These questions started showing up in our Slack channels right after the Anti-Money Laundering Act of 2020 took effect. Compliance officers and payment security engineers were suddenly dealing with new FinCEN authorities, voluntary information-sharing programs, and expanded BSA reporting obligations. The questions weren't theoretical, they came from teams building transaction monitoring systems, filing Suspicious Activity Reports (SARs), and trying to figure out what "voluntary public-private partnership" actually means when FinCEN sends you an invitation.
Here's what practitioners are asking and what you need to know.
Can We Share SAR Information with Other Banks Now?
Sort of, but not through the FinCEN Exchange. You're thinking of Section 314(b) of the USA PATRIOT Act, which lets financial institutions share information about suspected money laundering or terrorist financing with each other, but only after you register with FinCEN and document your procedures.
The FinCEN Exchange, established January 1, 2021, is different. It's an invitation-only program where FinCEN shares intelligence with selected financial institutions to help you identify emerging threats. You receive information; you don't get blanket authority to share SARs laterally.
If you're invited to a FinCEN Exchange briefing, FinCEN encourages you to register under 314(b) separately. Participation in one doesn't automatically grant you rights under the other. Check your legal team's 314(b) registration status before you share anything SAR-related with another institution.
What Does FinCEN Do with Our Currency Transaction Reports?
FinCEN maintains one of the largest repositories of financial intelligence accessible to law enforcement, linking BSA data to diverse databases. Your Currency Transaction Reports (CTRs), reports of cash transactions exceeding $10,000, become part of that repository.
FinCEN staff analyze this data to identify patterns, expose hidden details in money laundering schemes, and generate leads for federal, state, local, and international law enforcement. They're not just storing your reports; they're mapping monetary transactions across institutions to detect structuring, bulk cash smuggling, and trade-based money laundering.
When you file a CTR through the BSA E-Filing System, you're creating a financial trail that investigators can follow to track criminals, their activities, and their assets. That trail becomes especially valuable when combined with SARs and other BSA filings from multiple institutions.
Do We Have to Participate in the FinCEN Exchange?
No. Participation is voluntary. FinCEN determines which institutions get invited through consultation with law enforcement and relevant stakeholders, but you're not obligated to accept.
Here's what you're signing up for if you do participate: FinCEN will share threat information with you under authorities like Section 6103 of the AML Act and 31 U.S.C. § 310. This information is meant to help you detect, prevent, and report specific threats, terrorism financing, organized crime, money laundering.
The value proposition: You get intelligence you wouldn't have otherwise, which can sharpen your transaction monitoring rules and SAR quality. The trade-off: You're expected to act on that intelligence and report back what you find. If your compliance team is already stretched thin, think carefully about whether you can operationalize what FinCEN shares with you.
How Does FinCEN's International Cooperation Affect Our AML Program?
FinCEN is part of the Egmont Group, an international network of Financial Intelligence Units. That means when you file a SAR about a suspicious wire transfer to a foreign account, FinCEN can share relevant information with its counterpart in that country, and vice versa.
For your AML program, this matters in two ways. First, if you're a correspondent bank or you process cross-border payments, the quality of your SARs directly supports international investigations. FinCEN isn't just forwarding your report; they're analyzing it alongside intelligence from other countries to build cases.
Second, FinCEN's collaboration with bodies like the Financial Action Task Force influences the regulatory expectations you face. When FATF issues new guidance on virtual assets or beneficial ownership, expect FinCEN to translate that into BSA expectations within months. Your AML risk assessment needs to account for these global regulatory shifts, not just domestic enforcement actions.
What's the Difference Between a FinCEN Enforcement Action and an OFAC Penalty?
FinCEN enforces the Bank Secrecy Act. OFAC enforces economic sanctions. They're both Treasury bureaus, but they're looking at different violations.
FinCEN penalties hit you for BSA failures: inadequate AML programs, missed SARs, poor recordkeeping, or violations of the Customer Due Diligence Rule. The penalty amount depends on the extent of the violation, the harm caused, and your financial condition.
OFAC penalties target sanctions violations: processing transactions for blocked parties, failing to screen against the Specially Designated Nationals List, or violating country-based sanctions programs. OFAC's penalties are often tied to the dollar value of prohibited transactions.
In practice, you can get hit by both agencies for the same underlying failure. Consider a scenario where your transaction monitoring system misses payments to a sanctioned entity. OFAC penalizes you for the sanctions violation; FinCEN penalizes you for the AML program deficiency that let it happen. Your compliance program needs controls that satisfy both regulators.
Does FinCEN Actually Read Every SAR We File?
Not manually, no. FinCEN receives hundreds of thousands of SARs annually. They use analytics to identify high-priority reports and patterns across filings.
This is why narrative quality matters. If your SAR describes "suspicious activity" without explaining what made the transaction unusual, what your investigation revealed, or how it fits your customer's profile, it's less useful to FinCEN's analysts. Specific details, transaction patterns, timeline anomalies, customer behavior changes, third-party relationships, make your SAR actionable.
FinCEN's analytical tools flag reports that match known typologies or ongoing investigations. A well-written SAR with clear red flags and investigative detail is more likely to surface in those queries and generate law enforcement referrals.
Where Do We Go from Here?
Start with the FFIEC BSA/AML Examination Manual if you're building or auditing your program. It translates FinCEN's regulatory expectations into examination procedures.
For transaction monitoring and sanctions screening integration, review FinCEN's advisories on emerging threats, they're published regularly and include specific red flags you can encode into monitoring rules.
If you're invited to the FinCEN Exchange, talk to your legal team before you commit. Understand what information you'll receive, what you're expected to do with it, and whether your current compliance infrastructure can handle the operational load.
And if you're still confused about the difference between 314(a) and 314(b), you're not alone. Pull up the USA PATRIOT Act sections side by side: 314(a) is FinCEN asking you to search your records for specific accounts; 314(b) is you sharing information with other registered institutions. Different authorities, different procedures, different liability considerations.
