FinCEN (Financial Crimes Enforcement Network)

What Is FinCEN?

The Financial Crimes Enforcement Network (FinCEN) is a bureau within the U.S. Department of the Treasury responsible for safeguarding the financial system from illicit use. It combats money laundering, terrorist financing, and other financial crimes through the collection, analysis, and dissemination of financial intelligence. FinCEN was established on April 25, 1990, by Treasury Order 105-08 and was elevated to a full Treasury bureau by the USA PATRIOT Act in 2001.

FinCEN's primary statutory authority comes from the Bank Secrecy Act (BSA), enacted in 1970 as the first U.S. federal law aimed at fighting money laundering. The Secretary of the Treasury has delegated to FinCEN the authority to implement, administer, and enforce BSA compliance. This means FinCEN writes the rules that financial institutions must follow, collects the reports they file, and takes enforcement action when they fail to comply.

For the cryptocurrency industry, FinCEN is one of the most consequential regulators. Its guidance and enforcement actions shape how crypto exchanges, stablecoin issuers, and wallet providers operate within the United States.

How It Works

FinCEN operates through three core functions: rulemaking, intelligence collection, and enforcement. Unlike agencies that examine institutions directly, FinCEN delegates examination authority to federal regulators such as the OCC, FDIC, and Federal Reserve for banks, while retaining direct enforcement power for serious violations.

Rulemaking and Guidance

FinCEN issues regulations under the BSA that define which entities qualify as financial institutions, what compliance programs they must maintain, and what reports they must file. These rules apply broadly to banks, credit unions, broker-dealers, casinos, insurance companies, and Money Services Businesses (MSBs).

Intelligence Collection

FinCEN collects and analyzes financial reports filed by covered institutions. The two most important report types for crypto businesses are:

• Suspicious Activity Reports (SARs): required when a transaction of $2,000 or more (for MSBs) involves suspected illicit activity, is structured to evade BSA requirements, or lacks a lawful purpose
• Currency Transaction Reports (CTRs): required for cash transactions exceeding $10,000 in a single day. Cryptocurrency itself is not considered "currency" for CTR purposes, but fiat cash handled by crypto ATM operators and exchangers above this threshold triggers CTR filing

Enforcement

When institutions willfully violate BSA requirements, FinCEN can impose civil money penalties, refer cases for criminal prosecution, and require remedial compliance measures. Willful failure to file a SAR is a federal crime under 31 U.S.C. 5318(g), carrying fines up to $250,000 per violation and up to five years of imprisonment for individuals.

FinCEN and Cryptocurrency

FinCEN's involvement with cryptocurrency began in 2013 with its first guidance (FIN-2013-G001), which applied existing money transmitter rules to virtual currency. That guidance established a foundational principle: persons who administer or exchange convertible virtual currency are money transmitters and must register as MSBs. Users of virtual currency are not.

The 2019 CVC Guidance

On May 9, 2019, FinCEN issued FIN-2019-G001, a comprehensive update consolidating and clarifying the 2013 framework. The 2019 guidance extended MSB classification to newer business models:

• Crypto exchangers and administrators operating hosted wallets
• Crypto ATM and kiosk operators
• Payment processors handling convertible virtual currency (CVC)
• Anonymity-enhanced services such as mixers and tumblers
• Certain decentralized application operators, depending on facts and circumstances

A key principle from the guidance: the label an industry participant uses is not determinative. What matters is whether the person accepts and transmits value that substitutes for currency. If so, they may be a money transmitter regardless of the technology used.

MSB Registration and Compliance

Crypto businesses classified as MSBs must fulfill several obligations under the BSA:

1. Register with FinCEN as an MSB within 180 days of starting operations
2. Develop and implement a written AML program
3. Designate a compliance officer
4. Conduct independent audits of the AML program
5. File SARs for suspicious transactions of $2,000 or more
6. Comply with the Travel Rule for transmittals of $3,000 or more
7. Maintain records for five years

// Simplified MSB compliance checklist structure
{
  "registration": {
    "agency": "FinCEN",
    "form": "FinCEN Form 107",
    "deadline": "180 days from start of operations",
    "renewal": "Every 2 years"
  },
  "reporting": {
    "sar_threshold_msb": "$2,000",
    "ctr_threshold_cash": "$10,000",
    "travel_rule_threshold": "$3,000"
  },
  "recordkeeping": {
    "retention_period": "5 years",
    "includes": [
      "transaction records",
      "customer identification",
      "SAR/CTR filings"
    ]
  }
}

The Unhosted Wallet Proposed Rule

On December 23, 2020, FinCEN proposed a rule that would have required banks and MSBs to report cryptocurrency transactions exceeding $10,000 involving unhosted (self-custody) wallets. The proposal drew significant criticism for its rushed 15-day comment period and its potential impact on privacy and self-custody. After industry pushback, FinCEN extended the comment period but never finalized the rule. The U.S. Treasury formally withdrew the proposed rule in August 2024.

Key Enforcement Actions

FinCEN has pursued increasingly large penalties against crypto firms for BSA violations. These enforcement actions demonstrate the agency's expectations for crypto compliance:

The Binance settlement in November 2023 was the largest in Treasury Department history, totaling approximately $4.3 billion across FinCEN and OFAC penalties combined. It included a five-year compliance monitorship.

FinCEN vs. State Regulators

A common source of confusion is the relationship between FinCEN and state-level regulators. They serve different functions, and crypto businesses must comply with both:

A crypto exchange operating nationwide must register with FinCEN as an MSB at the federal level and then obtain individual money transmitter licenses from each state where it serves customers. Montana is the only state that does not require a money transmitter license. Some states like New York impose additional requirements through specialized frameworks such as the BitLicense.

Recent Developments

GENIUS Act and Stablecoin Regulation

The GENIUS Act, signed into law in July 2025, established a federal regulatory framework for payment stablecoins. In April 2026, FinCEN and OFAC jointly proposed a rule to implement AML/CFT and sanctions compliance provisions for Permitted Payment Stablecoin Issuers (PPSIs). The proposed rule would classify PPSIs as "financial institutions" under the BSA for the first time, requiring them to implement full AML programs and sanctions compliance. For a deeper analysis, see the GENIUS Act stablecoin regulation explainer.

Crypto Mixer Designation

In October 2023, FinCEN proposed designating convertible virtual currency mixing as a class of transactions of "primary money laundering concern" under Section 311 of the USA PATRIOT Act. This was the first time Section 311 had been used against a class of transactions rather than a specific institution or jurisdiction. The proposed rule would require financial institutions to report transactions suspected of involving crypto mixing services.

Why It Matters

For anyone building or using cryptocurrency products in the United States, FinCEN's rules define the compliance baseline. Exchanges, wallet providers, stablecoin issuers, and payment processors all fall within FinCEN's regulatory perimeter if they accept and transmit value. Understanding these obligations is essential for building a compliant crypto compliance stack.

The evolving regulatory landscape also affects how Layer 2 protocols and payment networks interact with the traditional financial system. Platforms that facilitate stablecoin payments or serve as intermediaries in value transfer may need to assess whether their activities trigger MSB registration requirements under FinCEN's facts-and-circumstances approach. For a broader look at global licensing obligations, see the VASP licensing requirements overview.

Risks and Considerations

Compliance Burden

BSA compliance is resource-intensive. Implementing a compliant AML program requires dedicated staff, transaction monitoring systems, ongoing training, and independent audits. For smaller crypto startups, these costs can be a significant barrier to entry. The RegTech industry has emerged partly in response to this challenge, offering automated tools for sanctions screening, transaction monitoring, and SAR generation.

Regulatory Uncertainty

FinCEN's guidance-based approach means that new crypto business models often lack explicit regulatory clarity. The facts-and-circumstances standard from the 2019 guidance can make it difficult for innovators to know definitively whether their activities trigger MSB obligations before launching. This ambiguity has led some projects to seek no-action letters or legal opinions before entering the U.S. market.

Privacy Considerations

The tension between financial surveillance and user privacy remains a central debate. FinCEN's reporting requirements provide valuable intelligence for combating financial crime, but they also create extensive records of financial activity. The withdrawn unhosted wallet rule highlighted this tension: proponents argued it would close a loophole for illicit finance, while opponents contended it would undermine the privacy and self-custody principles fundamental to cryptocurrency.

Enforcement Escalation

FinCEN's penalty amounts have escalated dramatically, from $700,000 (Ripple, 2015) to $3.4 billion (Binance, 2023). This trajectory signals that the agency views willful non-compliance increasingly seriously and that crypto firms operating without proper BSA programs face existential financial risk.

This glossary entry is for informational purposes only and does not constitute financial or investment advice. Always do your own research before using any protocol or technology.