MSB Authorized Delegates and Agents: Vetting, Contracts, and AML Duties

If your money services business uses retail stores, check cashers, or other third parties to move customer funds, authorized delegate compliance obligations fall on you as the principal: you must vet each delegate before appointment, bind the relationship in a written contract with specific required terms, keep a federal agent list current, report delegates to state regulators quarterly, train and monitor them under a written anti-money laundering program, and file the Currency Transaction Reports and Suspicious Activity Reports that their transactions trigger. The delegate operates under your license, but the legal exposure stays with you.

Who the Principal Is Responsible For

An authorized delegate is a person or business that a licensed money transmitter designates to conduct money transmission on its behalf, without holding its own license. The delegate works within the scope of a written contract and under the principal’s authority.¹ That licensing exemption is the point of the arrangement. The cost of it is accountability: the principal remains liable for the delegate’s compliance failures, and the state regulator can examine, suspend, or revoke a delegate’s designation at any time.

Funds the delegate collects from customers, minus the delegate’s fees, are held in trust for the principal rather than treated as the delegate’s own money. If a delegate commingles those funds with its own, the whole mixed pool is trust property.² A delegate who knowingly fails to remit trust funds to the principal faces potential felony prosecution under most state frameworks.

Vetting a Prospective Delegate

Before signing anyone up, the principal must run a risk-based background investigation to determine whether the prospective delegate has complied, and is likely to keep complying, with applicable federal and state law.³ In practice, that means checking for prior convictions involving fraud, money laundering, or embezzlement. Applicants with that history are generally disqualified.

Foot traffic is not a substitute for clean records. Verify the prospective delegate’s background, credit history, and business standing before signing a contract. The Uniform Money Services Business Act sets the baseline that the principal must have a reasonable basis for believing the delegate will follow the law.⁴

Screen prospective delegates against the Office of Foreign Assets Control’s Specially Designated Nationals list as well. OFAC sanctions apply to all U.S. persons, including MSBs, and transacting with a blocked person draws penalties independent of any BSA violation. Screen before onboarding and again periodically as the list updates.

What the Written Contract Must Say

Every principal-delegate relationship must be governed by a written contract. This is a state-law requirement under the model legislation adopted in most states. The CSBS Model Money Transmission Modernization Act sets the minimum content: the contract must appoint the delegate, define the scope of services and the parties’ rights and obligations, obligate the delegate to follow all applicable federal and state law (including the BSA and USA PATRIOT Act), require the delegate to remit funds under the contract and impose a trust on those funds for the principal’s benefit, include the delegate’s consent to examination by the state regulator, and acknowledge that the delegate has received the principal’s written AML policies and procedures.³

Beyond the minimums, give yourself the right to audit the delegate’s records and physical premises and to terminate immediately for violations of financial laws or internal policies. Clear contractual language is the principal’s best defense during an examination. Vague language invites scrutiny.

Federal Registration and the Agent List

Every MSB must register with the Financial Crimes Enforcement Network by filing FinCEN Form 107 within 180 days of being established, and must renew that registration every two years.⁵ One form covers the business no matter how many delegates it uses, though the agent count has to be reported on the form.

Separately, 31 CFR § 1022.380 requires principals to prepare and maintain a detailed list of all their agents. The initial list is due by the registration due date, and the list must be revised each January 1 to cover the preceding 12 months.⁶ You do not file the list automatically. You produce it on request.

What Belongs on the Agent List

For each agent, the list must include legal name and any trade names, street address, phone number, the MSB services offered (money orders, traveler’s checks, check cashing, currency exchange, money transmitting), the months in the preceding 12 in which gross transactions exceeded $100,000, the name and address of any depository institution holding a transaction account for MSB funds, the year the agent first became a delegate, and branch and subagent counts.⁶ Taxpayer ID numbers are not on the federally required field list, which is a common misconception. When FinCEN requests the list, it expects an Excel-compatible format (comma- or tab-delimited) with each agent as a row and each required field in its own column.⁷

Registrations and renewals go through the BSA E-Filing System, which issues a tracking number upon submission. Supporting documentation, including the agent list, must be retained at a U.S. location for five years.⁵

State Licensing and Quarterly Reporting

Federal registration is only half the picture. Most states require money transmitters to be licensed at the state level, and the delegate relationship carries its own state obligations. Under the model framework adopted in a majority of states, the license applicant must submit a list of proposed authorized delegates and their locations with the initial application.³

After licensing, delegate reports must be filed within 45 days of the end of each calendar quarter. That is significantly more frequent than the annual federal list revision. The quarterly report must include each delegate’s legal name, physical and mailing addresses, employer identification number, services offered, the start and end dates of the delegate relationship, and contact information.³

Many states route this reporting through the Nationwide Multistate Licensing System. The NMLS prompts licensees to submit a Uniform Authorized Delegate Report at the end of each calendar quarter, covering new locations, changes, and terminations, and assigns each delegate location its own identifier tied to the principal’s NMLS ID. States that require preapproval of a delegate before it begins operating handle approval outside NMLS, but the approved delegate still flows into NMLS afterward. The delegate’s name, business address, and phone number are treated as non-confidential public information under the model act, which means regulators can share them with consumers or other agencies.

AML Program, Training, and Monitoring

Every MSB, including one that qualifies as an MSB only because it serves as another MSB’s agent, must maintain a written anti-money laundering program. The program must be reasonably designed to prevent the business from being used for money laundering or terrorist financing, and must be proportional to the risks posed by the business’s size, location, and transaction volume.⁸ At a minimum, the program needs internal controls for verifying customer identity, filing required reports, creating and retaining records, and responding to law enforcement requests.

A principal and its delegate can agree to split responsibility for developing the policies and procedures, but each party remains individually responsible for implementing them.⁸ You can outsource the drafting. You cannot outsource the obligation to follow through.

Ongoing employee training is a core piece. FinCEN expects training to cover internal policies, current regulatory requirements, and material tailored to the institution’s risk profile. The depth should match the delegate’s role: a high-volume wire transfer agent in a border city needs more intensive training than a low-volume money order seller in a quiet town. Document everything.

Monitoring is where many principals fall short, and regulators know it. Delegate appointment is not a one-time event. Principals must review delegate transactions periodically for suspicious patterns and conduct on-site inspections to verify the delegate is actually running the AML program the contract requires. If a delegate misses required reports, ignores structuring red flags, or processes transactions for people who should have been flagged, the principal faces enforcement action. Principals that can show consistent oversight — documented visits, transaction reviews, training records — are in a far stronger position when an examiner shows up than principals relying on contract language alone.

CTRs and SARs at Delegate Locations

Two reporting obligations create most of the compliance risk in the delegate context.

Currency Transaction Reports

An MSB must file a Currency Transaction Report for each transaction involving more than $10,000 in currency.⁹ This applies at delegate locations. When a customer walks into a convenience store acting as an authorized delegate and wires $12,000 in cash, that transaction requires a CTR. Filing goes through the BSA E-Filing System, which does not store copies for the filer, so the principal and delegate each need to keep their own records.

Suspicious Activity Reports

MSBs must file a SAR for any transaction, or pattern of transactions, of $2,000 or more where the business knows, suspects, or has reason to suspect that the funds come from illegal activity, that the transaction is designed to evade reporting requirements, that it has no apparent lawful purpose, or that it facilitates criminal activity.¹⁰ For issuers of money orders or traveler’s checks reviewing clearance records, the threshold rises to $5,000.

The filing obligation rests on each MSB involved in the transaction, which means the principal and the delegate (an MSB in its own right for SAR purposes) both bear responsibility. Only one report has to be filed for a given transaction as long as it contains all relevant facts. Whether the principal is also liable for a delegate’s failure to file depends on the contractual relationship and general agency-law principles.¹⁰ A principal that knows its delegate handles high-risk transactions but doesn’t monitor for SAR triggers is exposed to civil and potentially criminal liability.¹¹

Record Retention

All records required under the Bank Secrecy Act, including agent lists, CTRs, SARs, and transaction records, must be retained for five years, stored so they can be produced within a reasonable time given the record’s nature and age.¹² Supporting documentation for the FinCEN Form 107 registration, including the agent list, must likewise be retained at a U.S. location for five years.⁵

One detail catches businesses off guard: the BSA E-Filing System is not a record-keeping archive. It does not send copies of filed reports back to filers. If you submitted a CTR through the system three years ago and an examiner wants to see it, you need your own copy. Keep electronic and paper backups of every filed report and every version of the agent list.

Penalties for Getting It Wrong

The penalty structure is tiered, and the gap between negligent and willful violations is wide. A single negligent BSA failure can draw a fine of up to $500. If a pattern of negligent violations emerges, which examiners actively look for, an additional penalty of up to $50,000 applies on top of the per-incident fines.¹³

Willful violations carry penalties of up to $25,000 per violation or the transaction amount (capped at $100,000), whichever is greater. For violations of certain ongoing compliance requirements, each day the violation continues and each location where it occurs counts as a separate violation, so the math escalates fast for a principal running dozens of delegate locations. Repeat offenders can face penalties up to three times the profit gained or twice the maximum penalty, whichever is greater.¹³

Beyond federal civil penalties, operating as an unregistered MSB is a federal crime under 31 USC § 5330. At the state level, a delegate who knowingly fails to remit trust funds faces potential felony prosecution, and the principal risks suspension or revocation of its state license. Courts can also prohibit a noncompliant delegate from acting as an authorized delegate for any licensee in the state and order restitution.²

1
Conference of State Bank Supervisors (CSBS). CSBS Model Money Transmission Modernization Act
2
Conference of State Bank Supervisors (CSBS). CSBS Uniform Money Transmission Modernization Act
3
Conference of State Bank Supervisors (CSBS). Model Money Transmission Modernization Act
4
Uniform Law Commission. Uniform Money Services Business Act
5
Financial Crimes Enforcement Network. Money Services Business (MSB) Registration
6
eCFR. 31 CFR 1022.380 – Registration of Money Services Businesses
7
Financial Crimes Enforcement Network. Frequently Asked Questions – Agent Request Initiative
8
eCFR. 31 CFR 1022.210 – Anti-Money Laundering Programs for Money Services Businesses
9
eCFR. 31 CFR 1010.311 – Filing Obligations for Reports of Currency Transactions
10
eCFR. 31 CFR 1022.320 – Reports by Money Services Businesses of Suspicious Transactions
11
Financial Crimes Enforcement Network. Fact Sheet for the Industry on MSB Suspicious Activity Reporting Rule
12
eCFR. 31 CFR 1010.430 – Nature of Records and Retention Period
13
Office of the Law Revision Counsel. 31 USC 5321 – Civil Penalties