FinCEN Guidance Highlights Continued Regulatory Focus on Anti-Money Laundering Risks Posed by MSB Agents

March 29, 2016

By Lawrence D. Kaplan, Amanda Kowalski & Lauren Kelly D. Greenbacker

In recent years, the federal banking agencies[1] (“FBAs”) and the Financial Crimes Enforcement Network (“FinCEN”) have continued to sharpen their focus on the application and enforcement of the Bank Secrecy Act (“BSA”) and anti-money laundering (“AML”) laws. This supervisory attention, which has historically focused on banking institutions, has increasingly turned to oversight and enforcement of BSA/AML issues related to nonbank financial institutions.[2] Consistent with this trend, FinCEN recently issued new guidance reiterating how the principals of money services businesses (“MSB(s)”) are expected to manage AML risks associated with activities performed by their agents (the “Guidance”).[3] The Guidance emphasizes federal regulators’ focus on ensuring financial institutions maintain appropriate oversight over third parties, and more specifically reinforces FinCEN’s focus on agents of MSBs over the past several years.[4]

As the number of MSBs has increased, traditional banking institutions have perceived regulatory problems in providing MSBs with banking services. Although the FBAs’ intent has not been to restrict the banking services available to MSBs, bankers’ perception of MSBs as higher-risk customers has led to the industry “de-risking” and refusing to provide banking products and services to MSB customers.[5] Regulators have since advised the banking industry not to terminate MSB relationships;[6] however, in light of this regulatory environment, MSB compliance with AML laws is critical not only from an MSB’s own compliance perspective, but also from the perspective of banks serving MSBs.

The BSA requires financial institutions, including MSBs and their agents, to maintain appropriate policies and procedures designed to prevent money laundering and other criminal activity.[7] In issuing the Guidance, FinCEN has reinforced its expectation that MSBs maintain a culture of compliance at both the principal and agent levels.

The Guidance

In order for an MSB principal’s AML program to satisfy FinCEN requirements, it must include controls for mitigating risks posed by the activities of agents.[8] In light of the elevated risk of “illicit activity” associated with agents, FinCEN has long considered policies and procedures implemented to govern relationships with agents to be “an essential part of each Money Services Business’ existing obligation . . . to develop and implement an effective anti-money laundering program.”[9] In addition, MSB principals historically have been required to maintain an updated list of all agents that includes the services performed by each agent and tracks the value of transactions conducted through each agent.[10]

The Guidance details the specific factors that an MSB’s AML program must include in order to understand and account for the risks posed by agents.[11] MSBs are required to gain insight into the types of transactions conducted by their agents to ensure that such transactions are legitimate; of course, any heightened risk of illicit activity by the agent raises risks to the MSB as well. Specifically, the Guidance requires MSBs to, at a minimum:

identify the agent’s owners;
evaluate the operations of agents, including any variations in operations; and
evaluate agents’ implementation of AML policies, procedures, and controls.[12]

These monitoring procedures are intended to ensure that the MSB principal identifies and appropriately responds to any changes in the agent’s business—including the scope of business services offered, clients served, business volume, or geographic reach—that could alter the agent’s risk profile and necessitate corresponding changes to the MSB’s AML program. Both MSBs and their agents are required to conduct reviews of their AML programs “with a scope and frequency commensurate with the risks of money laundering or other illicit activity such principal or agent faces.”[13]

In determining the appropriate scope of agent monitoring that is required in a given agent relationship, the Guidance provides that MSB principals should consider the following risk factors:

whether the owners are known or suspected to be associated with criminal conduct or terrorism;
whether the agent has an established and adhered-to AML program;
the nature of the markets the agent services and the extent to which such markets present an increased risk for money laundering or terrorist financing;
the services an agent is expected to provide and the agent’s anticipated level of activity; and
the nature and duration of the relationship between the principal and the agent.[xiv]

The Guidance also encourages MSB principals that work with the same agent to share information pursuant to Section 314(b) of the USA PATRIOT Act,[15] a voluntary information-sharing program through which financial institutions subject to FinCEN AML requirements (including MSBs) may share information on “individuals, entities, organizations, and countries” in order to detect AML risks.[16]

Finally, the Guidance emphasizes that, while contractual arrangements between principals and agents “may allocate responsibility for developing policies, procedures, and internal controls, both the principal and its agents remain liable under the rules for the existence of these respective policies, procedures, and controls.”[17] Accordingly, neither principals nor agents may avoid liability by pointing to a contractual obligation on the part of the other entity to implement a given risk-mitigating control.

Action Plan

As summarized above, the Guidance urges MSB principals to ensure that they maintain a culture of compliance that facilitates prudent risk-management for both principals and agents. This language is consistent with previous FinCEN guidance advising MSB principals that the business interest in maintaining a profitable relationship with an agent should not interfere with appropriately addressing risks associated with that agent where illicit activity is suspected, including terminating the agent if determined necessary.[18]

MSBs must continue to evaluate and update their AML policies to appropriately identify and mitigate risks posed by agents. As the Guidance highlights FinCEN’s intention to ensure that agent monitoring is addressed during regulatory examinations of MSBs, MSBs should consider whether their AML programs specifically detail policies, procedures, and controls for managing risks posed by agents. In particular, MSBs should develop a plan for monitoring agent activities that includes the following action items:

establish a system for determining, based on the unique risk profile posed by each agent, the appropriate frequency and scope for examining and reassessing the principal’s relationship with each agent;
develop procedures for internal and independent testing of agent activities for material weaknesses, the frequency and scope of which should be tailored to each agent’s risk profile;
develop internal procedures for the termination of agents that are found to pose unacceptable AML risks;
ensure that documentation is readily available for examiners that details effective risk-based policies, procedures, and controls for monitoring agents;[19]
review FinCEN guidance governing culture of compliance to determine whether improvements are needed to strengthen organizational BSA compliance both for principals and agents;[20] and
evaluate jurisdictional, product-related, service-related, and client-related risks associated with each agent on a regular basis to ensure that the risk associated with each agent is properly understood.

Paul Hastings attorneys are actively working with clients to develop policies and procedures governing appropriate monitoring of agent activities consistent with FinCEN guidance.

***

[1] The federal banking agencies are the Office of the Comptroller of the Currency (“OCC”), the Federal Deposit Insurance Corporation (“FDIC”), and the Board of Governors of the Federal Reserve System (“FRB”).

[2] We previously discussed BSA/AML enforcement activity at http://www.paulhastings.com/publications-items/details/?id=58f9e369-2334-6428-811c-ff00004cbded.

[3] FinCEN, FIN-2016-G001, Guidance on Existing AML Program Rule Compliance Obligations for MSB Principals with Respect to Agent Monitoring (Mar. 11, 2016) [hereinafter, “Guidance”], available at https://www.fincen.gov/statutes\_regs/guidance/pdf/FIN-2016-G001.pdf.

[4] See FinCEN, The SAR Activity Review, Issue 21, “Money Services Businesses Agent Request Initiative: An Insight into the MSB Agent Population” 5, 14, (May 2012), available at https://www.fincen.gov/news\_room/rp/files/sar\_tti\_21.pdf (describing 2011 information collection initiative and summarizing findings).

[5] See FinCEN, Remarks of Under Secretary Cohen at the ABA/ABA Money Laundering Enforcement Conference, Statement (Nov. 10, 2014), available at https://www.treasury.gov/press-center/press-releases/Pages/jl2692.aspx; see also FinCEN, Remarks of Jennifer Shasky Calvery at the ABA/ABA Money Laundering Enforcement Conference (Nov. 16, 2015), available at https://www.fincen.gov/news\_room/speech/html/20151116.html.

[6] See http://www.paulhastings.com/publications-items/details/?id=58f9e369-2334-6428-811c-ff00004cbded.

[7] 31 C.F.R. § 1022.210.

[8] See FinCEN, Interpretive Release 2004-1, Anti-Money Laundering Program Requirements for Money Services Business With Respect to Foreign Agents or Foreign Counterparties, 69 Fed. Reg. at 74439 (Dec. 14. 2004).

[9] Id. at 74440.

[10] 31 C.F.R. § 1022.380(d).

[11] Guidance at 2.

[12] Guidance at 3.

[13] Guidance at 3.

[xiv] Guidance at 4.

[15] “Uniting and Strengthening America by Providing Appropriate Tools Required to Intercept and Obstruct Terrorism Act of 2001,” Pub. L. No. 107–56, 115 Stat. 272 through 402 (2001).

[16] FinCEN, Section 314(b) Fact Sheet (Oct. 2013), available at https://www.fincen.gov/statutes\_regs/patriot/pdf/314bfactsheet.pdf.

[17] Guidance at 2–3.

[18] FinCEN, FIN-2014-A007 at 2, Advisory to U.S. Financial Institutions on Promoting a Culture of Compliance (Aug. 11, 2014); available at https://www.fincen.gov/statutes\_regs/guidance/pdf/FIN-2014-A007.pdf.

[19] Guidance at 5.

[20] See FinCEN, FIN-2014-A007, Advisory to U.S. Financial Institutions on Promoting a Culture of Compliance (Aug. 11, 2014), available at https://www.fincen.gov/statutes\_regs/guidance/pdf/FIN-2014-A007.pdf.

Click here for a PDF of the full text