FinCEN Issues Advisory on Financial Integrity; Its Two-Year-Old Gap in Asset Management Continues to Age Gracefully.

The recent FinCEN advisory directing financial institutions to detect and report suspicious activity linked to the unlawful employment of undocumented immigrants is, on its face, an entirely legitimate exercise of BSA authority. Financial crime is financial crime, and FinCEN has both the mandate and the tools to issue guidance of this kind. Institutions subject to the advisory should take it seriously; examiner scrutiny will follow.

But context is not a luxury in compliance analysis. It is the work. And the context surrounding the advisory is worth examining with care.

A gap two decades in the making

After two decades and three proposed rulemakings, FinCEN finalized a rule in August 2024 that would require registered investment advisers and exempt reporting advisers to establish AML/CFT programs, file Suspicious Activity Reports, and comply with Bank Secrecy Act obligations for the first time. The rule was grounded in sobering empirical evidence. Treasury's own analysis found that 15.4 percent of RIAs and ERAs were associated with or referenced in at least one SAR filed between 2013 and 2021, and that SAR filings referencing investment advisers increased by approximately 400 percent during that period, a far greater rate of increase than observed in sectors already subject to SAR filing obligations.

The stakes extended well beyond conventional financial crime. Treasury's 2024 risk assessment documented numerous cases in which sanctioned persons, corrupt officials, and fraudsters exploited the investment adviser industry to access the U.S. financial system, and found that foreign states, most notably China and Russia, were leveraging investment advisers to invest in early-stage companies and access technologies with national security implications. FinCEN identified specific instances in which foreign adversaries used investment advisers to gain access to sensitive technologies and proprietary information, posing direct national security risks. This was documented threat intelligence, not regulatory conjecture.

The sector the rule was designed to govern is not a niche corner of the financial system. The rule was estimated to affect approximately 15,000 RIAs managing in excess of $120 trillion in assets, and approximately 6,000 exempt reporting advisers managing more than $5 trillion. As CRC-Oyster has noted in its 2026 Regulatory Outlook, the convergence of deferred rulemaking and heightened enforcement attention elsewhere is precisely the kind of asymmetry that demands proactive program-building rather than a wait-and-see posture.

The deferral

On July 21, 2025, FinCEN announced it would postpone the effective date of that rule from January 1, 2026 to January 1, 2028, citing a need to "ensure efficient regulation that appropriately balances costs and benefits" and to reevaluate the rule's scope. The agency further signaled its intent to revisit the rule's substance -- not merely its timeline -- raising the prospect that the final version, whenever it arrives, may be materially narrower than what was finalized in 2024. FinCEN made explicit that the delay was partly intended to advance the Administration's deregulatory agenda by reducing what it characterized as unnecessary or duplicative regulatory burden.

Critics were pointed. Commenters opposing the delay warned that gaps in U.S. AML coverage would be exploited by sanctioned actors, terrorist organizations, corrupt officials, and foreign adversaries, and that the longer those gaps remain open, the more exploitation will occur. Advocates further noted that the investment adviser industry had grown to $144.6 trillion in assets under management in 2024, a 12 percent increase from 2023 alone, meaning the unaddressed risk exposure was itself expanding while the rule sat in abeyance.

Particularly pointed was the arbitrage concern embedded in the rule's own adopting release. FinCEN acknowledged that the absence of comprehensive AML regulations for investment advisers meant firms were not uniformly required to understand customers' ultimate sources of wealth, which could create arbitrage opportunities, allowing illicit actors to migrate toward advisers operating under less stringent protocols. The deferral preserves precisely that arbitrage for at least two more years. For RIA and broker-dealer firms navigating the uncertainty around eventual compliance obligations, CRC-Oyster's SEC and State Registered Investment Adviser support practice offers a structured path through the ambiguity.

The Corporate Transparency Act: a parallel retreat

The RIA deferral does not stand alone. In March 2025, Treasury announced it would cease enforcement against U.S. citizens and domestic reporting companies under the Corporate Transparency Act's Beneficial Ownership Information reporting rule, and issued rulemaking to narrow the CTA's scope to foreign reporting companies only. Under the resulting interim rule, U.S.-formed entities (corporations, LLCs, limited partnerships, etc.) are no longer required to report or update beneficial ownership information.

The CTA was designed to address one of the most durable structural vulnerabilities in the U.S. financial system: the use of anonymous domestic shell companies as conduits for illicit capital. Its effective rollback, however administratively convenient, dismantles a transparency layer that the U.S. had committed to maintaining under international anti-corruption frameworks. Notably, the 11th Circuit upheld the statute's constitutionality in December 2025. The decision not to enforce it was a policy choice, not a legal compulsion.

What this means for the financial services industry

Taken together, these developments reconfigure the competitive and compliance landscape across financial services in ways that deserve deliberate attention; not alarm, but clarity.

For banks and credit unions, the immediate reality is one of deepening asymmetry. Depository institutions remain fully subject to BSA/AML obligations that have only expanded in scope and enforcement intensity over the past decade. FinCEN's 2024 enforcement action against TD Bank -- a $3.1 billion settlement and the largest BSA enforcement action in the agency's history -- established an unmistakable benchmark for what chronic program failures cost a regulated institution. Meanwhile, the investment management complex, which collectively manages multiples of the entire U.S. banking system's assets, operates under an indefinite compliance holiday. Community banks and regional institutions in particular, having invested substantially in AML infrastructure over many years, now compete for client assets and talent alongside an advisory sector that faces materially lighter near-term regulatory demands. That is not a neutral competitive condition; it is a structural tilt, and those operating under the heavier load are right to name it.

For investment advisers, the deferral is relief, but it is not a reprieve. The SEC's 2026 examination priorities continue to emphasize AML compliance for broker-dealers and registered investment companies, and regulators have explicitly recommended that advisers align their programs with BSA standards even ahead of the formal 2028 deadline. The rule is delayed, not abandoned, and the substantive compliance work (risk assessments, written program development, SAR workflow design, staff training, etc.) requires a longer runway than many firms appreciate. As CRC has consistently advised, the firms that treat a deferral as a planning window rather than a permission slip will be measurably better positioned when the clock restarts. Those that stand down entirely will face a compressed timeline in a heightened scrutiny environment, a combination that rarely ends well.

For the financial system as a whole, the structural concern is precisely the one FinCEN documented in its own rulemaking and then chose to defer addressing: when compliance obligations are uneven across functionally similar activities, capital and risk migrate toward the path of least regulatory resistance. That arbitrage does not disappear because the rulemaking is paused; it persists, widens, and becomes more entrenched with each passing quarter. Sophisticated actors are not unaware of this. The longer the gap remains, the harder the eventual correction becomes, and the more disruptive it will be to the firms and clients who waited.

There is also an international dimension that is easy to overlook in a domestic policy conversation. The Financial Action Task Force has long identified the U.S. investment adviser gap as a structural deficiency in the American AML framework. The deferral, combined with the CTA rollback, compounds that reputational exposure at a moment when the U.S. is simultaneously pressing foreign financial institutions to tighten their own controls. The credibility of that posture is not strengthened by visible retreats on the home front.

The pattern, not just the policy

Each of these decisions carries defensible rationale in isolation. Regulatory tailoring is legitimate. Compliance cost is a genuine consideration. The diversity of RIA business models is real. No serious compliance professional dismisses these arguments out of hand, and none of them are offered here in bad faith.

But the aggregate pattern is legible, and compliance professionals are paid to read patterns. The deregulatory accommodation has flowed consistently toward asset managers, private fund advisers, and the business formation ecosystem: sectors with sophisticated, well-resourced advocacy infrastructure and a particular gravitational pull on regulatory attention. The new enforcement emphasis, including the June 5^th advisory, is directed at the labor and payroll practices of industries that occupy a very different position in the capital and political landscape.

What makes this advisory particularly notable is not what it asks financial institutions to do; that ask is reasonable and the obligation is real. It is what the advisory, set against the backdrop of the decisions above, quietly discloses about which corners of the financial system are currently understood to present the most urgent integrity risk. The answer, as of June 5, 2026, appears to be the payroll accounts of employers in agriculture, construction, and hospitality. The $125 trillion investment management complex that remained entirely outside the BSA framework and will continue to do so until at least 2028 remains, for now, a matter for another day.

That day will come. The only question is how much ground will need to be recovered when it does.

Implications for compliance officers

The practical answer, however uncomfortable the policy backdrop, is that this most recent advisory creates real and immediate obligations. SAR filing and transaction monitoring programs must be updated to reflect the new red flags FinCEN has identified, and examiners will extend no sympathy to institutions that treated the advisory as optional.

The broader message for the remainder of 2026 is one of structural asymmetry that compliance leaders must navigate with both honesty and discipline. Build programs that address where examination risk lives today. Counsel RIA clients to use the deferral window productively --or program design, risk assessment, and infrastructure investment -- rather than passively. And keep a clear eye on the structural gaps that a future regulatory cycle will eventually be compelled to close, in all likelihood with considerably less patience than the current environment has afforded.

Compliance Risk Concepts helps financial institutions navigate shifting regulatory landscapes, from SAR workflow design and BSA program gap analysis to RIA readiness assessments and broker-dealer compliance support. Download our 2026 Regulatory Outlook or contact us to discuss where your program stands.