Part 1 – The USA PATRIOT Act Amends the Bank Secrecy Act (BSA) and Expands Anti-Money Laundering (AML) Requirements
The USA PATRIOT Act represents the most significant expansion of US AML laws since 1970
In the immediate aftermath of the attacks of September 11, 2001, Congress moved swiftly to pass the Uniting and Strengthening America by Providing Appropriate Tools Required to Intercept and Obstruct Terrorism Act (USA PATRIOT Act). Introduced amid heightened national security concerns, the legislation advanced rapidly through both chambers and was signed into law on October 26, 2001, marking a significant federal response. Its passage reflected an urgent effort to equip authorities with expanded tools to address emerging threats.
The USA PATRIOT Act was structured as a far-reaching statute spanning national security, criminal procedure, and financial regulation. Rather than creating an entirely new legal framework, it amended numerous existing federal laws, including the Bank Secrecy Act (BSA), allowing rapid implementation while preserving legal continuity. 25 years and five (5) presidential administrations have supplemented the USA PATRIOT Act, albeit numerous critical anti-money laundering (AML) gaps remain.
Part 2 – Mind the Gap: Geographic Targeting Orders (GTOs) Serve as a Temporary Solution for Non-Financed Residential Real Estate Transactions
Since 2002, persons involved in non-financed (cash) residential real estate purchases are exempt from the BSA’s AML program requirements
When the USA PATRIOT Act was drafted, the real estate industry was not included as a “covered financial institution.” As a result, title companies, brokers, and agents were exempt from stringent and evolving BSA AML program requirements. The loophole allowed anonymous LLCs and shell companies to purchase US properties without scrutiny, creating a flourishing ground for money laundering. The exemption undermined the very law that mandates comprehensive transparency, leaving regulators and law enforcement agencies with limited visibility into large unregulated transactions.
In an attempt to close the loop, since the USA PATRIOT Act was enacted, the Financial Crimes Enforcement Network (FinCEN) has issued more than 20 successive Geographic Targeting Orders (GTOs) to Covered Businesses, typically those serving as agents of title insurance companies. These temporary directives require enhanced reporting to FinCEN on all-cash purchases of residential real-estate by legal entities in more than 30 US counties. A universal approach was attempted with the Residential Real Estate Rule of 2024 (RRE Rule), only to be withdrawn in March 2026 due to legal challenges.
Part 3 – Money Services Businesses (MSBs): From Traditional Cash Remittance Services to Foundational Regulated Path for FinTechs
25 years later, MSBs have shifted from an in-person cash transaction model to an app/platform model accelerating digital financial services
Money services businesses (MSBs) traditionally served the un-banked and operated through an in-person agent-based model. While the MSB registration process went into effect in 1999, The USA PATRIOT Act expanded AML program requirements to MSBs. Fast forward to 2026, the growth in MSB licenses and the diversification of their services demonstrate that MSBs are no longer primarily cash or agent-based models. Rather, they are technology-driven financial technology companies with a global presence, offer multiple financial services to consumers and businesses, and are leading the acceleration into a digital financial marketplace.
The steady increase in MSB licenses across jurisdictions signals more than regulatory expansion: it reflects normalization. MSBs are no longer fringe actors or compliance headaches. They are legitimate businesses, financial needle movers, serving unique transactional needs that banks may not offer, and are application or platform-first with minimal to no physical customer presence. The MSBs serve unique roles: digital wallets, stored value, domestic and international payments, foreign exchange, and crypto exchanges. Because of this, they have their own operational models, risk profiles, governance frameworks, and various regulators and supporting bank partners.
Part 4 – Technology Expands into Financial Services Accelerating Digital Finance Services and Unbundling Traditional Delivery Channels
In 2001, banking was branch-centric and paper-based. 25 years later, digital platforms and apps dominate and leave behind digital footprints
Part 5 – US Regulators Significantly Increase Enforcement for BSA Compliance Violations Across all Covered Financial Institutions
Since the 2004 $25 million fine to Riggs Bank, enforcement actions for BSA non-compliance have resulted in million to billion dollar penalties
Part 6 – The Rise of New York: Groundbreaking Laws Enhance AML, Sanctions, Cybersecurity, and Virtual Currency Requirements
From 2015 to 2017, the NY Department of Financial Services created first of their kind laws on virtual currency licensing, AML (Part 504), and cybersecurity (Part 500) annual compliance program certifications
RISK | STRATEGY | CYBER COMPLIANCE MANAGEMENT
