PRACTICE AREAS
Partner With Attorneys Familiar With the Bank Secrecy Act
The Bank Secrecy Act (BSA) is a critical piece of legislation designed to combat money laundering and financial crimes by requiring financial institutions to maintain records and report suspicious activity. The BSA provides a crucial framework for uncovering fraudulent practices within financial systems. Whistleblowers play an important role in exposing when institutions fail in their obligations by reporting this to the government.
- Entities like banks, brokers, and some non-bank financial institutions, including money services businesses, must comply with the BSA by reporting suspicious activities, implementing AML programs, and monitoring large transactions.
- Violations occur when institutions fail to invest in proper systems, allowing criminal activities to go undetected.
- Whistleblowers can report BSA violations to FinCEN, including employees and non-employees, with anonymity protected if represented by an attorney.
At Whistleblower Partners LLP, we draw on over 270 years of combined experience to guide individuals who step forward to bring these violations to light. Our team combines extensive legal understanding with an unwavering commitment to protecting whistleblowers.
What Does the Bank Secrecy Act Do?
The Bank Secrecy Act provides the framework guiding the obligations held by all banks and financial institutions to monitor their systems for illicit funds and criminal activity. Banks and other financial institutions are required to maintain systems that check for suspicious activity and to report such activity to law enforcement. They are also responsible for monitoring their systems for transactions above a certain dollar value, usually $10,000.
Who Has to Comply with the Bank Secrecy Act?
The Bank Secrecy Act applies to banks governed by U.S. laws, as well as some other financial institutions, including some registered broker-dealers, cryptocurrency companies, and money-services businesses. Most businesses that facilitate the transfer of money from one person to another have BSA obligations. And even some financial firms that do not have Bank Secrecy Act obligations, like investment advisors, may sometimes have to comply with the same reporting requirements depending on their relationships with other financial firms that fall within the law’s ambit. These rules apply to U.S.-based institutions, as well as other financial institutions under U.S. jurisdiction.
The financial institutions that have to comply with the Bank Secrecy Act include:
- S.-registered banks, including any commercial bank, trust company, private bank, savings and loan association, thrift, or credit union;
- Branches and agencies of foreign banks within U.S. jurisdiction;
- Money services businesses, including those engaged in currency exchange, check cashing, traveler’s checks, money orders, prepaid access services, and money transmission;
- Many cryptocurrency companies, if they are involved in the transfer of convertible virtual currencies;
- Broker-dealers of securities subject to registration under the Securities Exchange Act;
- Mutual funds subject to registration under the Investment Company Act;
- Futures commission merchants or introducing brokers subject to registration under the Commodity Exchange Act;
- Some other non-bank financial institutions, including casinos, real estate businesses, precious metal dealers, and more.
What Conduct Violates the Bank Secrecy Act?
Designing a functional Suspicious Activity Monitoring (SAM) system is not an easy task. Large financial institutions see billions of transactions pass through their ATMs, counters, online systems, and other entry points. Sophisticated computer modeling is usually needed to maintain a functional SAM system, as is a significant investment in personnel to check automated alerts, review its accuracy, and check for context.
Such systems require a significant investment to do correctly. When banks and other financial institutions fail to put in the needed resources out of a desire to save costs, they cannot keep up with their regulatory obligations to prevent the movement of dirty money. Suspicious transactions go unchecked, a backlog of unreviewed data occurs, and the criminals wishing to hide their suspicious activities succeed in doing so.
The Bank Secrecy Act requires financial institutions to, at a minimum:
- Monitor, report, and keep records on suspicious activities through a functional SAM system;
- Submit suspicious activity reports (otherwise known as SARs) for activity reasonably suggesting money laundering, tax evasion, or other criminal activities;
- Have an AML compliance program, including policies and procedures reasonably designed to protect against criminal proceeds moving through the institution’s systems;
- Have a customer identification program reasonably designed to verify the identity of natural persons and beneficial owners of shell corporations;
- Perform due diligence on all accounts, including foreign correspondent accounts and other foreign or private transactions; and
- Monitor, report, and keep records on cash purchases of negotiable instruments and cash transactions exceeding $10,000 (what is known as Currency Transaction Reports or CTRs).
Any failures in these systems constitute a serious issue, because the Bank Secrecy Act is a critical component of the United States’s law enforcement efforts—both for domestic and international money movements. It provides the information needed to stop dirty money and therefore stop the criminal enterprises that rely on those funds to facilitate their activities.
With the advent of the FinCEN Whistleblower Program in 2021, whistleblowers who have information related to banks and other financial institutions not complying with their Bank Secrecy Act violations now have a path to provide that information to the government in exchange for a potential award.
Who Can Blow the Whistle on Bank Secrecy Act Violations?
Anyone with non-public information related to a violation of the Bank Secrecy Act can bring that information to FinCEN. You do not need to be an employee of a bank or other regulated entity to blow the whistle. And if you are an employee and work in a compliance function, you are allowed to come forward as a potential whistleblower with some special requirements. Whistleblowers are allowed to report anonymously as long as they are represented by an attorney.

