Remittance Compliance 101: MSB Licensing, AML & KYC Demystified

Compliance is the number one reason people don't start remittance businesses. It sounds intimidating: AML, KYC, BSA, MSB, MTL, SAR, CTR, OFAC... the alphabet soup never ends.

But here's the truth: compliance isn't as scary as it seems. It's a set of rules designed to prevent money laundering and terrorist financing. If you understand the rules, you can follow them. And if you use the right platform, most of the heavy lifting is handled for you.

This guide breaks it all down in plain English.

What Is an MSB?

A Money Services Business (MSB) is any business that offers certain financial services, including:

• Money transmission (sending money from one person to another)
• Check cashing
• Currency exchange
• Prepaid access (gift cards, prepaid debit cards)
• Money orders/traveler's checks

If you're in the remittance business, you're an MSB. Period.

Federal Registration (FinCEN)

Every MSB operating in the United States must register with the Financial Crimes Enforcement Network (FinCEN). Key facts:

• Cost: Free
• Timeline: Must register within 180 days of starting operations
• Renewal: Every 2 years
• Form: FinCEN Form 107 (filed electronically)

Registration is NOT a license. It's a notification to the federal government that you exist and what you do. Think of it as raising your hand and saying "I'm here."

State Money Transmitter Licenses (MTL)

This is where it gets real. 47 states (plus DC, Puerto Rico, and the US Virgin Islands) require a separate Money Transmitter License. Only Montana, South Carolina, and New Mexico have exemptions or don't require a separate license.

Each state has its own:

Total cost for all-state licensing: $1M - $3M+ in bonds, legal fees, and compliance infrastructure.

The NMLS System

Most states use the Nationwide Multistate Licensing System (NMLS) to process MTL applications. This standardizes some of the process, but each state still has unique requirements.

The Compliance Umbrella Option

Given the cost and complexity of state-by-state licensing, many new operators choose to operate under an existing license holder's umbrella. This is exactly what Platly offers:

• Platly holds the licenses (or operates through a licensed bank partner)
• You operate as an authorized delegate/agent under Platly's compliance program
• No need for your own MTL, surety bonds, or net worth requirements
• Compliance monitoring, SAR filing, and regulatory reporting handled by Platly's team

This approach lets you launch in weeks instead of years, at a fraction of the cost.

AML: Anti-Money Laundering

Your AML program is the cornerstone of compliance. FinCEN requires every MSB to implement a written AML program that includes:

1. Internal policies, procedures, and controls

Document how your business:

• Verifies customer identity
• Monitors transactions for suspicious activity
• Screens against sanctions lists
• Reports suspicious activity
• Trains employees

2. Designation of a compliance officer

Someone must be responsible. For small operators, this might be the owner. For larger operations, it should be a dedicated compliance professional.

The compliance officer must:

• Have authority to implement the AML program
• Receive adequate training (CAMS certification is ideal but not required)
• Report directly to senior management

3. Ongoing employee training

All employees who interact with customers or handle transactions must be trained on:

• Red flags for money laundering and terrorist financing
• How to file internal suspicious activity reports
• Customer due diligence procedures
• Sanctions screening procedures

Training must be documented and updated annually.

4. Independent testing (audit)

Your AML program must be independently tested at least annually. This can be done by:

• An external auditor
• An internal audit department (for larger organizations)
• A qualified consultant

The audit assesses whether your AML controls are adequate and being followed.

KYC: Know Your Customer

KYC is the process of verifying who your customers are before allowing them to transact. It has three components:

Customer Identification Program (CIP)

Before a customer can send money, you must collect and verify:

• Full legal name
• Date of birth
• Address
• Identification number (SSN for US citizens, passport number for non-citizens)
• Government-issued photo ID (must be verified as authentic)

Platly integrates with identity verification providers like Persona to automate document verification, facial matching, and liveness detection.

Customer Due Diligence (CDD)

Beyond basic identification, you must understand:

• The nature and purpose of the customer relationship
• The customer's expected transaction patterns (how often, how much, to where?)
• The source of funds (especially for larger transactions)

Enhanced Due Diligence (EDD)

For higher-risk customers — those sending large amounts, sending to high-risk countries, or exhibiting unusual patterns — you must conduct additional scrutiny:

• More detailed source of funds documentation
• More frequent transaction monitoring
• Senior management approval for the relationship

Sanctions Screening

Every transaction must be screened against sanctions lists, including:

• OFAC SDN List (Office of Foreign Assets Control — Specially Designated Nationals)
• OFAC Consolidated Sanctions List
• UN Security Council Sanctions
• EU Consolidated List

Screening must happen:

• When a new customer registers (against their name, date of birth, address)
• Before every transaction is processed (sender, recipient, and beneficiary)
• When sanctions lists are updated (which happens frequently)

A "hit" doesn't necessarily mean the person is sanctioned — names can match coincidentally. But every hit must be investigated and documented.

Platly's platform performs real-time sanctions screening on every transaction automatically.

Reporting Requirements

Suspicious Activity Reports (SARs)

If you detect suspicious activity, you must file a SAR with FinCEN within 30 days of detection. Suspicious activity includes:

• Transactions that appear designed to evade reporting thresholds (structuring)
• Customers who provide false or inconsistent identification
• Transactions with no apparent economic purpose
• Patterns that suggest money laundering or terrorist financing

Important: You must NOT tell the customer that a SAR has been filed. "Tipping off" is a federal crime.

Currency Transaction Reports (CTRs)

Any cash transaction (or series of related cash transactions) exceeding $10,000 in a single day requires a CTR filing. This is automatic — no suspicion needed.

8300 Reports

If you receive more than $10,000 in cash in a single transaction (or related transactions), you must file IRS Form 8300 within 15 days.

Record Keeping

MSBs must maintain records for a minimum of 5 years, including:

• Customer identification documents
• Transaction records
• SAR and CTR filings
• AML program documentation
• Training records
• Audit reports

Platly maintains all transaction records and compliance documentation digitally, with secure archival for the required retention period.

Common Compliance Mistakes

1. Not having a written AML program

It must be written, documented, and available for examination. A verbal understanding isn't sufficient.

2. Inadequate training

Annual training is the minimum. More frequent training is better, especially when regulations change.

3. Ignoring "structuring" patterns

When a customer consistently sends amounts just below reporting thresholds ($9,500 instead of $10,000), this is a red flag that must be investigated.

4. Failing to update sanctions screening

Sanctions lists change frequently. Your screening must use current lists, not outdated databases.

5. Poor record keeping

If an examiner asks for records and you can't produce them, you have a problem. Digital record-keeping with proper backup is essential.

Frequently Asked Questions

Do I need a lawyer to set up compliance?

If you're building your own compliance program from scratch, yes — engage a compliance attorney and potentially a BSA/AML consultant. If you're using Platly's compliance umbrella, the program is already built and maintained.

How much does compliance cost?

Building an in-house compliance program: $100K-$500K+ annually (staff, technology, legal, audits). Using Platly's compliance umbrella: included in the platform fee.

What happens if I get examined?

State and federal regulators conduct periodic examinations of MSBs. They'll review your AML program, test your controls, and examine sample transactions. If you're operating under Platly's umbrella, our compliance team supports you through examinations.

Can I lose my license?

Yes. Non-compliance can result in license revocation, fines (up to $1M+ per violation), and criminal charges. This is why compliance is non-negotiable — and why many operators choose to work under a platform like Platly rather than managing it independently.

What's the difference between MSB and MTO?

MSB (Money Services Business) is the regulatory term used by FinCEN. MTO (Money Transfer Operator) is an industry term. They refer to essentially the same thing in the context of remittance.

The Bottom Line

Compliance is not optional, but it doesn't have to be overwhelming. The key takeaways:

1. Register with FinCEN — it's free and required
2. Get licensed in every state you operate in — or work under a platform like Platly that already holds licenses
3. Implement an AML program — written policies, training, monitoring, reporting
4. Know your customers — verify identity before they transact
5. Screen every transaction — sanctions lists, monitoring rules, reporting thresholds
6. Keep records — 5 years minimum, digital is better

Ready to start your remittance business? Read our complete startup guide for 2026.