If you've ever Googled "do I need an AML program," you're already ahead of most. The majority of businesses that face regulatory action for AML deficiencies didn't know they had a problem - because they didn't know they had an obligation. The definition of who's covered is broader than most business owners expect.
The BSA definition of "financial institution" covers far more industries than just banks
At its core, an AML program is a set of written policies, procedures, and controls designed to prevent your business from being used to launder money or finance terrorism. The Bank Secrecy Act - the primary federal law governing these obligations - requires "financial institutions" to maintain AML programs. But the definition of financial institution under the BSA is significantly broader than most business owners realize, and FinCEN has been steadily expanding it.
MSBs, mortgage lenders, real estate professionals, and dealers in high-value goods are all covered
Banks and credit unions are the most obvious covered institutions. But the BSA also applies to money services businesses (check cashers, money transmitters, and currency exchangers), casinos, dealers in precious metals and stones, non-bank mortgage lenders, real estate professionals in certain all-cash transactions, and more. FinCEN's direction of travel is clear: more industries, not fewer, will face AML obligations over the next several years.
All five BSA program elements must be present and operational - missing any creates exam exposure
A compliant AML program has five mandatory elements: a system of internal controls, independent testing of those controls, a designated compliance officer, annual training for appropriate personnel, and customer due diligence procedures. These elements aren't optional or interchangeable - all five must be present and operational for your program to satisfy regulatory examination. Missing any single element creates an exam finding.
FinCEN is expanding AML obligations to new industries, not shrinking coverage
The practical starting point is simple: determine whether your business is a "financial institution" under the BSA, then confirm which specific regulations apply to your industry. This determination is more nuanced than it sounds - the specific rules for a non-bank mortgage lender are different from those for a money transmitter, which are different from those for a casino. Getting the applicable regulatory framework right before you start building your program avoids significant rework later.
A 30-minute consultation determines your specific obligations with certainty
If you're genuinely unsure whether your business needs an AML program, the answer is almost certainly yes - or soon will be. At Soflo Consulting, we can assess your industry, transaction profile, and regulatory environment in about 30 minutes and tell you exactly what your obligations are. The cost of knowing is zero; the cost of assuming you're not covered can be severe.
Tags
Regulatory Compliance Advisor · Soflo Consulting
Marcus Reid is a Regulatory Compliance Advisor at Soflo Consulting focused on MSB compliance, fintech regulatory strategy, and state money transmitter licensing. He works with early-stage fintech companies, established money services businesses, and digital payment platforms to build compliance infrastructure that scales with their business.
5 sections
Key Takeaways
- 1The BSA definition of "financial institution" covers far more industries than just banks
- 2MSBs, mortgage lenders, real estate professionals, and dealers in high-value goods are all covered
- 3All five BSA program elements must be present and operational - missing any creates exam exposure
- 4FinCEN is expanding AML obligations to new industries, not shrinking coverage
- 5A 30-minute consultation determines your specific obligations with certainty
Need Expert Guidance?
Put these insights into action. Schedule a free consultation with a Soflo Consulting compliance specialist.
Stay Ahead of Compliance
Get FinCEN updates, BSA/AML guidance, and federal compliance news delivered to your inbox - no fluff.