Proposal to Strengthen AML/CFT Programs Under BSA

KPMG Insights:

• Expanding AML/CFT: Increasing expectations and regulatory coverage for robust and consistent AML/CFT risk programs across financial institutions.
• Emerging Risk/Continuous Improvement: Focus on a “reasonably designed”, risk-based AML/CFT program, including a mandatory risk assessment process and inclusion of “government-wide AML/CFT priorities”.
• Supervision and Enforcement: Expect continued supervisory intensity with associated focus on maintaining/increasing needed talent/skillsets, tooling/automation, and investments - including in such areas as AML programs, fraud, and SAR identification/filing.

_______________________________________________________________________________________________________________________________________

The Department of the Treasury’s Financial Crimes Enforcement Network (FinCEN) issues a proposed rule that is intended to “strengthen and modernize” anti-money laundering (AML) and countering the financing of terrorism (CFT) programs pursuant to the Anti-Money Laundering Act of 2020 (AML Act).

The proposal would amend existing regulations to require financial institutions (including banks, broker-dealers, insurance companies, casinos, money services businesses and dealers in precious metals) to establish, implement and maintain effective, risk-based AML/CFT programs with certain minimum components, including a mandatory risk assessment and inclusion of “government-wide AML/CFT priorities”. The program would also need to be reasonably designed to identify, manage, and mitigate risks associated with illicit finance, consistent with the Bank Secrecy Act (BSA) and the goal of safeguarding the U.S. financial system and national security.

In conjunction with FinCEN’s release, the Federal Reserve Board (FRB), Federal Deposit Insurance Corporation (FDIC), Office of the Comptroller of the Currency (OCC), and National Credit Union Administration (NCUA) jointly propose a rule that would amend each agency’s BSA compliance program requirements to align with FinCEN’s proposal.

FinCEN Proposal to Strengthen AML/CFT Programs

Proposal. FinCEN’s proposed rule seeks to “strengthen and modernize” AML/CFT programs at financial institutions by amending its existing regulations to:

• Explicitly require financial institutions to establish, implement, and maintain effective, risk-based, and reasonably designed AML/CFT programs with certain minimum components, including a mandatory risk assessment process.
• Incorporate “government-wide AML/CFT priorities”, as appropriate, into those risk-based AML/CFT programs. (Pursuant to the AML Act, FinCEN published the first AML/CFT priorities in June 2021, and will update the list every four years.)
• Promote clarity and consistency across different types of financial institutions. (Note: Some rules may currently apply to some but not all financial institutions and applications by type of financial institution may differ.)

Scope. The proposed rule would apply to financial institutions defined to include banks; casinos and card clubs (casinos); money services businesses (MSBs); brokers or dealers in securities (broker-dealers); mutual funds (MFs); insurance companies; futures commission merchants and introducing brokers in commodities; dealers in precious metals, precious stones, or jewels; operators of credit card systems; loan or finance companies; and housing government sponsored enterprises (GSEs). (Earlier this year, FinCEN issued a proposed rule that would add “investment advisers” to the definition of “financial institution” – see KPMG Regulatory Alert, here.)

FinCEN also proposes technical changes and modifications to the AML/CFT program requirements for individual types of financial institutions covered by the proposed rule.

Note: As part of regulators heightened risk standards focus, financial institutions are facing increased regulatory scrutiny in the management of financial crime risks. Financial institutions should expect continued supervisory intensity (and enforcement activity) on AML/CFT/BSA and CDD compliance along with attention to continuously assessing risk, implementing risk-based compliance programs, maintaining/increasing needed talent/skillsets, tooling/automation, and investments - including in such areas as AML/CFT programs, fraud, and SAR identification/filing. (See KPMG Regulatory Alert, here.)

Request for comment. Comments are requested no later than September 3, 2024. FinCEN seeks feedback on a variety of questions, including questions related to incorporation of the AML/CFT priorities, the risk assessment process and related updates, de-risking and financial inclusion, the requirement for “persons in the United States”, the likelihood of investment in updating or new technology due to the rule, potential efficiencies, burden categories, and the impact on current compliance costs.

Final Rule Effective Date. FinCEN proposes an effective date that is six months from the date of issuance of the final rule.

Interagency Proposal to Align BSA Compliance Programs with FinCEN

In a separate but related action, the FRB, FDIC, OCC, and NCUA jointly propose a rule that would amend each agency’s BSA compliance program requirements to align with FinCEN’s proposed AML/CFT program requirements.

Request for comment. The agencies request comment on or before 60 days after the date of publication in the Federal Register.