FinCEN Ends BOI Reporting for U.S. Companies: What Banks and Businesses Need to Know
On August 11, 2026, the federal government made it official: U.S. companies no longer have to report information about their owners to FinCEN, the agency that tracks financial crime. For an obligation that once threatened to affect millions of small businesses, this is the end of the road. But it's not the end of the story on ownership disclosure. Here's what changed, what didn't, and what it means depending on who you are.
This Reporting Requirement is Gone for U.S. Companies
Back in 2021, Congress passed a law called the Corporate Transparency Act. It required most companies to tell FinCEN who really owns and controls them, so law enforcement could fight things like money laundering and shell company fraud. That requirement is now gone for companies formed in the U.S.
Under the new rule:
U.S. companies don't have to file this ownership information at all. No filing, no updates, nothing.
Companies that do still have to file don't need to include information about U.S. owners, even if the company itself still has some filing obligation (more on that below).
People who own U.S. companies don't have to hand over their personal information to those companies for this purpose anymore.
People who already got an ID number from FinCEN don't need to update or fix anything they submitted earlier.
The government will delete the information it already collected from U.S. owners.
The rule took effect the moment it was published.
Who Still Has to File
Whether a company still has to file comes down to one simple question: where was it formed? It has nothing to do with who owns it or where it does business.
Formed in a U.S. state? No filing required, period. It doesn't matter if every owner is a foreign citizen or the company does all its business overseas.
Formed in another country and then registered to do business in a U.S. state? That company still has to file, but only has to report its owners who are not U.S. citizens or residents.
This is the point that trips people up most, so it's worth spelling out clearly: a foreign citizen who sets up a company in Texas or Delaware has formed a U.S. company. That company doesn't have to file, no matter who owns it. The question is always where the company was legally created, not who's behind it.
What This Doesn't Touch
It's easy to read "the government stopped collecting ownership information" as one big story, but there are really two separate systems here, and only one of them changed.
System one: Companies reporting ownership information directly to FinCEN. This is what just ended for U.S. companies.
System two: Banks collecting ownership information from their own customers when those customers open accounts. This rule, called the Customer Due Diligence Rule, has been around since 2018 and it is still in effect.
| Reporting to FinCEN | Bank Customer Due Diligence | |
|---|---|---|
| Who does the reporting | Companies report to the government | Banks collect from their own customers |
| Status as of August 2026 | Ended for U.S. companies, for good | Still required |
| What changed recently | Final rule, effective August 11, 2026 | Relief on repeat checks, effective February 13, 2026 |
Banks still have to know who owns the businesses they open accounts for. That hasn't changed. What did change, separately, is a rule from February 2026 that made one small piece of the bank rule easier. Banks used to have to re-check ownership information every single time an existing business customer opened a new account, even if nothing had changed. Now banks only have to check:
when a business opens its very first account,
when something makes the bank doubt the information it already has, or
when the bank's own ongoing risk checks call for a review.
So to put it plainly: one rule stopped companies from reporting to the government. A separate, smaller change made banks' own checking process a bit less repetitive. Neither one means banks can stop verifying who they're doing business with.
Breaking It Down By Entity: Community Bank or Small Business
If you're a community bank or credit union: You still have to identify and verify the real owners of your business customers. That part of your compliance program doesn't change. What you can do now is stop re-verifying existing customers every time they open a new account, as long as nothing has raised a red flag and your own risk-based review process doesn't call for it. This should ease some of the repetitive paperwork at account opening, but don't treat it as a green light to skip due diligence altogether. Update your written procedures to reflect the new flexibility, and keep training front-line staff on when a re-check is still required.
If you're in a high-risk industry (cannabis, money services, precious metals, real estate, or anything else banks flag for extra scrutiny): Don't expect this change to loosen how your bank treats you. Banks apply extra scrutiny to certain industries because of their own risk assessments, not because of the federal reporting rule that just ended. If anything, expect banks to lean more heavily on their own account-opening checks and ongoing monitoring, since less ownership data is flowing through the federal system generally. Keep your own ownership records clean and easy to produce, because your bank will likely still ask for them directly, even though you no longer have to file that information with the government.
If you're a typical U.S. small business: Your filing obligation is gone. You don't need to track deadlines or worry about the information you may have submitted before, since it's being deleted. Just know that your bank will probably still ask you for ownership information when you open or maintain accounts. That's a separate requirement and it isn't going away.
If you're a foreign company registered to do business in the U.S.: You still have to file with FinCEN, but the requirement is narrower now. You only need to report owners who are not U.S. citizens or residents.
The Real Gap: What BSA and AML Professionals Should Be Flagging
For anyone who works in BSA or AML at a bank or credit union, this rule deserves a closer look than the "compliance relief" framing suggests. While it's being presented as a burden lifted off small businesses, it also creates a real vulnerability for banks, credit unions, and the financial industry as a whole.
Without a shared federal system for tracking beneficial owners, it becomes much harder for the industry to collectively monitor who actually controls the businesses it banks. Most banking systems, especially at smaller institutions, are built around the client relationship itself. A small business or an individual walks in the door, and the bank's systems and processes focus on that relationship, not on digging into where the business was legally formed. There is real work ahead to make sure smaller banks have a reliable way to capture and monitor these relationships now that the federal database isn't doing part of that work for them.
There's also a specific gap around foreign ownership of domestic businesses. Tools like LexisNexis work well when the people involved are U.S. citizens or based primarily in the U.S. But when a domestic business has foreign owners, those tools often don't dig deep enough on their own. Screening systems like World-Check need to be used more deliberately to look closely at foreign ownership that would otherwise go largely unreviewed. A business can be fully domestic on paper while its real ownership sits entirely outside the U.S., sometimes without even a visa that documents why that person is here. And yet that same person can walk into a branch and open a business account.
None of this means banks are powerless. It means the burden of catching what the federal system no longer tracks now falls more heavily on each institution's own due diligence, screening tools, and training, particularly at smaller banks and credit unions that may not have built their onboarding processes with this kind of scrutiny in mind.
The Bottom Line
The government's central database of who owns U.S. companies is largely gone. It now mostly covers foreign companies operating here, and the information collected from U.S. owners is being deleted. But banks' own duty to know their customers hasn't gone anywhere. If you're advising anyone on this, the key message is simple: don't confuse "the government stopped collecting this information" with "nobody needs this information anymore." One rule ended. A related but separate rule didn't.
This post reflects federal rules as of August 2026, including the final rule ending BOI reporting (effective August 11, 2026) and the bank relief order on repeat verification (effective February 13, 2026). Always confirm current requirements before advising clients.