Money service businesses (MSBs) play a critical role in the financial system, often taking on responsibilities that would once have been the reserve of banks. Many different types of business fall under the MSB rubric, ranging from local currency exchanges to multi-national payment processors. However, in addition to providing valuable services to consumers, MSBs are also a persistent target of money launderers and other financial criminals. That’s why they are required to comply with a range of anti-money laundering (AML) regulations, including the Bank Secrecy Act (BSA) and AML regulations issued by the Financial Crimes Enforcement Network (FinCEN). Non-compliance with AML regulations poses a significant risk for MSBs. In this article, we provide an easy-to-understand checklist MSBs can use to verify that their operations follow AML best practices and regulations.
FinCEN’s expectations for MSBs keep shifting. Geographic targeting orders have temporarily lowered reporting thresholds along the southwest border, and in April 2026, FinCEN proposed a rule that would reshape how AML program requirements are structured and supervised for MSBs and other financial institutions. This checklist reflects the requirements in place today, along with the changes MSBs should be watching.
Key Highlights
- MSBs must register with FinCEN within 180 days of formation and renew that registration every two years; operating unregistered can trigger civil and criminal penalties.
- MSBs must file Currency Transaction Reports (CTRs) for cash transactions over $10,000 and Suspicious Activity Reports (SARs) for suspicious transactions of $2,000 or more.
- A FinCEN Geographic Targeting Order in effect through September 2, 2026 lowers the CTR threshold to $1,000 for MSBs in specified ZIP codes across Arizona, California, New Mexico, and Texas near the southwest border.
- A FinCEN proposed rule issued in April 2026 would revise AML/CFT program requirements for MSBs around a more explicitly risk-based standard; it is not yet final.
- The GENIUS Act (2025) created a separate federal framework for payment stablecoin issuers, who are now regulated as their own category of BSA-covered financial institution rather than solely as traditional MSBs.
- A designated AML compliance officer, documented KYC procedures, and ongoing transaction monitoring remain the non-negotiable core of an MSB AML program.
What Is an MSB, and Is Your Business One?
Understanding whether your business falls under the MSB category is the first step towards compliance with AML regulations. Once you recognize that your business is an MSB, you can implement the necessary procedures and safeguards to prevent money laundering and comply with AML regulations. Money service business is a legal term used to describe organizations or individuals involved in money conversion and transmission. It differentiates these businesses from traditional banks, so it’s important to understand that MSBs are not banks but businesses that provide financial services without meeting the legal definition of a bank. However, many bank-like companies, such as those offering modern digital banking services, may be considered MSBs. Some less traditional businesses also fall under the MSB category, such as certain cryptocurrency businesses and exchanges, including those dealing with stablecoins. An MSB might provide a variety of financial services. These include cashing checks, offering foreign currency exchange services, selling money orders, issuing travelers’ checks, and so on. The crucial condition for an entity to be considered an MSB under these provisions is that they handle transactions exceeding $1,000 per person, per day. In addition to these services, a business is considered an MSB if it engages in the business of facilitating the transmission of funds, irrespective of the volume.
Since the GENIUS Act became law in July 2025, payment stablecoin issuers have their own dedicated federal framework rather than falling solely under the traditional MSB definition. Issuers are treated as BSA-covered financial institutions in their own right and must maintain an AML program, a customer identification program, and sanctions screening under that framework. Many crypto exchanges and other digital asset businesses still meet the general MSB definition, so it’s worth confirming which regime, or regimes, actually apply to your business model before building a compliance program.
For a closer look at the money laundering exposure MSBs face, see our overview of MSB AML compliance risks.
Your MSB AML Compliance Checklist
To ensure compliance with AML regulations, MSBs need to implement AML policies and make sure they are followed. Here’s a checklist to help you stay on top of these requirements. Note that this checklist does not provide a complete overview of AML compliance requirements but, rather, is intended to be used as a helpful guide to the main components of an MSB AML compliance program requirements.
1. Register with FinCEN
In the United States, MSBs are required to register with FinCEN within 180 days of the date the business is established. This registration requirement is mandated by the BSA and its implementing regulations, and needs to be renewed every two years.
Operating as an unregistered MSB is not a minor paperwork gap. Civil and criminal penalties can apply, and pursuing unregistered MSBs has remained a consistent FinCEN enforcement priority.
2. Appoint an Individual or Team with AML Responsibilities
MSBs are required to designate a person or team to handle AML compliance and oversee the effective implementation of AML policies. They are responsible for ensuring that there is accountability for compliance within the organization.
3. Create and Implement FinCEN Reporting Policies
MSBs must file a FinCEN Form 112, also known as a Currency Transaction Report (CTR), for cash-in or cash-out transactions exceeding $10,000 in one business day for any single person. If a transaction or series of transactions amounting to $2,000 or more is deemed suspicious, they must file a Suspicious Activity Report (SAR).
MSBs should also watch for geographic targeting orders (GTOs), which can temporarily lower reporting thresholds in specific areas. A GTO covering the southwest border currently requires MSBs in specified ZIP codes across Arizona, California, New Mexico, and Texas to file CTRs for cash transactions of $1,000 or more, well below the standard $10,000 threshold. The order is in effect through September 2, 2026, and FinCEN has signaled it intends to keep targeting MSBs in border regions going forward, so MSBs operating in or near these areas should confirm whether they are a covered business.
4. Create and Implement KYC Policies
The Know Your Customer (KYC) process is a vital component of AML compliance. During the customer onboarding process, an MSB must identify and verify the identity of customers to mitigate fraud and illicit activities. KYC regulations stipulate that MSBs must collect information to identify individuals and businesses, such as their full name, date of birth, address, and official documents, such as passports or driver’s licenses. To streamline this process, many businesses choose to implement identity verification and KYC solutions for MSBs.
To streamline this process, many businesses choose to implement dedicated identity verification and KYC software rather than relying on manual document review.
5. Adopt Transaction Monitoring Procedures
MSBs are required to monitor transactions for suspicious activity and to document and report transactions that may indicate money laundering or financial crime. Transaction monitoring involves a thorough analysis of transactions, looking for patterns or behaviors that deviate from the norm.
For a closer look at how these patterns show up in practice, see our guide to MSB analytics for detecting money laundering.
6. Train Personnel with AML Responsibilities
MSBs are mandated to provide AML training to their compliance staff and relevant employees to ensure that they are up to date with the rules and procedures and understand their roles and responsibilities in adhering to AML regulations.
7. Invest in AML Tools
AML regulations place MSBs under a significant burden. Handling reporting and KYC processes manually is expensive, time-consuming, and error-prone. Fortunately, there exist AML software solutions to automate some aspects of AML compliance, including KYC identity verification, transaction monitoring and screening, and regulatory reporting. Following this checklist will help MSBs minimize money laundering risk while complying with AML regulations.
The direction of FinCEN’s own rulemaking makes this more relevant, not less. The agency’s April 2026 proposed rule would move AML/CFT program requirements toward a more explicit focus on demonstrable, risk-based effectiveness rather than process for its own sake. A fact sheet on the proposed rule is available from FinCEN; the rule is still in the proposal stage, with a 12-month implementation period expected once it is finalized, but it signals that a well-documented, risk-based program, not just a checklist of completed tasks, is where supervisory expectations are heading.
Staying Ahead of MSB Regulatory Change
MSB compliance obligations do not stand still. Reporting thresholds can shift overnight in specific regions through a GTO, new categories of digital asset businesses are being carved out under laws like the GENIUS Act, and FinCEN’s own program requirements are under active revision. Following this checklist will help MSBs minimize money laundering risk while complying with AML regulations, but it works best as a living process, one that gets revisited whenever FinCEN issues new guidance, rather than a one-time setup task.
To learn how Alessa’s MSB AML compliance software can help your organization streamline and automate AML compliance, schedule a free demonstration.
