FinCEN Looks to Rewrite AML Rules, Shifting the Focus From Paperwork to What Actually Works

Key Takeaways

• From Volume to Value: FinCEN is proposing a shift away from paperwork-heavy compliance toward measuring how effectively institutions detect and stop illicit finance.
• Risk-Based Programs Reinforced: Firms would have greater latitude to focus resources on higher-risk areas, rather than spreading efforts thinly across low-risk requirements.
• Supervisory Clarity: The proposal seeks to reduce subjectivity in exams by distinguishing between design flaws and implementation failures.
• 2024 Proposal Scrapped: The rule replaces FinCEN’s earlier 2024 proposal and aligns with the Anti-Money Laundering Act of 2020.

Deep Dive

There has long been an unspoken tension at the heart of anti-money laundering compliance. Banks file more reports, build more controls, document more processes, and yet the question lingers. Is any of it actually stopping bad actors?

The Financial Crimes Enforcement Network (FinCEN) took a direct swing at that question, proposing a rule that would fundamentally reshape how financial institutions are expected to approach AML and counter-terrorist financing programs under the Bank Secrecy Act.

The tone, at least from Treasury, leaves little ambiguity about the intent. For years, institutions have been judged by the volume of their compliance output rather than its impact, according to Treasury Secretary Scott Bessent. The proposal, he said, is about redirecting that focus toward keeping illicit finance out of the system rather than adding layers of administrative work.

That may sound like a familiar regulatory refrain. But this time, the mechanics behind it suggest something more structural.

A Quiet Pivot With Big Implications

At its core, the proposal is less about adding new obligations and more about redefining what “good” looks like.

Rather than treating all compliance shortcomings the same, FinCEN is proposing a clearer line between problems rooted in how a program is designed and those that arise from how it is executed. It is a subtle distinction, but one that could carry real consequences when regulators assess whether an institution’s AML framework is fit for purpose.

The agency is also leaning more heavily into a principle that has often been stated but unevenly applied. Financial institutions, not regulators, are best positioned to understand their own exposure to illicit finance risks. The proposal reinforces that expectation while making clear that firms will be judged on how well those risk assessments translate into action.

In practice, that opens the door for institutions to spend less time chasing low-risk compliance exercises and more time focusing on the areas where illicit activity is most likely to occur.

Less Guesswork in the Exam Room

One of the more quietly significant elements of the proposal is its attempt to address a longstanding industry frustration, subjectivity in examinations.

By clarifying expectations around core program elements, including independent testing and audit, FinCEN is signaling that examiners should not override a firm’s risk-based approach simply because it does not align with a preferred methodology. The emphasis shifts back to whether a program is “reasonably designed” and effective, not whether it mirrors a perceived template.

For compliance teams that have navigated differing supervisory expectations across agencies or exam cycles, that alone could mark a meaningful change.

The proposal also reinforces FinCEN’s role at the center of AML/CFT supervision. It introduces a formal notice and consultation process between FinCEN and federal banking regulators when significant supervisory actions are on the table.

While largely procedural on its face, the move points to a broader effort to create more consistency in how enforcement and supervisory decisions are coordinated across the regulatory landscape.

A Reset, Not an Add-On

Notably, the proposal does not build on FinCEN’s earlier effort from 2024, it replaces it entirely. The agency is withdrawing that prior rulemaking and instead putting forward a revised framework aligned with the Anti-Money Laundering Act of 2020.

That reset underscores how central this shift is to Treasury’s broader effort to modernize the AML regime.

For financial institutions, the proposal lands at a moment when compliance programs are already under pressure to do more with more data, more scrutiny, more expectations.

If finalized, the rule could ease some of the burden tied to lower-value compliance tasks. But it also raises a different kind of challenge. Institutions will need to demonstrate, more clearly than before, that their programs are not just well-documented, but effective.

That is a harder standard to meet and a harder one to fake. And that, ultimately, seems to be the point.

The GRC Report is your premier destination for the latest in governance, risk, and compliance news. As your reliable source for comprehensive coverage, we ensure you stay informed and ready to navigate the dynamic landscape of GRC. Beyond being a news source, the GRC Report represents a thriving community of professionals who, like you, are dedicated to GRC excellence. Explore our insightful articles and breaking news, and actively participate in the conversation to enhance your GRC journey.