FinCEN, the Bank Secrecy Act and crypto in Nevada

Why this framework exists

The Bank Secrecy Act dates to 1970 and predates cryptocurrency by four decades. Its purpose was and remains to make financial systems legible to law enforcement: to ensure institutions know who their customers are, keep records, and flag activity that looks like money laundering, terrorist financing or sanctions evasion.

When crypto exchanges emerged, regulators did not build a new regime. They applied the existing one. FinCEN determined that businesses exchanging convertible virtual currency for fiat, or transmitting it on behalf of others, are money transmitters and therefore money services businesses under the BSA.

That single determination is the origin of essentially every friction you experience: the ID upload when opening an exchange account, the selfie at a kiosk's higher tier, the question about where funds came from on a large deposit, and the occasional frozen withdrawal pending review. None of it is Nevada. All of it is federal.

Money services businesses

A money services business is a defined category. For our purposes the relevant limb is money transmission — receiving currency, funds or value that substitutes for currency and transmitting it to another location or person.

Crypto exchanges fall inside it. So do crypto kiosk operators. So do a range of businesses that do not think of themselves as financial institutions.

Being an MSB triggers two things. First, registration with FinCEN — a filing, renewable, listed in a public register. Second, the full weight of BSA compliance obligations described below.

It is worth restating the point we make on our licensing page, because platforms exploit the confusion constantly: MSB registration is not a licence. You file it. Nobody evaluates it. It confers no authority to serve a Nevada resident. A platform whose compliance page mentions FinCEN and stays quiet about state licensing is telling you something by omission.

The five-pillar AML programme

Every MSB must maintain a written anti-money-laundering programme. In practice this is described as five pillars, and understanding them explains almost everything a compliant platform does.

The customer identification programme is the pillar you meet directly. It requires the institution to form a reasonable belief that it knows the true identity of each customer — typically legal name, date of birth, address and a government identifier, verified against documents or data.

Our KYC page covers exactly what you will be asked for and why particular documents are requested.

Currency transaction reports and suspicious activity reports

Two report types cause most of the confusion.

Currency transaction reports. Filed on cash transactions above the applicable threshold — currently $10,000 in a business day. These are automatic, routine, and not accusations of anything. Millions are filed annually. If you deposit $12,000 in cash at your Nevada credit union, a CTR is filed and nothing whatsoever happens as a result. Attempting to avoid one is a far bigger problem than triggering one.

Suspicious activity reports. Filed when an institution knows, suspects or has reason to suspect that a transaction involves funds from illegal activity, is designed to evade BSA requirements, has no apparent lawful purpose, or facilitates criminal activity. These are judgement calls, and the institution is legally prohibited from telling you one was filed.

That prohibition — the "no tipping off" rule — explains an experience that frustrates a lot of people: an account restricted or closed with no explanation offered. Support genuinely cannot tell you, and pressing them will not change that.

The Travel Rule

The Travel Rule requires that certain identifying information accompany funds transfers above a threshold between financial institutions — the originator's name, account and address, and the beneficiary's details.

Applying a rule written for wire transfers to blockchain transactions has been awkward, and the industry has spent years building interoperability solutions to comply. From a customer's perspective, it shows up in three ways.

First, an exchange may ask who you are sending crypto to and whether the destination is your own wallet or a third party's. Second, a withdrawal to an address the platform cannot associate with a compliant counterparty may be delayed or declined. Third, deposits from certain sources may receive additional review.

None of this applies to a transfer to your own self-custody wallet in the same way it applies to a transfer to another institution — but platforms handle the distinction differently, and some ask anyway.

Structuring: the trap that catches honest people

This needs stating plainly because people do it without realising it is a crime.

Structuring means deliberately breaking a transaction into smaller pieces — across days, machines, accounts or institutions — for the purpose of staying below a reporting threshold. Under federal law it is an offence in its own right, independent of the legality of the underlying funds. You can structure entirely clean money and be prosecuted for structuring.

Two places this comes up in Nevada.

At crypto kiosks. Scam scripts frequently instruct victims to use several machines "because of daily limits". That instruction both flags the fraud and exposes the victim to a structuring allegation. Operators monitor for the pattern and report it. Our limits page covers it.

At banks. Depositing $9,500 twice rather than $19,000 once, specifically to avoid a CTR, is structuring. Depositing $9,500 twice because that is how the money arrived is not. The offence turns on purpose, which is why being straightforward is the right approach.

If you have a legitimate reason to move an amount above a machine's ceiling, the correct answer is a verified exchange account or an OTC desk — never several machines in an afternoon.

How the federal layer meets Nevada law

The two layers stack rather than overlap.

Federal. FinCEN registration, the AML programme, customer identification, monitoring, CTRs, SARs, the Travel Rule, sanctions screening. Applies identically in every state.

Nevada. Money transmitter licensing under NRS Chapter 671, administered by the Financial Institutions Division, with a surety bond from $10,000 to $250,000 and a custodial account requirement. Determines whether a business may lawfully serve Nevada residents at all.

A compliant platform holds both. A platform with only the federal registration is not authorised to serve you here, whatever its marketing implies. A platform with neither should not be handling your money.

One useful consequence for consumers: because the federal layer is uniform, the identity requirements you face in Nevada are the same as in any other state. There is no jurisdiction- shopping to be done, and no legitimate platform will offer you a way around them.

What this means for you in practice

Federal compliance questions