US proposes an effectiveness standard for AML programs, comments close 9 June

What happened

FinCEN (the US Financial Crimes Enforcement Network) and three banking regulators have proposed the most substantial rewrite of the anti-money laundering (AML) program rules in years, and the comment window closes on 9 June 2026. FinCEN issued its notice of proposed rulemaking on 7 April 2026. The Office of the Comptroller of the Currency, the Federal Deposit Insurance Corporation, and the National Credit Union Administration issued an aligned proposal. The Federal Reserve did not join.

The core change is a standard. An AML and countering the financing of terrorism (CFT) program would have to be “effective, risk-based, and reasonably designed,” language meant to move supervision away from check-the-box compliance. Institutions would run a risk-assessment process that evaluates the money laundering and terrorist financing risks of their business, reviews and where appropriate incorporates the national AML/CFT Priorities that FinCEN publishes, and updates promptly when something material changes.

Two structural pieces sit underneath. The proposal separates whether a program is “established” from whether it is “implemented,” and signals enforcement for implementation failures only where they are significant or systemic in all material respects. It also adds a notice-and-consultation step: a banking regulator would give FinCEN written notice at least 30 days before a significant AML enforcement or supervisory action and consider FinCEN’s input. The rule would reach all national banks and federal savings associations, including community banks.

Why it matters

The promise is permission to triage. An effectiveness standard lets an institution justify spending less on genuinely low-risk activity and more where risk concentrates, which is what most financial crime teams have wanted for a decade. The cost is documentation. “Reasonably designed” is only a defense if you can show the reasoning, so the burden shifts from completing a checklist to evidencing a judgment.

The mandatory tie to FinCEN’s published Priorities is the part to watch. It turns a list that many institutions have treated as background reading into a required input to the risk assessment. The likely effect is that examiners will ask to see exactly how each Priority was considered and either built into controls or consciously set aside.

Practitioner angle

• Read the proposal and decide whether to comment before 9 June 2026. A short, specific submission on the effectiveness standard or the Priorities mandate is worth more than silence.
• Map your current risk assessment against the national AML/CFT Priorities now, and record where each is addressed or reasoned out. That mapping is the artifact an examiner will request first.
• Strengthen the documentation behind your risk-based decisions. Under an effectiveness standard, the written rationale is the control.
• If you sit at a community institution, do not assume this is a big-bank rule. It reaches you, and a thinner team will feel the documentation load more.

The single most important step: build the Priorities-to-controls mapping this quarter, because it is both your comment-letter evidence and your examination evidence.