MSB Registration: What It Requires and Who It Applies To

What is MSB Registration?

Money Services Business (MSB) Registration is a federal regulatory requirement under the Bank Secrecy Act (BSA), codified at 31 U.S.C. § 5330 and implemented through 31 CFR § 1022.380. It requires any person or entity meeting the statutory definition of a money services business to register with the Financial Crimes Enforcement Network (FinCEN) before conducting business in the United States.

FinCEN introduced the formal MSB registration program through a final rule published in September 1999. The rule was prompted by a recognition that non-bank financial institutions, which move large volumes of value across the financial system, were operating largely outside the AML oversight frameworks that applied to banks. Without registration, these businesses were invisible to law enforcement and regulators tracking illicit financial flows.

Registration is done through FinCEN Form 107, submitted electronically via FinCEN's BSA E-Filing System. A business must register within 180 days of the date it was established as an MSB. After initial registration, renewal is required every two years, specifically by December 31 of each even-numbered year. Businesses that use agents to conduct MSB activity must also maintain a current agent list and make it available to FinCEN or law enforcement on request.

The practical purpose is direct: FinCEN needs a registry of non-bank financial intermediaries to identify which firms should be filing suspicious activity reports, currency transaction reports, and maintaining AML program records. MSB Registration is the entry point into the broader BSA compliance framework. Without it, a firm can't demonstrate it has acknowledged its regulated status.

Who does MSB Registration apply to?

Under 31 CFR § 1010.100(ff), the MSB definition covers seven categories of financial activity. Any business that conducts transactions exceeding $1,000 for a single customer on the same day in one or more of these categories is generally captured:

• Money transmitters: Any person that accepts currency, funds, or other value from one person and transmits it to another location or person. This is the broadest category. It captures remittance companies, payment processors, and most crypto exchanges that convert or transfer value.
• Currency dealers or exchangers: Businesses that exchange one currency for another, including foreign exchange bureaus and crypto-to-fiat conversion services above the threshold.
• Check cashers: Entities that accept checks and provide cash in exchange, beyond de minimis activity.
• Issuers and sellers of money orders: Covers traditional providers like Western Union and MoneyGram, but also any fintech issuing equivalent instruments.
• Issuers and sellers of traveler's checks: Less common today but still a covered category under the statute.
• Prepaid access providers: Businesses that issue or sell prepaid cards or stored-value products, subject to specific thresholds under 31 CFR § 1022.
• Dealers in foreign exchange: Firms conducting foreign exchange transactions above the $1,000 daily threshold per customer.

The $1,000 per-customer-per-day threshold matters. A business that only occasionally exchanges foreign currency in small amounts may fall below it and not qualify as an MSB. The threshold applies per category, so a business active in multiple categories must assess each one independently.

Cryptocurrency exchanges and virtual currency businesses are explicitly covered if they qualify as money transmitters under FinCEN's 2013 guidance on virtual currencies. Multiple enforcement actions have affirmed this since.

Banks, broker-dealers, and entities already subject to federal functional regulation are generally excluded from the MSB definition. Postal service activities by the U.S. Postal Service are also excluded. Everyone else that touches the covered categories needs to assess whether the threshold is met.

What does MSB Registration require?

Registration itself is just the entry point. Once classified as an MSB, a firm must comply with the full set of BSA obligations that apply to its specific category. The core requirements are:

1. Register with FinCEN within 180 days of establishing MSB activity. Use FinCEN Form 107 via the BSA E-Filing System. The form captures business name, address, ownership, and the categories of MSB activity conducted.

2. Renew registration every two years. Renewal must be filed by December 31 of each even-numbered year. Missing the deadline is itself a BSA violation, separate from any substantive AML failure.

3. Maintain an agent list if using agents. Any MSB that uses agents to conduct MSB activities must maintain a current list showing each agent's name, address, and the type of MSB activity performed. Updates must happen as agents are added or removed.

4. Implement a written AML program. Under 31 CFR § 1022.210, every MSB must have an AML program covering at minimum: internal controls, designation of a compliance officer, ongoing training, and an independent review function.

5. File Currency Transaction Reports (CTRs). Cash transactions exceeding $10,000 must be reported to FinCEN. The CTR filing requirements apply to all registered MSBs.

6. File Suspicious Activity Reports (SARs). Transactions of $2,000 or more that involve suspected money laundering or other financial crime must be reported. SAR filing obligations apply regardless of whether the transaction is completed or attempted.

7. Maintain records for five years. Transaction records, customer identification information, AML program documentation, and filed reports must be retained for a minimum of five years and be available to FinCEN on request.

8. Comply with customer identification requirements. Money transmitters with transactions of $3,000 or more must collect and verify customer identification information under the BSA Travel Rule provisions at 31 CFR § 1010.410.

The BSA is the parent statute governing all of these requirements. Non-compliance at any point, including operating without registration, can trigger civil and criminal penalties.

What evidence do regulators expect?

FinCEN examiners, typically working through state regulators or the IRS (which handles BSA examinations for MSBs not examined by a federal banking regulator), look for a specific set of documentation. Here's what they actually check:

Registration and renewal records:

• Confirmation of FinCEN Form 107 filing, including the registration effective date
• Evidence of timely renewal filings for each two-year cycle
• Agent list, if applicable, current and updated as agents are added or removed

AML program documentation:

• Written AML program signed off by senior management
• Documented risk assessment showing how the firm evaluated its customer base, products, and geographies
• Training records for all staff handling MSB transactions, including completion dates and curriculum content
• Independent audit reports or third-party review findings, with management responses to cited gaps

Transaction monitoring evidence:

• Records showing how the firm identifies and escalates potentially suspicious transactions
• Documentation of SAR decisions, including both filed SARs and documented decisions not to file where a review was conducted
• CTR filings for all cash transactions over $10,000, with supporting transaction data

Customer identification records:

• For transactions of $3,000 or more, records of customer name, address, and identification document
• Policies for verifying customer identity and handling customers who refuse to provide ID

Controls testing:

• Evidence of AML controls testing, either through internal audit or external review
• Documented results and any corrective actions taken

Examiners also look for tone at the top. Written board minutes or compliance committee reports that reference AML program oversight carry real weight. A firm where the board has never discussed AML compliance in a documented meeting is a red flag regardless of what the written policy says.

Common failure modes

The most common reasons MSBs receive citations or enforcement actions fall into a predictable pattern:

• Operating without registration. The simplest violation. A business conducts MSB activity for more than 180 days without filing Form 107. E-Gold Ltd. was criminally indicted in 2007 partly for operating as an unregistered money transmitter, with the founders convicted on federal charges. (DOJ press release, April 2007)

• Stale or incomplete agent lists. MSBs that use agents consistently fail to update their agent list when agents are terminated or new ones added. Examiners cite this repeatedly. It's a mechanical failure, but it signals deeper operational sloppiness.

• Lapsed registration renewals. Missing the December 31 deadline in even-numbered years is a standalone violation. Firms without dedicated compliance staff miss it regularly.

• AML programs that exist on paper but not in practice. Having a written program is not enough if it's generic and doesn't reflect the firm's actual customer base and transaction patterns. Examiners want to see a risk assessment that maps to the real business, not a template downloaded from the internet.

• SAR filing failures. This is the most consequential failure mode. MoneyGram's 2012 $100 million settlement with the DOJ covered, among other issues, years of failure to file SARs on transactions the company knew were fraudulent. (DOJ press release, November 2012)

• Training records that don't hold up. Staff clicking through a slide deck once a year doesn't constitute meaningful training. Examiners ask about content, not just completion certificates.

Penalties for non-compliance

FinCEN and the Department of Justice have broad authority under the BSA to penalize MSBs that violate registration and compliance requirements. The numbers are real.

Civil penalties: Under 31 U.S.C. § 5321, FinCEN can impose civil penalties of up to $25,000 per day per violation for willful BSA violations. For pattern violations involving money laundering, penalties can reach $1 million or more per violation. The specific penalty for failing to register or maintain required records is up to $10,000 per violation.

Criminal penalties: Under 31 U.S.C. § 5322, willful BSA violations can result in criminal fines up to $250,000 and imprisonment up to five years. If the violation is part of a pattern of illegal activity involving more than $100,000 in a 12-month period, the prison term can extend to 10 years.

Enforcement in practice:

Western Union paid $586 million in January 2017 under a deferred prosecution agreement with the DOJ and FTC, resolving allegations that included operating without adequate AML controls and failing to stop transactions the company knew were fraudulent. (DOJ announcement, January 2017)

Alexander Vinnik and the BTC-e exchange were charged in 2017 with running an unregistered MSB and facilitating over $4 billion in transactions, including ransomware payments and proceeds from the Mt. Gox hack. Vinnik was eventually extradited and convicted.

Beyond financial penalties, FinCEN can refer cases to state regulators who may revoke money transmitter licenses. For firms operating across multiple states, a single federal enforcement action can trigger license reviews in every state where they hold a license. That's an existential risk for most MSBs.

Related regulations and frameworks

MSB Registration sits within the BSA framework, but it connects to a broader set of overlapping obligations at the federal and international level.

The BSA is the parent statute. Everything in the MSB registration program, from the Form 107 requirement to the AML program mandate, derives from the BSA and its implementing regulations at 31 CFR Chapter X.

The Anti-Money Laundering Act of 2020 strengthened this framework, including expanded FinCEN authority to supervise MSBs and increased penalties for BSA violations. AMLA 2020 also directed FinCEN to update its AML program rules for the first time since 2002, with proposed rulemaking still in process as of 2026.

At the international level, FATF Recommendation 14 specifically addresses money or value transfer services, requiring countries to register or license providers and subject them to AML/CFT monitoring. The U.S. MSB registration program is the domestic implementation of that standard. For virtual assets, the same FATF framework applies: businesses conducting transfers of virtual assets above threshold are expected to register and maintain AML programs under FATF's virtual asset guidance.

State-level money transmitter licensing operates in parallel to federal MSB registration. A firm needs both: FinCEN registration at the federal level, plus individual state licenses in each state of operation. Currently 49 states require licensing.

The Section 314(a) information-sharing program is directly relevant: registered MSBs are expected to respond to FinCEN 314(a) requests for information on suspected money launderers. Non-response is treated as a compliance failure in exams.

How FluxForce supports MSB Registration compliance

FluxForce's AI agents automate the AML program components MSB examiners check first: transaction monitoring, SAR decision documentation, and CTR generation. Every decision comes with a full audit trail, so when an examiner asks for documentation, it's already organized and timestamped rather than reconstructed under pressure. For MSBs managing high transaction volumes, this removes the manual bottleneck that causes SAR filing delays and documentation gaps. Request a demo to see how FluxForce maps directly to your BSA registration obligations.