Lesson 02 of 15
Are You a "Financial Institution"? MSB and Money Transmitter Status
5 min read · AML·FT
Before any control, answer the question everything hangs on: are you a money services business or money transmitter under 31 CFR 1010.100(ff)? Apply the functional test, learn the FinCEN registration duty, and avoid the traps that catch fintechs and crypto firms.
The question that decides everything
- BSA duties attach to a 'financial institution'
- Many fintechs are MSBs — specifically money transmitters
- Get status wrong and every later control is built on sand
Before you can build a single control, you have to answer one question: under the Bank Secrecy Act, are you a financial institution, and if so, which kind? This matters because every obligation we'll discuss, customer identification, due diligence, monitoring, reporting, the Travel Rule, hangs off that status. Banks are financial institutions.
But so are money services businesses, and a huge share of fintechs that aren't banks fall into the money services business category, usually as money transmitters. If you get this status question wrong, every later control is built on sand. So this lecture is the foundation: how to read the definition, and how fintechs misread it.
The money transmitter definition
- Source: 31 CFR 1010.100(ff) defines MSB / money transmitter
- Money transmitter = accepting and transmitting value from one person to another
- Part 1022 sets MSB obligations
- It's about function, not what you call yourself
Here's the rule. The definition of a money services business lives at thirty-one C-F-R ten-ten point one-hundred, subsection f-f. Inside that definition is the money transmitter: in plain terms, a business that accepts currency, funds, or other value from one person and transmits it to another person or location, by any means.
The obligations that follow sit in thirty-one C-F-R Part ten-twenty-two, the MSB rules. The single most important thing to understand is that this is a functional test. It does not matter what you call your company, whether you describe yourself as a 'platform' or a 'wallet' or a 'super app.'
What matters is what you actually do with money. If value comes in from one party and goes out to another through you, you are very likely transmitting money, and the law treats you accordingly. Fintechs get this wrong when they assume a clever product label keeps them out of a regulatory category.
Where fintechs get it wrong
- "We just hold a balance" — holding plus moving can be transmission
- "The bank does it" — you can still be an MSB yourself
- Payment-processor and agent exemptions are narrow
- Crypto: FIN-2019-G001 treats many CVC actors as transmitters
Let's talk about the common mistakes, because the exam of real life punishes them. First trap: 'we just hold a balance, we don't move money.' Storing value and then letting users move it is often exactly money transmission.
Second trap: 'our bank partner handles all of that.' Being on a sponsor bank's rails does not automatically make you not a money transmitter; you can be your own regulated entity at the same time, and we'll dig into that next lecture. Third trap: assuming an exemption applies.
There are narrow carve-outs, like a genuine payment processor working through clearing systems, or an agent of a payee, but they are narrow and fact-specific, and FinCEN reads them tightly. And for crypto, FinCEN's twenty-nineteen guidance on convertible virtual currencies, F-I-N two-thousand-nineteen dash G-zero-zero-one, makes clear that many crypto businesses, exchangers and certain wallet and administrator models, are money transmitters too. When in doubt, assume the functional test catches you and get a legal opinion.
If you're an MSB: register with FinCEN
- MSB registration required: 31 CFR 1022.380
- Register within 180 days of becoming an MSB; renew every 2 years
- Registration is federal — it is NOT a state license
- Agents vs. principals: who registers matters
Suppose the answer is yes, you're a money services business. One of your first concrete duties is registration. Under thirty-one C-F-R ten-twenty-two point three-eighty, a money services business must register with FinCEN, generally within a hundred and eighty days of becoming an MSB, and renew that registration every two years, keeping a list of agents.
Here is a point fintechs constantly confuse: registering with FinCEN is a federal step, and it is not the same as a state money-transmitter license. We'll spend a whole lecture on state licensing later, but flag it now: FinCEN registration plus state licenses are two separate obligations, and you typically need both. There's also a principal-versus-agent question.
If you operate through a network of agents, the rules about who registers and who supervises matter, so map your structure carefully.
Other ways you can be in scope
- Banks/credit unions: financial institutions directly
- Broker-dealers, futures merchants: their own BSA rules
- A fintech can be in scope through its bank partner's program
- Multiple roles can apply at once
Money transmitter is the most common fintech category, but it isn't the only path into scope. If your fintech is a chartered bank or credit union, you're a financial institution directly with the full bank BSA program. If you touch securities or derivatives, broker-dealers and futures commission merchants have their own BSA obligations under Chapter Ten.
And even if your fintech entity itself isn't separately registered, you can be pulled into a BSA program through your bank partner, because that bank is responsible for the activity flowing through your product. The takeaway is that 'are we in scope' is rarely a clean yes or no with a single label. A single fintech can wear more than one hat at once.
Map every money-touching function to a category before you assume any of it is out of scope.
Recap and self-check
- Functional test: what you do, not what you call it
- Money transmitter = accept value + transmit it (1010.100(ff))
- MSBs register with FinCEN (1022.380) — separate from state licenses
- When unsure, get a legal status opinion
Let's lock this in. Whether you're a financial institution under the BSA is a functional test: it depends on what you actually do with money, not on your branding. The money-transmitter definition sits at thirty-one C-F-R ten-ten point one-hundred f-f, with obligations in Part ten-twenty-two, and FinCEN registration is required under ten-twenty-two point three-eighty, separately from any state license.
Test yourself: if a user loads a balance and sends it to another user through your app, what are you, and what's your first regulatory step? If you can answer 'likely a money transmitter, and I need to assess FinCEN registration and state licensing,' you've got the core idea. Because status is fact-specific and consequential, this is exactly the kind of question to confirm with counsel.
Next, we look at the model most fintechs actually run on, and where the BSA obligation really lives inside it.
Sources
- Definition of money services business / money transmitter, 31 CFR 1010.100(ff)
- FinCEN MSB rules, 31 CFR Part 1022
- MSB registration, 31 CFR 1022.380
- FinCEN guidance on Convertible Virtual Currencies, FIN-2019-G001
Test your knowledge
A few AML·FT questions on this material — pick an answer to see the explanation.
Q1. A fintech wants to use a fully automated, document-plus-selfie identity verification flow with no manual review. Under a risk-based approach, what is the most appropriate way to deploy it?
Q2. Under the BSA recordkeeping and Travel Rule framework, transmittal-of-funds records and the obligation to pass on originator/beneficiary information generally attach to transmittals of funds at or above which threshold?
Q3. A money-services fintech detects a series of structured transfers it believes are designed to evade reporting. At what aggregate dollar amount of a known or suspected transaction does the MSB SAR filing obligation generally begin?
Q4. A real-time payments fintech wants to minimize friction by screening transactions against OFAC sanctions lists only in a nightly batch after settlement. Why is this approach risky?