Financial Crimes Enforcement Network (FinCEN)
The Financial Crimes Enforcement Network (FinCEN) is the bureau of the U.S. Department of the Treasury that administers the Bank Secrecy Act. It collects and analyzes the reports financial institutions are required to file — suspicious activity, large cash transactions, foreign accounts — and shares the resulting intelligence with law enforcement and regulators.
| Full name | Financial Crimes Enforcement Network |
| Parent agency | U.S. Department of the Treasury |
| Established | 1990 |
| Primary statute | Bank Secrecy Act (BSA), 1970 |
| Core reports collected | Suspicious Activity Report (SAR), Currency Transaction Report (CTR), Report of Foreign Bank and Financial Accounts (FBAR) |
| CTR threshold | Cash transactions above $10,000 in a single business day |
| SAR trigger | Known or suspected violation, or a transaction with no apparent lawful purpose |
| Who must report | Banks, credit unions, money services businesses, casinos, broker-dealers, and other covered financial institutions |
| International role | U.S. financial intelligence unit within the Egmont Group |
How it works
FinCEN issues almost no fines directly and investigates almost nothing itself. It is an intelligence bureau: covered institutions file reports, FinCEN aggregates and analyzes them, and the output goes to the agencies that do investigate. That structure is the thing most summaries get wrong, and it explains why the practical burden of the Bank Secrecy Act falls on banks rather than on the bureau.
Three filings carry most of the weight. A Currency Transaction Report is mechanical — any cash transaction above $10,000 in a single business day, filed regardless of suspicion. A Suspicious Activity Report is judgment-based, filed when an institution knows or suspects a transaction involves illicit funds, is designed to evade reporting requirements, or has no apparent business purpose. SARs carry a confidentiality obligation: telling the subject that one has been filed is itself an offense. The FBAR sits with account holders rather than institutions, covering foreign accounts exceeding $10,000 in aggregate.
Underneath all of it is the Customer Identification Program rule, which requires covered institutions to verify the identity of anyone opening an account and keep records of how they did it. That is where FinCEN’s remit reaches into onboarding: the reporting obligations are only meaningful if the identity attached to an account is real.
The beneficial ownership picture changed materially in 2026. Under the Corporate Transparency Act, companies formed in the United States had been required to report their beneficial owners to FinCEN. A final rule effective 14 August 2026 permanently removed that requirement for U.S.-formed entities and U.S.-person beneficial owners, and FinCEN has said it will delete previously reported U.S.-person information from the database. Foreign entities registered to do business in the U.S. still report beneficial ownership for foreign individuals. Any guidance describing universal BOI reporting for domestic companies now describes a regime that no longer exists.
Why it matters for identity verification
Every BSA obligation resolves to a question about identity. A SAR names a subject. A CTR names the person conducting the transaction. The Customer Identification Program rule requires an institution to know, and document, who opened an account. None of that works if the identity presented at onboarding was fabricated.
This is where synthetic identities do real regulatory damage rather than just credit-loss damage. An account opened with a fabricated identity generates filings that name someone who does not exist. The reports are technically compliant and analytically worthless, and the institution has no way to know which of its filings fall into that category.
The practical response is to make the identity itself harder to fabricate. Authenticating the document presented at account opening and matching it to a live person establishes that the name on subsequent filings belongs to someone real. Ongoing screening against sanctions, PEP and adverse media lists then covers the second question — whether that real person is someone the institution can bank. Microblink’s AML, PEP and sanctions screening runs that check continuously rather than only at onboarding, which matters because status changes and identity does not.
FinCEN vs the OCC
| FinCEN | OCC | |
|---|---|---|
| Role | Financial intelligence unit | Prudential regulator and supervisor |
| Parent | U.S. Treasury | U.S. Treasury |
| Governs | BSA and AML reporting obligations | Charter, safety and soundness of national banks |
| Primary output | Analysis and intelligence sharing | Examinations and enforcement actions |
| Who it covers | All covered financial institutions, including non-banks | National banks and federal savings associations |
| Examines institutions | No — delegates BSA examination to functional regulators | Yes |
Both sit inside Treasury and both touch anti-money-laundering compliance, which is why they are conflated. The distinction that matters operationally: FinCEN writes the reporting rules, the OCC and other functional regulators examine whether banks follow them.
What it can’t do
It does not supervise or examine institutions. FinCEN sets BSA requirements but delegates examination to the functional regulators. A bank’s AML program is assessed by its own supervisor, which is why compliance failures usually surface as an OCC or Federal Reserve action rather than a FinCEN one.
It does not verify what it receives. Filings are taken as submitted. FinCEN has no mechanism to confirm that a name on a SAR belongs to a real person, which is precisely why identity verification at onboarding determines the quality of everything downstream.
Filing a report is not a finding. A SAR records suspicion, not wrongdoing, and the overwhelming majority never lead anywhere. Treating a filing as evidence of guilt misreads what the document is for.
It has no direct authority over foreign institutions. Its international reach runs through information-sharing arrangements, principally the Egmont Group of financial intelligence units, rather than through jurisdiction.
Frequently asked questions
Is FinCEN a law enforcement agency?
No. FinCEN is a bureau of the Treasury Department that collects and analyzes financial intelligence, then shares it with law enforcement. It does not conduct criminal investigations or make arrests.
What is the difference between a SAR and a CTR?
A CTR is automatic and threshold-based — any cash transaction above $10,000 in one business day. A SAR is discretionary and judgment-based, filed when an institution suspects illicit activity regardless of amount. SARs are confidential; disclosing one to its subject is an offense.
Do companies still have to report beneficial ownership to FinCEN?
U.S.-formed entities no longer do. A final rule effective 14 August 2026 permanently exempted domestic companies and U.S.-person beneficial owners from Corporate Transparency Act reporting. Foreign entities registered in the U.S. still report beneficial ownership for foreign individuals.
Which businesses have to file with FinCEN?
Banks, credit unions, money services businesses, casinos, broker-dealers, and certain other covered institutions. The obligation follows the activity rather than the label, so fintechs handling regulated activity are often covered through a partner bank relationship.
Related reading
- Anti-money laundering — the framework the BSA reporting obligations sit inside
- Adverse media screening — the check that catches what watchlists miss
- Egmont Group — how financial intelligence crosses borders
- KYC checklist for banks — what the reporting obligations look like operationally
