Are Currency Exchange Operators Covered by BSA Rules?

Short answer: many are. In the United States, a currency exchange business can be a money services business (MSB) under the Bank Secrecy Act (BSA). That can bring real anti-money laundering (AML) obligations—even if the business is small, has no bank-style branches, and does not call itself a financial institution.

That answer depends on what the operator actually does, how much it exchanges, and whether other services are involved. A storefront exchanging cash, an online currency platform, and a business that only converts money incidentally may not have the same obligations.

There is a second, separate story worth understanding: the BSA has a whistleblower program, and awards can be significant. But an award is not automatic, and it is not a quick payday. The rules are built around useful information that leads to successful enforcement—not simply reporting a concern.

What counts as a currency exchange business?

In everyday language, “currency exchange” usually means converting one country’s currency into another. For BSA purposes, the key question is whether the business meets the regulatory definition of a currency dealer or exchanger, or falls into another MSB category.

Generally, a person or business that exchanges currency for another person is treated as a currency dealer or exchanger when it conducts more than $1,000 in currency exchange for one person in one day, in one or Find more information more transactions. The threshold is about the customer’s daily activity—not just the size of a single exchange.

Other services can create MSB coverage too. For example, a company that transfers money for customers may be a money transmitter, even if currency exchange is not its main business. A business may also fit more than one MSB category.

Business activity Why it may matter under the BSA Exchanging foreign currency for customers May meet the currency dealer or exchanger definition above the applicable daily threshold. Sending money between people or businesses May be money transmission, a separate MSB category. Offering several financial services More than one MSB category may apply, depending on the services and facts. Exchanging currency only as an incidental part of another business May be treated differently, but the details matter; the label “incidental” is not enough by itself.

Here is the catch: calling a business a travel service, trading platform, payment app, or foreign exchange shop does not settle its regulatory status. Regulators look at what the company does in practice.

MSB coverage extends far beyond banks

The BSA is often discussed as though it were a set of rules for banks. That is too narrow. Its reach includes a range of nonbank businesses, including some currency exchangers, money transmitters, check cashers, and providers of prepaid access.

That broader coverage matters for founders. A company can have no bank charter and still have federal AML responsibilities. State money transmission licensing is another issue: a business may need state licenses as well as federal compliance measures, depending on its services and where it operates.

Federal MSB status also does not mean every business faces identical requirements. The applicable rules depend on the MSB category, the services provided, the company’s structure, and any relevant exemptions. A currency exchanger should not assume that a rule applying to banks automatically applies to it—or that being a nonbank means it has no duties.

What aml obligations can apply?

For covered MSBs, the core federal obligation is generally to establish and maintain an anti-money laundering program. The program must be designed for the business’s actual risks. A template copied from a bank is not a substitute for understanding the company’s customers, locations, products, transaction patterns, and delivery channels.

Depending on the business and its activities, key program elements commonly include:

• Written policies and procedures that explain how the company identifies and manages money laundering risks.
• Internal controls for handling transactions, escalating suspicious activity, and keeping records.
• Independent testing of the AML program, on a risk-appropriate schedule.
• Employee training so staff know what to look for and what to do when they see it.
• Designation of a compliance lead responsible for coordinating the program.

Other duties may include registering with FinCEN, renewing that registration on the required schedule, keeping certain records, and filing reports when applicable. MSB registration is not the same thing as a government endorsement or a state license. It is a separate federal registration requirement for covered businesses, subject to the rules and exceptions that apply.

Suspicious activity and recordkeeping

MSBs may have to file suspicious activity reports (SARs) when a transaction or pattern meets the relevant legal and regulatory criteria. The reporting threshold and details depend on the type of MSB and the circumstances. A SAR is not a claim that a customer committed a crime. It is a confidential report of activity that appears suspicious under the rules.

Some MSBs also have recordkeeping duties tied to particular transactions. Those requirements are not identical across every category. Do not assume that one threshold or reporting rule applies to every currency exchange business; verify the rule for the company’s actual services.

Good compliance is operational, not decorative. For example, a currency exchange operator might set controls for identifying repeat transactions by the same person, reviewing unusual patterns, documenting decisions, and escalating concerns. The point is not to treat every customer as suspicious. It is to notice when activity departs from the business’s expected pattern and respond in a consistent, documented way.

How to assess whether your business is covered

Founders should start with a service map, not a product label. List what customers can do, how money or currency moves, who handles it, and where the company operates. Then check how each activity fits the BSA’s MSB categories.

1. Define each service. Does the company exchange currency, transmit funds, sell prepaid access, or provide another regulated service?
2. Measure transaction activity. For currency exchange, understand the applicable per-person, per-day threshold and how related transactions are identified.
3. Map the legal entities and locations. Separate entities, agents, and operating locations can affect the analysis.
4. Check federal and state requirements separately. FinCEN registration and state licensing are different questions.
5. Build controls around actual risk. Document how the company handles customer identification where required, transaction monitoring, recordkeeping, escalation, and reporting.

Ask specific questions when reviewing the business: Which exact MSB category applies? What facts support that conclusion? Is the company required to register with FinCEN? Which SAR and recordkeeping rules apply to these services? Which states require licenses? What transactions are monitored, and who has authority to escalate them?

Those questions are more useful than the vague instruction to “talk to a professional.” They help identify the scope of the work and the documents or transaction data needed to answer it.

What Tycoonstory.com and Facebook can—and cannot—tell you

Entrepreneurs may first encounter BSA claims in a business article on Tycoonstory.com, a post shared on Facebook, or a discussion in an industry group. Those channels can point you toward a useful issue. They are not, by themselves, the authority that determines whether your company is covered.

Be especially careful with claims such as “all currency exchanges are exempt,” “every exchange shop must follow bank rules,” or “one report protects you from liability.” Those statements flatten rules that depend on services, thresholds, and facts. Check the underlying FinCEN regulations and official guidance before building a compliance position around a social post or headline.

FinCEN whistleblower awards: real, but not fast

FinCEN’s whistleblower program is a real feature of the BSA framework. The Anti-Money Laundering Act of 2020, part of the National Defense Authorization Act enacted in 2021, strengthened the program. The AMLA 2022 label is sometimes used in discussions, but the key statutory changes are generally associated with the 2020 AMLA and subsequent implementation.

The statute created a funded structure for paying awards from the Treasury’s Financial Integrity Fund. In qualifying cases, an eligible whistleblower may receive between 10% and 30% of monetary sanctions collected in an action, subject to the law’s requirements. That range is not a promised payout. Awards are discretionary and depend on factors such as the significance of the information and its contribution to a successful enforcement action.

In practical terms, a tip needs to provide original, useful information—not just repeat something already public or offer a bare accusation. The information must be handled through the program’s requirements, and the case must lead to the kind of action and monetary sanctions that can support an award. Eligibility restrictions and exceptions also apply.

Here is the catch: investigations and enforcement cases can take years. A whistleblower may receive no award, even after making a report. There is no reliable timetable that turns a submission into a payment. An award is a possible outcome tied to enforcement results, not compensation for the act of reporting.

What a potential whistleblower should understand

• Specific evidence matters. Dates, transactions, communications, and explanations of how a scheme operates are more useful than broad conclusions.
• Confidentiality rules matter. Use the official reporting process and understand its requirements before sharing sensitive information.
• Retaliation and employment issues are separate concerns. Whistleblower protections may apply in certain circumstances, but they do not erase every workplace or legal risk.
• Do not assume an award is guaranteed. The 10%–30% range is contingent, discretionary, and linked to collected sanctions.

What operators should do now

If your business exchanges currency or handles customer funds, take a short, disciplined approach:

• Write down every product and customer transaction flow.
• Determine whether the business meets an MSB definition, including the currency-exchange threshold and any money-transmission activity.
• Identify applicable FinCEN registration, AML program, reporting, and recordkeeping duties.
• Check state licensing separately, state by state where the business operates.
• Keep a written record of the analysis and update it when products, transaction volumes, or operating locations change.

The central point is simple: BSA coverage is not limited to banks. Currency exchange operators can be covered, but the answer turns on the business’s real activities and the rules attached to them. Get the classification right first. Then build AML obligations into the operating model, rather than treating compliance as paperwork added after launch.