FinCEN foreign agent alert: $8 billion in suspicious MSB payments sent to third parties

The FinCEN foreign agent alert, FIN-2026-Alert009 of 30 October 2026, warns that overseas agents of US money transmitters are directing payments to unrelated third parties abroad, with more than 8 billion dollars of suspicious activity reported from 2021 to 2025. It adds red flags for MSBs and their banks and a SAR key term. It creates no new rule.

• FinCEN issued FIN-2026-Alert009 on 30 October 2026, aimed at cross-border payments by US money services businesses (MSBs) made on the instruction of foreign agents.
• FinCEN's analysis of Bank Secrecy Act reporting found more than 8 billion dollars in suspicious foreign-agent-directed payments between 2021 and 2025. Separately, FinCEN says it has identified instances where funds moved through MSBs' cross-border relationships ultimately benefited entities with identified links to terrorist financing.
• Red-flag destinations named in the alert are China, the UAE, Egypt and East African countries including Kenya, Uganda and Djibouti.
• SARs should carry the key term FIN2026FOREIGNAGENT in field 2 and in the narrative; Form 8300 filers tick box 1b and add it in Comments.
• FinCEN repeats that MSBs are not uniformly high risk, so the alert reads as a call for sharper agent and counterparty due diligence rather than de-risking.

What did FinCEN publish on 30 October?

FinCEN published FIN-2026-Alert009, the "FinCEN Alert on Risks Associated with Foreign-Agent-Directed Transactions". It asks financial institutions to detect and report suspicious cross-border payments made by US-based MSBs at the direction of foreign agents. The FinCEN foreign agent alert is the ninth numbered alert of 2026, two weeks after its Iranian charity alert.

The headline number comes from FinCEN's own data work. Through analysis of Bank Secrecy Act filings, FinCEN says it found more than 8 billion dollars in suspicious foreign-agent-directed payments between 2021 and 2025. Separately, it says it has seen instances where funds moved through MSB cross-border arrangements ultimately benefited entities with identified connections to terrorist financing. FinCEN adds its usual caveat: BSA reports are tip and lead information, may count attempted and continuing activity, and are not proof of illegal conduct.

The alert is careful about the sector. It notes that the United States sent roughly 106.5 billion dollars in remittances in 2025, and repeats Treasury's position that "no individual type of customer, including MSBs, should be considered uniformly high risk." The target is a specific arrangement, not money transmitters as a class.

All figures in the table are taken from the alert text published on FinCEN's site.

How do foreign-agent-directed transactions work?

A US principal MSB appoints foreign agents to pay out its transfers abroad, then settles with them through bank accounts. The risk arises when the agent agreement lets the agent instruct the principal to pay third parties instead of the agent itself. The principal's bank then wires money to companies about which it has limited, sometimes contradictory, information.

In a typical settlement arrangement, customers send funds through the US principal and the foreign agent pays out locally, then settles with the principal. FinCEN's concern is what happens next. Rather than asking for the money into its own account, the agent instructs the principal to wire it to a trading company, an exporter or another firm in a third country, often with a vague purpose such as "settlement", "services" or "business expense".

The alert identifies five recurring patterns in the reported activity. Beneficiaries had no clear business link to the principal, such as UAE exchange houses and Chinese trading companies. Volume and timing did not fit the stated business, with round-dollar amounts and daily transfers. Recipients lacked the expected profile, for example a general trading company, a firm with no web presence or a newly created company. Funds arriving in the principal's bank account left again by international wire within hours or days. Finally, the foreign agents were effectively "using the principal MSBs' bank accounts as their own". That limited the bank's visibility into the originating agent, the ultimate beneficiary and the purpose.

Each earlier milestone is cited in the FinCEN foreign agent alert's own footnotes, which shows the expectation is long-standing even if the typology is new.

What does the alert change for your obligations?

FIN-2026-Alert009 adds no new legal duty, but it is likely to shape what examiners expect existing duties to catch. Principal MSBs must show agent oversight that reaches third-party payment instructions. Banks serving MSBs must test whether their customer's flows still match the profile it declared, and both must file SARs where activity is suspicious, quoting the key term FinCEN requests.

For principal MSBs, the AML programme rule in 31 CFR 1022.210 is the anchor. It lets a principal and its agent split the drafting of policies by agreement, but states that each MSB "shall remain solely responsible for implementation". FIN-2016-G001 adds that neither side can point to the contract to escape liability. In practice, agent due diligence has to cover licensing status, AML controls and the third parties an agent may ask you to pay; instructions to pay anyone outside the clearing agreement, a red flag in the alert, should be backed by documentary support or refused.

For SAR filing, MSBs report transactions of at least 2,000 dollars under 31 CFR 1022.320, and banks at 5,000 dollars under 31 CFR 1020.320. For an MSB, a transaction that serves no business or apparent lawful purpose is reportable when the MSB knows of no reasonable explanation after examining the available facts. That test fits most of the alert's patterns. Supporting documents must be kept for five years, so the invoices and contracts you request from an agent become part of your SAR file.

For banks serving MSBs, the change sits in customer due diligence. The CDD rule in 31 CFR 1020.210 requires an understanding of the nature and purpose of the relationship and ongoing monitoring against a risk profile. An MSB that told you it serves a diaspora corridor, then wires round sums daily to a general trading company in another region, no longer matches its profile. That is the trigger to request documentation, re-rate the customer and decide on a SAR.

For sanctions and counterparty screening, the third-party recipients are the weak point. They are often legal entities with thin footprints, so name screening alone says little. Verifying registration, ownership and age of the receiving company, in the way a KYB check would, is how a "newly created company" red flag gets caught before the wire, not after.

What is still uncertain about the alert?

The main open question is where reasonable diligence ends. The alert expects principals and banks to judge whether payments to unknown overseas companies reflect real trade, yet FinCEN also says foreign agents often supply little or contradictory information. Firms are being asked to evidence the purpose of transactions they cannot fully see.

De-risking is the first risk. FinCEN repeats that MSBs are not uniformly high risk, but a list of corridors that includes China, the UAE, Egypt, Kenya, Uganda and Djibouti may push some banks to exit MSB customers that serve those communities. MSBs handled more than 95% of remittance transfers in a 2018 CFPB assessment the alert cites, so that would cut legitimate remittance flows and push activity into less visible channels, the opposite of what the alert intends.

Liability is the second. The regulation makes each MSB solely responsible for implementing its programme, and the alert says both principal and agent remain responsible. Neither text explains how a US principal should enforce controls on a foreign agent operating under another country's laws, beyond monitoring and contract termination.

Cost and data are the third. Asking for invoices, contracts and recipient due diligence on every third-party instruction adds manual review to a business built on thin margins. The alert does not set a value threshold or a sampling standard, so each programme must justify its own.

Finally, the 8 billion dollar figure measures what was reported, not what was proven. It may include attempted transactions and overlapping filings. Treating it as a confirmed loss would overstate the problem; treating it as noise would ignore the terrorist financing cases FinCEN says it has identified in MSB cross-border flows.

How does this fit the wider 2026 enforcement pattern?

The FinCEN foreign agent alert continues the 2026 focus on intermediaries that hide the true counterparty. Earlier in October, FinCEN's alert on the A7 Network also turned on sub-agents and third-country front companies. Foreign-agent settlement is a similar layer of separation between a US account and the ultimate beneficiary.

The alert also points across the Atlantic. According to the alert, in June 2026 the UK Financial Conduct Authority restricted Euro Exchange Securities UK Ltd, a previously authorised electronic money institution offering remittances, citing "significant risks of financial crime". It also sought special administrators, which a court approved that month. In September the FCA opened an investigation into possible breaches of the Money Laundering Regulations between February 2020 and June 2026, covering risk assessment, customer due diligence and ongoing monitoring. The FCA says it has reached no conclusions. FinCEN cites it as an illustration of remittance-sector financial crime risk under a different regime.

For teams that serve MSBs, the common thread is that the account holder is rarely the party that matters. A transaction can be fully screened at the customer level and still deliver funds to an unknown entity chosen by someone outside the relationship. For the bank-side view of the same nested-relationship problem, see correspondent banking due diligence.

How should compliance teams respond?

Start with an inventory of foreign agent agreements and the payment instructions they allow. Any clause that lets an agent direct settlement to third parties needs a control: documentary evidence, recipient verification and a right to refuse. Then tune monitoring to the patterns in the FinCEN foreign agent alert and add the key term to SAR procedures.

Principal MSBs should map every foreign agent, the third parties each has asked you to pay in the last year, and the stated purpose. Flag recipients outside the clearing agreement, recipients in the named jurisdictions that do not match your customer corridors, and repeated round-dollar or daily transfers. Ask agents for evidence of their own due diligence on recipients, and record refusals.

Banks should compare each MSB customer's outgoing wires with its declared business, look for rapid in-and-out flows to trading companies, and request invoices when patterns diverge. Where the picture stays unclear, consider a SAR with FIN2026FOREIGNAGENT in field 2, and use the section 314(b) safe harbor to compare notes with other institutions. FinCEN's FIN-2025-G001 guidance also encourages sharing with foreign institutions, which matters when the counterparty is an overseas agent. Where a violation needs immediate attention, especially suspected terrorist activity, the alert asks for a call to law enforcement as well as a timely SAR.

Zyphe verifies the companies on both sides of a payment: registry checks, recursive ownership resolution at a 25% default UBO threshold, and screening through one API, with an exportable audit trail for examiners. It is built so the business receives verification results, not a central store of customer PII. See our AML software and KYB software, or book a demo.

The bottom line

The FinCEN foreign agent alert targets a gap that sits between two compliance programmes: the principal MSB trusts its agent, the bank trusts its MSB customer, and the third-party recipient is checked by nobody. Closing it means treating agent payment instructions as transactions that need a verified counterparty and a documented purpose. Firms that can show that evidence will meet the alert's expectations without walking away from legitimate remittance customers.

Cited sources

• FinCEN, FIN-2026-Alert009: Alert on Risks Associated with Foreign-Agent-Directed Transactions (30 October 2026)
• FinCEN, list of alerts, advisories and notices
• FinCEN, FIN-2016-G001: Guidance on Existing AML Program Rule Compliance Obligations for MSB Principals with Respect to Agent Monitoring
• 31 CFR 1022.210: Anti-money laundering programs for money services businesses (eCFR)
• 31 CFR 1022.320: Reports by money services businesses of suspicious transactions (eCFR)
• 31 CFR 1020.320: Reports by banks of suspicious transactions (eCFR)
• FinCEN, FIN-2025-G001: Cross-Border Information Sharing by Financial Institutions and SAR Confidentiality (5 September 2025)
• 31 CFR 1020.210: Anti-money laundering program requirements for banks (eCFR)
• 31 CFR 1010.540: Voluntary information sharing among financial institutions (eCFR)
• FCA, FCA opens investigation into Euro Exchange Securities UK Ltd (16 September 2026)