On April 7, the U.S. Department of the Treasury’s Financial Crimes Enforcement Network (FinCEN) issued a Notice of Proposed Rulemaking (NPRM) that would significantly revise Bank Secrecy Act (BSA) anti-money laundering and countering the financing of terrorism (AML/CFT) program requirements across a broad range of financial institutions. The proposal is a central element of the U.S. Department of the Treasury’s effort to modernize the AML/CFT framework by moving away from purely technical, process-driven compliance toward demonstrable effectiveness in identifying, mitigating, and reporting money laundering, terrorist financing, and related illicit finance risks.
FinCEN has issued an order granting exceptive relief from the longstanding requirement that covered financial institutions (CFIs) identify and verify the beneficial owners of legal entity customers every time a new account is opened. CFIs now need to collect and verify beneficial ownership information once per customer and then update it only when risk or new information warrants. While CFIs must still comply with all other Bank Secrecy Act (BSA) and anti-money laundering and counter-financing terrorism (AML/CFT) obligations, the new order represents an easing of the requirements established by FinCEN’s Customer Due Diligence regulation (the 2016 CDD rule) regarding the diligence CFIs must perform on legal entity customers as part of AML/CFT programs. Companies should consider whether it makes sense to maintain stricter past compliance practices or revise current policies to fit the new rules based on an individualized risk assessment.
In 2025, the U.S. digital asset landscape evolved more dramatically than in any year since the industry’s inception. A pro‑innovation White House, an active Congress, and key regulators — including the U.S. Securities and Exchange Commission (SEC), the Commodity Futures Trading Commission (CFTC), the Office of the Comptroller of the Currency (OCC), the Department of