Lawmakers Push FinCEN to Focus on Major Crimes Amid AML Rule Overhaul

WASHINGTON — Two U.S. lawmakers are urging the Treasury Department’s Financial Crimes Enforcement Network (FinCEN) to prioritize the pursuit of serious financial crimes and ease compliance burdens as the agency overhauls its anti-money laundering regulations. The push comes as FinCEN reviews public feedback on a proposed rule, announced this spring, designed to modernize the nation's framework for combating illicit finance.

The proposed rule, issued in April, would amend regulations under the Bank Secrecy Act (BSA). It aims to formally require that financial institutions' Anti-Money Laundering and Countering the Financing of Terrorism (AML/CFT) programs are not only compliant on paper but are also "effective, risk-based, and reasonably designed." In the announcement, Deputy Secretary of the Treasury Wally Adeyemo stated the goal is to direct financial institutions "to focus their AML/CFT programs on the highest priority threats," such as fentanyl trafficking and financing related to Russia's invasion of Ukraine.

This marks a significant philosophical shift away from a "check-the-box" compliance culture that has long defined AML efforts. For years, critics have argued that the existing framework has led to institutions filing millions of reports on low-risk activities, burying law enforcement in data while sophisticated criminal enterprises slip through. The new framework, as outlined in the Federal Register, instructs FinCEN to focus on "achieving effective outcomes rather than dictating the processes used to reach those outcomes." The agency has acknowledged that it is not practical for an institution to detect every single illicit transaction, but its program must be structured to effectively combat the most significant risks.

While the rule directly targets financial institutions, the operational impact will undoubtedly flow downstream to their small and mid-sized business clients. A shift to a "risk-based" approach means banks will intensify their scrutiny of specific industries, transaction patterns, and international fund flows they deem high-risk. Businesses may find themselves facing more frequent and detailed questions from their banks, or even delays on routine transactions, as automated systems flag activities that deviate from established norms.

To achieve these effective outcomes, FinCEN is actively encouraging financial institutions to adopt innovative technologies. The proposed rule specifically mentions machine learning, generative artificial intelligence (GenAI), digital identity verification, and blockchain analytics as potential tools. According to the agency, these technologies could be particularly useful in identifying and tracking illicit activities involving digital assets, a rapidly growing area of concern for regulators. This endorsement signals a move toward a more technologically sophisticated and data-driven era of financial crime detection.

FinCEN's economic analysis projects that the primary effect of the new rule will be "reallocative." The agency does not expect an aggregate increase in compliance costs across the industry. Instead, it anticipates that institutions will shift their spending from rote, low-value compliance tasks to higher-value activities like sophisticated risk assessments and investigations. However, analysis from the law firm Norton Rose Fulbright cautions that financial institutions should be wary of such projections, noting that the increased emphasis on timely and updated risk assessments could still impose significant new costs.

This regulatory evolution makes proactive financial discipline more critical than ever for business owners. In our experience, when a bank's new AI-powered monitoring system flags a legitimate transaction, the ability to promptly provide a clear business rationale with clean, supporting documentation is what separates a minor administrative query from a major operational disruption like a frozen account. This is the essence of robust financial risk management.

The consequences for small and mid-sized businesses could be significant. A financial institution under pressure to demonstrate "effectiveness" to regulators may become more conservative in its client relationships. This could lead to "de-risking," where banks decide to exit relationships with entire categories of clients or industries—such as money services businesses, fintech startups, or cash-intensive retail—that they deem too complex or costly to monitor effectively under the new standards. This could potentially limit access to essential banking services for legitimate businesses operating in these sectors.

The government’s goal of focusing on major threats like terrorism financing is commendable, but the implementation of these rules will determine the real-world burden on legitimate American companies. Businesses should not wait for a compliance letter from their bank to get their house in order. A preemptive review of financial reporting processes and internal controls is the most effective strategy. Navigating these complex regulatory expectations is a primary reason companies engage outsourced CFO services. To assess how these impending changes could impact your operations and to ensure your business is prepared, leaders can connect with the advisory team at C&S Finance Group LLC at csfinancegroup.com.

FinCEN is expected to finalize the rule after its review of industry and public comments is complete. Once finalized, the focus will shift to implementation and enforcement. Financial industry observers and businesses will be watching closely to see how FinCEN and other banking regulators adjust their examination and enforcement priorities to align with this new emphasis on effective outcomes over procedural perfection.