proposal with the parallel proposals from the other agencies to identify alignment issues or operational inconsistencies.

What changed

The proposal would amend the Federal Reserve's requirements for banks to maintain anti-money laundering programs to align with parallel proposals from four other agencies. It would require banks to allocate AML resources based on risk, with greater attention to higher-risk customers and activities. It would also require banks to incorporate the Financial Crimes Enforcement Network's AML priorities into their risk assessment processes.

Key dates

2026-06-22

OCC bulletin announcing the notice of proposed rulemaking was issued

2026-07-22 Deadline

Planned deadline for comments, if the Federal Register publication date aligns with the bulletin date and the OCC’s 30-day comment period is measured from publication

Suggested considerations

• Compliance teams may wish to assess whether the entity falls within the OCC-supervised PPSI category or within the state-qualified issuer population covered by OCC authority under the GENIUS Act.
• Firms may wish to review existing AML/CFT and sanctions controls against the BSA, FinCEN, and OFAC requirements referenced in the proposal, including reporting, monitoring, and risk assessment procedures.
• Compliance teams may wish to map governance, escalation, and record-sharing workflows to the proposed OCC-FinCEN consultation framework, particularly for potential significant supervisory or enforcement matters.
• Firms may wish to consider whether their current policies, procedures, and internal controls are sufficiently tailored to stablecoin-specific risks and whether additional board or senior management oversight would be needed.
• Compliance teams may wish to evaluate whether they should submit comments during the 30-day Federal Register comment period if aspects of the proposed framework could affect operating models or compliance design.

What changed

The proposed rule would require OCC-supervised PPSIs to comply with the BSA, sections 4(a)(5) and 4(a)(6)(B) of the GENIUS Act, and applicable FinCEN and OFAC regulations, including AML/CFT program, sanctions program, and reporting requirements. It would also create a supervision and enforcement framework for PPSI AML/CFT programs, so the OCC can take AML/CFT supervisory and enforcement action against covered issuers. The rule would establish a formal consultation process between the OCC and FinCEN when the OCC intends to initiate an AML/CFT enforcement action or a significant AML/CFT...

Key dates

March 31, 2026

Speech delivery; Outlines priorities and previews new cooperation policy advisory

Soon after March 31, 2026

New cooperation policy advisory issuance; Expected imminently; firms should monitor CFTC site for formal release

Suggested considerations

• Enhance surveillance: Implement robust monitoring for insider trading in prediction markets, manipulation in energy, disruptive trading, retail fraud signals, and AML/KYC red flags; prioritize misappropriated nonpublic info detection.
• Update policies: Revise insider trading protocols to align with CEA anti-fraud provisions; train staff on prediction market risks (debunking "no insider laws apply" myth).
• Strengthen cooperation readiness: Develop self-reporting/escalation processes, remediation plans, and documentation for declination credit under forthcoming policy; review prior CFTC advisories (e.g., 2025 mitigation matrix).
• Conduct gap analysis: Audit AML/KYC programs for willful violations; assess exposure in priority markets (energy, prediction/crypto, retail).
• Monitor updates: Subscribe to CFTC Press Room for cooperation advisory and related actions (e.g., Feb 25, 2026 Prediction Markets Advisory post-enforcement cases: https://www.cftc.gov/PressRoom/PressReleases/9185-26).

What changed

• - End of "regulation by enforcement": CFTC Enforcement will focus solely on policing fraud, abuse, and manipulation under existing CEA anti-fraud provisions, avoiding policy-setting via enforcement...
• Five explicit enforcement priorities: 1. Insider trading, with strong emphasis on prediction markets (e.g., misappropriation of nonpublic information violates CEA). 2.
• New cooperation policy advisory (forthcoming soon): Includes "significant changes" to declination policy, building on prior frameworks like mitigation-credit matrices and safe harbors for...