— the open handbook of forensic accounting & open-source intelligence
search

Anti-Money-Laundering Law

From the Fraud-OSINT Wiki, the free forensic-accounting & OSINT reference
Anti-Money-Laundering Law
Foundational US statuteBank Secrecy Act (1970)
RegulatorFinCEN (U.S. Treasury)
International standard-setterFATF (est. 1989)
Major 2026 changeFinCEN final rule ending US-company BOI reporting
RelatedMoney Laundering, Asset Tracing

Anti-money-laundering (AML) law is the framework of statutes, regulations and international standards designed to detect, deter and punish the laundering of criminal proceeds and the financing of terrorism. It works chiefly by imposing obligations on financial institutions and other businesses — customer identification, record-keeping, and the reporting of cash and suspicious transactions — and by criminalising the movement and concealment of illicit funds. AML law is the legal engine behind much of the practical work described in Money Laundering, Asset Tracing and Cryptocurrency Tracing.[1]

Money laundering is conventionally described in three stages — placement (introducing illicit cash into the financial system), layering (moving it through complex transactions to obscure its origin), and integration (returning it to the criminal as apparently legitimate wealth). This model, derived from FATF and endorsed by bodies such as FinCEN and the UNODC, frames both how laundering works and where the law intervenes.[2]

1 The Bank Secrecy Act

The Bank Secrecy Act (BSA), enacted in 1970, is the foundational U.S. AML statute. It requires financial institutions to keep records and file reports that have a "high degree of usefulness" in criminal, tax and regulatory investigations, and it established the recordkeeping and reporting regime on which all later U.S. AML law builds. The BSA is administered by the Financial Crimes Enforcement Network (FinCEN), a bureau of the U.S. Department of the Treasury. Related early legislation, the Money Laundering Control Act of 1986, made money laundering itself a federal crime.[1]

2 CTRs and SARs

Two reporting obligations sit at the heart of the BSA regime:

  • The Currency Transaction Report (CTR) — a financial institution must file a CTR (FinCEN Form 112) for any cash transaction, or series of cash transactions, exceeding $10,000 in a single business day. The report must generally be filed within 15 days and the records retained for five years.[3]
  • The Suspicious Activity Report (SAR) — institutions must report transactions that appear suspicious regardless of amount, including structuring: breaking a large transaction into smaller pieces specifically to stay under the $10,000 CTR threshold. Structuring is itself a crime, and SARs are a primary intelligence source for investigators.
ReportTriggerThresholdKey detail
CTR (Form 112)Cash transaction(s)> $10,000 / business dayFile within 15 days; retain 5 years
SARSuspicious activityNo dollar thresholdCovers structuring and other red flags

The deliberate splitting of transactions to evade the CTR threshold is one of the classic red flags and a recurring feature of the placement stage of laundering.

3 FATF and the 40 Recommendations

The Financial Action Task Force (FATF), established in 1989, is the intergovernmental body that sets the global AML and counter-terrorist-financing (CFT) standard. Its 40 Recommendations — first issued in 1990, comprehensively revised in 2012, and amended through 2025 (including February 2025 changes to Recommendation 1 aimed at financial inclusion) — constitute the internationally recognised benchmark against which national AML regimes are assessed. Countries are evaluated for compliance and effectiveness, and those with strategic deficiencies may be placed on FATF's monitoring lists, with real consequences for their access to the global financial system.[2]

Because FATF standards drive national law across jurisdictions, they underpin the customer-due-diligence, beneficial-ownership and reporting obligations that investigators encounter worldwide, and they inform cross-border asset tracing.

4 AMLA 2020

The Anti-Money Laundering Act of 2020 (AMLA), enacted as part of the FY2021 National Defense Authorization Act and effective January 1, 2021, was the most significant overhaul of U.S. AML law in decades. Among its many provisions, AMLA created a whistleblower program offering awards of up to 30 percent of monetary sanctions collected in successful enforcement actions, mirroring the incentive structure of the SEC whistleblower regime and materially strengthening the government's ability to surface AML violations. AMLA also expanded FinCEN's authorities and set in motion the beneficial-ownership reporting regime later implemented under the Corporate Transparency Act.[1]

5 Corporate Transparency Act and the 2026 rule

The Corporate Transparency Act (CTA) was enacted to combat the use of anonymous shell companies by requiring many entities to report their beneficial ownership information (BOI) — the real human owners behind a company — to FinCEN. The CTA's implementation, however, was turbulent, marked by litigation over its constitutionality and a series of shifting deadlines and interim rules.[4]

The turning point came in 2026. Following that litigation and an interim final rule issued March 26, 2025, FinCEN adopted a final rule on August 11, 2026 (effective August 14, 2026) that permanently removes the BOI reporting requirement for all U.S. companies and U.S. persons. Under the final rule, only foreign entities registered to do business in the United States remain "reporting companies," and even then they report only their beneficial owners who are non-U.S. persons. FinCEN further indicated it would delete previously collected U.S.-person BOI. The practical effect is that the domestic beneficial-ownership registry, once expected to cover tens of millions of U.S. entities, no longer applies to them.[4]

This is a major and recent change. Older guidance describing broad BOI reporting duties for U.S. LLCs and corporations no longer reflects the law as of August 14, 2026; the reporting obligation now reaches only certain foreign-registered entities. Investigators should treat the domestic BOI registry as effectively wound down for U.S. companies.
MilestoneDateEffect
CTA enacted2021 (via AMLA/NDAA)Created BOI reporting obligation
Interim final ruleMar 26, 2025Narrowed scope amid litigation
FinCEN final ruleAug 11, 2026 (eff. Aug 14, 2026)Ends BOI reporting for US companies/persons; only foreign entities remain

6 Related statutes

AML enforcement rarely stands alone; investigators and prosecutors draw on a wider arsenal of financial-crime and integrity statutes, several of which overlap with money-laundering conduct.[5]

StatuteYearCore content
False Claims Act1863Liability for defrauding the government; qui tam suits let whistleblowers sue on the government's behalf and share in recoveries
Bank Secrecy Act1970Recordkeeping and reporting (CTR/SAR) foundation of US AML
RICO1970Racketeer Influenced and Corrupt Organizations Act; targets patterns of racketeering by criminal enterprises
FCPA1977Foreign Corrupt Practices Act; prohibits bribery of foreign officials and mandates accurate books, records and internal controls
CFAA1986Computer Fraud and Abuse Act; criminalises unauthorised access to computers
SOX2002Sarbanes–Oxley Act; CEO/CFO certification of financial statements and internal-control requirements after Enron and WorldCom
UK Bribery Act2010Four offences including bribing, being bribed, bribing a foreign official, and corporate failure to prevent bribery

Several of these connect directly to other topics in this wiki: SOX and the FCPA's books-and-records provisions bear on financial statement fraud; the FCPA and UK Bribery Act are central to anti-corruption investigation; and the False Claims Act's qui tam mechanism, like AMLA's bounty, shows how whistleblower incentives have become a recurring tool of financial-crime enforcement. RICO's reach over "patterns of racketeering" frequently sweeps in money-laundering counts, tying the AML regime back into broader organised-crime prosecution.

Because AML obligations turn on documented facts — reports filed, records kept, ownership disclosed — enforcement depends heavily on the evidentiary discipline covered in Evidence and Testimony and on preserving records under a sound chain of custody. For the underlying mechanics of how illicit funds move, see Money Laundering.

See also: Money Laundering, Asset Tracing, Cryptocurrency Tracing, Anti-Corruption OSINT.

References

  1. Brief: "AML law & evidence standards (verified 2026)" — BSA (1970), AMLA 2020 whistleblower bounty (up to 30%), FinCEN. https://www.fincen.gov/
  2. FATF. "The FATF Recommendations" (est. 1989; 40 Recommendations, 1990/2012, amended through 2025 incl. Feb 2025 Rec 1). https://www.fatf-gafi.org/en/topics/fatf-recommendations.html
  3. FinCEN. Currency Transaction Report (Form 112), cash > $10,000/business day, file in 15 days, retain 5 years; SAR / structuring. Brief: AML law & evidence standards.
  4. FinCEN. "Beneficial Ownership Information Reporting Requirement Revision," final rule, Federal Register, Aug 14, 2026 (eff. Aug 14, 2026; interim rule Mar 26, 2025). https://www.federalregister.gov/documents/2026/08/14/2026-16576/...
  5. Statutes named inline: SOX 2002; FCPA 1977; RICO 1970; CFAA 1986; False Claims Act 1863 (qui tam); UK Bribery Act 2010. Brief: AML law & evidence standards; AICPA "Essentials of Forensic Accounting" (2015).