The Financial Crimes Enforcement Network — universally known as FinCEN — is the United States government bureau responsible for safeguarding the financial system against money laundering, terrorist financing, and other illicit finance. Operating as a bureau of the U.S. Department of the Treasury, FinCEN is the primary federal authority that administers the Bank Secrecy Act (BSA) and sets the anti-money laundering (AML) and counter-financing-of-terrorism (CFT) baseline that virtually every U.S. financial institution must meet. This guide explains what FinCEN is, how it works, the core obligations it enforces, and what businesses — including money services businesses and crypto firms — need to know to stay compliant.
What Is FinCEN?
FinCEN stands for the Financial Crimes Enforcement Network. It is a bureau of the United States Department of the Treasury. Established on April 25, 1990, through Treasury Order 105-08, FinCEN was originally created to support domestic and international law enforcement agencies by analyzing financial information. Its statutory authority to administer the Bank Secrecy Act was formalized on September 21, 2002, through Treasury Order 180-01, passed in the wake of the USA PATRIOT Act.
Unlike a market conduct regulator such as the U.S. Securities and Exchange Commission (SEC) or the UK's Financial Conduct Authority (FCA), FinCEN does not issue conduct or prudential rules governing how products are sold. Instead, FinCEN establishes the AML/CFT floor: the minimum obligations that all covered U.S. financial institutions must satisfy to detect, deter, and report financial crime.
FinCEN's headquarters are located in Vienna, Virginia, and the bureau is staffed by roughly 300 professionals, including analysts, investigators, and policy experts who work alongside law enforcement and intelligence communities.
FinCEN's Mission and Role
FinCEN's mission is to safeguard the financial system from illicit use, combat money laundering and the financing of terrorism, and promote national security through the strategic use of financial authorities and the collection, analysis, and dissemination of financial intelligence.
To fulfill this mission, FinCEN operates in three principal capacities:
-
Administrator of the Bank Secrecy Act. FinCEN is the lead authority for the BSA, the foundational U.S. AML statute enacted in 1970.
-
Financial Intelligence Unit (FIU). As the U.S. FIU, FinCEN receives, analyzes, and disseminates financial intelligence derived from BSA reports such as Suspicious Activity Reports (SARs) and Currency Transaction Reports (CTRs).
-
Regulator and gatekeeper. FinCEN registers and oversees money services businesses (MSBs), including many payment and virtual currency firms.
Internationally, FinCEN collaborates with the Financial Action Task Force (FATF) and the Egmont Group of Financial Intelligence Units, enabling cross-border information sharing and alignment on global AML/CFT standards.
Key Requirements FinCEN Enforces
Under its BSA authority, FinCEN enforces a set of core obligations that apply across banks, MSBs, and other covered institutions. The most important include:
Customer Due Diligence (CDD)
Under a 2018 final rule, covered financial institutions must implement a risk-based CDD program. A central element is the identification and verification of beneficial owners of legal entity customers — the individuals who ultimately own or control a company.
Beneficial Ownership Identification
Financial institutions must collect and verify beneficial ownership information when onboarding corporate customers. Separately, under the Corporate Transparency Act, FinCEN administers a Beneficial Ownership Information (BOI) reporting regime. Note that as of March 2025, domestic reporting companies have been exempted from the federal BOI reporting requirement, though FinCEN continues to administer the broader framework.
Ongoing Transaction Monitoring
Institutions must monitor customer activity on a continuing basis to detect patterns consistent with money laundering, sanctions evasion, or terrorist financing, and to identify activity that diverges from a customer's expected profile.
Currency Transaction Reports (CTR)
Cash transactions exceeding $10,000 must be reported to FinCEN via a Currency Transaction Report. This applies to a single transaction or a series of related transactions.
Suspicious Activity Reports (SAR)
When an institution detects facts that may indicate illicit activity, it must file a SAR within 30 calendar days of initial detection (extended to 60 days when no suspect is identified). SARs are confidential and cannot be disclosed to the subject.
Record Retention
Covered institutions must retain BSA-related records — including CDD documentation, SAR supporting files, and CTR data — for a minimum of five years.
Penalties
Failures to comply can be severe. Egregious or willful violations can carry civil penalties of up to approximately $1.4 million per violation per day, in addition to criminal exposure and reputational harm.
FinCEN and Virtual Currency
FinCEN has played a leading role in applying AML rules to digital assets. In its 2013 guidance, FinCEN defined administrators and exchangers of convertible virtual currency as money services businesses subject to the BSA. The 2019 guidance reaffirmed that providers of convertible virtual currency transmission services qualify as money transmitters and must register as MSBs.
Crypto exchanges and other virtual asset service providers operating in the United States must therefore register with FinCEN, implement an AML program, and file SARs and CTRs where applicable — the same obligations that apply to traditional money transmitters.
MSB Registration
Any money services business — including money transmitters, currency exchangers, check cashers, and virtual currency operators — must register with FinCEN. Registration is renewed every two years and is completed through FinCEN's BSA E-Filing System. Registered MSBs are listed in FinCEN's publicly searchable MSB Registrant Search, a transparency tool used by partners, customers, and regulators.
Public Tools and Resources
FinCEN provides several public-facing resources:
-
MSB Registrant Search — verify whether an MSB is registered.
-
BSA E-Filing System — file SARs, CTRs, and other BSA reports.
-
SAR Statistics — aggregate data on suspicious activity reporting trends.
These tools support both compliance professionals and the broader public in understanding the U.S. AML regime.
PhotonPay's US AML Compliance
✅ United States Compliance
PhotonPay maintains a robust U.S. anti-money laundering posture built on FinCEN's requirements:
-
FinCEN MSB registration — PhotonPay is registered with FinCEN as a Money Services Business, meeting the federal baseline for AML/CFT compliance.
-
NMLS license No. 2756066 — PhotonPay holds a Nationwide Multistate Licensing System (NMLS) license, supporting state-level money transmission oversight.
-
Money transmission across 11 US states — PhotonPay is authorized to provide money transmission services across 11 U.S. states, enabling compliant cross-border and domestic fund flows.
-
BSA/AML compliance framework — PhotonPay operates a full Bank Secrecy Act / AML compliance program, including customer due diligence, transaction monitoring, SAR/CTR readiness, and five-year record retention.
For businesses building global payment operations, partnering with a FinCEN-registered, BSA/AML-compliant provider reduces regulatory risk and accelerates market entry in the United States.
FAQ
What does FinCEN do?
FinCEN is the U.S. Treasury bureau that administers the Bank Secrecy Act. It collects and analyzes financial intelligence, registers money services businesses, and sets the AML/CFT obligations that U.S. financial institutions must follow to combat money laundering and terrorist financing.
Is FinCEN the same as a conduct regulator like the SEC?
No. FinCEN does not issue product conduct or prudential rules. Its role is to establish the AML/CFT baseline under the BSA. Agencies like the SEC or FCA regulate market conduct; FinCEN focuses on financial crime prevention.
Do crypto exchanges need to register with FinCEN?
Yes. Under FinCEN's 2013 and 2019 guidance, convertible virtual currency administrators, exchangers, and money transmitters are considered MSBs and must register with FinCEN, maintain an AML program, and file SARs and CTRs as applicable.
How often must an MSB renew its FinCEN registration?
MSB registrations must be renewed every two years through the BSA E-Filing System. Failure to renew can result in loss of registration and enforcement action.
Conclusion
FinCEN sits at the center of the U.S. fight against financial crime. By administering the Bank Secrecy Act and setting the AML/CFT baseline, it shapes how banks, money services businesses, and virtual asset providers operate. Understanding FinCEN's requirements — from CDD and beneficial ownership to SAR/CTR filing and record retention — is essential for any institution serving the U.S. market.
If you are building payment or treasury operations in the United States, work with a partner that meets the standard. PhotonPay is FinCEN-registered (NMLS No. 2756066), licensed for money transmission across 11 U.S. states, and operates a full BSA/AML compliance program. Contact PhotonPay today to learn how we can support your compliant U.S. and global payment needs.