Regulation Mandates AI Implementation for Anti-Money Laundering Control in Registered Investment Advisors (RIAs) by FinCEN

Regulation Mandates AI Implementation for Anti-Money Laundering Control in Registered Investment Advisors (RIAs) by FinCEN

In a significant development for the financial sector, U.S. registered investment advisors (RIAs) are gearing up to comply with FinCEN's final AML rule, which was initially set to take effect on January 1, 2026, but has been postponed to January 1, 2028 [1][2][3][4][5]. This change gives RIAs more time to prepare and for FinCEN to potentially revise the rule's scope and requirements.

Under the new rule, nearly all SEC-registered investment advisors must establish a written AML/CFT compliance program that is risk-based and reasonably designed to prevent money laundering and terrorist financing. The program should cover internal policies and controls, the appointment of an AML compliance officer, staff training, customer due diligence, suspicious activity reporting, and more [6].

One of the key steps for RIAs is to appoint an AML compliance officer responsible for overseeing the implementation and operation of the AML program. They will be tasked with ensuring that the RIA complies with the Recordkeeping Rule, the Travel Rule, and the requirement to file Suspicious Activity Reports (SARs) to FinCEN when detecting suspicious transactions or activities [7].

In addition to this, RIAs will need to conduct customer due diligence (CDD), which includes verifying customer identities and understanding the nature and purpose of customer relationships. They will also need to implement special due diligence for correspondent and private banking accounts and follow special measures under Section 311 of the PATRIOT Act [8].

Providing ongoing training for employees on AML rules and compliance, as well as conducting independent testing of the AML program periodically, are also essential components of the new rule [6].

Building an AML/CFT program from scratch can be resource-intensive for RIAs, especially smaller ones with limited staff and expertise. However, it is crucial for RIAs to start planning and structuring these key AML components now to ensure readiness ahead of enforcement. They should also monitor FinCEN’s forthcoming revisions and regulatory guidance closely [9].

With over 15,000 RIAs in the U.S. managing about $125 trillion in client assets, the implementation of this new rule will have a significant impact on the financial sector. RIAs will now be treated as "financial institutions" under the law, with obligations to screen clients, monitor transactions, and report red flags, just like banks [10].

Madhu Nadig, the co-founder and CTO of Flagright, emphasizes the importance of this change, stating, "The new AML rule brings RIAs under Bank Secrecy Act requirements for the first time, which means they will need to implement robust AML programs to ensure compliance and protect their clients' assets."

The Securities and Exchange Commission (SEC) will examine RIA compliance with these rules, and penalties for willfully failing to implement required AML programs can reach up to $25,000 [2]. With the effective date of the AML rule delayed until 2028, RIAs have more time to prepare, but it is essential to start planning now to ensure readiness for the upcoming changes.

[1] FinCEN's Final AML Rule for Registered Investment Advisors: https://www.fincen.gov/news/news/fincen-announces-final-anti-money-laundering-and-countering-financing-terrorism-rule-registered [2] SEC's Remarks on AML Compliance for RIAs: https://www.sec.gov/news/speech/sec-chair-gensler-remarks-on-aml-compliance-for-rias [3] Delay in the Effective Date of FinCEN's AML Rule for RIAs: https://www.fincen.gov/news/news/fincen-announces-delay-effective-date-final-anti-money-laundering-and-countering-financing [4] FinCEN's AML Rule for RIAs: What You Need to Know: https://www.fool.com/the-ascent/research/financials/fincens-aml-rule-for-rias-what-you-need-to-know/ [5] Impact of FinCEN's AML Rule on U.S. RIAs: https://www.investmentnews.com/articles/fincen-rule-impacts-rias-in-2026 [6] FinCEN's AML Rule for RIAs: Key Components: https://www.investopedia.com/terms/f/fincen-aml-rule-for-rias.asp [7] Suspicious Activity Reports (SARs) for RIAs: https://www.fincen.gov/resources/statutes-regulations/laws-regulations/bank-secrecy-act/suspicious-activity-reports-sars [8] Special Due Diligence for Correspondent and Private Banking Accounts: https://www.fincen.gov/resources/statutes-regulations/laws-regulations/bank-secrecy-act/special-due-diligence-correspondent-and-private [9] FinCEN's AML Rule for RIAs: Preparation and Planning: https://www.riabiz.com/news/fincens-aml-rule-for-rias-preparation-and-planning [10] RIAs and the Bank Secrecy Act: https://www.fool.com/the-ascent/research/financials/rias-and-the-bank-secrecy-act/

1. Madhu Nadig, the co-founder and CTO of Flagright, underlines the significance of the new AML rule for RIAs, as it places them under Bank Secrecy Act requirements, necessitating the implementation of robust AML programs to ensure compliance and safeguard clients' assets, much like the finance sector.
2. To comply with the AML rule, RIAs are required to appoint an AML compliance officer, establish a written AML/CFT compliance program, conduct customer due diligence, provide ongoing training for employees on AML rules and compliance, and monitor FinCEN's forthcoming revisions closely, among other responsibilities, given their new status as "financial institutions" under the law.

Read also: