AML-BSA Compliance
by State
Every US state has its own AML risk profile, key industries, and regulatory landscape. Explore our dedicated state compliance hubs, each with local context, city-level coverage, and instant-access FinCEN-aligned programs.
50
State Hubs
118+
Cities Covered
100%
FinCEN-Aligned
Instant
Access After Purchase
All 50 States: Alphabetical
AML Compliance Isn't One-Size-Fits-All
FinCEN sets federal BSA requirements, but every state layerson additional regulators, industries, and risk factors that shape what an effective AML program looks like. Soflo's state hubs give you the full picture: local context, state regulators, and city-specific AML guidance in one place.
State Regulators
Beyond FinCEN, each state has its own banking, insurance, and financial services regulator. From NY DFS to the Nevada GCB, we track what each state demands.
Industry-Specific Risk
A Florida MSB faces different AML risk than a Colorado cannabis bank or a New York hedge fund. Our state hubs surface the industries that drive compliance requirements in each state.
City-Level Coverage
Zoomed-in city pages provide hyper-local AML context, including market characteristics, local regulatory bodies, and neighboring city cross-links, for better search visibility and user relevance.
What Is AML Compliance and Who Needs It?
Anti-Money Laundering (AML) compliance refers to the set of laws, regulations, and procedures that financial institutions and other regulated businesses must follow to detect, prevent, and report money laundering and related financial crimes. In the United States, AML compliance is primarily governed by the Bank Secrecy Act (BSA), enacted in 1970 and significantly expanded by the USA PATRIOT Act of 2001 and the Anti-Money Laundering Act of 2020. The Financial Crimes Enforcement Network (FinCEN), a bureau of the U.S. Department of the Treasury, is the primary federal regulator responsible for administering and enforcing BSA requirements.
Under the BSA, covered businesses are required to maintain a written AML compliance program that addresses five core pillars: (1) written internal policies, procedures, and controls; (2) a designated BSA compliance officer; (3) ongoing employee training; (4) independent testing of the AML program; and (5) customer due diligence (CDD) procedures, including beneficial ownership identification for legal entity customers. Each pillar must be documented and demonstrable to examiners from FinCEN, the FDIC, OCC, state banking regulators, or other applicable oversight bodies.
The businesses required to maintain AML programs span a wide range of industries. Money services businesses (MSBs), including check cashers, money transmitters, currency dealers, and prepaid card issuers, are among the most heavily regulated. Non-bank mortgage lenders and originators (RMLOs), fintech companies, real estate professionals, title and escrow companies, casinos and card clubs, investment advisers, insurance companies, dealers in precious metals and gems, and cryptocurrency exchanges are all subject to varying degrees of BSA/AML oversight. The specific requirements differ by industry, transaction type, and risk profile.
State-level AML compliance adds another layer of complexity. While FinCEN sets the federal floor, each state has its own financial services regulator that may impose additional requirements. New York's Department of Financial Services (NYDFS) is among the most aggressive state regulators, with its own AML examination program and the authority to impose substantial penalties independent of FinCEN. California's Department of Financial Protection and Innovation (DFPI), Florida's Office of Financial Regulation (OFR), and Texas's Department of Banking each maintain active examination programs for state-licensed financial businesses. Understanding both the federal and state regulatory landscape is essential for building a defensible AML program.
Soflo Consulting's state-by-state AML compliance hubs are designed to give regulated businesses a clear, accurate picture of what compliance looks like in their specific state and market. Each hub identifies the key industries operating in that state, the relevant state regulator and its relationship to FinCEN, recent enforcement actions that illustrate what regulators are actually examining, and city-level coverage for businesses operating in specific metropolitan markets. Whether you are a money services business in Miami, a mortgage lender in Dallas, or a fintech company in San Francisco, Soflo provides the state-specific context and the compliance tools you need to meet your annual BSA/AML requirements.
The 5 BSA/AML Pillars
- 1
Written Policies & Procedures
A current, signed AML policy manual covering all products, services, and customer types.
- 2
Designated BSA Officer
A named individual responsible for day-to-day AML program management and examiner contact.
- 3
Annual Employee Training
Documented training for all relevant employees, with certificates retained for examination.
- 4
Independent Testing
Annual review by a party independent of the BSA officer, with a written findings report.
- 5
Customer Due Diligence
CIP, beneficial ownership, and ongoing monitoring procedures for all customer types.
Who Must Comply?
Any business defined as a financial institution under 31 U.S.C. § 5312 must maintain a BSA/AML program. This includes MSBs, mortgage lenders, casinos, broker-dealers, investment advisers, insurance companies, and many others. State licensing may impose additional requirements.
Find Your State. Get Compliant Today.
Instant-access AML-BSA compliance programs for businesses in all 50 states. No sales calls. No proposals. Subscribe online in minutes and get your team trained, your risk assessment documented, and your AML policy written.