On March 12, 2026, OFAC sanctioned six individuals and two entities for their roles in Democratic People’s Republic of Korea (DPRK) government-orchestrated information technology (IT) worker schemes that systematically defraud U.S. businesses. According to the OFAC, the scheme generates revenue to fund the DPRK’s weapons of mass destruction (WMD) programs, including nearly $800 million in 2024.

On March 10, 2026, FinCEN issued a new Geographic Targeting Order (GTO) imposing recordkeeping and reporting requirements on certain money services businesses (MSBs) along the southwest border. The GTO effectively extends a similar order issued on September 10, 2025 and expired on March 6, 2026.

On March 6, 2026, FinCEN assessed an $80,000,000 civil money penalty against Canaccord Genuity LLC for willful violations of the Bank Secrecy Act and its implementing regulations. Canaccord is a broker-dealer headquartered in New York that provides market-making and trade execution services in securities primarily for institutional clients such as money managers, hedge funds, and financial institutions.

In late February, the FFIEC released updates to the BSA/AML Examination Manual to remove references to reputational risk. The action is consistent with Executive Order 14331, which required banking regulators to remove the use of reputation risk or equivalent concepts that could result in politicized or unlawful debanking.

On February 26, 2026, FinCEN issued a proposed rule that, if finalized, would sever MBaer Merchant Bank AG (MBaer’s) access to the U.S. financial system as a result of its financial support to illicit actors linked to Russia and Iran.  If finalized, the proposed rule would prohibit covered U.S. financial institutions from opening or maintaining a correspondent account for, or on behalf of, MBaer.