AML/BSA: Anti-Money Laundering and Bank Secrecy Act Guide

The Bank Secrecy Act (BSA), enacted in 1970 and significantly strengthened by the USA PATRIOT Act and the 2021 Anti-Money Laundering Act, forms the foundation of the United States' anti-money laundering (AML) regulatory regime. It requires financial institutions to assist government agencies in detecting and preventing money laundering, terrorist financing, and other financial crimes.

What AML/BSA Covers

BSA/AML compliance requires financial institutions to implement a comprehensive program with five pillars: a system of internal controls, independent testing, a designated BSA/AML officer, training for relevant personnel, and customer due diligence procedures including beneficial ownership identification.

In practice, this means implementing Know Your Customer (KYC) processes, monitoring transactions for suspicious patterns, filing Suspicious Activity Reports (SARs) and Currency Transaction Reports (CTRs) with FinCEN, and maintaining records that enable law enforcement investigations. The 2021 AML Act introduced the beneficial ownership reporting requirement and established national AML priorities.

Who Needs AML/BSA Compliance

BSA/AML requirements apply to banks, credit unions, broker-dealers, money services businesses, casinos, insurance companies, mutual funds, and other financial institutions. The definition has expanded over time to include virtual currency businesses and certain non-financial businesses involved in high-value transactions. Fintech companies providing money transmission services face full BSA/AML obligations.

Implementation Approach

Develop a risk-based AML program starting with a comprehensive risk assessment that considers your products, services, customers, and geographic footprint. Implement automated transaction monitoring calibrated to your risk profile. Build KYC processes that include identity verification, beneficial ownership identification, and ongoing due diligence. Establish clear SAR investigation and filing procedures with defined timelines.

Cost Considerations

AML compliance is one of the largest ongoing operational costs for financial institutions. Large banks employ hundreds of AML analysts and invest millions in transaction monitoring technology. Mid-sized institutions typically spend $50,000 to $500,000 annually. The cost of non-compliance is far higher — recent AML enforcement actions have resulted in penalties exceeding $1 billion.