FinCEN Permanently Ends BOI Reporting: What It Means for AML Compliance Teams

The Corporate Transparency Act's beneficial ownership reporting regime — the one compliance teams spent three years building workflows around — is effectively over for U.S. companies.

On August 11, 2026, FinCEN announced a final rule permanently eliminating beneficial ownership information (BOI) reporting requirements for domestic entities. The rule was published in the Federal Register on August 14 and took effect immediately upon publication. FinCEN determined it qualified for immediate effectiveness because it "grants or recognizes an exemption" rather than imposing new obligations.

For AML and BSA professionals, this is a significant shift — but it is narrower than the headlines suggest, and it does not mean beneficial ownership has stopped mattering.

What the Final Rule Actually Changes

The final rule makes permanent the interim final rule FinCEN issued on March 26, 2025, and expands it. Three changes matter most:

Domestic entities are fully exempt. Every entity created under U.S. state or tribal law is now exempt from filing initial, updated, or corrected BOI reports. This is not a deadline extension or a safe harbor. The obligation is gone.

U.S. persons are exempt as beneficial owners and company applicants. Foreign reporting companies no longer report BOI about U.S. person beneficial owners or company applicants, and U.S. persons have no obligation to provide that information.

FinCEN ID update obligations are eliminated for U.S. persons. Individuals who obtained a FinCEN identifier no longer need to update or correct what they previously submitted.

FinCEN cited its authority under 31 U.S.C. § 5336(a)(11)(B)(xxiv), which permits the Secretary to exempt any entity or class of entities upon determining that collecting BOI "would not serve the public interest" and "would not be highly useful" to national security, intelligence, and law enforcement efforts. The agency attributed the policy reversal to the change in administration and Executive Order 14192 on regulatory burden.

Who Still Has to File

Foreign reporting companies registered to do business in a U.S. state remain in scope — but in a substantially narrowed form. They report only on non-U.S. person beneficial owners and company applicants. Foreign pooled investment vehicles report only on non-U.S. individuals exercising substantial control.

There is a wrinkle worth understanding: a foreign reporting company whose beneficial owners are all U.S. persons must still file a report, but that report contains no beneficial ownership information. The filing obligation survives even when the reportable content does not.

Deadlines carry over unchanged from the interim final rule: 30 days from registration for newly registered foreign entities, and 30 days from any change to previously reported information.

FinCEN estimates roughly 28,000 entities remain subject to reporting — a fraction of the tens of millions originally covered.

What Happens to Data Already Filed

This is the question clients and colleagues will ask first, and the answer is unusually clean.

FinCEN will run a one-time deletion process removing BOI belonging to U.S. persons and domestic entities from its database. The agency will identify affected records using previously filed reports and identifying documents such as U.S. passports and driver's licenses. It will post public notice on its website when the process is complete.

Critically, no individual deletion requests will be processed. FinCEN stated it "does not anticipate requiring or requesting that U.S. companies or U.S. persons contact FinCEN requesting that their BOI be removed." Anyone advising clients to submit removal requests is creating work for no reason.

One limit: deletion is a one-time project. Any U.S. person BOI inadvertently filed after February 10, 2027 will not be swept up in it.

The Part Most People Will Get Wrong

Here is the distinction that will generate the most confusion over the next several months: the CDD Rule is untouched.

The 2016 Customer Due Diligence Rule requires covered financial institutions to identify and verify the beneficial owners of their legal entity customers. That obligation is entirely separate from CTA reporting, and it remains fully in force. "BOI reporting is dead" and "banks no longer collect beneficial ownership" are not the same statement, and conflating them is a compliance failure waiting to happen.

If anything, the CDD Rule has become more important. With the BOI database no longer collecting domestic entity information, FinCEN itself has acknowledged the CDD Rule is now the primary source of beneficial ownership data on U.S. companies. The agency has signaled it intends to modify the CDD Rule but has committed to neither a timeline nor a direction.

Separately, FinCEN issued exceptive relief on February 13, 2026 that streamlined CDD verification. Institutions previously had to verify beneficial owners each time a customer opened a new account. That is now narrowed to three circumstances: initial account opening at the institution, when facts call previously obtained information into question, and as dictated by the institution's risk-based ongoing due diligence. For subsequent accounts, institutions may rely on previously submitted information where the customer certifies — in writing or verbally — that it remains current.

That relief reduced duplicative work. It did not reduce the underlying obligation.

What Compliance Teams Should Do Now

Retire CTA filing workflows deliberately. If your organization built BOI intake, tracking, or filing processes for domestic entities, decommission them with documentation rather than simply abandoning them. Examiners will want to see a reasoned record of why controls were retired and when.

Do not touch CDD controls. Beneficial ownership collection and verification for legal entity customers continues unchanged. Confirm that nobody in your organization has interpreted the CTA news as license to relax CDD procedures.

Identify any foreign reporting companies in your portfolio. If your institution serves foreign entities registered in U.S. states, their obligations persist. Understand which of your customers fall into the roughly 28,000 still in scope.

Update training and client-facing guidance. Advisory teams, relationship managers, and onboarding staff are the most likely to repeat the "beneficial ownership is over" oversimplification to a customer.

Watch for CDD Rule rulemaking. FinCEN has said changes are coming without saying what they are. That is the next development that will actually reshape day-to-day work.

The Bigger Picture

The CTA was enacted to close a gap AML professionals had flagged for decades: the ease of forming anonymous U.S. shell companies. Whether eliminating domestic reporting reopens that gap is a live policy debate, and one worth following.

For practitioners, though, the near-term reality is simpler. One reporting regime has ended. The risk it was designed to address has not — and the tools that remain, including CDD, enhanced due diligence, transaction monitoring, and SAR filing, now carry more of the weight.

---

This article is for informational purposes and does not constitute legal or compliance advice. Confirm requirements against the Federal Register text and consult qualified counsel regarding your institution's specific obligations.