Wire Transfer Regulations: AML, OFAC, Consumer, and Tax Rules

Wire transfer regulations in the United States sit across several bodies of law at once: a commercial code that treats accepted transfers as final, anti-money-laundering rules that require banks to track and report them, sanctions screening that can block them outright, and a narrow set of consumer protections that mostly apply only when the money is heading abroad. The practical takeaway is blunt. Once your bank accepts a wire, getting the money back is difficult and often impossible, and the federal consumer protections you rely on for debit card fraud do not apply.

The Core Rule: Wire Transfers Are Built to Be Final

The foundational law for wire transfers between businesses and institutions is Article 4A of the Uniform Commercial Code, adopted in some form by every state. Article 4A standardizes how payment orders work, who bears the risk when something goes wrong, and when a transfer becomes final. It applies to credit transfers between commercial parties and does not cover consumer protection or anti-money-laundering compliance.¹

A wire begins with a payment order, meaning the sender’s instruction to a bank to pay a specific amount to a named beneficiary. The sender’s bank accepts the order when it executes the instruction or fails to reject it within a reasonable time. Once the beneficiary’s bank accepts, the transfer is generally final and irrevocable.¹

A sender can cancel or amend a payment order only if the receiving bank gets the cancellation request before it accepts the order. After acceptance, cancellation requires the bank’s agreement, and the bank has no obligation to cooperate. Most wires are accepted within minutes.

There are narrow exceptions. If a transfer went to the wrong person, was sent for the wrong amount, or was an accidental duplicate, the sender may be relieved of the payment obligation, but only if a pre-agreed error-detection security procedure was in place and the sender followed it. Even then, the bank’s remedy is to try to recover the funds from the unintended recipient through the law of mistake and restitution, which is not guaranteed to succeed.²

A sender who discovers an error after the bank notifies them of acceptance has a duty to report it within a reasonable time, and no later than 90 days after receiving the bank’s notification. Missing that window can leave the sender liable for whatever loss the bank proves it suffered because of the delay.²

When an unauthorized payment order slips through, the bank may be on the hook for the loss, but only if the sender can show the order was truly unauthorized. The bank escapes liability by proving it followed a commercially reasonable security procedure agreed upon with the customer. For businesses, that means the security procedures negotiated with the bank matter enormously. A weak setup can leave the business bearing the full loss.¹

What Consumer Protections Do Not Cover

This is where most people get the wrong idea. Regulation E, the federal rule that protects consumers who use electronic fund transfers like debit cards and ATM withdrawals, explicitly excludes transfers through Fedwire and similar wire systems used primarily between financial institutions or businesses. That exclusion covers virtually every domestic wire transfer a consumer sends through a bank.³

The consequences are significant. The familiar consumer protections that apply to debit card fraud do not apply to domestic wires:

The Regulation E limits that cap consumer losses for unauthorized debit card transactions at $50 (if reported within two business days) or $500 (if reported within 60 days) do not apply.⁴
Banks have no federal obligation to investigate a domestic wire transfer error within 10 business days or provisionally credit your account while they look into it.
If a scammer tricks you into authorizing a wire yourself, no federal law currently requires the bank to reimburse you. The transfer was authorized in the eyes of the law even though you were deceived.

Domestic consumer wires fall under UCC Article 4A by default, the same framework that governs billion-dollar interbank settlements. Article 4A was built for speed and finality between sophisticated commercial parties, not for protecting individuals who got scammed. The gap in consumer protection for authorized-push-payment fraud remains one of the most widely criticized holes in U.S. payment law.

International Remittances Are the Exception

If you are sending money abroad, a separate layer of protection kicks in. The Remittance Rule, which the Consumer Financial Protection Bureau implemented under the Dodd-Frank Act, applies to transfers of more than $15 sent from a provider in the United States to a recipient in a foreign country.⁵

Before you pay, the provider must give a clear written disclosure showing the exchange rate, all fees and taxes the provider will charge, and the exact amount of foreign currency the recipient should receive. A receipt after payment repeats this information. The up-front disclosure exists partly to address a persistent problem with cross-border transfers: they often pass through one or more correspondent banks, each of which can deduct its own processing fee from the amount in transit.

You have the right to cancel an international remittance at no charge within 30 minutes of paying, so long as the recipient has not already picked up or been credited with the funds. The cancellation request must identify the sender and the specific transfer. Providers can voluntarily offer a longer window, but 30 minutes is the mandatory floor.⁶

Providers must also investigate and resolve errors that consumers report, such as the recipient receiving the wrong amount or the transfer never arriving. Nothing comparable exists for domestic wires.

Anti-Money-Laundering Rules That Reach the Sender

Most Bank Secrecy Act obligations fall on the bank, but two of them shape what you can and cannot do as a sender.⁷

For any wire of $3,000 or more, the sending institution must collect and pass along specific information about the transaction, including names, addresses, and account numbers of both sender and recipient. This is the Travel Rule, and it ensures identifying information follows the money through every bank in the chain. All parties in the chain must keep the records for five years.⁸

Separately, any transaction involving more than $10,000 in physical cash during a single business day triggers a Currency Transaction Report. A wire by itself does not trigger a CTR, but a wire funded by a cash deposit (or paid out in cash at the other end) that exceeds $10,000 does.⁹

Banks also monitor wires of any amount for patterns suggesting money laundering, fraud, or other financial crimes, and file Suspicious Activity Reports with FinCEN when something looks off. Banks are prohibited from telling you a SAR has been filed about your activity.¹⁰

Structuring Is a Crime Even If Your Money Is Clean

Deliberately breaking a transaction into smaller amounts to avoid the $10,000 CTR threshold or the $3,000 recordkeeping requirement is a federal crime called structuring. You do not need to be laundering money or committing any other offense for structuring to be illegal. Splitting transactions to dodge reporting is itself the crime, punishable by up to five years in prison. If the structuring is part of a broader pattern of illegal activity involving more than $100,000 over 12 months, the penalty climbs to up to 10 years.¹¹

This catches people who have done nothing else wrong. Sending four $8,000 wires over a week instead of one $32,000 wire because you heard about reporting thresholds and want to avoid hassle is structuring. The intent to evade reporting is what matters, not whether the underlying funds are legitimate. Civil penalties for BSA violations range from $500 for negligent failures up to the greater of $100,000 or the transaction amount for willful violations.¹²

OFAC Sanctions Screening

Every financial institution handling a wire, domestic or cross-border, must screen all parties to the transaction against the sanctions lists maintained by the Office of Foreign Assets Control. The most important is the Specially Designated Nationals (SDN) List, which includes individuals, companies, and organizations subject to U.S. economic sanctions. Processing a transfer that involves a party on the SDN list is prohibited, and the bank must block or reject it.¹³

Banks are expected to screen not only their own customers but every party named in a wire before executing it. If a bank has information indicating any party is subject to blocking, it will be held responsible for processing that transfer.¹⁴ For the sender, this shows up as a transfer that gets held, rejected, or blocked without much warning, sometimes because a name matches or partially matches a listed party.

Tax Filings Wire Transfers Can Trigger

Wires can create tax-related reporting obligations that have nothing to do with money laundering. Penalties for missing these filings can be steep.

Any U.S. person who has a financial interest in or signature authority over foreign financial accounts must file a Report of Foreign Bank and Financial Accounts (FBAR) if the combined value of those accounts exceeds $10,000 at any time during the year. This applies even if you simply use a foreign account to receive wire transfers. The filing goes through FinCEN’s BSA E-Filing system, not with your tax return.¹⁵

If you receive wires from a foreign individual that total more than $100,000 during the tax year, you must report them on IRS Form 3520. For gifts from foreign corporations or partnerships, the threshold is lower and adjusted annually for inflation ($19,570 for 2024). The filings are informational and the gifts are generally not taxable, but penalties for failing to file are often calculated as a percentage of the unreported amount.¹⁶

Wire Fraud and What to Do If It Happens

Business email compromise is one of the most damaging forms of wire fraud. The FBI reported $2.77 billion in BEC losses in 2024. In a typical scheme, a scammer impersonates a vendor, executive, or title company through a spoofed or hacked email account and sends fake wire instructions. The email looks authentic, the request seems routine, and by the time anyone notices, the money is gone.¹⁷

Recovery is possible but not guaranteed. The FBI’s Recovery Asset Team, which works with banks to freeze fraudulent wires, reported a 66% success rate in 2024 on cases it handled, but the program only covers transactions reported quickly enough for the funds to still be in the banking system.¹⁸

The most effective defenses are simple:

Verify wire instructions by phone using a number you already have on file, not one listed in the email requesting the transfer. This one step prevents the majority of BEC fraud.
Examine the full email address, not just the display name. Scammers use addresses that differ from legitimate ones by a single character.
Treat urgency as a red flag. Legitimate wire requests rarely require you to skip verification.
Require two people to approve any wire. Dual controls make it much harder for a single compromised employee to send funds to a scammer.

If you believe a fraudulent wire has gone out, call your bank immediately. Speed matters more than anything else. The sooner the sending bank contacts the receiving bank, the better the chance the funds can be frozen before they are withdrawn or moved again. File a complaint with the FBI’s Internet Crime Complaint Center (IC3), which coordinates with its Recovery Asset Team to freeze funds still inside the banking system.¹⁸

1
Legal Information Institute. UCC Article 4A – Funds Transfer
2
Legal Information Institute. UCC 4A-205 – Erroneous Payment Orders
3
eCFR. 12 CFR Part 1005 – Electronic Fund Transfers, Regulation E
4
eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers
5
Consumer Financial Protection Bureau. Assessment of the Remittance Rule
6
Consumer Financial Protection Bureau. 12 CFR 1005.34 – Procedures for Cancellation and Refund of Remittance Transfers
7
Financial Crimes Enforcement Network. The Bank Secrecy Act
8
FFIEC BSA/AML InfoBase. Assessing Compliance with BSA Regulatory Requirements – Funds Transfers Recordkeeping
9
Financial Crimes Enforcement Network. A CTR Reference Guide
10
eCFR. 12 CFR 208.62 – Suspicious Activity Reports
11
Office of the Law Revision Counsel. 31 US Code 5324 – Structuring Transactions to Evade Reporting Requirement Prohibited
12
Office of the Law Revision Counsel. 31 US Code 5321 – Civil Penalties
13
FFIEC. BSA/AML Manual – Office of Foreign Assets Control
14
U.S. Department of the Treasury. Frequently Asked Questions 116
15
FinCEN. Report Foreign Bank and Financial Accounts
16
Internal Revenue Service. Gifts from Foreign Person
17
Federal Bureau of Investigation. Business Email Compromise
18
Federal Bureau of Investigation. 2024 IC3 Annual Report