Insights on Crypto Payments, Infrastructure, and Operations

Bank Secrecy Act (BSA)

Abbreviation: BSA

Pronunciation: BANGK SEE-kruh-see AKT (B-S-A)

Also known as: Bank Secrecy Act, BSA

Definition

The Bank Secrecy Act is a United States legal framework requiring covered financial institutions to keep records and report certain financial activity. The Bank Secrecy Act is a foundational United States anti-money laundering framework administered through regulations and supervisory requirements. It requires covered financial institutions and certain businesses to maintain records and submit reports useful for detecting financial crime and protecting national security. Relevant obligations can include AML programs, customer identification, currency transaction reporting, suspicious activity reporting, and retention of specified transfer or account information.

Overview

The Bank Secrecy Act is a foundational United States anti-money laundering framework administered through regulations and supervisory requirements. It requires covered financial institutions and certain businesses to maintain records and submit reports useful for detecting financial crime and protecting national security.

Relevant obligations can include AML programs, customer identification, currency transaction reporting, suspicious activity reporting, and retention of specified transfer or account information. Exact duties vary by institution type, activity, threshold, regulation, and later statutory amendments.

Organizations should rely on current FinCEN rules, regulator guidance, and qualified legal advice for their specific status. Describing the BSA as one fixed checklist is misleading because scope and implementing regulations evolve and may apply differently across financial and crypto services.

Communication about Bank Secrecy Act (BSA) should separate confirmed facts, working hypotheses, assumptions, unknowns, and decisions.

The Bank Secrecy Act is a United States legal framework requiring covered financial institutions to keep records and report certain financial activity. The BSA creates core United States recordkeeping and reporting duties, but specific obligations depend on current regulations and the entity’s activities.

A production treatment of Bank Secrecy Act (BSA) should test a United States legal framework requiring covered financial institutions to keep records and report certain financial activity within the relevant asset, decision, or service state. The Bank Secrecy Act context record for a United States legal framework requiring should preserve source data, configuration or policy version, responsible actor, exception, and outcome. Review of Bank Secrecy Act (BSA) should determine whether safeguards addressing a United States legal framework requiring changed exposure in practice, not merely whether a document or setting existed.

Key Takeaway

The BSA creates core United States recordkeeping and reporting duties, but specific obligations depend on current regulations and the entity's activities.

Sources

  1. NIST Documentation: Cyberframework — NIST (2026-07-30)
  2. FATF Documentation: Virtual Assets — FATF (2026-07-30)