Financial Crimes Enforcement Network

The Financial Crimes Enforcement Network (FinCEN) is a bureau of the US Treasury Department that sits at the intersection of law enforcement and financial regulation. Created in 1990 and housed within Treasury, FinCEN collects reports from banks, money services businesses, and other financial institutions about suspicious transactions, assembles that data into intelligence, and issues the binding rules (under the Bank Secrecy Act) that shape anti-money-laundering compliance worldwide. To a foreign bank or crypto exchange, FinCEN rules often feel like de facto global standards.

The origins: the Bank Secrecy Act and the war on drugs

FinCEN emerged from legislation passed in 1970—the Bank Secrecy Act—which required financial institutions to keep records of large transactions and report suspicious activity to federal authorities. The original impetus was law enforcement: the Treasury and FBI wanted to follow the money in organized crime and drug trafficking. A trafficker might move cash across borders or through multiple accounts to hide the source; the BSA aimed to create a paper trail.

For decades, the BSA languished in obscurity. Banks grumbled about the reporting burden; regulators had limited staff to analyze the incoming data. Then, after 2001, the priorities shifted. The terrorist attacks on September 11 showed that financial intelligence could prevent attacks, not just solve crimes after the fact. Suddenly, tracking suspicious transaction patterns mattered for national security, not just the drug war. FinCEN’s budget and authority grew.

Today, FinCEN receives millions of Suspicious Activity Reports (SARs) annually from banks alone. Each SAR flags a transaction or pattern that a bank’s compliance officer deemed odd: transfers to sanctioned countries, rapid movement of cash across accounts, deposits inconsistent with the customer’s stated occupation. FinCEN analysts comb through these reports seeking signals of money laundering, sanctions violations, or financing of terrorism.

The reporting architecture: SARs, CTRs, and beneficial ownership

The backbone of FinCEN’s intelligence work is the Suspicious Activity Report. Any bank, broker, casino, money-services business, or other regulated firm must file a SAR if it detects suspicious activity involving more than $5,000. The report goes to FinCEN and—separately—to the firm’s federal regulator. FinCEN aggregates these reports and shares relevant intelligence with law enforcement, other agencies, and (in limited form) foreign governments.

Currency Transaction Reports (CTRs) capture a simpler metric: any single cash transaction over $10,000. These reports, filed daily, create a record of large cash flows. The $10,000 threshold, set in 1970, was meant to catch major illicit transactions. Critics note that it has become a flashpoint: criminals now structure transactions below $10,000 (called “structuring”), which is itself a federal crime. Legitimate cash-based businesses (casinos, nightclubs, car dealers) file thousands of CTRs; courts have wrestled with when structuring is criminal versus prudent business practice.

More recently, FinCEN implemented beneficial ownership rules. Many shell companies hide the true owners behind layers of corporate entities. Criminals exploited this to launder money; sanctioned oligarchs used shells to evade restrictions. FinCEN’s Beneficial Ownership Registry now requires companies to disclose their true human owners to FinCEN, with access strictly limited to law enforcement and regulators. This information is not public (unlike some countries’ registries), but it allows FinCEN to match company owners against sanctions lists and criminal databases.

Rule-making authority under the Bank Secrecy Act

FinCEN has statutory authority to issue binding regulations under the Bank Secrecy Act. These regulations define what “suspicious activity” means, what institutions must report it, and what records they must keep. FinCEN uses this authority to set anti-money-laundering and know-your-customer (AML/KYC) standards.

For example, FinCEN rules specify that banks must conduct customer due diligence—verifying identity, understanding the source of funds, assessing risk. These rules sound straightforward but have spiralled into thousands of pages of guidance and interpretive bulletins. Banks now employ armies of compliance staff, at enormous cost, trying to match their practices to FinCEN’s expectations.

The practical power of FinCEN’s rules extends far beyond US shores. A foreign bank that wants to operate in the US, or even clear transactions in dollars through the US financial system, must comply with FinCEN rules. Since the dollar is the world’s dominant transaction currency, foreign institutions have little choice. A rule issued by FinCEN becomes a de facto global standard. An anti-money-laundering requirement that FinCEN imposes often spreads to other jurisdictions (voluntarily or through pressure) as a best practice.

Sanctions enforcement and the OFAC connection

FinCEN works in tandem with the Office of Foreign Assets Control (OFAC), another Treasury bureau that manages US sanctions. When the US imposes sanctions on a country or individual, OFAC publishes a list of sanctioned names. FinCEN incorporates that list into its rules: banks must screen their customers and transactions against OFAC lists. A bank that processes a payment for a sanctioned entity faces severe penalties—civil fines and potential criminal prosecution.

After Russia’s invasion of Ukraine, FinCEN and OFAC coordinated to identify Russian oligarchs and entities subject to sanctions. Banks that failed to flag sanctions-evasion attempts faced enforcement action. This coordination shows how financial intelligence can serve geopolitical objectives: the US weaponizes dollar dominance to enforce sanctions and isolate adversaries.

The crypto challenge

FinCEN’s authority extends into cryptocurrency, a domain that raises novel questions. Cryptocurrency exchanges and certain “money services businesses” must now register with FinCEN and file SARs on suspicious transactions. Yet crypto’s decentralized and pseudonymous nature complicates traditional compliance. A user can move funds across exchanges or jurisdictions without FinCEN ever seeing a transaction. FinCEN has struggled to adapt its 1970s legal framework to a technology that didn’t exist when the Bank Secrecy Act passed.

In recent years, FinCEN has issued guidance on crypto-asset compliance: exchanges must identify customers, monitor for sanctioned users, and report suspicious patterns. Yet enforcement remains inconsistent. A centralized exchange can be regulated; a decentralized autonomous organization or peer-to-peer transaction is harder to trace. Criminals have exploited these gaps. FinCEN’s response has been to push exchanges toward stricter compliance and to coordinate with foreign regulators on crypto-specific AML rules.

The tension between privacy and security

At FinCEN’s core is a tradeoff. Comprehensive financial surveillance—requiring reports on all transactions, all customers, all beneficial owners—can catch criminals and terrorists. But it also creates a government database of financial information on every citizen and firm, raising privacy concerns. This tension plays out in every rulemaking.

For instance, FinCEN recently proposed rules requiring shell companies to disclose beneficial owners to a government registry. The rule aims to prevent money laundering and sanctions evasion. Yet privacy advocates worry about government overreach and the security of the registry itself (data breaches are possible). Small businesses worry about compliance costs. FinCEN has had to navigate these concerns while maintaining security and law-enforcement effectiveness.

Global coordination and the FATF

FinCEN does not operate alone. It coordinates with other countries’ financial intelligence units through the Financial Action Task Force (FATF), an intergovernmental organization that sets anti-money-laundering and counter-terrorism-financing standards. The FATF publishes “mutual evaluation reports” assessing countries’ AML compliance. A poor evaluation can expose a country to sanctions or financial isolation.

Because the US economy is large and the dollar is dominant, FinCEN’s rules influence FATF standards. Many FATF recommendations reflect US practice. This gives FinCEN outsized global influence: when it tightens AML rules, other countries often follow, creating a worldwide compliance wave.

FinCEN also shares financial intelligence with foreign governments, subject to strict confidentiality agreements. An Australian bank can ask FinCEN for information about US account holders involved in a local money-laundering investigation. This information-sharing accelerates cross-border investigations, though it also raises sovereignty questions: how much financial information should one country’s regulator share with another?

See also