Beneficial ownership information reporting has had one of the more turbulent regulatory histories in recent memory. From court injunctions to missed deadlines to a sweeping rollback, compliance teams have had to stay nimble. This guide breaks down what BOI reporting is, how the rules have evolved, and what obligations remain in force today.
What Is BOI Reporting?
Beneficial ownership information (BOI) reporting refers to the requirement under the Corporate Transparency Act (CTA) for certain companies to disclose identifying details about the individuals who ultimately own or control them. The CTA was enacted to combat money laundering, tax fraud, and the misuse of anonymous shell companies in the U.S. financial system.
According to FinCEN, a “beneficial owner” is any individual who, directly or indirectly:
- Exercises substantial control over a reporting company, or
- Owns or controls 25% or more of its ownership interests
The information required for each beneficial owner includes their full legal name, date of birth, residential or business address, and a copy of a valid government-issued ID.
How the Rules Have Changed
The CTA took effect on January 1st, 2024, and initially cast a wide net. Tens of millions of domestic and foreign companies were expected to file. What followed was a prolonged period of legal challenges, court-ordered pauses, and regulatory reversals.
Here is a simplified timeline of how BOI requirements have evolved:
| Date | Development |
| January 1, 2024 | CTA takes effect; BOI reporting required for domestic and foreign companies |
| Late 2024 | Federal courts issue competing injunctions, pausing enforcement |
| February 18, 2025 | District court lifts injunction; reporting reinstated with March 21, 2025 deadline |
| March 2, 2025 | Treasury announces intent to exempt domestic companies from BOI obligations |
| March 21, 2025 | FinCEN issues interim final rule removing BOI requirements for all U.S. domestic companies |
| March 26, 2025 | Interim final rule published in the Federal Register; takes immediate effect |
The SBA’s Office of Advocacy estimated that this rollback would save small businesses $6.7 billion annually over the next decade, reflecting just how significant the original compliance burden had become.
Who Is Required to File Today?
The interim final rule redefined “reporting company” to apply only to foreign entities. The current breakdown is as follows:
| Entity Type | BOI Reporting Required? |
| U.S. domestic companies (all types) | No |
| Beneficial owners of U.S. domestic companies | No |
| Foreign companies registered to do business in the U.S. | Yes |
| U.S. persons who are beneficial owners of foreign reporting companies | No |
For foreign entities that remain in scope, the following deadlines apply:
- Registered before March 26th, 2025: Initial BOI report was due by April 25, 2025
- Registered on or after March 26th, 2025: Initial BOI report due within 30 calendar days of receiving notice of effective registration
It is worth noting that FinCEN has indicated it intends to finalize the interim rule, so the regulatory picture could still shift. Compliance teams should track any further rulemaking closely.
What BOI Reporting Does Not Replace
The removal of domestic BOI obligations is significant, but it is not a signal to ease up on broader financial crime prevention efforts. BOI reporting was always one layer within a much larger compliance framework.
Customer due diligence and enhanced due diligence obligations remain important, but FinCEN has provided covered financial institutions with exceptive relief from identifying and verifying beneficial owners at every new account opening. Institutions may generally rely on previously obtained beneficial ownership information unless new facts call its reliability into question or risk-based procedures require an update.
The following requirements remain fully in force regardless of the BOI changes:
- Ongoing transaction monitoring for suspicious activity
- Sanctions screening against OFAC, PEP lists, and other watchlists
- Suspicious activity report (SAR) and currency transaction report (CTR) filing
For financial institutions serving foreign companies, there is also a practical onboarding consideration. Those clients remain subject to BOI reporting, and the 30-day filing window for newly registered foreign entities is tight. Customer intake and KYC processes should account for that timeline.
The Bigger Picture for Compliance Teams
The CTA’s original intent, reducing the anonymity that enables financial crime through shell companies and opaque ownership structures, remains relevant even as the specific rules have narrowed. Regulators have not stepped back from expecting strong AML compliance programs. The risk environment has not changed; only one of the tools used to address it has.
Compliance programs built on durable fundamentals, rather than ones structured solely around satisfying a specific filing requirement, are better positioned to absorb regulatory changes like these without losing ground.
Staying current on developments like BOI is part of what separates reactive compliance from strategic compliance.For financial institutions looking to strengthen their AML program across transaction monitoring, KYC, sanctions screening, case management, and regulatory reporting, request a demo of Alessa to see how a fully integrated platform can help your team stay ahead.
