Glossary term
Bank Secrecy Act (BSA)
The Bank Secrecy Act, or BSA, is the main U.S. financial recordkeeping and reporting law that requires covered institutions to keep certain records and file reports useful in financial-crime investigations.
Byline
Written by: Editorial Team
Updated
What Is the Bank Secrecy Act (BSA)?
The Bank Secrecy Act, or BSA, is the main U.S. financial recordkeeping and reporting law that requires covered institutions to keep certain records and file reports useful in criminal, tax, and regulatory investigations. Enacted in 1970, the law created the core reporting framework that later grew into the modern U.S. anti-money-laundering system. In plain terms, the BSA is the legal foundation that tells banks and many other financial businesses what information they must collect, preserve, and report when financial activity could matter to investigators.
The BSA created a paper trail for financial activity that would otherwise be much harder to trace. Large cash activity, suspicious behavior, and certain payment records become more useful to law enforcement only when institutions are required to document them consistently. The BSA sits underneath familiar compliance concepts such as currency transaction reports, suspicious activity reports, recordkeeping rules, and many customer-monitoring obligations.
Key Takeaways
- The BSA is the core U.S. law behind financial recordkeeping and reporting obligations used in financial-crime investigations.
- It requires covered institutions to keep records and file specific reports with a high degree of usefulness to investigators.
- The BSA is a foundation for modern anti-money laundering compliance, but the two terms are not identical.
- CTRs, SARs, and certain payment recordkeeping rules are all part of the broader BSA framework.
- The law affects routine customer experience because it shapes onboarding, monitoring, and reporting controls inside financial institutions.
What the BSA Created
The BSA created a legal structure for financial transparency rather than one single reporting form. It authorized Treasury to require financial institutions and certain other businesses to maintain records and file reports that can help identify the source, volume, and movement of money. Over time, that framework developed into a system that includes cash reporting, suspicious-activity reporting, record retention, customer identification expectations, and information sharing across different parts of the financial system.
This is why the BSA is best understood as infrastructure. It did not simply create one compliance box to check. It created the core reporting and recordkeeping architecture that later AML rules and supervisory expectations build on.
BSA Versus AML
People often use BSA and AML together, and in practice many institutions do call their compliance program a BSA/AML program. Even so, the terms are not perfectly interchangeable. The BSA is the statutory and regulatory framework. AML is the broader compliance objective of detecting and deterring illicit finance. The BSA provides many of the legal tools used to carry out that objective in the United States.
Term | Main meaning |
|---|---|
BSA | U.S. recordkeeping and reporting framework established by statute and regulations |
AML | Broader financial-crime control objective and compliance program design |
A firm can talk about AML strategy in broad terms, but its actual reporting and recordkeeping obligations are often grounded in the BSA and the regulations issued under it.
How the BSA Shapes Financial Compliance
The BSA explains why ordinary financial activity can trigger documentation requirements even when nothing criminal is happening. A customer may be asked for identifying information, ownership details, or transaction explanations because the institution is operating inside a recordkeeping and reporting system created by law. The BSA makes those controls part of routine banking operations rather than optional internal preferences.
For financial institutions, the stakes are significant. Weak BSA compliance can lead to enforcement actions, penalties, operational restrictions, and reputational damage. For customers, the law often shows up indirectly through account-opening questions, transaction monitoring, reporting thresholds, and requests to explain unusual activity.
Core BSA Reporting and Recordkeeping Areas
The best-known parts of the BSA framework include reports of large cash activity, reports of suspicious conduct, and recordkeeping rules for certain payment activity. These tools are designed to create a usable trail for investigators while also helping institutions identify activity that deserves more scrutiny. The BSA connects directly to concepts such as structuring, the Travel Rule, and suspicious-activity escalation.
The law also does not apply only to traditional banks. Different parts of the BSA framework reach across multiple types of financial institutions and, in some cases, certain nonfinancial businesses that handle qualifying cash activity or other higher-risk transactions.
How the BSA Still Shapes Modern Compliance
The BSA remains central because financial crime has changed faster than the basic need for traceable records. Money can move through wire systems, payment apps, money transmitters, digital assets, shell companies, and cross-border channels, but investigators still need reliable records and reporting points to reconstruct what happened. The BSA gives regulators and institutions a framework for producing that information in a consistent way.
That is also why later laws and rules are often described as building on the BSA rather than replacing it. The law's original purpose was to create usable transparency in the financial system, and that purpose still drives much of modern compliance practice.
The Bottom Line
The Bank Secrecy Act, or BSA, is the main U.S. law that requires covered institutions to keep certain records and file reports useful in financial-crime investigations. It created the legal framework behind large parts of modern U.S. AML compliance, including cash reporting, suspicious-activity reporting, and key payment recordkeeping rules.