Meet us at 6th Financial Innovation Forum — Payments & RegTechMontcalm Hotel – Mayfair, LondonSep 17, 2026Live KYC · KYB · AML demos on stand
    Meet us in London
    US regulation · 8 min read

    The USA PATRIOT Act

    Enacted in October 2001, the USA PATRIOT Act reshaped US financial-crime regulation. Its Title III amended the Bank Secrecy Act to require customer identification programmes, enhanced due diligence on foreign correspondent and private banking relationships, and information sharing with FinCEN. This guide covers the provisions that regulated firms have to operationalise.

    What the Patriot Act is

    The Act's full name is the Uniting and Strengthening America by Providing Appropriate Tools Required to Intercept and Obstruct Terrorism Act of 2001. For compliance teams, the part that matters is Title III — the International Money Laundering Abatement and Financial Anti-Terrorism Act — which extended the Bank Secrecy Act from a recordkeeping and reporting regime into a full preventive anti-money-laundering framework.

    Title III and AML

    Title III introduced four pillars that still define US AML programmes: identify your customers, apply risk-based enhanced due diligence, close off high-risk correspondent channels, and share information with the authorities and — under a safe harbour — with other institutions. A fifth pillar, beneficial-ownership due diligence for legal-entity customers, arrived later through FinCEN's CDD Rule.

    Key AML sections

    Section 326 — Customer Identification Program

    Requires financial institutions to have a written CIP: verify the identity of every account holder, keep records of the information used, and check names against government lists.

    Section 312 — Enhanced due diligence

    Mandates enhanced due diligence for correspondent accounts of foreign financial institutions and for private banking accounts held by non-US persons, including senior foreign political figures.

    Section 313 & 319 — Shell banks and forfeiture

    Prohibits correspondent accounts for foreign shell banks and gives US authorities the power to seize funds held in correspondent accounts.

    Sections 314(a) & 314(b)

    314(a) obliges institutions to search records in response to FinCEN law-enforcement requests; 314(b) allows institutions to share information with each other under a safe harbour.

    Who it applies to

    Banks and credit unions

    Full CIP, EDD, correspondent-banking and 314(a) obligations.

    Broker-dealers and futures firms

    CIP and AML programme requirements under SEC/FINRA and CFTC rules.

    Money services businesses

    Registration, CIP-equivalent customer identification and reporting duties.

    Casinos and card clubs

    AML programmes and reporting as BSA-defined financial institutions.

    Insurance and investment firms

    AML programmes for covered products, including certain annuities and life policies.

    Money services businesses face their own registration and programme rules — see MSB compliance and BSA/AML compliance.

    Meeting the requirements

    In practice a Patriot Act–compliant programme needs identity verification you can evidence, list screening that runs continuously rather than only at onboarding, risk-based escalation into enhanced due diligence, and a record that reconstructs every decision. ComplianceSuite delivers this through KYC verification, OFAC sanctions screening, PEP screening, UBO verification and transaction monitoring in one auditable record for US-regulated firms.

    FAQ

    What is the USA PATRIOT Act?

    The USA PATRIOT Act is a US federal law enacted in October 2001 to strengthen national security and counter-terrorism. Title III, the International Money Laundering Abatement and Financial Anti-Terrorism Act, substantially expanded the Bank Secrecy Act by requiring customer identification programmes, enhanced due diligence for foreign correspondent and private banking accounts, and information sharing with FinCEN and other institutions.

    What does Section 326 of the Patriot Act require?

    Section 326 requires financial institutions to maintain a written Customer Identification Program: collect at minimum name, date of birth, address and an identification number for each customer, verify that identity using documents or non-documentary methods, keep records of the verification, and screen customers against government lists such as OFAC's SDN list.

    How does the Patriot Act relate to the Bank Secrecy Act?

    The Patriot Act does not replace the Bank Secrecy Act — it amends and extends it. The BSA remains the underlying AML statute governing recordkeeping, CTRs and SARs, while Title III of the Patriot Act added customer identification, enhanced due diligence, correspondent-banking prohibitions and information-sharing provisions.

    What is 314(b) information sharing?

    Section 314(b) lets financial institutions voluntarily share information with one another about suspected money laundering or terrorist financing, under a statutory safe harbour from liability, after filing notice with FinCEN and verifying the other party's registration.

    What happens if a firm fails to comply?

    Failures are enforced through the BSA framework by FinCEN and the federal banking regulators, and can lead to civil money penalties, consent orders, remediation programmes, restrictions on growth, and in serious cases criminal prosecution of the institution and responsible individuals.

    Build a defensible US AML programme

    We will walk your CIP, EDD and screening controls and show how the same obligations run end to end on ComplianceSuite.