FinCEN and Crypto, Explained: MSBs, SARs and Section 311

The Financial Crimes Enforcement Network regulates cryptocurrency platforms under the Bank Secrecy Act to prevent money laundering and terrorist financing. Custodial exchanges must register as Money Services Businesses and file compliance reports, while non-custodial software providers generally fall outside these specific reporting requirements.

The Bank Secrecy Act and Money Services Businesses

The US Department of the Treasury delegates the administration of the Bank Secrecy Act to the Financial Crimes Enforcement Network (FinCEN). The BSA requires financial institutions to keep detailed records of cash purchases, file reports of cash transactions exceeding specific daily thresholds, and report suspicious activity that might signify money laundering or tax evasion.

Under FinCEN regulations, most custodial cryptocurrency exchanges operate as a Money Services Business (MSB). Specifically, they fall under the sub-category of money transmitters. FinCEN first issued guidance in 2013 stating that administrators and exchangers of virtual currency are money transmitters under the BSA. This designation requires these businesses to register with FinCEN, maintain a comprehensive anti-money laundering program, designate a compliance officer, and undergo independent audits.

Custodial vs. Non-Custodial Entities

FinCEN issued expanded guidance in 2019 to clarify how BSA regulations apply to various business models in the digital asset space. The core distinction lies in custody and control. Entities that accept and transmit value on behalf of a customer are money transmitters. This includes centralized exchanges that hold user funds in omnibus accounts.

Conversely, providers of unhosted wallets—software that allows users to store their own private keys—are generally not considered money transmitters. The 2019 guidance specifies that providing software alone does not constitute money transmission. Developers creating non-custodial decentralized finance protocols or self-custody wallet software do not accept or transmit value on behalf of the user, thereby exempting them from MSB registration and reporting requirements under current interpretations.

Reporting Obligations: SARs and CTRs

Registered MSBs bear significant reporting obligations. Two primary filings dictate their daily compliance operations: Currency Transaction Reports and Suspicious Activity Reports.

Currency Transaction Reports apply to fiat currency transactions. An MSB must file a CTR for any transaction, or series of related transactions, exceeding $10,000 in physical currency in a single business day. While purely digital cryptocurrency transfers do not trigger CTRs, cash deposits to fund an exchange account do.

Suspicious Activity Reports (SARs) represent a more complex requirement. An MSB must file a SAR for any transaction occurring by, at, or through the business that involves or aggregates to at least $2,000 and which the MSB knows, suspects, or has reason to suspect involves funds derived from illegal activity, is designed to evade BSA requirements, or serves no apparent lawful purpose.

Consider a numeric example of structuring, a common trigger for SARs. Assume an exchange user wants to deposit $15,000 in cash but knows about the $10,000 CTR threshold. The user makes eight separate deposits of $1,875 over three days. While no single transaction breaches the $2,000 SAR threshold or the $10,000 CTR threshold, the MSB's compliance software flags the aggregate behavior. The exchange files a SAR because the pattern suggests the user is intentionally structuring deposits to evade reporting limits.

Section 311 Designations

The USA PATRIOT Act granted FinCEN additional tools to combat illicit finance, most notably Section 311. This provision allows the Treasury Secretary to designate a foreign jurisdiction, financial institution, class of transactions, or type of account as a "primary money laundering concern."

A Section 311 designation acts as a severe sanction. When FinCEN invokes this power, it can require US financial institutions to take "special measures." The most severe measure prohibits domestic financial institutions from opening or maintaining correspondent accounts for the designated entity. This effectively cuts the target off from the US financial system.

FinCEN has utilized Section 311 against cryptocurrency entities. The agency has targeted foreign virtual currency exchanges and mixing services that facilitated ransomware payments, darknet market transactions, and sanctions evasion. By designating these platforms, FinCEN forces compliant US exchanges to block any transactions interacting with the designated entity's known wallet addresses. This enforcement mechanism operates alongside traditional sanctions enforcement, as detailed in our guide to Sanctions and Crypto: OFAC, Mixers and Compliance.

Common Misconceptions

• FinCEN regulates cryptocurrency securities: FinCEN only oversees anti-money laundering and illicit finance regulations under the BSA. It does not determine whether an asset like Bitcoin ($BTC) or an altcoin is a security or a commodity; that authority rests with the Securities and Exchange Commission and the Commodity Futures Trading Commission.
• All crypto software developers must register as MSBs: FinCEN's 2019 guidance explicitly states that the delivery, communication, or network access services used by a money transmitter to support money transmission services do not make the provider a money transmitter.
• SARs imply immediate criminal charges: Filing a SAR is a regulatory requirement for suspicious behavior. It is an intelligence-gathering tool for law enforcement, not an accusation of a crime by the exchange.

How This Connects to the Market

FinCEN compliance directly impacts the operational costs and market structure of the cryptocurrency industry. Custodial exchanges invest heavily in blockchain analytics software and compliance personnel to meet BSA obligations. These costs often translate into higher trading fees or withdrawal limits for end users.

Furthermore, strict enforcement of SAR and MSB requirements drives institutional participation. Traditional financial institutions and asset managers require the platforms they interact with to maintain robust BSA compliance. When FinCEN utilizes Section 311, it forces immediate market repricing and liquidity shifts as compliant capital flees the designated platforms to avoid regulatory contagion.