On August 11, 2026, the U.S. Department of the Treasury announced that the Financial Crimes Enforcement Network, or FinCEN, had issued a final rule permanently removing the requirement for U.S. companies and U.S. persons to report beneficial ownership information under the Corporate Transparency Act. The rule became effective on August 14, 2026.
FinCEN also announced that it is implementing a process to delete information about company applicants, beneficial owners, and recipients of FinCEN identifiers that it reasonably believes was provided by U.S. persons. Foreign entities formed under the laws of another country and registered to do business in a U.S. state or Tribal jurisdiction remain potentially subject to reporting, although they are not required to report beneficial ownership information for U.S. persons.
For many small-business owners, this change may be welcomed as relief from a filing requirement that raised concerns about privacy and administrative burden.
For banks, however, it is not that simple. The reporting requirement went away. The bank’s responsibility to understand customer ownership risk did not.
Financial institutions must still identify and verify beneficial owners under applicable customer due diligence requirements, understand the nature and purpose of customer relationships, conduct risk-based ongoing monitoring, and respond when information or activity calls the reliability of previously collected information into question. FinCEN has specifically identified the continuing requirement for covered financial institutions to collect legal-entity customer beneficial ownership information under the Customer Due Diligence Rule as one of the measures available to mitigate certain illicit-finance risks associated with exempting domestic companies from reporting. [fincen.gov], [fincen.gov]
The end of the federal reporting requirement should not be confused with the end of beneficial ownership risk. If anything, it provides an important reason for banks to evaluate how they identify, verify, maintain, share, and use ownership information throughout the customer relationship.
A Verification Resource That Will Not Develop as Originally Envisioned
When the Corporate Transparency Act was enacted, one of its most significant features was the planned creation of a centralized government repository containing information about the individuals who own or control legal entities.
The repository was never intended to replace a financial institution’s customer due diligence responsibilities. Financial-institution access was subject to specific conditions, including the reporting company’s consent and requirements governing the use and protection of the information. Access was also expected to follow a phased implementation, with financial institutions added after certain government and law-enforcement users.
Even with those limitations, the repository represented the potential for an additional source of ownership information that could support certain customer due diligence obligations.
For years, banks have had to piece together an understanding of business ownership through information provided by the customer, organizational records, public sources, commercial databases, direct outreach, and information gathered across the customer relationship. A federal repository was not going to eliminate that work, but it had the potential to offer another point of reference.
That resource will not develop as originally envisioned.
Domestic companies are no longer reporting companies under the final rule, and U.S. persons are no longer required to report their information. FinCEN has also announced that it will delete previously reported information that it reasonably believes was provided by U.S. persons, substantially narrowing the ownership information available through the system.
The system will not disappear entirely. Foreign entities registered to do business in the United States may remain subject to reporting, but they do not have to report U.S. individuals who are beneficial owners or company applicants.
That distinction matters. Banks should not assume that the repository will provide the broader ownership transparency once contemplated under the Corporate Transparency Act. Institutions should instead consider what ownership information they require, where that information currently comes from, and how its reliability is evaluated.
The Challenge Is Not Always Identifying One Owner
At account opening, a legal entity may appear relatively straightforward. The customer provides organizational documents, identifies its beneficial owners, explains the nature of the business, and describes the expected activity.
But commercial relationships do not always remain straightforward.
Consider a business that begins with a single operating company. As it grows, its owners may create separate limited liability companies to hold real estate, acquire equipment, operate different locations, or support other business purposes. A management company may provide services to several related entities. Additional family members or investors may acquire interests. A trust may become part of the ownership structure through estate or succession planning.
These are illustrative examples, and none of them necessarily indicates improper activity. Legitimate businesses often use multiple entities for valid legal, tax, operational, or planning reasons.
The risk-management challenge is understanding how the pieces fit together.
Who ultimately owns or controls each business? Which entities share common ownership? Who is authorized to move money? How are the companies related? Does activity across the relationships make sense when viewed collectively rather than one account at a time?
These questions become particularly important when a bank encounters unusual activity, conflicting information, unexplained transfers, or changes that call previously collected information into question.
Without a broadly populated centralized resource, institutions will continue to depend heavily on information collected through customer interactions and their own due diligence processes. The information may exist, but it may be outdated, difficult to verify, or divided among different areas of the bank.
CDD Relief Changed the Collection Requirement, Not the Need to Understand the Customer
In February 2026, FinCEN granted covered financial institutions relief from the requirement to identify and verify the beneficial owners of an existing legal-entity customer every time that customer opens an additional account.
Under that relief, a covered financial institution may generally limit identification and verification to three circumstances:
- When the legal-entity customer first opens an account with the institution
- When the institution obtains information that reasonably calls the reliability of previously collected beneficial ownership information into question
- When identification or verification is needed under the institution’s risk-based procedures for ongoing customer due diligence
Covered financial institutions must continue to comply with other applicable AML/CFT requirements, including program, recordkeeping, monitoring, and reporting obligations. They must also maintain written procedures reasonably designed to identify and verify beneficial owners and, on a risk basis, maintain and update customer information for ongoing due diligence.
The relief reduces duplicative collection when an established legal-entity customer opens another account and there is no reason to question the information already on file.
It does not mean that beneficial ownership information can be collected once and forgotten.
Businesses evolve. Ownership can change. New investors can enter. Control can shift. Related entities can be created. Information received through normal customer contact or account monitoring may no longer align with what the bank originally collected.
The challenge for institutions is determining how those developments will be recognized, documented, and evaluated.
FinCEN’s relief leaves room for a risk-based approach, but a risk-based approach depends on the institution’s ability to identify relevant changes. A policy may say that ownership information will be reconsidered when facts call its reliability into question. The bank’s people, systems, and procedures determine whether those facts are actually recognized.
Less Reporting Does Not Necessarily Mean Less Work for Banks
The final rule reduces a reporting obligation for many businesses. It does not necessarily reduce the practical work involved in understanding those businesses from a bank’s perspective.
Banks may still need to identify and verify beneficial owners at the beginning of a legal-entity customer relationship, maintain information based on risk, investigate discrepancies, understand related entities, monitor activity, and respond when other information challenges the reliability of what was previously collected. [fincen.gov], [fincen.gov]
For institutions operating with limited BSA/AML resources, that work may create pressure in several areas.
Staffing
Complex business relationships can require more than a routine review of an ownership certification. Staff may need additional time to understand layered structures, evaluate supporting records, reconcile inconsistent information, or elevate questions for further review.
Banks may want to consider whether current staffing levels and expertise are appropriate for the types of business customers they serve. An institution accustomed to reviewing relatively straightforward ownership structures may require additional resources if its customer base becomes more complex.
That does not mean every bank needs to add employees or create a specialized ownership team. It does mean staffing capacity should be considered alongside customer complexity, the institution’s risk profile, and the amount of manual work required to complete an effective review.
Technology and verification
Banks may also need to evaluate whether their current systems support the way beneficial ownership information is collected, maintained, and reviewed.
Implementing an automated system or working with a third party to support verification may be appropriate for some institutions.
Technology and external services do not eliminate the need for human judgment. They may, however, affect how efficiently an institution can organize information, identify inconsistencies, or support its review processes.
The appropriate approach will vary by institution. The relevant question is whether current processes and tools are proportionate to the complexity and risks of the customer relationships being served.
Training
Beneficial ownership information does not enter the institution only through the BSA department.
A relationship manager may learn that a customer is restructuring its business. A commercial lender may receive updated organizational documents. Treasury management staff may be asked to establish services for an affiliated company. Deposit operations may encounter a change in authorized signers or account access.
Front-line and business-line employees do not need to become beneficial ownership specialists. They do, however, need to understand what information may be relevant, where it should be documented, and when it should be shared with the appropriate risk or compliance personnel.
Without that awareness, information that could affect the institution’s understanding of a customer may remain with the employee or department that first received it.
The Information Often Exists. The Challenge Is Connecting It.
One of the more overlooked challenges facing financial institutions is that relevant customer information may be collected throughout the bank without ever being viewed as part of a larger picture.
A commercial lender may learn that a business has added investors. A relationship manager may discover that several companies share ownership. Treasury management staff may work with affiliated entities moving funds among accounts. Deposit operations may receive updated organizational records or changes to authorized signers.
Individually, none of these developments may appear significant.
Collectively, they may provide important context for understanding beneficial ownership, assessing customer risk, and reviewing unusual activity.
The institution may already possess more information about the customer than any single department realizes. The challenge is whether the information can reach the people responsible for evaluating the complete relationship.
Commercial banking, lending, treasury management, deposit operations, fraud, information security, and BSA/AML personnel may each see a different part of the customer’s activity. If those pieces remain isolated, the bank may make decisions based on a single account or interaction rather than the broader relationship.
As business relationships become more complex, banks should consider whether information collected through one line of business can be appropriately shared and used across the organization. The ability to understand beneficial ownership risk may depend not only on whether information was obtained, but on whether the right people can access and evaluate it when needed.
Reduced Transparency May Affect Risk Appetite
When a bank cannot develop sufficient confidence in its understanding of an ownership structure, the issue becomes more than an account-opening question. It may affect how the institution evaluates the relationship.
Some institutions may respond by applying greater scrutiny, narrowing risk appetite, or reconsidering relationships they cannot confidently understand.
That does not mean every complex business should be treated as suspicious. Complexity by itself is not evidence of wrongdoing. But complexity that cannot be reasonably explained, supported, or monitored may present a level of risk the institution is not equipped or willing to accept.
The appropriate response will differ by bank. One institution may request additional documentation. Another may apply enhanced due diligence or more frequent reviews. An institution may also limit certain products, services, customer types, or transaction capabilities when it determines its controls are not sufficient to manage the associated risk.
Those choices can affect the customer experience.
Additional documentation may lengthen onboarding. Enhanced reviews may require further conversations with owners and relationship managers. Customers may not understand why the bank needs information that they are no longer required to report to FinCEN.
Clear communication will be important. A bank should be prepared to explain that its requests are based on the institution’s regulatory responsibilities, risk-based policies, and need to understand the relationships it serves, not solely on the reporting requirements imposed on the customer.
Risk Often Becomes Visible After Something Changes
Beneficial ownership information receives the most attention when circumstances challenge what the bank believes it knows.
A new individual begins directing activity. Ownership information conflicts with other available records. Funds begin moving between companies that were not previously understood to be related. The type or volume of transactions no longer aligns with the stated nature of the business. A review identifies connections among relationships that had previously been considered separately.
The event may appear sudden. The underlying information gap may not be.
That is why beneficial ownership risk management cannot depend entirely on a form completed at the beginning of the relationship. Initial information is essential, but banks also need risk-based processes for recognizing when that information should be reconsidered.
FinCEN’s February 2026 relief preserves the need for identification and verification when facts reasonably call previously obtained information into question or when an institution’s ongoing risk-based procedures require it.
The practical issue is how the institution makes that happen.
Employees need to recognize relevant information. Procedures need to explain where it goes. Systems need to retain it. Business lines need a way to escalate it. BSA/AML personnel need sufficient access and context to determine whether it changes the customer’s risk profile.
A policy can establish an expectation. The institution’s day-to-day practices determine whether that expectation is met.
A Beneficial Ownership Reality Check
The final rule gives banks an opportunity to evaluate the strength of their beneficial ownership processes.
1. Do we know where beneficial ownership information is maintained?
Consider whether information is stored in one accessible location or divided among account-opening systems, loan records, commercial banking platforms, treasury management records, document repositories, and employee correspondence.
2. What causes us to revisit previously collected information?
Employees should understand what types of new information or activity may call the reliability of existing ownership information into question.
3. Can we recognize relationships among commonly owned or controlled entities?
A bank may understand each account independently while missing connections among businesses, owners, authorized users, and related parties.
4. Do our business lines know when information should be shared?
Commercial, lending, treasury management, operations, fraud, and compliance teams should understand when customer changes, inconsistencies, or new relationships may require escalation.
5. Are staffing, training, and technology aligned with the customers we serve?
Banks should consider the complexity of their business relationships in relation to available expertise, workload, systems, and external support.
6. Can we explain our risk-based decisions?
The institution should be able to demonstrate how it evaluated material discrepancies, higher-risk ownership structures, and decisions to continue, restrict, or reconsider a relationship.
The Strategic Question Is Larger Than Compliance
Beneficial ownership discussions can easily become focused on forms, filing requirements, thresholds, and regulatory changes.
Those details matter. But the larger issue is whether a bank can confidently understand the businesses moving money through its institution.
That understanding supports more than technical compliance. It informs customer risk assessments. It supports transaction monitoring and suspicious activity investigations. It may help the bank recognize connections among accounts and related entities. It influences product access, ongoing oversight, and management’s understanding of the risks accompanying commercial growth.
As institutions expand their commercial relationships, they should consider whether their beneficial ownership processes have the capacity to grow with them.
Institutions that rely heavily on individual knowledge, informal communication, and information held within separate departments may find it increasingly difficult to maintain a complete understanding of more complex customer relationships.
Banks need processes that connect account opening, customer due diligence, business-line information, ongoing monitoring, enhanced reviews, and management oversight. The appropriate structure will vary according to each institution’s size, risk profile, products, services, and customer base.
The regulatory landscape surrounding beneficial ownership and the Corporate Transparency Act has changed several times in recent years. Banks should continue monitoring those developments and evaluating how regulatory changes affect their policies, procedures, systems, staffing, and risk appetite.
But regardless of what changes next, banks are still expected to understand who owns and controls the legal entities they serve, identify risk, monitor customer relationships, and respond when activity or other information raises questions.
Those responsibilities remain.
What has changed is the scope of the ownership information that will be collected through the federal reporting system.
Institutions that respond by strengthening due diligence, improving communication across business lines, and evaluating whether their resources reflect the complexity of their customers will be better positioned to manage beneficial ownership risk.
The reporting requirement went away.
Beneficial ownership risk did not.
Is Your Beneficial Ownership Framework Keeping Pace?
Changes to federal reporting requirements do not eliminate your institution’s responsibility to understand who owns and controls the businesses it serves.
If your bank is evaluating its customer due diligence procedures, enhanced due diligence practices, internal information sharing, staffing, or beneficial ownership risk controls, NEACH Payments Group can help identify potential gaps and strengthen the framework supporting your BSA/AML program.
Schedule a complimentary consultation with Heather Williams to discuss your institution’s beneficial ownership and customer due diligence needs.