What the AML Deadline Extension Means for Investment Advisers Right Now

What the AML Deadline Extension Means for Investment Advisers Right Now

Investment advisers have more time to comply with FinCEN's new AML requirements. That's not the same as saying they have nothing to do.

In December 2025, FinCEN announced a two-year extension of the effective date for the anti-money laundering rule that would have applied to registered investment advisers starting January 1, 2026. The new deadline is January 1, 2028. The rule itself wasn't withdrawn or modified — just delayed.

The delay gives advisers a legitimate window. It doesn't eliminate the requirement. And for firms that use the two years productively, the difference between a rushed implementation in late 2027 and a considered one now is significant.

What FinCEN Required: The 2024 Final Rule

The background: FinCEN finalized a rule in August 2024 that brought investment advisers into the Bank Secrecy Act framework for the first time. Before this rule, advisers were largely excluded from BSA obligations — obligations that banks, broker-dealers, and money services businesses had long been subject to.

The 2024 final rule would have required covered investment advisers to:

• Establish and implement a written AML/CFT (Anti-Money Laundering/Countering the Financing of Terrorism) compliance program
• Designate a compliance officer responsible for the program
• Conduct ongoing employee training on AML/CFT procedures
• Implement independent testing of the program
• Apply a risk-based approach to customer due diligence

The original effective date was January 1, 2026. FinCEN's December 2025 announcement pushed that to January 1, 2028, citing the need for additional time for both regulators and the industry to prepare for implementation.

The SAR filing requirement — covered advisers filing Suspicious Activity Reports for transactions of $5,000 or more involving suspected illegal funds — was included in the original rule and remains part of the requirements that take effect in 2028.

Who Is Covered — and Who Isn't

The rule applies to two categories of advisers:

SEC-registered investment advisers — firms that have registered with the Securities and Exchange Commission under the Investment Advisers Act of 1940. This is the primary category, covering most fee-only RIAs, wealth management firms, and multi-family offices with assets under management above the SEC registration threshold.

Exempt reporting advisers — advisers who are exempt from SEC registration but still file reports with the SEC, typically private fund advisers (hedge funds, private equity funds) relying on certain exemptions.

The rule does not currently apply to:

• State-registered investment advisers (advisers below the SEC AUM threshold who register with their home state)
• Foreign private advisers
• Mutual fund managers (who are separately subject to BSA obligations through the mutual funds they manage)

For most independent RIAs and wealth managers operating under SEC registration, coverage applies. If there's any ambiguity about whether a particular firm is covered, that question should be resolved now — before implementation planning begins — rather than in 2027.

What Advisers Should Be Doing Now

The delay to 2028 does not mean advisers should put this on a shelf. Two years sounds like a long time until it's six months out and you're building a compliance program from scratch while simultaneously managing a business.

The advisers who will have the smoothest transition are the ones who use the 2026-2027 period for groundwork, not for delay.

Customer identification procedures. The cornerstone of an AML program is knowing your customers. For RIAs, this means formalizing the client onboarding process to include identity verification — collecting and documenting government ID, verifying the information, and maintaining the records. Many advisers already do this informally. Formalizing it into a written, documented procedure is the step that most firms need to take.

Beneficial ownership verification. When an adviser's client is an entity — a trust, LLC, family limited partnership — the adviser needs to identify the beneficial owners who own or control that entity. FinCEN's Customer Due Diligence rule, which already applies to financial institutions, is a useful model for what this looks like in practice.

Risk assessment. An AML program under the FinCEN rule must be risk-based, meaning the level of due diligence should be calibrated to the risk profile of each client relationship. A client with a simple retirement account and known income sources presents different risk than a client with complex offshore structures and frequent large cash transactions. The risk assessment framework should be documented and applied consistently.

SAR preparation. The SAR filing requirement requires advisers to have documented procedures for identifying suspicious activity, escalating it internally, making a filing decision, and maintaining records of that decision. The $5,000 threshold is relatively low — a suspicious transaction of that size requires documentation and a SAR filing decision, even if the ultimate determination is not to file. Having no procedures at all in 2028 means the first unusual client transaction will produce a compliance crisis.

The Practical Scope for Most RIAs

For a typical fee-only RIA serving individual and family clients, the AML program requirements are real but not overwhelming. The vast majority of RIA client relationships involve no suspicious activity. The program requirements are largely documentation and process — writing down what a disciplined adviser is already doing, adding identity verification steps, and ensuring an annual review.

The more complex the client base — international clients, entity clients, clients with complex asset structures — the more substantive the program needs to be.

The SAR filing requirement is the piece that requires the most careful thought. Advisers who have never operated in a BSA-regulated context may not have seen SARs before. The obligation to file when there's reason to suspect illegal activity — not just when there's confirmed illegal activity — requires judgment and a documented process for making that judgment.

Two years is enough time to build a program properly. It's also exactly enough time to do nothing until it's too late.

If you're an RIA looking for an adviser partner who understands the compliance landscape for registered investment advisers, the most reviewed advisers are on Sam's List. Anthony Syracuse, CFP works with clients navigating the evolving regulatory environment for their own financial planning.

General educational content only. Not investment advice. Past performance does not guarantee future results. Consult a qualified financial advisor for guidance specific to your situation.