Democratic People’s Republic of Korea (DPRK) government-orchestrated information technology (IT) worker schemes that systematically defraud U.S. businesses. According to the OFAC, the scheme generates revenue to fund the DPRK’s weapons of mass destruction (WMD) programs, including nearly $800 million in 2024.

On March 10, 2026, FinCEN issued a new Geographic Targeting Order (GTO) imposing recordkeeping and reporting requirements on certain money services businesses (MSBs) along the southwest border. The GTO effectively extends a similar order issued on September 10, 2025 and expired on March 6, 2026.

On March 6, 2026, FinCEN assessed an $80,000,000 civil money penalty against Canaccord Genuity LLC for willful violations of the Bank Secrecy Act and its implementing regulations. Canaccord is a broker-dealer headquartered in New York that provides market-making and trade execution services in securities primarily for institutional clients such as money managers, hedge funds, and financial institutions.

In late February, the FFIEC released updates to the BSA/AML Examination Manual to remove references to reputational risk. The action is consistent with Executive Order 14331, which required banking regulators to remove the use of reputation risk or equivalent concepts that could result in politicized or unlawful debanking.

On February 26, 2026, FinCEN issued a proposed rule that, if finalized, would sever MBaer Merchant Bank AG (MBaer’s) access to the U.S. financial system as a result of its financial support to illicit actors linked to Russia and Iran.  If finalized, the proposed rule would prohibit covered U.S. financial institutions from opening or maintaining a correspondent account for, or on behalf of, MBaer.

On February 13, 2026, FinCEN launched a new dedicated webpage to confidentially accept whistleblower tips on fraud, money laundering, and sanctions violations. Secretary of the Treasury Scott Bessent said that Treasury would provide financial rewards for eligible whistleblower tips. 

On February 13, 2026, FinCEN issued an order granting exceptive relief to covered financial institutions from certain requirements under FinCEN’s Customer Due Diligence Requirements for Financial Institutions rule. The order exempts covered financial institutions from the requirement to identify and verify the beneficial owners of a legal entity customer each time the customer opens a new account.

On February 6, 2026, the OFAC launched its new online Voluntary Self-Disclosure Portal. The portal provides a streamlined, secure method for submitting voluntary self-disclosures of potential violations of OFAC-administered sanctions programs.