FinCEN final rule extends Bank Secrecy Act AML/CFT program and SAR filing requirements to SEC-registered investment advisers and ERAs

Mechanism

For the first time, FinCEN brought the U.S. investment-adviser channel — roughly 15,000+ SEC-registered firms and several thousand ERAs, together managing tens of trillions in client assets — squarely inside the Bank Secrecy Act's "financial institution" perimeter. The rule's six core obligations track the AML/CFT framework long applied to banks, broker-dealers, and money-services businesses:

1. Written AML/CFT program — risk-based, board-approved, reasonably designed to prevent the firm from being used to launder money or finance terrorism. 2. Designated AML compliance officer — a single accountable person (typically a senior compliance officer or general counsel). 3. Ongoing training of personnel with AML responsibilities. 4. Independent testing of the program (frequency calibrated to risk). 5. SAR and CTR filing — covered firms become primary SAR filers for suspicious activity tied to their advisory relationships, and CTR filers for currency transactions above the $10,000 threshold (limited relevance for most advisers, but obligatory where applicable). 6. §314(a)/(b) information-sharing — mandatory response to law-enforcement targeting requests under §314(a), and discretionary peer-to-peer sharing under §314(b).

Scope deliberately excluded foreign-private advisers and state-registered advisers below the SEC threshold. The rule did not delegate AML examination authority to the SEC under the original September 2024 publication — that was envisioned to come via a separate joint SEC/FinCEN customer-identification-program rule (still pending).

The rule was the product of more than two decades of on-and-off rulemaking. FinCEN first proposed an IA AML rule in 2003, withdrew it, re-proposed in 2015, and finally published this 2024 version after the 2021 Treasury IA risk assessment flagged the channel — particularly private-fund advisers — as a material money-laundering vector.

Downstream implications

• Compliance-tech build-out — RIAs/ERAs that lacked AML infrastructure

began onboarding vendors (NICE Actimize, Refinitiv World-Check, ComplyAdvantage, ACA Group) and standing up SAR-filing pipelines through 2025. The 2026-01-02 two-year delay deferred most of this revenue to the 2027-2028 cycle.

• Heterogeneity of the IA channel — wirehouse-affiliated wealth

managers, private-fund advisers, and sub-$150m ERA venture funds face vastly different risk profiles, but the original rule applied a largely uniform framework. This drove much of the post-publication industry pushback and ultimately the 2026-01-02 delay-and-re-tailor decision.

• Coordination with SEC — the parallel CIP joint rule with the SEC,

proposed in 2024, was needed to give the IA AML framework a customer-due-diligence backbone. That rule remains incomplete; the two-year delay buys time to finalize it.

• The rule sits at the start of a multi-year arc that includes the

2025-08-05 exemptive relief order, the 2025-09-22 NPRM, and the 2026-01-02 final delay — all logged separately or via amendments.

Open questions

• Will the re-tailoring NPRM that FinCEN telegraphed in the delay's

preamble materially carve out ERAs, sub-threshold private-fund advisers, or both?

• Will state regulators (NYDFS especially) impose parallel state-level

AML obligations on the IA channel during the federal pause?

• Does the rule's effective-date delay survive judicial review, given

the procedural-vs-substantive line drawn by some commenters?