Navigating the impact of recent regulatory changes in the BSA/AML/OFAC landscape

Regulatory agencies have been busy in 2023 releasing joint statements with interpretive guidance focused on managing the risks associated with alternative banking. The guidance is far-reaching and affects the pillars of an institution’s program to comply with Bank Secrecy Act, anti-money laundering, and Office of Foreign Assets Control (BSA/AML/OFAC) requirements.

What you need to know

Onboarding of nontraditional bank customers, products and services heightens risk within your environment, and regulatory agencies are focused on these emerging risks. This increased scrutiny is demonstrated through the regular issuance of  sanctions, fines, and cease and desist orders.

Enhanced due diligence (EDD) requirements for onboarding new customers, products and services are not going away anytime soon. A heightened focus on know your customer (KYC), know your customer’s customer (KYCC) and know your transaction (KYT) guidelines continue to be key themes.

Practical application of new guidelines

Are you thinking about banking a new, higher-risk customer type or branching out into a new product/service offering or partner relationship? If so, safety and soundness are critical components of your institution’s risk management function. Some considerations include:

  • Evaluate your current risk assessment approach and update your risk appetite statement.
  • Assess management’s tolerance levels for liquidity risk and increased exposure to regulatory scrutiny.
  • Define your customer types, products and services at a granular level.
  • Assess the impact on the current BSA/AML/OFAC program, including the need to update policies, procedures and business operation documents.
  • Evaluate and update your existing customer risk rating methodology.
  • Assess the ability of your existing AML transaction monitoring technology to handle onboarding of the new customer type, partner arrangement, product or service.
  • Obtain formal approval from senior management and the board.

Incorporating emerging AML transaction monitoring technology to manage risks related to higher-risk customers and activities can assist with meeting regulatory expectations around EDD, KYC, KYCC and KYT.

RSM’s approach

Our proven approach to assisting clients with navigating the regulatory complexities associated with onboarding new partner arrangements, customer types, products and services includes the following:

Map

AML practices to existing regulatory requirements and assess risk level.

Prioritize

Areas of regulatory exposure and assess current AML technology.

Implement

Processes to remediate regulatory exposure, including technology to enable EDD, KYC, KYCC, and KYT.

Operationalize

The processes for onboarding higher-risk customer activities and transaction monitoring activities.

Manage

The customer onboarding process and ongoing program operations.

Capturing new market share in the current interest rate environment is a strategic component of a long-range growth plan. Financial institutions are well-positioned to capture this growth opportunity; however, moving too quickly can expose you to unnecessary risk.

Working with an advisor experienced with implementing a risk management framework to successfully onboard higher-risk customers and activities is the first step in the journey.

Let’s Talk!

Call us at (325) 677-6251 or fill out the form below and we’ll contact you to discuss your specific situation.

  • Topic Name:
  • Should be Empty:

Source: RSM US LLP.
Reprinted with permission from RSM US LLP.
© 2024 RSM US LLP. All rights reserved. https://rsmus.com/insights/services/risk-fraud-cybersecurity/navigating-impact-recent-regulatory-changes-bsa-aml-ofac.html

RSM US LLP is a limited liability partnership and the U.S. member firm of RSM International, a global network of independent assurance, tax and consulting firms. The member firms of RSM International collaborate to provide services to global clients, but are separate and distinct legal entities that cannot obligate each other. Each member firm is responsible only for its own acts and omissions, and not those of any other party. Visit rsmus.com/about for more information regarding RSM US LLP and RSM International.