How Accounting Firms Can Stay Ahead of BSA/AML Expectations

FinCEN's evolving Bank Secrecy Act and anti-money laundering framework is expanding beyond traditional financial institutions to encompass professional gatekeepers — including accounting firms. The Corporate Transparency Act's beneficial ownership reporting requirements, proposed "enabler" liability provisions, and international FATF standards on designated non-financial businesses and professions (DNFBPs) collectively create a compliance environment where accounting firms can no longer treat AML as "the bank's problem."

For firm leaders, the question is no longer whether BSA/AML obligations apply to accounting practices but how to implement proportionate compliance frameworks that protect the firm without creating prohibitive operational burden.

The Expanding Obligation

Accounting firms face BSA/AML expectations from multiple directions:

1. Corporate Transparency Act (CTA) — Beneficial Ownership.

The CTA requires 32.6 million entities to report beneficial owners to FinCEN's BOI database. Accounting firms are overwhelmingly the primary professional advisors assisting clients with:

• Determining reporting eligibility (23 exemptions create complexity)
• Identifying beneficial owners (25% ownership OR substantial control test)
• Filing initial reports, updates, and corrections
• Advising on consequences of non-compliance ($500/day civil penalties, criminal penalties up to $10,000 and 2 years imprisonment)

The liability exposure: while preparing BOI reports doesn't make the firm a "reporting company," knowingly assisting clients in filing false ownership information creates aiding/abetting exposure under 31 U.S.C. § 5336(h)(3). Firms must implement due diligence to avoid unknowingly facilitating false filings.

2. FATF "Gatekeeper" Standards.

The Financial Action Task Force designates accountants as "gatekeepers" who must implement AML measures when engaged in specified activities:

• Forming companies, partnerships, or trusts
• Acting as company directors or nominees
• Preparing financial transactions
• Advising on buying/selling business entities

While the U.S. hasn't fully implemented FATF's accountant-specific AML requirements (unlike the EU's 6th Anti-Money Laundering Directive which does), FinCEN has signaled intention to propose rules covering "investment advisers and other professionals" — with accounting firms expected to be included.

3. Client Due Diligence Expectations.

Even without formal BSA coverage, accounting firms face practical AML expectations:

• Professional liability insurers increasingly require documented client acceptance procedures addressing money laundering risk
• State boards of accountancy incorporate AML awareness into ethics requirements
• Referral networks (banks, law firms) expect CPA firms to have baseline AML screening before providing clean opinions or reports used in transactions

The Risk Landscape for Accounting Firms

Money launderers target accounting firms because they provide:

Entity formation services. Firms that form LLCs, corporations, and trusts for clients can unknowingly create vehicles for illicit fund movement if beneficial ownership isn't verified.

Clean financial statements. Audited or reviewed financial statements from a CPA firm lend credibility to businesses that may be laundering money through legitimate-appearing operations. A clean audit report is the ultimate "stamp of legitimacy."

Tax return preparation. Filing tax returns for entities with unreported income sources (drug trafficking, fraud proceeds, sanctions evasion) creates the paper trail that "cleans" illicit funds — and the preparer potentially becomes an accessory.

Transaction advisory. Advising on M&A transactions, real estate purchases, or investment structures without questioning the source of funds enables money placement without detection.

Trust and fiduciary services. Firms acting as trustees or managing client funds directly hold and move potentially illicit assets — creating the most direct money laundering exposure.

The Proportionate Compliance Framework

Accounting firms don't need bank-grade AML programs. A proportionate approach scaled to actual risk:

Tier 1: All firms (minimum standard).

• Written client acceptance policy addressing AML red flags
• Basic beneficial ownership verification for entity clients
• Staff awareness training (annual, 2 hours minimum)
• Procedures for declining/withdrawing from suspicious engagements
• Documentation retention of due diligence performed

Tier 2: Firms with entity formation or advisory services.

• Enhanced due diligence for high-risk clients (PEPs, high-risk jurisdictions, cash-intensive businesses)
• Source-of-funds inquiry for transaction advisory above $50,000
• CTA compliance assistance protocols with liability limitation documentation
• Suspicious activity reporting considerations (currently voluntary for non-BSA-covered entities)

Tier 3: Firms with trust, fiduciary, or fund management services.

• Full BSA-equivalent program (written policies, compliance officer, independent testing)
• Suspicious Activity Report filing (mandatory if handling >$5,000 in suspicious transactions)
• OFAC sanctions screening for beneficiaries and counterparties
• Third-party AML tool deployment (sanctions screening, PEP databases, adverse media)

Red Flags Accounting Firms Should Recognize

FinCEN identifies indicators relevant to accounting firm engagements:

• Clients who are unclear about or frequently change beneficial ownership
• Entities with nominee directors/shareholders and no apparent business purpose
• Requests to form multiple entities rapidly without clear business rationale
• Clients who pay fees in cash or from accounts in high-risk jurisdictions
• Reluctance to provide source-of-funds documentation for large transactions
• Complex ownership structures that appear designed to obscure beneficial ownership
• Clients who engage the firm solely for the credibility of association (no substantive work)

Why This Matters

For firm managing partners: BSA/AML compliance is transitioning from "nice to have" to "insurance requirement" and eventually to "regulatory mandate." Building compliance infrastructure now — when the cost is a policy document and 2 hours of annual training — is cheaper than retrofitting after a regulatory proposal or client incident.

For client-facing staff: Every engagement acceptance is an implicit AML decision. Staff must be trained to recognize situations where additional due diligence is appropriate — and empowered to escalate concerns without fear of revenue-impact criticism.

For professional liability risk management: Insurers are adding AML-related exclusions and increasing premiums for firms without documented compliance procedures. The $10,000-$20,000 annual cost of a basic AML program is trivial compared to the coverage gap from policy exclusions.

For CTA compliance services: The 32.6 million entities requiring BOI reports represent an enormous volume opportunity. But firms must implement safeguards: engagement letters limiting liability for client-provided ownership information, verification procedures proportionate to risk, and clear documentation of what the firm did and didn't verify.

For international firms: FATF's DNFBP standards are already law in the EU, UK, and Australia. U.S. firms with international clients or affiliates must understand that their non-U.S. obligations may already require formal AML programs — regardless of U.S. implementation timeline.

The key takeaway: BSA/AML expectations for accounting firms are expanding from voluntary best practice to near-mandatory requirement — firms that implement proportionate compliance frameworks now protect against regulatory action, professional liability claims, and reputational damage while positioning themselves to capture the $2B+ CTA compliance services market.