Legal authority

Bank Secrecy Act and United States financial reporting architecture (1970-present)

The Bank Secrecy Act and United States financial reporting architecture comprise the statutes, regulations and supervisory arrangements through which the United States requires specified financial records, transaction reports and anti-money-laundering controls. The 1970 Act supplied the foundation. The live framework now sits principally in Chapter 53 of Title 31 of the United States Code and Chapter X of Title 31 of the Code of Federal Regulations, supplemented by later statutes and institution-specific rules.

This is an information and compliance system, not a general prohibition regime, sanctions list or universal sensor for every United States dollar transaction. Records generated under it can support investigations, prosecutions, sanctions implementation and national-security work, but those uses require their own legal authority.

Public Law 91-508, enacted on 26 October 1970, contained a recordkeeping title and a reporting title commonly called the Bank Secrecy Act. Congress later expanded the framework through measures including the USA PATRIOT Act and Anti-Money Laundering Act of 2020. The purpose in 31 USC 5311 now includes criminal, tax, regulatory, intelligence, counterintelligence, anti-terrorism and national-security uses. That purpose does not displace each provision's scope, threshold or procedure.

The Secretary of the Treasury administers the framework through delegated authority. FinCEN issues regulations, receives and analyses reports, and exercises assigned civil-enforcement functions. Federal functional regulators examine institutions and can pursue deficiencies under their own authorities. Investigation, prosecution and adjudication belong to the agencies and courts empowered for those tasks. FinCEN is therefore central, but not the system's sole enforcer.

Reporting and recordkeeping instruments

A Currency Transaction Report generally covers physical-currency transactions exceeding USD 10,000 in one business day. Aggregation applies when the institution knows transactions are by or on behalf of the same person. Suspicious Activity Reports use institution-specific triggers and thresholds, with suspicion rather than size alone at their core.

Other distinct regimes cover cross-border transportation of currency or monetary instruments, foreign financial accounts, cash received in a trade or business, correspondent accounts, funds transfers and specified records. Currency Transaction Reports, Suspicious Activity Reports, Reports of International Transportation of Currency or Monetary Instruments, Foreign Bank Account Reports and Form 8300 filings are not one generic disclosure duty. Risk-based anti-money-laundering programmes and customer due-diligence controls are also separate obligations. None guarantees detection of every illicit transaction, and a report does not establish wrongdoing.

Policy use and statecraft significance

The architecture gives authorities an organised financial-information base that can be combined with examination records, subpoenas, intelligence and foreign co-operation. It enables denial or network control only when another authority is used to freeze assets, prosecute conduct or restrict access. The relevant sanctions, forfeiture, criminal or regulatory law supplies that power.

The state nexus is direct for legal duties created and administered by Congress, Treasury, FinCEN and functional regulators. Private institutions still make first-line monitoring and filing decisions. De-risking may reflect legal risk, supervisory expectations, cost or internal appetite, and is not automatically a government order.

Current beneficial-ownership and due-diligence position

The Corporate Transparency Act created a FinCEN beneficial-ownership regime, but a Treasury interim final rule published on 26 March 2025 removed domestic entities and United States persons from BOI reporting. The remaining duty covers specified foreign-law entities registered to do business in a United States jurisdiction, subject to exemptions and deadlines. This is not a comprehensive domestic-company register.

BOI reporting is distinct from customer due diligence by financial institutions. FinCEN's 13 February 2026 exceptive-relief order removed the requirement to identify and verify beneficial owners each time an existing legal-entity customer opens another account, subject to first-account, reliability and risk-based conditions. FinCEN updated its CDD FAQs on 6 May 2026.

Contested interpretation and limits

In California Bankers Association v Shultz (1974), the Supreme Court rejected the facial challenges before it to the 1970 Act and regulations. It did not validate every later information demand or data use. Thresholds, exemptions, institution-specific duties, jurisdictional boundaries and imperfect data also limit visibility.

The four analytical layers are distinct. No free-standing BSA doctrine creates authority. Constitutional, administrative and financial-regulation doctrines govern disputes. The operative statute and regulation provide positive legal authority. Use of resulting information for a specific investigation, sanction or prosecution is policy use. Jurisdiction, privacy, proportionality, constitutional limits and attribution of private compliance remain contested interpretation.

Sources

Recommended citation

Cite this entry

Tennant, James J., ed. 'Bank Secrecy Act and United States financial reporting architecture (1970-present).' The Encyclopedia of Economic Statecraft, version 2.0.0-alpha, last reviewed 29 July 2026. https://jamesjtennant.com/entries/bank-secrecy-act-1970/.

Suggest an edit