AI Regulation Tracker · United States (Bank Secrecy Act administrator for all US financial institutions)

How does the FinCEN regulate AI in banking?

Last updated Aug 26, 2026 · Updated as rules change

FinCEN does not regulate AI as such; it governs how banks use AI inside Bank Secrecy Act compliance and warns them about criminals' use of it. Since the December 3, 2018 joint statement with the banking agencies, FinCEN's line has been that banks may adopt AI and machine learning for transaction monitoring without incurring supervisory risk for doing so. The April 7, 2026 AML/CFT program proposed rule (comments closed June 9, 2026; not yet final as of August 2026) goes further, listing 'effective use of artificial intelligence, federated learning, or other advanced monitoring tools' among the factors the FinCEN Director would weigh before taking enforcement action. On the threat side, FinCEN Alert FIN-2024-Alert004 (November 13, 2024) on generative-AI deepfakes and FIN-2026-Alert004 (July 24, 2026) on AI-enabled student-aid fraud set red flags and SAR expectations.

Full nameFinancial Crimes Enforcement Network
RoleAML/CFT regulator and financial intelligence unit
Force on banksBinding law
Applies toBanks, credit unions, broker-dealers, money services businesses, and every other financial institution subject to the Bank Secrecy Act; day-to-day BSA examination of banks is delegated to the OCC, Federal Reserve, FDIC, and NCUA
Key documentAML/CFT Program proposed rule (Apr 2026) — names effective use of AI as a factor in FinCEN enforcement decisions; supersedes the withdrawn July 2024 proposal
Latest moveJul 24, 2026 alert FIN-2026-Alert004 on AI-generated synthetic identities and chatbot-completed coursework in federal student aid fraud; Apr 2026 AML/CFT program NPRM comment period closed Jun 9, 2026
Documents tracked8 · all documents →

FinCEN administers the Bank Secrecy Act and writes the AML/CFT program rules that banks' transaction-monitoring, sanctions-screening, and customer-risk models exist to satisfy. Its approach to AI has two tracks. The first is permissive: the 2018 interagency innovation statement, the 2019 Innovation Hours program, and the innovation provisions of the Anti-Money Laundering Act of 2020 all encourage banks to pilot machine learning and AI in AML with the promise that responsible experimentation is not itself a compliance failure. The 2026 AML/CFT program proposal converts that encouragement into an explicit factor in enforcement discretion.

The second track is defensive. FinCEN's alerts on deepfake media (2024) and AI-enabled 'ghost student' fraud (2026) tell banks what generative-AI-driven fraud looks like, which red flags to watch, and how to key SAR filings. For model governance, the 2021 interagency statement on model risk management for BSA/AML systems, issued in consultation with FinCEN, was rescinded on April 17, 2026 when the banking agencies replaced SR 11-7 / OCC 2011-12 with revised model risk guidance, so there is no longer stand-alone federal guidance on validating AML models.

What has the FinCEN actually published on AI?

DateDocumentStatus
Jul 24, 2026FIN-2026-Alert004 (Federal Student Aid Fraud)FinCEN Alert on Fraud Schemes Targeting Federal Student AidIn force
Apr 10, 20262026 AML/CFT Program Proposed RuleAnti-Money Laundering and Countering the Financing of Terrorism Programs (Notice of Proposed Rulemaking, 2026)Proposed · comment period closed
Nov 13, 2024FIN-2024-Alert004 (Deepfake Media)FinCEN Alert on Fraud Schemes Involving Deepfake Media Targeting Financial InstitutionsIn force
Jul 3, 20242024 AML/CFT Program Proposed Rule (withdrawn)Anti-Money Laundering and Countering the Financing of Terrorism Programs (Notice of Proposed Rulemaking, 2024)Withdrawn
Apr 9, 20212021 BSA/AML Model Risk Management StatementInteragency Statement on Model Risk Management for Bank Systems Supporting Bank Secrecy Act/Anti-Money Laundering ComplianceWithdrawn
Jan 1, 2021Anti-Money Laundering Act of 2020Anti-Money Laundering Act of 2020 (Division F of the National Defense Authorization Act for Fiscal Year 2021)In force
May 1, 2019FinCEN Innovation HoursFinCEN's Innovation Initiative: Implementation of FinCEN Innovation Hours; Invitation to Request Innovation Hours MeetingIn force
Dec 3, 20182018 Joint Statement on BSA/AML InnovationJoint Statement on Innovative Efforts to Combat Money Laundering and Terrorist FinancingIn force
DateTypeDocument / event
Jul 24, 2026GuidanceFIN-2026-Alert004 (Federal Student Aid Fraud) — FinCEN Alert on Fraud Schemes Targeting Federal Student Aid. FinCEN Alert FIN-2026-Alert004, issued July 24, 2026, asks financial institutions to detect and report fraud rings stealing federal student aid through 'ghost students' and 'straw students.' It states that fraudsters may use artificial intelligence to generate fraudulent documents combining stolen and fabricated personal information (synthetic identities) to pass identity verification, and may use AI-powered chatbots to complete coursework so a ghost student stays enrolled long enough to collect a refund. source ↗
Jun 9, 2026MilestoneComment period closes on the April 2026 AML/CFT program proposal. Comments on FinCEN's reform proposal, including its AI-as-effectiveness-evidence enforcement factor, were due June 9, 2026. A final rule had not been issued as of August 26, 2026; the proposal contemplates a 12-month implementation period after finalization.
Apr 17, 2026Milestone2021 BSA/AML model risk statement rescinded. When the OCC, Federal Reserve, and FDIC issued revised interagency model risk management guidance, they rescinded the April 2021 statement on model risk management for BSA/AML systems that had been issued in consultation with FinCEN. BSA/AML models now fall under the general framework with no AML-specific guidance.
Apr 10, 2026Consultation2026 AML/CFT Program Proposed Rule — Anti-Money Laundering and Countering the Financing of Terrorism Programs (Notice of Proposed Rulemaking, 2026). FinCEN announced this proposal on April 7, 2026 and published it in the Federal Register on April 10, 2026, with comments due June 9, 2026; it withdraws and fully supersedes the July 3, 2024 proposal. source ↗
Nov 13, 2024GuidanceFIN-2024-Alert004 (Deepfake Media) — FinCEN Alert on Fraud Schemes Involving Deepfake Media Targeting Financial Institutions. FinCEN Alert FIN-2024-Alert004, issued November 13, 2024, warns that criminals are using generative AI to create deepfake identity documents, images, video, and audio to defeat banks' identity verification, authentication, and due diligence controls. source ↗
Sep 3, 2024MilestoneComment period closes on the July 2024 AML/CFT program proposal. The first post-AML Act program proposal, which encouraged banks to adopt machine learning and generative AI, took comments until September 3, 2024. FinCEN withdrew it in April 2026 rather than finalize it.
Jul 3, 2024Consultation2024 AML/CFT Program Proposed Rule (withdrawn) — Anti-Money Laundering and Countering the Financing of Terrorism Programs (Notice of Proposed Rulemaking, 2024). FinCEN announced this proposal on June 28, 2024 and published it in the Federal Register on July 3, 2024, with comments due September 3, 2024. source ↗
Apr 9, 2021Guidance2021 BSA/AML Model Risk Management Statement — Interagency Statement on Model Risk Management for Bank Systems Supporting Bank Secrecy Act/Anti-Money Laundering Compliance. On April 9, 2021 the OCC, Federal Reserve, and FDIC, in consultation with FinCEN and the NCUA, explained how the 2011 model risk management guidance (SR 11-7 / OCC 2011-12) applies to BSA/AML transaction monitoring, sanctions screening, and customer-risk systems. source ↗
Jan 1, 2021StatuteAnti-Money Laundering Act of 2020 — Anti-Money Laundering Act of 2020 (Division F of the National Defense Authorization Act for Fiscal Year 2021). The Anti-Money Laundering Act of 2020, enacted January 1, 2021 when Congress overrode the veto of the FY2021 National Defense Authorization Act, is the biggest BSA overhaul since the USA PATRIOT Act and the statutory basis for FinCEN's AI-friendly posture. source ↗
May 1, 2019FrameworkFinCEN Innovation Hours — FinCEN's Innovation Initiative: Implementation of FinCEN Innovation Hours; Invitation to Request Innovation Hours Meeting. In May 2019 FinCEN launched the Innovation Hours Program, a standing forum in which banks, fintechs, and regtech vendors demonstrate AML/CFT technologies including artificial intelligence and machine learning to FinCEN staff. source ↗
Dec 3, 2018Guidance2018 Joint Statement on BSA/AML Innovation — Joint Statement on Innovative Efforts to Combat Money Laundering and Terrorist Financing. On December 3, 2018, FinCEN, the Federal Reserve, FDIC, OCC, and NCUA jointly encouraged banks to consider, evaluate, and where appropriate responsibly implement innovative approaches, explicitly including artificial intelligence and digital identity technologies, to meet BSA/AML obligations. source ↗
  • Whether FinCEN finalizes the April 2026 AML/CFT program rule in late 2026 and keeps the language crediting 'effective use of artificial intelligence' in enforcement decisions
  • Parallel OCC, Federal Reserve, FDIC, and NCUA program rules and the proposed 30-day FinCEN consultation before significant bank AML supervisory actions
  • Any FinCEN or interagency follow-up on validating AML models now that the 2021 BSA/AML model risk statement is rescinded, including the banking agencies' signalled AI request for information
  • Further FinCEN alerts on generative-AI-enabled fraud typologies (deepfakes, synthetic identities, voice cloning) and related SAR key terms

Does FinCEN require banks to use AI for AML?

No. Neither the 2018 innovation statement nor the 2026 proposed program rule mandates any technology. The 2026 proposal would, however, let the FinCEN Director consider a bank's 'effective use of artificial intelligence, federated learning, or other advanced monitoring tools' as evidence of an effective program when deciding whether to take enforcement action, and it restates that responsible experimentation with new technology does not by itself create supervisory or enforcement risk.

Is the FinCEN AML/CFT program rule final?

Not as of August 26, 2026. FinCEN announced a proposed rule on April 7, 2026 (Federal Register April 10, 2026), which withdrew and superseded the July 3, 2024 proposal. Comments closed June 9, 2026. If adopted as proposed, institutions would have 12 months from issuance of the final rule to comply.

What guidance governs validation of AML transaction-monitoring models?

Since April 17, 2026, only the revised interagency model risk management guidance (OCC Bulletin 2026-13 / Fed SR 26-2) applies. The April 9, 2021 interagency statement on model risk management for BSA/AML systems, issued in consultation with FinCEN, was rescinded on that date and was not replaced with AML-specific guidance.

Follow every move these regulators make

6 curated AI stories for banking executives · Every morning · Free

Subscribe to BankingNewsAI →