FinCEN Compliance Filings for MSBs

The beneficial ownership information report, commonly called the BOIR or BOI report, comes from the Corporate Transparency Act. As originally written, it required most companies formed or registered in the United States to report their beneficial owners, the individuals who own or control the company, to FinCEN through the BOI E-Filing system.

The enforcement picture changed substantially in 2025. After court challenges and enforcement pauses, FinCEN issued an interim final rule in March 2025 that removed the BOIR filing requirement for companies formed in the United States and for US persons. Under that rule, the beneficial ownership reporting requirement currently applies to foreign reporting companies, meaning entities formed under foreign law that are registered to do business in a US state. Domestic companies, including domestic MSBs, are exempt from filing under the current rule.

What that means in practice for an MSB operator: check the current rule before you pay anyone to file a BOIR for a US-formed entity, and check again before you rely on the exemption, because the rulemaking is not finished and the requirement has already changed direction more than once. The authoritative source is FinCEN's BOI page and the BOI E-Filing system, not a filing-service ad. Note that beneficial ownership disclosure to FinCEN under the CTA is separate from the control-person and ownership disclosures every state money transmitter application requires; the state licensing layer at /money-transmitter-license never paused.

A suspicious activity report, or SAR, is the Bank Secrecy Act filing an MSB makes when a transaction looks like money laundering, structuring, fraud, or otherwise has no lawful purpose the business can identify. For money services businesses the rule is 31 CFR 1022.320: a SAR is required when a transaction conducted or attempted by, at, or through the MSB involves at least $2,000 in funds or other assets and the business knows, suspects, or has reason to suspect it is suspicious. Issuers of money orders or traveler's checks reviewing their own clearance records use a $5,000 threshold.

The suspicious activity report form is FinCEN Form 111, filed electronically through the BSA E-Filing system. The filing deadline is 30 calendar days after the business becomes aware of the suspicious activity, with an additional 30 days available when no suspect was identified, and never more than 60 days in total. SARs are strictly confidential: the business cannot tell the customer, or anyone outside the reporting chain, that a SAR was filed.

For a licensed money transmitter, SAR discipline is not just a federal duty. State examiners test the monitoring program that generates SARs during routine examinations, and weak suspicious activity reporting is one of the most common examination findings. The person who owns this day to day is the designated compliance officer; see /money-transmitter-compliance-officer for what that role requires.

The term FinCEN number gets used for two different things, and the difference matters.

A FinCEN ID, formally a FinCEN identifier, is a unique number an individual or company can request from FinCEN and then use in beneficial ownership reporting instead of resubmitting personal details on every report. Individuals request one through FinCEN's FinCEN ID application, provide the same identifying information a BOI report would contain once, and then give reporting companies the number instead of their documents. It exists for convenience and privacy in the BOI regime; with domestic BOIR filing currently paused, its day-to-day relevance follows wherever the BOI rule lands.

The other thing people mean by a FinCEN number is the MSB registration number, the identifier a money services business receives when its Form 107 registration is accepted. That number is what banks and partners look up in FinCEN's public MSB Registrant Search to confirm a business is registered. If a bank asks for your FinCEN number during onboarding, this registration number is almost always what it wants; see /msb-registration for how the registration works and /verify-msb-registration for how anyone can look one up.

Two separate large-cash regimes exist, and which one applies depends on what kind of business receives the cash.

Form 8300, Report of Cash Payments Over $10,000 Received in a Trade or Business, is the IRS and FinCEN joint filing for ordinary businesses: a company that receives more than $10,000 in cash in one transaction or in related transactions files Form 8300 within 15 days. Since January 1, 2024, businesses required to e-file other information returns generally must e-file Form 8300 through BSA E-Filing as well.

Money services businesses mostly live under the other regime: as financial institutions under the Bank Secrecy Act, MSBs file currency transaction reports (CTRs) for cash-in or cash-out transactions over $10,000 in a business day, and a transaction reported on a CTR is generally exempt from Form 8300. The practical rule of thumb: the exchange counter and the transmission window generate CTRs, while Form 8300 catches large cash received outside that financial-institution role. Both regimes prohibit helping a customer structure amounts to stay under the threshold, and structuring is itself a crime and a classic SAR trigger.

The FBAR, FinCEN Form 114, is the Report of Foreign Bank and Financial Accounts. A United States person, including a US company, that has a financial interest in or signature authority over foreign financial accounts must file an FBAR when the aggregate value of those accounts exceeds $10,000 at any time during the calendar year. The FBAR files through the BSA E-Filing system, separately from any tax return, and is due April 15 with an automatic extension to October 15.

For most small businesses the FBAR never comes up. For an MSB it comes up quickly, because cross-border operations create exactly the accounts the rule covers: prefunded payout accounts with foreign banking partners, settlement accounts in destination corridors, and operating accounts at foreign subsidiaries. Officers with signature authority over those accounts can carry their own individual FBAR obligations alongside the company filing.

This is the edge of our lane: we flag the exposure as part of a licensing program because remittance and FX models create it, and your tax advisor or counsel owns the filing analysis. The point for an MSB founder is simpler: when you open the foreign payout account that makes your corridor work, put the FBAR on the same compliance calendar that tracks your state renewals.

None of these filings is individually difficult. What sinks operators is that the triggers and deadlines are scattered: 180 days for the MSB registration, 30 days per SAR, 15 days per Form 8300, annual FBAR, biennial registration renewal, and a BOI rule that has changed direction more than once. A licensed money transmitter layers state renewals, call reports, and examinations on top.

The fix is boring and effective: one compliance calendar, owned by the designated compliance officer, holding every federal filing trigger next to every state deadline. That is how we run licensing programs at /money-transmitter-license, with the federal registration layer covered at /msb-registration and each state's requirements at /mtl-state-laws.