Fed's AML Rewrite Faces FATF Grey-List Risk

Fed's AML rewrite trades paperwork for FATF grey-list risk

The Fed and FinCEN's April 2026 anti-money laundering proposal shifts U.S. banks to a risk-based regime just as FATF prepares its mutual evaluation.

The Federal Reserve Board, FDIC, OCC, NCUA and FinCEN on April 7, 2026 opened a 60-day comment window on a joint proposal that would rewrite how U.S. banks run anti-money laundering programs — replacing a process-compliance model with a "risk-based, reasonably designed" one and shielding banks from enforcement for "minor, isolated, or technical" failures. The thesis: this is not deregulation of AML, it is a redistribution of enforcement risk — away from banks and community credit unions, toward the U.S. government's standing under the Financial Action Task Force review scheduled for the second half of 2026. If FATF grey-lists the United States, the compliance savings the Bank Policy Institute is celebrating will look small next to the correspondent-banking premium every U.S. dollar counterparty will pay.

What the proposal actually changes

The joint notice, published at 91 Fed. Reg. 7033, revises the AML/CFT program rule under Section 6101(b) of the Anti-Money Laundering Act of 2020 (AMLA). It fully supersedes the July 2024 Biden-era proposal, which FinCEN has withdrawn.

Four operative changes matter. First, banks must design programs to identify and mitigate significant illicit-finance risks — not simply document controls. Second, "only significant or systemic failures to implement a properly established program would warrant" enforcement, according to the FDIC joint release. Third, the designated AML officer must be U.S.-based and directly accessible to regulators — a de facto ban on offshoring the compliance chief. Fourth, and most consequential, the Federal Banking Agencies must now consult FinCEN before taking "significant AML/CFT supervisory actions."

Treasury Secretary Scott Bessent framed the pivot bluntly. "For too long, Washington has asked financial institutions to measure success by the volume of paperwork rather than their ability to stop illicit finance threats," he said in the FinCEN release. Comments on the FinCEN piece close June 9, 2026; the banking-agency versions run 60 days from Federal Register publication.

Why the industry got what it asked for

The proposal is a near-total win for the Bank Policy Institute (BPI) and community-bank lobby. John Court, BPI's general counsel, told the House Financial Services subcommittee on May 21, 2026 that the rewrite is "a vast improvement on its 2024 predecessor, which would have enshrined the status quo in violation of both the letter and spirit of AMLA" — see his prepared testimony.

The number driving the lobbying is real. Brookings' Aaron Klein has estimated that U.S. financial institutions spend roughly $50 billion a year on AML compliance while intercepting less than 1% of an estimated $2 trillion in annual financial crime. The Government Accountability Office's benchmark study found that among 11 sampled banks, direct BSA compliance costs ranged from about $14,000 at the smallest institutions to $21 million at the largest, and consumed roughly 2% of operating expenses at community banks versus under 1% at the biggest, per GAO-20-574.

The proposal also codifies a shift AMLA required five years ago: aligning programs to FinCEN's national priorities — corruption, cybercrime, terrorist financing, fraud, drug trafficking (Fentanyl figures prominently in current guidance), human trafficking, proliferation finance and transnational criminal organizations. That list has sat largely un-operationalized since June 30, 2021, according to the Congressional Research Service analysis of AMLA implementation.

The second-order problem: FATF, and the CTA hole

Here is what almost no wire story on the April 7 release mentioned: the United States faces its FATF mutual evaluation later in 2026, and the ground beneath the U.S. AML regime has shifted twice since AMLA was enacted.

On March 26, 2025, FinCEN issued an interim final rule exempting U.S. domestic reporting companies and U.S. persons from beneficial ownership reporting under the Corporate Transparency Act — a change law firms estimated ended reporting for "more than 99.9%" of previously covered entities, per CRS. The GAO subsequently found that beneficial-ownership database searches by federal agencies "generally remained low through March 2026" and that three of the six pilot agencies dropped out entirely; see GAO-26-108182. Treasury's own 2026 National Money Laundering Risk Assessment continues to describe the absence of timely beneficial-ownership data as "the most significant and longstanding gap" in U.S. AML defenses, according to a separate GAO report on corporate transparency gaps.

Transparency International warned in March 2025 that the CTA rollback "will very likely lead to the US being found non-compliant with relevant global anti-money laundering and counter-terrorism finance standards set by the Financial Action Task Force," and flagged that FATF "will prioritise jurisdictions with large financial sectors" for its grey list — see the statement from Transparency International.

Layer the April 2026 program rule on top of that beneficial-ownership hole, and the FATF exam becomes the real test of the U.S. regime — not the domestic comment file.

Who gains, who loses

Winners. The largest U.S. banks and the community-bank sector both benefit, but asymmetrically. Large institutions gain the ability to redirect AML spend from documentation to machine-learning detection — Carole House, now at the Atlantic Council, told Congress on May 21, 2026 that the proposal recognizes AI, digital identity, and blockchain analytics as legitimate program tools. Community banks gain the "no enforcement for minor errors" safe harbor, which BPI has lobbied for since 2018 GAO work on de-risking flagged BSA burdens as a driver of branch closures on the Southwest border; see GAO-18-263.

Losers. State and local law enforcement lose again. GAO found in 2020 that only about a third of local agencies responsible for financial-crime investigations had direct access to BSA reports. The new consultation framework — requiring Federal Banking Agencies to route significant AML actions through FinCEN before bringing them — will likely slow enforcement further. House warned that the framework "could potentially risk institutionalizing administrative paralysis" and could "create a kind of gatekeeping that would further reduce timely oversight and enforcement unless resources are properly committed."

The wildcard: fintech and stablecoins. The July 2025 GENIUS Act made stablecoin issuers federal financial institutions for BSA purposes, and Treasury is now writing rules to bring them under AML/CFT, as Brookings' Nellie Liang and Bill Dudley set out in a March 2026 analysis. The April 2026 program rule sets the ceiling for how prescriptive those forthcoming stablecoin AML rules can be — a risk-based, principles-driven ceiling now sits above what would otherwise be a much stricter regime for a brand-new sector.

The primary text, verbatim

The FinCEN notice lays out the operating philosophy in one paragraph worth reading unabridged:

"The proposed rule would promote risk-based, reasonably designed programs and greater consistency in how banks are evaluated for effectiveness … refocuses compliance obligations and expectations on effectiveness by distinguishing between deficiencies stemming from program design and implementation … clarifies expectations related to certain program requirements and functions — including independent testing and audit functions — to ensure that examiners and auditors do not substitute their subjective judgment in place of financial institutions' risk-based and reasonably designed AML/CFT programs."

That final clause is the real load-bearing sentence. It transfers judgmental authority from bank examiners to bank management. Whether that trade improves illicit-finance detection or degrades it is the empirical question the rulemaking record cannot answer before finalization.

Diplomat View

The April 2026 AML rewrite is being sold as modernization; the more accurate frame is a controlled experiment in outcome-based supervision at the exact moment the U.S. has removed its most-touted transparency tool. It will not, on its own, meaningfully harm domestic detection: BSA reporting was already a low-signal system by law-enforcement's own admission. The binding constraint is external — the FATF mutual evaluation in the second half of 2026.

Forecast: We expect FATF to issue an enhanced-follow-up rating on beneficial ownership and to place the United States on a formal watchlist by mid-2027, though we do not expect grey-listing in the first cycle. The AML program rewrite is finalized substantially as proposed by Q1 2027, and the FinCEN–FBA consultation framework survives despite Fed and OCC staff resistance to sharing enforcement discretion. We would revise downward if: (a) FinCEN restores CTA reporting for U.S. entities before the FATF exam report is published; (b) a large-bank AML enforcement action collapses under the new "material implementation failure" standard, giving the FBAs political cover to walk back deference; or (c) Congress passes the Financial Reporting Threshold Modernization Act (H.R. 1799), which would triple CTR thresholds to $30,000 and further reduce reporting volume — signaling that Treasury's deregulatory posture is bipartisan and durable.

What to watch next

• June 9, 2026 (past) / late-July 2026: FinCEN comment file closes; banking-agency 60-day window closes shortly after. Watch for comment letters from state attorneys general and the FACT Coalition citing the CTA rollback as evidence of a coordinated retreat.
• September–October 2026: FATF plenary and on-site evaluation of U.S. AML regime. First formal review since the 2025 CTA interim final rule.
• Q1 2027: Expected final rule. Look for whether Treasury preserves the FinCEN-FBA consultation framework, which the Federal Reserve staff has privately resisted; and whether examiner-training guidance codifies the "not minor, isolated, or technical" standard as promised in BPI's May 21, 2026 testimony.

The Bottom Line

The Federal Reserve's joint AML program rewrite is the most consequential rebuild of U.S. Bank Secrecy Act supervision since the PATRIOT Act — and it lands in the same year FATF is scheduled to grade the United States on a regime that has already lost its beneficial-ownership backbone. Banks and their trade groups have won the domestic argument; the international bill for that win will not arrive until the FATF report drops. If it comes back harsher than expected, the correspondent-banking premium on U.S. counterparties will erase the compliance savings inside a single fiscal year.