FinCEN and BSA recordkeeping for crypto businesses applies mainly to those that qualify as money services businesses (MSBs): they must register with FinCEN, maintain a written anti-money-laundering (AML) program, file currency transaction reports (CTRs) and suspicious activity reports (SARs), keep records under the recordkeeping and Travel Rules, and retain those records for five years. Whether your business is an MSB is a legal question to confirm with counsel.
Who the BSA Applies To: The MSB Threshold
The Bank Secrecy Act (BSA), administered by the Financial Crimes Enforcement Network (FinCEN), imposes AML obligations on "financial institutions," a category that includes money services businesses. FinCEN has taken the position that a business that accepts and transmits convertible virtual currency, or buys and sells it as a business for customers, is generally a money transmitter, a type of MSB. That captures exchanges, certain kiosk operators, and some payment processors.
Equally important is who is not an MSB. A business or investor that simply holds crypto for its own account, or converts its own holdings to fiat, is generally a user of virtual currency rather than a money transmitter, and is not an MSB on that basis alone. An LLC holding the owner's Bitcoin is in a different position than a business exchanging crypto for the public. Because the line turns on what you do for others, MSB status is a legal determination, confirm yours with qualified counsel rather than assuming.
This page sits under the crypto banking hub. If your activity is on the MSB side, it affects whether banks will open an account, as discussed in open a crypto business account at a credit union or neo-bank.
What the BSA Requires of an MSB
For a business that is an MSB, the core obligations generally include:
- FinCEN registration. MSBs must register with FinCEN and renew that registration on the required cycle.
- A written AML program. A risk-based program with internal policies, a designated compliance officer, ongoing training, and independent testing.
- CTR filing. Currency transaction reports for cash transactions above the federal threshold, a routine, automatic filing.
- SAR filing. Suspicious activity reports when transactions meet the suspicion criteria, subject to the no-tipping-off rule that bars disclosing a SAR to the customer.
- Recordkeeping and the Travel Rule. Records of transactions, and for transmittals at or above the applicable threshold, collecting and passing along specified originator and beneficiary information to the next institution in the chain.
- Five-year retention. BSA records are generally retained for five years.
State money-transmitter licensing is a separate layer that may also apply, alongside the federal BSA obligations.
Records a Crypto Business Should Keep
Even a business below the MSB line benefits from disciplined records, and a bank will expect them. A practical set:
- Entity formation documents, EIN confirmation, and operating agreement
- Beneficial-ownership information consistent with how exchanges verify business entities
- Complete transaction history: acquisitions, transfers, sales, with dates and counterparties
- Source-of-funds documentation for large conversions, per wire-transfer limits for large crypto-to-fiat conversions
- Bank and exchange statements
- Tax records tying activity to filings (see crypto tax reporting for LLCs)
- If an MSB: FinCEN registration, the written AML program, and CTR/SAR filing records
- Retention for at least five years where BSA recordkeeping applies
Related Questions
Is my crypto LLC a money services business?
Usually not, if it only holds and manages the owner's own crypto. FinCEN generally treats a user of virtual currency, one transacting for its own account, as outside the money-transmitter definition. A business that exchanges or transmits crypto for customers is more likely an MSB. Because the test turns on activity for others, confirm your status with qualified counsel.
What records must a crypto business keep, and for how long?
At minimum, entity and ownership documents, full transaction history, source-of-funds support, and statements. A business subject to BSA recordkeeping generally retains those records for five years. Keeping clean records also smooths bank and exchange onboarding and any later review, regardless of MSB status.
What is the Travel Rule?
The Travel Rule requires financial institutions, including MSBs, to collect and pass along specified information about the originator and beneficiary for transmittals at or above an applicable threshold. It is intended to keep identifying information moving with the funds through the payment chain. Exact thresholds and required fields come from the regulation and can change; verify the current rule.
Sources
- FinCEN: Money Services Business (MSB) Information Center. https://www.fincen.gov/money-services-business-msb-information-center
- FinCEN Guidance FIN-2019-G001: Application of Regulations to Certain Business Models Involving Convertible Virtual Currencies (May 9, 2019). https://www.fincen.gov/resources/statutes-regulations/guidance/application-fincens-regulations-certain-business-models
- FinCEN: Bank Secrecy Act requirements. https://www.fincen.gov/resources/statutes-regulations/bank-secrecy-act
Compliance Note
This article is for educational purposes only and does not constitute legal, tax, or compliance advice. Whether a business is a money services business and what BSA obligations apply are legal determinations that depend on the facts and should be confirmed with qualified counsel. Thresholds, registration cycles, and Travel Rule requirements change over time; verify the current rule with FinCEN. The recordkeeping and reporting described here are normal parts of regulated finance, presented so a business can comply, never as something to evade or work around. Advisory services are provided by DAG Wealth, LLC, an SEC-registered investment adviser; DAG Wealth is a brand pending a Form ADV update. Registration does not imply a certain level of skill or training.