AML (Anti-Money Laundering)

Anti-Money Laundering (AML) is the system of laws, rules, supervision, and operating practice that the United States uses to keep illicit money out of the financial system. The legal core is the Bank Secrecy Act, codified at 31 USC 5311 et seq. and implementing regulations at 31 CFR Chapter X. The Financial Crimes Enforcement Network (FinCEN), part of the Treasury, is the primary administrator. For US founders running payroll, contractor payouts, or platform marketplaces, AML touches onboarding, payments, recordkeeping, and reporting end to end.

How AML Works

The BSA requires covered financial institutions to do three things: identify customers, watch transactions, and report patterns that match anti-money-laundering risk indicators. A modern AML program operates on four pillars (plus a fifth for the largest banks and many non-bank institutions):

• Internal controls. Written policies and procedures, board-approved, risk-based, and applied consistently.
• AML Compliance Officer. A designated officer with authority and resources to run the program.
• Training. Ongoing employee training tailored to roles.
• Independent testing. Audit of the program at least annually for higher-risk institutions, with findings reported to senior management.
• Customer due diligence (CDD). Risk-based procedures for understanding the nature and purpose of customer relationships, including identifying and verifying beneficial owners of legal-entity customers under the 2018 CDD Rule.

The operating model produces three primary reports:

• Currency Transaction Report (CTR). Filed on FinCEN Form 112 for every cash transaction (or aggregated same-day cash transactions) over 10,000 dollars conducted by, through, or to a financial institution.
• Suspicious Activity Report (SAR). Filed on FinCEN Form 111 for suspicious activity, typically at a 5,000 dollar aggregate threshold for banks (2,000 dollars for MSBs in certain scenarios), within 30 days of detection.
• Currency and Monetary Instrument Report (CMIR). Filed on FinCEN Form 105 for physical transport of more than 10,000 dollars in currency or monetary instruments into or out of the US.

Who Must Comply

The covered-institution list at 31 USC 5312 is broad:

• Banks, credit unions, and savings associations
• Broker-dealers in securities
• Mutual funds
• Insurance companies (for permanent life, annuity, and similar products)
• Futures commission merchants and introducing brokers
• Money services businesses (MSBs), including money transmitters, check cashers, prepaid access providers, and dealers in foreign exchange
• Casinos and card clubs
• Dealers in precious metals, precious stones, and jewels
• Loan and finance companies
• Housing GSEs
• Certain investment advisers (since 2024 final rule, with implementation in phases)
• Administrators and exchangers of convertible virtual currency (under FinCEN MSB guidance)

Non-financial trades and businesses are generally not subject to a full AML program but must still meet specific reporting duties, such as filing Form 8300 for cash transactions over 10,000 dollars under IRC 6050I and 31 USC 5331.

Reporting Thresholds

Penalties

The BSA penalty stack is layered:

• Civil penalties under 31 USC 5321. Up to 25,000 dollars per violation for negligent violations, up to the greater of the transaction amount or 100,000 dollars for willful violations, with higher amounts for pattern violations.
• Criminal penalties under 31 USC 5322. Up to 250,000 dollars and 5 years of imprisonment per violation, doubled for violations committed while violating another US law or as part of illegal activity exceeding 100,000 dollars in a 12-month period.
• Civil money penalties for SAR or CTR failures. Specific per-form penalties indexed for inflation each year.
• Operating-license risk. Banking and MSB licenses can be suspended or revoked for systemic AML failures.

Common Pitfalls

• Treating AML as a financial-services-only problem. Form 8300 reaches any trade or business that receives cash. KYC and OFAC screening reach any US person paying internationally.
• Skipping beneficial-ownership data. The CDD Rule requires verification of beneficial owners of legal entities at 25 percent ownership and one control person. Skipping this is a frequent enforcement finding.
• Static thresholds. Suspicious activity is pattern-based. A program that only screens for transactions over 10,000 dollars misses the structuring patterns the BSA was designed to catch.
• Late SARs. The 30-day clock starts at detection, not at investigation completion. Long investigations that delay the SAR are themselves a violation.
• Outdated training. Typology-specific training (such as sanctions evasion, fraud rings, contractor-payout abuse) needs annual refresh.

Related Forms and Terms

• BSA Reporting: the specific reports the BSA requires (CTR, SAR, Form 8300, FBAR).
• KYC: the customer-identification component of an AML program.
• OFAC Sanctions Screening: the parallel screening regime, often run from the same workflow.
• FATF: the global standard-setter whose 40 Recommendations align national AML regimes.

Omnivoo Contract Management integrates KYC, OFAC screening, and Form 8300 cash-payment monitoring into contractor onboarding and payouts, with the audit trail and beneficial-ownership data a US AML examiner expects.