Why FinCEN is delaying the IA AML Rule — and what that means for advice firms
When the U.S. Treasury’s Financial Crimes Enforcement Network (FinCEN) proposed its Investment Adviser (IA) AML Rule earlier this year, it signaled a major expansion of the Bank Secrecy Act’s reach. For the first time, investment advisers and exempt reporting advisers would be required to build and maintain AML programs, file Suspicious Activity Reports (SARs), and comply with recordkeeping requirements.
Now, FinCEN has proposed postponing the rule’s effective date by two years—from January 1, 2026 to January 1, 2028. While this move buys time for both industry and regulators, it raises important questions about compliance readiness, supervisory expectations, and the ongoing evolution of the U.S. AML regime.
What the IA AML Rule would do
The IA AML Rule would require covered advisers to:
•Implement and maintain a risk-based AML program
•File SARs on suspicious transactions
•Maintain customer records consistent with BSA requirements
•Coordinate with other institutions and regulators on AML obligations
The rationale is clear: The investment advisory sector represents trillions of dollars in assets, yet it has remained outside direct AML program obligations. Regulators have long viewed this as a gap in the U.S. AML framework.
Why FinCEN is proposing a delay
FinCEN cited several drivers for its proposed postponement:
•Industry feedback: Advisers expressed concern about the burden of designing and staffing AML programs within the original timeline.
•Need for tailoring: Stakeholders have argued that the rule should better account for differences in adviser size, structure, and business model.
•Regulatory alignment: Delaying allows time for coordination with the SEC and other supervisory agencies.
•Administrative capacity: A two-year extension gives regulators space to finalize guidance, build examiner training, and prepare for consistent implementation.
What the delay means for advisers
A delay is not a cancellation. In fact, the postponement presents both risks and opportunities for firms:
•Risk of complacency: Some firms may slow or halt AML preparations, leaving them exposed if expectations harden earlier than 2028.
•Ongoing supervisory scrutiny: Even without formal obligations, regulators may expect advisers to demonstrate awareness of AML risk and to avoid high-profile compliance failures.
•Uncertain final scope: Delays create space for adjustments, but they also extend uncertainty about what the final rule will require.
How firms can use this time strategically
Forward-looking firms should treat the delay as an opportunity to build quality and resilience into their compliance foundations:
1. Advance your risk assessment — Begin evaluating exposure points in client onboarding, investment vehicles, and cross-border flows.
2. Pilot AML processes — Test SAR processes, escalation protocols, and internal reporting lines before they are required.
3. Strengthen data readiness — Ensure that transaction and customer data can be integrated, segmented, and reported with auditability.
4. Stay engaged — Monitor comment periods and regulatory signals; adjustments to the rule could affect program design.
Takeaway
The IA AML Rule remains a cornerstone of Treasury’s long-term strategy to close regulatory gaps. A two-year postponement gives advisers breathing room, but not immunity from scrutiny.
Advisers that use this window to strengthen data, processes, and governance will be better positioned for compliance—and better protected against reputational and regulatory risk—when the rule inevitably comes into force.
