The BSA Travel Rule is a Bank Secrecy Act requirement, codified at 31 CFR 1010.410, that applies to any wire transfer of $3,000 or more. It requires the sending institution to collect specific information about you and your recipient, verify your identity in certain situations, and pass that information along to every bank that touches the payment on its way to the beneficiary.1eCFR. 31 CFR 1010.410 – Records to Be Made and Retained by Financial Institutions The point is to give law enforcement a reconstructable trail if the money later needs to be traced.
The $3,000 Threshold and Who It Covers
The rule kicks in at $3,000. One threshold, one set of duties, and it applies whether the transfer runs through a commercial bank, a credit union, or a non-bank money transmitter like a check casher or retail wire service.1eCFR. 31 CFR 1010.410 – Records to Be Made and Retained by Financial Institutions A storefront wire service faces the same recordkeeping and information-sharing obligations as a multinational bank.
What the Sending Institution Must Collect from You
Before processing a covered transfer, the originating institution must capture a specific set of details about the sender:
- Full legal name and physical address
- Account number used for the transaction
- Dollar amount of the transfer
- Execution date
- Any payment instructions included with the order
- The identity of the recipient’s financial institution
On the recipient side, the institution records the recipient’s name and address, account number, and any other identifying information the sender provides.1eCFR. 31 CFR 1010.410 – Records to Be Made and Retained by Financial Institutions The regulation says “as many of the following items as are received,” meaning the bank captures whatever recipient details you supply. If you leave out the recipient’s account number, the bank isn’t required to go find it; whatever you do provide goes into the record.
Most people encounter these fields on a wire transfer form at a branch or through an online banking portal. A misspelled name or an incomplete address can hold up the transfer, so it pays to get the details right the first time.
Identity Verification When You’re Not a Customer
If you walk into a bank where you have no account and try to send a wire of $3,000 or more, the institution must verify your identity before accepting the order. Collecting your name isn’t enough. The bank must examine an identification document, and the rule favors documents that include a name, address, and photograph.1eCFR. 31 CFR 1010.410 – Records to Be Made and Retained by Financial Institutions A driver’s license, U.S. passport, or military ID will work.
After checking the document, the bank records the type of ID presented and its unique number. That record ties a verified person to the transaction even without an account relationship. You cannot send a large wire anonymously, and the bank will refuse the transaction if you can’t produce acceptable identification.
What Information Travels with the Payment
This is where the rule earns its name. When the originating institution sends the payment order to the next bank in the chain, it must include the sender’s name, account number, and address at a minimum, along with the transfer amount, execution date, the identity of the recipient’s institution, and whatever recipient details were collected.1eCFR. 31 CFR 1010.410 – Records to Be Made and Retained by Financial Institutions
Every intermediary institution that handles the transfer before it reaches the recipient’s bank must pass along all the information it received from the previous institution. Intermediaries have no duty to hunt down information the originating bank left out, but they cannot strip out or fail to forward what they did receive.2FFIEC BSA/AML InfoBase. Funds Transfers Recordkeeping – Overview Each intermediary also retains its own copy of the payment order. The full chain of information should be reconstructable from any point in the sequence.
Transfers That Are Exempt
Not every $3,000-plus transfer triggers Travel Rule obligations. When both the sender and the recipient fall into certain categories of regulated entities, the rule does not apply. Those categories are:
- Banks or their wholly owned domestic subsidiaries
- Broker-dealers in securities or their wholly owned domestic subsidiaries
- Futures commission merchants and introducing brokers in commodities, and their wholly owned domestic subsidiaries
- Federal, state, or local governments and their agencies or instrumentalities
- Mutual funds
A separate exemption covers transfers where the sender and recipient are the same person and both sides of the transaction go through the same broker-dealer.1eCFR. 31 CFR 1010.410 – Records to Be Made and Retained by Financial Institutions If you’re an individual or an ordinary business sending money through a bank, expect the full set of requirements to apply.
Five-Year Record Retention
Every institution in the chain, originating, intermediary, and receiving, must keep its records for five years. That’s a flat BSA requirement, not a discretionary guideline.3eCFR. 31 CFR 1010.430 – Records to Be Made and Retained by Financial Institutions Records must be stored in a way that makes them reasonably accessible given the type of record and its age. Financial investigations often take years to develop, and regulators verify compliance during routine examinations.
Splitting Transfers to Stay Under $3,000 Is a Federal Crime
Breaking a large transfer into smaller pieces to fall below the $3,000 recordkeeping threshold has a name, structuring, and it’s independently illegal. FinCEN has specifically said that splitting transactions across a single day or over multiple days to avoid the threshold qualifies as structuring, and financial institutions must maintain monitoring systems to catch it and report it as suspicious activity.4Financial Crimes Enforcement Network. Suspicious Activity Reporting (Structuring)
A structuring conviction carries up to five years in prison. If the structuring is tied to other criminal activity or involves more than $100,000 over a twelve-month period, the maximum rises to ten years.5Office of the Law Revision Counsel. 31 US Code 5324 – Structuring Transactions to Evade Reporting Requirement The statute doesn’t require the government to prove you were hiding anything illegal, only that you deliberately avoided the threshold. Well-meaning people who split transfers out of a vague sense of privacy can still be prosecuted.
When Travel Rule Records Trigger a Suspicious Activity Report
The information collected under the Travel Rule doesn’t just sit in a file. Banks review funds transfer records to compare actual activity against a customer’s stated account purpose, and mismatches can lead to a Suspicious Activity Report.
A SAR becomes mandatory when a bank knows or suspects that a transaction of $5,000 or more may involve money laundering, terrorism financing, or an attempt to evade BSA requirements. The same duty applies when a transaction has no apparent lawful purpose and the bank can’t find a reasonable explanation. For criminal violations involving insider abuse, the trigger is $5,000 when a suspect can be identified and $25,000 when no suspect is identifiable.6FFIEC BSA/AML InfoBase. Assessing Compliance with BSA Regulatory Requirements – Suspicious Activity Reporting
A single $3,000 wire might not raise a flag on its own. Travel Rule records are what let a compliance team connect the dots when a customer sends repeated transfers to high-risk jurisdictions or the recipient information keeps shifting in ways that don’t match the customer’s profile.
Penalties for Non-Compliance
Penalties under the BSA scale with the severity of the failure and whether it was intentional.
For negligent violations, a bank that dropped the ball without intent to evade, the Treasury Department can impose penalties of up to $500 per violation. A pattern of negligent violations reaches a ceiling of $50,000.7Office of the Law Revision Counsel. 31 USC 5321 – Civil Penalties These statutory base amounts are subject to annual inflation adjustments, so the actual maximums FinCEN publishes each year run higher.
Willful violations carry much steeper consequences. A financial institution that deliberately ignores recordkeeping or reporting requirements faces civil penalties of up to $25,000 per violation, or the amount involved in the transaction, whichever is greater, capped at $100,000.7Office of the Law Revision Counsel. 31 USC 5321 – Civil Penalties FinCEN can also pursue cease-and-desist orders and refer the most serious cases for criminal prosecution.
Individuals aren’t shielded by their employer. Partners, directors, officers, and employees who willfully participate in violations face personal liability under the same penalty provisions.