U.S. Securities & Exchange Commission
SEC Seal
Home | Previous Page
U.S. Securities and Exchange Commission

Anti-Money Laundering (AML) Source Tool for Broker-Dealers

Date: January 13, 2009

This research guide, or “source tool,” is a compilation of key AML laws, rules, and guidance applicable to broker-dealers. Several statutory and regulatory provisions, and related rules of the securities self-regulatory organizations (SROs), impose AML obligations on broker-dealers. There is also a wealth of related AML guidance materials. To aid research efforts into AML requirements and to assist broker-dealer compliance efforts, this source tool organizes key AML compliance materials and provides related source information.

When using this research “tool” or guide, you should keep the following in mind:

First, securities firms are responsible for complying with all applicable AML requirements. Although this research guide summarizes some of the key broker-dealer AML obligations, it is not comprehensive. You should not rely on the summary information provided, but should refer to the actual statutes, rules, orders, and interpretations.

Second, AML rules, regulations, and orders are subject to change and may change quickly. While the information summarized in this guide is current as of January 13, 2009, please note that in July 2007, the SEC approved the establishment of the Financial Industry Regulatory Authority (FINRA). FINRA consolidated the former NASD and the member regulation, enforcement, and arbitration operations of NYSE Regulation. The Source Tool reflects the historical issuance of AML rules and guidance by the NASD and NYSE.

Finally, you will find a list of telephone numbers and useful websites at the end of this guide. If you have questions concerning the meaning, application, or status of a particular law, rule, order, or interpretation, you should consult with an attorney experienced in the areas covered by this guide.

This compilation was prepared by staff in the Office of Compliance Inspections and Examinations (OCIE), Securities and Exchange Commission. The Securities and Exchange Commission, as a matter of policy, disclaims responsibility for any private publication or statement by any of its employees. The views expressed in this document are those of the staff and do not necessarily represent the views of the Commission, or other Commission staff.1

TABLE OF CONTENTS

The following topics are addressed in this guide:

  1. The Bank Secrecy Act
     
  2. The USA PATRIOT Act
     
  3. AML Compliance Programs
     
  4. Customer Identification Programs
     
  5. Correspondent Accounts: Prohibition on Foreign Shell Banks and Due Diligence Programs
     
  6. Due Diligence Programs for Private Banking Accounts
     
  7. Suspicious Activity Monitoring and Reporting
     
  8. Other BSA Reports
     
  9. Records of Funds Transfers
     
  10. Information Sharing With Law Enforcement and Financial Institutions
     
  11. Special Measures Imposed by the Secretary of the Treasury
     
  12. Office of Foreign Asset Control (OFAC) Sanctions Programs and Other Lists
     
  13. Selected Additional AML Resources
     
  14. Useful Contact Information

1. The Bank Secrecy Act

The Bank Secrecy Act (BSA), initially adopted in 1970, established the basic framework for anti-money laundering obligations imposed on financial institutions. Among other things, it authorizes the Secretary of the Treasury (Treasury) to issue regulations requiring financial institutions (including broker-dealers) to keep records and file reports on financial transactions that may be useful in investigations and prosecuting money laundering and other financial crimes. The Financial Crimes Enforcement Network (FinCEN), a bureau within Treasury, is the administrator of the BSA.

Rule 17a-8 under the Securities Exchange Act of 1934 (Exchange Act) requires broker-dealers to comply with the reporting, recordkeeping, and record retention requirements adopted under the BSA.

Source Documents:

2. The USA PATRIOT Act

The official title of the USA PATRIOT Act is “Uniting and Strengthening America by Providing Appropriate Tools Required to Intercept and Obstruct Terrorism (USA PATRIOT Act) Act of 2001.” The USA PATRIOT Act, enacted by Congress in 2001 in response to the September 11, 2001 terrorist attacks, (among other things) amended and strengthened the BSA . It imposed a number of AML obligations directly on broker-dealers, including:

  • AML compliance programs;
     
  • customer identification programs;
     
  • monitoring, detecting, and filing reports of suspicious activity;
     
  • due diligence on foreign correspondent accounts, including prohibitions on transactions with foreign shell banks;
     
  • due diligence on private banking accounts;
     
  • mandatory information-sharing in response to requests by federal law enforcement); and
     
  • compliance with “special measures” imposed by the Secretary of the Treasury to address particular AML concerns.

Source Document:

3. AML Compliance Programs

Section 352 of the USA PATRIOT ACT amended the BSA to require financial institutions, including broker-dealers, to establish AML programs. Broker-dealers can satisfy this requirement by implementing and maintaining an AML compliance program that complies with SRO rule requirements. NASD Rule 3011 and NYSE Rule 445 require their member organizations to establish risk-based AML compliance programs.

An AML program must be in writing and include, at a minimum:

  • policies, procedures, and internal controls reasonably designed to achieve compliance with the BSA and its implementing rules;
     
  • policies and procedures that can be reasonably expected to detect and cause the reporting of transactions under 31 U.S.C. 5318(g) and the implementing regulations thereunder;
     
  • the designation of an AML compliance officer (AML Officer), including notification to the SROs;
     
  • ongoing AML employee training; and
     
  • an independent test of the firm’s AML program, annually for most firms.

Source Documents:

4. Customer Identification Programs

Section 326 of the USA PATRIOT Act amended the BSA to require financial institutions, including broker-dealers, to establish written customer identification programs (CIP). Treasury’s implementing rule requires a broker-dealer’s CIP to include, at a minimum, procedures for:

  • obtaining customer identifying information from each customer prior to account opening;
     
  • verifying the identity of each customer, to the extent reasonable and practicable, within a reasonable time before or after account opening;
     
  • making and maintaining a record of information obtained relating to identity verification;
     
  • determining whether a customer appears on any list of known or suspected terrorist organizations designated by Treasury within a reasonable time after account opening or earlier;3 and
     
  • providing each customer with adequate notice, prior to opening an account, that information is being requested to verify the customer’s identity.

Source Documents:

5. Correspondent Accounts: Prohibition on Foreign Shell Banks and Due Diligence Programs

Overview: Sections 312, 313, and 319 of the USA PATRIOT Act, which amended the BSA, are inter-related provisions involving accounts called “correspondent accounts.” These inter-related provisions include prohibitions on certain types of correspondent accounts (those maintained for foreign “shell” banks) as well as requirements for risk-based due diligence of foreign correspondent accounts more generally.

A “correspondent account” is defined as: “any formal relationship established for a foreign financial institution to provide regular services to effect transactions in securities.”

A “foreign financial institution” includes: (i) a foreign bank (including a foreign branch or office of a U.S. bank); (ii) a foreign branch or office of a securities broker-dealer, futures commission merchant, introducing broker in commodities, or mutual fund; (iii) a business organized under foreign law (other than a branch or office of such business in the U.S.) that if it were located in the U.S. would be a securities broker-dealer, futures commission merchant, introducing broker in commodities, or a mutual fund; and (iv) a money transmitter or currency exchange organized under foreign law (other than a branch or office of such entity in the U.S.).

In addition, Treasury has clarified that, for a broker-dealer, a “correspondent account” includes:

  • accounts to purchase, sell, lend, or otherwise hold securities, including securities repurchase arrangements;
     
  • prime brokerage accounts that clear and settle securities transactions for clients;
     
  • accounts for trading foreign currency;
     
  • custody accounts for holding securities or other assets in connection with securities transactions as collateral; and
     
  • over-the-counter derivatives contracts.

Prohibitions on Foreign Shell Banks: A broker-dealer is prohibited from establishing, maintaining, administering, or managing “correspondent accounts” in the U.S. for, or on behalf of, foreign “shell” banks (i.e., foreign banks with no physical presence in any country). Broker-dealers also must take steps to ensure that they are not indirectly providing correspondent banking services to foreign shell banks through foreign banks with which they maintain correspondent relationships. In order to assist institutions in complying with the prohibitions on providing correspondent accounts to foreign shell banks, Treasury has provided a model certification that can be used to obtain information from foreign bank correspondents. In addition, broker-dealers must obtain records in the United States of foreign bank owners and agents for service of process (Sections 313 and 319 of the USA PATRIOT Act).

Source Documents:

Due Diligence Regarding Foreign Correspondent Accounts: A broker-dealer is required to establish a risk-based due diligence program (that is part of its AML compliance program) for any “correspondent accounts” maintained for foreign financial institutions. The due diligence program, which is required to be a part of the broker-dealer’s overall AML compliance program, must include appropriate, specific, risk-based policies, procedures, and controls reasonably designed to enable the broker-dealer to detect and report, on an ongoing basis, any known or suspected money laundering conducted through or involving any foreign correspondent account (Section 312 of the PATRIOT Act).

Treasury has finalized a related rule that states when enhanced due diligence on foreign financial institutions is required.

Source Documents:

6. Due Diligence Programs for Private Banking Accounts

Section 312 of the USA PATRIOT Act amended the BSA to require financial institutions, including broker-dealers, to establish and maintain a risk-based due diligence program for accounts defined as “private banking accounts,” and to provide enhanced scrutiny to any such accounts provided to “senior foreign political figures.”

A “private banking account” is defined as an account that: (a) requires a minimum deposit of assets of at least $1,000,000; (b) is established or maintained on behalf of one or more non-U.S. persons who are direct or beneficial owners of the account; and (c) has an employee assigned to the account who is a liaison between the broker-dealer and the non-U.S. person.

The definition of “senior foreign political figure” extends to any member of the political figure’s immediate family, and any person widely and publicly known to be a close associate of the foreign political figure as well as any entities formed for the benefit of such persons (such persons are commonly referred to as PEPs, or Politically Exposed Persons).

Broker-dealers providing private banking accounts must take reasonable steps to:

  • determine the identity of all nominal and beneficial owners of the private banking accounts;
     
  • determine whether any such owner is a “senior foreign political figure” and therefore subject to enhanced scrutiny that is reasonably designed to detect transactions that may involve the proceeds of foreign corruption;
     
  • determine the source of funds deposited into the private banking account and the purpose and use of such account;
     
  • review the activity of the account as needed to guard against money laundering; and
     
  • report any suspicious activity, including transactions involving senior foreign political figures that may involve proceeds of foreign corruption.

Source Documents:

7. Suspicious Activity Monitoring and Reporting

Section 356 of the USA PATRIOT Act amended the BSA to require broker-dealers to monitor for, and report, suspicious activity (so-called SAR reporting).

Under Treasury’s SAR rule, a broker-dealer is required to file a suspicious activity report if: (i) a transaction is conducted or attempted to be conducted by, at, or through a broker-dealer; (ii) the transaction involves at least $5000; and (iii) the broker-dealer knows, suspects, or has reason to suspect that the transaction involves funds from an illegal activity, is designed to evade requirements of the BSA, has no business or apparent lawful purpose, and the broker-dealer knows of no reasonable explanation for the transaction after examining the available facts, or involves the use of the broker-dealer to facilitate criminal activity.

Broker-dealers must report the suspicious activity using a form Treasury has issued for the securities and futures industry, the SAR-SF (also referred to as FinCEN Form 101). The form, which is confidential, includes instructions.

Finally, FinCEN advises that if a firm knows, suspects, or has reason to suspect that a customer may be linked to terrorist activity against the United States, the firm should immediately call FinCEN’s Hotline at 1-866-556-3974.

Source Documents:

  • FinCEN Guidance:
     
  • NYSE Guidance:
     
  • NASD Guidance:
     
  • 8. Other BSA Reports

    Broker-dealers have other reporting obligations imposed by the BSA. They include:

    Currency Transaction Reports (CTRs): Broker-dealers are required to file with FinCEN a CTR for any transaction over $10,000 in currency, including multiple transactions occurring during the course of the same day. A CTR filing is made using a Currency Transaction Report, FinCEN Form 104 (formerly IRS Form 4789).

    Reports of Foreign Bank and Financial Accounts (FBARs): Broker-dealers are required to file reports of foreign bank and financial accounts if the aggregate value of the accounts exceeds $10,000. FBARs are filed with Treasury using Form TD F 90-22.1.

    Reports of Currency or Monetary Instruments (CMIRs): Broker-dealers must report any transportation of more than $10,000 in currency or monetary instruments into or outside of the U.S. on a Report of International Transportation of Currency or Monetary Instruments, FinCEN Form 105 (formerly Customs Form 4790). CMIRs are filed with the Commissioner of Customs.

    Source Documents:

    9. Records of Funds Transfers

    Under the “joint rule” and “travel rule,” broker-dealers must keep records of funds transfers of $3000 or more (such as wire transfers), including certain related information (such as name, address, account number of client, date and amount of wire, payment instructions, name of recipient institution, and name and account information of wire payment recipient).

    Source Documents:

    10. Information Sharing with Law Enforcement and Financial Institutions

    Two provisions relating to information sharing were added to the BSA by the USA PATRIOT Act. One provision requires broker-dealers to respond to mandatory requests for information made by FinCEN on behalf of federal law enforcement agencies. The other provides a safe harbor to permit and facilitate voluntary information sharing among financial institutions.

    Mandatory Information Sharing: Section 314(a) Requests: Broker-dealers are required to respond to requests for information made by federal law enforcement agencies. FinCEN, on behalf of a requesting Federal law enforcement agency, may require broker-dealers to search their records to determine whether they have accounts for, or have engaged in transactions with, any specified individual, entity, or organization. These requests are often referred to as “Section 314(a) information requests.” Broker-dealers must report to FinCEN if they have any account or transaction matching the information listed on the information request. Broker-dealers must also designate a contact person (typically the firm’s AML compliance officer) to receive the requests and must maintain the confidentiality of any request and any responsive reports to FinCEN.

    Source Documents:

    Voluntary Information Sharing: A separate safe harbor provision encourages and facilitates voluntary information sharing among financial institutions. The safe harbor provision, added to the BSA by Section 314(b) of the USA PATRIOT Act, protects the broker-dealer from certain civil liabilities in connection with the information sharing. To qualify, a broker-dealer must file an annual notice with FinCEN, maintain procedures to protect the security and confidentiality of the information, and take reasonable steps to verify that the other financial institution with which it intends to share information has filed a notice with FinCEN. This may be done by checking a list that FinCEN makes available. A notification form and instructions for submitting a notification form (initial or renewal) are available on FinCEN’s website.

    Source Documents:

    11. Special Measures Imposed by the Secretary of the Treasury

    Section 311 of the USA PATRIOT Act amended the BSA to authorize the Secretary of the Treasury to require broker-dealers to take “special measures” intended to address particular money laundering concerns. The Secretary of the Treasury may impose special measures on foreign jurisdictions, financial institutions, or transactions or types of accounts found to be of “primary money laundering concern.” There are five “special measures” including prohibiting U.S. financial institutions from opening or maintaining certain correspondent accounts.

    Source Documents:

    12. OFAC Sanctions Programs and Other Lists

    OFAC is an office within Treasury that administers and enforces economic and trade sanctions based on U.S. foreign policy and national security goals against targeted foreign countries, terrorism sponsoring organizations, international narcotics traffickers, and those engaged in activities related to the proliferation of weapons of mass destruction. OFAC acts under Presidential wartime and national emergency powers, as well as authority granted by specific legislation, to impose controls on transactions and freeze foreign assets under U.S. jurisdiction.

    OFAC’s sanctions programs are separate and distinct from, and in addition to, the AML requirements imposed on broker-dealers under the BSA.

    As a tool in administering sanctions, OFAC publishes lists of sanctioned countries and persons that are continually being updated. Its list of Specially Designated Nationals and Blocked Persons (SDNs) lists individuals and entities from all over the world whose property is subject to blocking and with whom U.S. persons cannot conduct business. OFAC also administers country-based sanctions that are broader in scope than the “list-based” programs.

    In general, OFAC regulations require broker-dealers to:

    • block accounts and other property or property interests of entities and individuals that appear on the SDN list;
       
    • block accounts and other property or property interests of entities and individuals subject to blocking under OFAC country-based programs; and
       
    • block or reject unlicensed trade and financial transactions with OFAC-specified countries, entities, and individuals.

    Broker-dealers must report all blockings and rejections of prohibited transactions to OFAC within 10 days of being identified and annually. OFAC has the authority to impose substantial civil penalties administratively. To guard against engaging in OFAC prohibited transactions, one best practice that has emerged entails “screening against the OFAC list.” OFAC has stated that it will take into account the adequacy of a firm’s OFAC compliance program when it evaluates whether to impose a penalty if an OFAC violation has occurred. Firms should be aware of other lists, such as the Financial Action Task Force (“FATF”) list of non-compliant countries (the “NCCT list”). If transactions originate from or are routed to any FATF-identified countries, it might be an indication of suspicious activity.10

    Source Documents:

    13. Selected Additional AML Resources

    14. Useful Contact Information

    FinCEN
    Financial Institutions Hotline:1-866-556-3974
    Regulatory Helpline:1-800-949-2732
    Office of Public Affairs:703-905-3770
    General Information:
     
    703-905-3591
    FinCEN website:
     
    www.fincen.gov
    Securities and Futures:
     
    http://www.fincen.gov/
    financial_institutions/
    secs_futures/
    IRS Computing Center (for filing forms)
         CTR Forms:1-800-800-2877
         Magnetic Media (SARs and CTRs):
     
    1-313-234-2011
    OFAC
    Hotline:1-800-540-6322
    OFAC website:www.treas.gov/ofac
    FINRA
    Please contact your local FINRA District Liaison directly with any questions relating to AML requirements. If you have not received notification of your assigned Liaison, contact your FINRA District Office for more details. Contact information is available at the following link: http://www.finra.org/ContactUs/DistrictOffices/index.htm
    FINRA websitehttp://www.finra.org/
    SEC Staff
    Division of Market Regulation
    Office of Interpretation and Guidance
    202-551-5777
    Office of Compliance Inspections &
    Examinations, Office of Chief Counsel
    202-551-6460
    SEC SAR Alert Message Line13202-551-SARS (7277)
    SEC websitewww.sec.gov

    1 The following OCIE staff contributed significantly to this compilation: Karen Buck Burgess, Laury Cornell, Katrina Carroll, Sarah Green, Nancy Hansbrough, Lisa Byington, and Joe McHale. Significant contributions also were made by the following staff in the Division of Market Regulation: Lourdes Gonzalez, David Blass, Ignacio Sandoval and Haimera Workie. OCIE staff also would like to acknowledge the contributions made to this project by Michael Rufino, Sheila Haney, and Alma Angotti (FINRA), Mary Ellen Walker, Susan Lang, Eileen O'Neill and Kendal McManus (FinCEN) and Lorraine Lawlor (OFAC).

    2 Note that, since NTM 02-21 was issued, there have been a number of changes to AML requirements. For example, the NASD revised its AML program rule. See NASD NTM 06-07. FinCEN also adopted a number of AML requirements, including the requirement to file suspicious activity reports. See 67 Fed.Reg. 44048 (July 1, 2002).

    3 As of the date of this guide, there are no designated government lists to verify specifically for CIP purposes. Customer comparisons to lists issued by OFAC involve separate and distinct requirements.

    4 FinCEN and the federal banking agencies have issued guidance applicable to banks regarding the CIP rule that may be of interest to securities firms. See Interagency FAQs: Final CIP Rule (January 2004) and Interagency Interpretive Guidance on Customer Identification Program Requirements under Section 326 of the USA PATRIOT Act (April 28, 2005).

    5 The federal banking agencies have issued guidance applicable to banks regarding SAR reporting that may be of interest to securities firms. See Interagency Guidance on Sharing Suspicious Activity Reports with Head Offices and Controlling Companies (January 20, 2006) and Suspicious Activity Report Filing Requirements for Nonbank Subsidiaries of Bank Holding Companies and State Member Banks, Federal Reserve Board (December 24, 2002).

    6 SAR Activity Reviews include two separate publications: SAR Activity Review Trends, Tips & Issues and SAR Activity Review By the Numbers. They are published on a regular basis under the auspices of the Bank Secrecy Act Advisory Group. These publications include: statistics regarding SAR filings and trends; an industry forum highlighting compliance issues and practices prepared by private sector members of the Advisory Group; and guidance regarding practical issues relevant to SAR filing and reporting. Guidance contained in these publications may be of interest and useful to securities firms. For example, see the following discussions contained in issues of The SAR Activity Review – Trends, Tips, and Issues: (i) “National Security Letters and Suspicious Activity Reporting,” Issue 8 (April 2005); (ii) “Providing SARs to Appropriate Law Enforcement,” Issue 9 ( October 2005); (iii) “Should a Financial Institution Document its Decision Not to File a Suspicious Activity Report ” Issue 10 (May 2006); and (iv) “When Does the 30 Day Time Period in which to File a Suspicious Activity Report Begin?” Issue 10 (May 2006). In addition, the May 2009 publication of the SAR Activity Review Trends, Tips & Issues focuses on the securities industry.

    7 Note that, since NTM 02-21 was issued, there have been a number of changes to AML requirements. For example, the NASD revised its AML program rule. See NASD NTM 06-07). FinCEN also has adopted a number of AML requirements, including the requirement to file SARs. See 67 Fed. Reg. 44048 (July 1, 2002).

    8 FinCEN staff have indicated that the responses to Questions 17 and 18 in this Advisory are no longer completely accurate due to the expiration on July 1, 2004, of an exception relating to coded names and pseudonyms, at which time FinCEN confirmed the prohibition of the use of coded names and pseudonyms, but determined that the Travel Rule should be read to allow the use of mailing addresses. See 68 Fed. Reg. 66708 (November 28, 2003).

    9 FinCEN staff have indicated that the responses to Questions 2 and 16 in this Advisory are no longer completely accurate due to the expiration on July 1, 2004 of an exception relating to coded names and pseudonyms, at which time FinCEN confirmed the prohibition of the use of coded names and pseudonyms, but determined that the Travel Rule should be read to allow the use of mailing addresses. See 68 Fed. Reg. 66708 (November 28, 2003).

    10 As of the date of this guide, there are no countries listed on the NCCT list.

    11 Guidance issued to banking institutions regarding their OFAC obligations may be useful to securities firms. See Federal Financial Institution Examination Council Bank Secrecy Act Anti-Money Laundering Examination Manual (August 2007), at pp. 7, 137-148.

    12 This examination manual, issued by the federal banking regulators regarding the AML requirements applicable to banks, contains guidance that may be of interest to securities firms.

    13 Broker-dealers may also, but are not required to, contact the SEC to report situations that may require immediate attention by the SEC. The SEC SAR Alert Message Line number should only be used in cases where a broker-dealer has filed a SAR that may require immediate attention by the SEC and wants to alert the SEC about the filing. Calling the SEC SAR Alert Message Line does not alleviate the broker-dealer's obligation to file a SAR or notify an appropriate law enforcement authority.

     

    http://www.sec.gov/about/offices/ocie/amlsourcetool.htm


    Modified: 06/19/2009