Source: https://www.jdsupra.com/legalnews/anti-money-laundering-obligations-for-26948/
Timestamp: 2019-04-24 16:55:11+00:00

Document:
Is that true? Is a company subject to AML regulations if it provides a virtual currency wallet, or mines for virtual currency, or accepts or exchanges virtual currency? And does that mean it must obtain and verify detailed identification information about its customers? Or file suspicious activity reports? Or engage in a myriad of additional anti-money laundering activities that are required of banks?
Yes and no. This advisory provides an overview of when and how AML regulations apply to businesses that touch virtual currencies. Not all virtual currency businesses are subject to AML regulations, but many may be categorized under federal law as "money services businesses" (MSBs), which do have AML compliance obligations. In particular, many virtual currency businesses are "money transmitters," a subcategory of MSBs, and these money transmitters accordingly are subject to an array of AML regulations.
However, notwithstanding Secretary Mnuchin's comment regarding "the same obligation as a bank," the AML regulations that apply to MSBs are less extensive than those applicable to banks. In fact, AML obligations applicable to virtual currency businesses often can be discharged with a reasonably short AML policy and attendant compliance measures.
Failing to discharge the obligations that do apply, however, can lead to severe penalties. The U.S. government has arrested and charged individuals for AML violations in the virtual currency space and has fined one virtual currency business more than $100 million for its failure to comply with applicable AML rules. AML officials, including Secretary Mnuchin and others, have made clear that AML enforcement in the virtual currency industry is a U.S. government priority.
The term "money laundering" is formally defined by several complex provisions in the U.S. criminal code, particularly 18 U.S.C. Sections 1956 and 1957. The term is used more casually to mean conducting transactions to conceal the criminal origins of money, i.e., to conduct transactions with "dirty" (criminally derived) money so that it appears "clean."
In addition to the criminal prohibition, there are many AML regulations that apply primarily to "financial institutions." The AML regulations generally require pro-active measures to ensure that financial institutions are not used for money laundering.
The Bank Secrecy Act (BSA) is the primary federal statute that imposes AML obligations on financial institutions.2 Acting under the BSA, the U.S. Treasury Department's primary AML arm, the Financial Crimes Enforcement Network (FinCEN), issues and enforces AML regulations, often in conjunction with other agencies.
There are many categories of financial institutions for which AML obligations are prescribed by the BSA and its implementing regulations. These include banks, securities brokers and dealers, mutual funds, and other businesses that fit a common understanding of the term "financial institution." There are many other types of businesses, however, that might not commonly be perceived as financial institutions but may be classified as such under the BSA. These include card clubs, casinos, and MSBs.
The MSB category applies to anyone doing business "wholly or in substantial part" in the U.S. that falls within one or more subcategories, notably including a "money transmitter."3 Helpfully, FinCEN has clarified that certain other MSB subcategories, such as "dealer in foreign exchange" and providers and sellers of "prepaid access" generally do not cover virtual currency businesses because both of these other subcategories are concerned exclusively with real currencies, not virtual currencies.4 In addition, the MSB definition states that a person who is registered with the SEC or CFTC (or analogous foreign financial agency) is not an MSB.
The most likely reason that a virtual currency business would be categorized as an MSB, and therefore subject to AML rules, is that the business acts as a "money transmitter."
On the other hand, "exchangers" and "administrators" may be considered money transmitters.10 An "exchanger" is a person "engaged as a business in the exchange of virtual currency for real currency, funds, or other virtual currency." An "administrator" of virtual currency is a person "engaged as a business in issuing (putting into circulation) a virtual currency, and who has the authority to redeem (to withdraw from circulation) such virtual currency."
If a person merely uses virtual currency on her or his own behalf or a person mines virtual currency and the same person (the miner) uses it, these activities generally do not make the person a money transmitter.
If a person exchanges virtual currency for real currency or other virtual currency, and that exchange is the person's business (as opposed to a transaction that is attendant to the person's business, such as the sale of products), then that person may be a money transmitter.
If a person is an administrator of virtual currency, meaning issuing virtual currency that is used by others and retaining the potential to redeem or withdraw it, and such activity constitutes the person's business, then that person may be a money transmitter.
This is not to say that all virtual currency businesses are the same. Some virtual currency businesses may not be involved in money transmission services, may be in very early development stages, may only deal in securities or commodities, or otherwise may not meet the definition of a money transmitter. To determine whether a particular virtual currency business is a money transmitter is a fact-intensive inquiry and warrants a nuanced review and analysis. That being said, as noted in FinCEN guidance, a virtual currency business that is an exchanger or administrator of virtual currencies (as defined above) raises a significant likelihood that FinCEN would consider it an MSB and, as such, subject to certain AML obligations.11 What are those obligations? We briefly outline the requirements in the next section.
General recordkeeping requirements (five years).
Recording of certain real currency exchanges in excess of $1,000 (often not applicable).
Not all of these requirements will be required for every virtual currency business, but those in the virtual currency industry should conduct a review to determine whether AML obligations are applicable. If so, a written AML policy, and compliance efforts consistent with that policy, will be needed to discharge those obligations.
There is more than bark in the recent emphasis by U.S. regulators regarding virtual currency AML compliance: there have been several instances of virtual currency businesses getting caught in the web of AML enforcement.
If that was a ripple, FinCEN's enforcement action against BTC-e was a tidal wave. On July 26, 2017, FinCEN assessed a civil monetary penalty of nearly $110 million against Canton Business Corporation, more widely known as the virtual currency exchange BTC-e, and a $12 million penalty against Alexander Vinnik, a Russian national who allegedly controlled BTC e's operations, finances, and accounts.14 On the same day, a 21-count criminal indictment against BTC-e and Vinnik was unsealed, and Vinnik was arrested in Greece.
According to FinCEN, BTC-e lacked internal controls to ensure its services were not used for illegal purposes and, as a result, facilitated money laundering by individuals engaged in cyber-hacking and ransoms, fraud, identity theft, tax refund fraud schemes, public corruption, and drug trafficking. BTC-e did not report any of these suspicious activities to FinCEN or law enforcement. Ultimately, FinCEN found that BTC-e violated several AML requirements by failing to: (1) register as an MSB; (2) maintain an effective AML compliance program; (3) file suspicious activity reports; and (4) keep transaction records.
The industry is on notice: any virtual currency business needs to determine whether it is classified as a money transmitter—likely the case for any virtual currency exchanger or administrator—in which case the business generally is required to register with FinCEN and develop an AML compliance program. As is now apparent, failure to do so may give rise to significant civil and even criminal liability.
1Mnuchin: Bitcoin firms subject to anti-laundering rules, American Banker (January 12, 2008) found at https://www.americanbanker.com/news/mnuchin-bitcoin-firms-subject-to-anti-laundering-rules.
2 31 U.S.C. § 5311 et seq.
3See 31 CFR § 1010.100(ff). Other MSB subcategories include "Dealer in foreign exchange," "Check casher," "Issuer or seller of traveler's checks or money orders," "Provider of prepaid access," "U.S. Postal Service," and "Seller of prepaid access."
4 FIN-2013-G001, Application of FinCEN's Regulations to Persons Administering, Exchanging, or Using Virtual Currencies at 5-6 (March 18, 2013).
8 FIN-2014-R001, Application of FinCEN's Regulations to Virtual Currency Mining Operations (January 30, 2014) found at https://www.fincen.gov/sites/default/files/shared/FIN-2014-R001.pdf.
9 FIN-2014-R002, Application of FinCEN's Regulations to Virtual Currency Software Development and Certain Investment Activity (January 30, 2014) found at https://www.fincen.gov/sites/default/files/shared/FIN-2014-R002.pdf.
11 There are, however, several important carve-outs. See e.g., 31 CFR § 1010.100(ff)(5)(ii). Among the most important are these: a person who merely provides the communication instruments used for funds transmission is not a money transmitter (see 31 CFR § 1010.100(ff)(5)(ii)(A)); a payment processor who facilitates payment for goods or services by agreement with the creditor or seller is not a money transmitter (see 31 CFR § 1010.100(ff)(5)(ii)(B)); and accepting or transmitting funds integral to the sale of goods or services by the person accepting or transmitting the funds does not make a person a money transmitter (see 31 CFR § 1010.100(ff)(5)(ii)(F)).
12What Ripple's Fincen Fine Means for the Digital Currency Industry, American Banker (May 6, 2015) found at https://www.americanbanker.com/news/what-ripples-fincen-fine-means-for-the-digital-currency-industry.
13 FinCEN Fines Ripple Labs Inc. in First Civil Enforcement Action Against a Virtual Currency Exchanger (May 5, 2015) found at https://www.fincen.gov/news/news-releases/fincen-fines-ripple-labs-inc-first-civil-enforcement-action-against-virtual.
14 FinCEN Fines BTC-e Virtual Currency Exchange $110 Million for Facilitating Ransomware, Dark Net Drug Sales (July 26, 2017) found at https://www.fincen.gov/sites/default/files/2017-07/BTC-e%20July%2026%20Press%20Release%20FINAL1.pdf.
15Homeland Security Arrests Bitcoin Company CEO for Alleged Money Laundering, The Merkle (February 20, 2018) found at https://themerkle.com/homeland-security-arrests-bitcoin-company-ceo-for-alleged-money-laundering/.
16Michigan Man Charged for Unlawful Bitcoin Exchange, Coindesk (October 27, 2017) found at https://www.coindesk.com/michigan-man-charged-unlawful-bitcoin-exchange/.
17Treasury Secretary Mnuchin explains why he's really looking closely at bitcoin, CNBC (January 25, 2018) found at https://www.cnbc.com/2018/01/25/treasury-secretary-mnuchin-explains-why-hes-really-looking-closely-at-bitcoin.html.

References: § 5311
 § 1010
 § 1010
 § 1010
 § 1010
 § 1010