Free guide: How to use AI in compliance
Editorial cover headlined "FinCEN ends beneficial ownership reporting for US companies".

FinCEN's final rule permanently ends beneficial ownership reporting for US companies. What it changes for CDD, KYB checks, and the data already on file.

Table of contents

FinCEN has permanently ended beneficial ownership reporting for every company formed in the United States, in a final rule effective 14 August 2026. Only foreign entities registered to do business in the country still file, and only for owners who are not US persons. A register once sized for 32.5 million filers now expects about 28,000.

  • The final rule, RIN 1506-AB67, was published at 91 FR 52508 and took effect the same day, 14 August 2026.
  • It makes permanent the March 2025 interim rule that struck domestic entities out of the definition of "reporting company" in 31 CFR 1010.380, which is where beneficial ownership information (BOI) reporting lives.
  • FinCEN calculates that roughly 27.5 million companies have been relieved of filing since that interim rule, worth about 18 billion dollars in avoided cost.
  • Information already filed by US persons will be erased in a single database sweep, with no confirmation sent to the people whose records are removed.
  • The 2016 Customer Due Diligence Rule text is unchanged, so covered financial institutions still collect and verify ownership data when a legal entity customer first opens an account, whatever happens to beneficial ownership reporting.

What did the FinCEN final rule actually change?

The rule adopts, as final, the interim final rule FinCEN issued on 26 March 2025, and then goes further. Domestic entities stay outside the definition of reporting company. Foreign reporting companies no longer submit information about US person company applicants. US persons no longer have to keep FinCEN identifier records current.

A fourth point matters most to fund administrators. The special rule for foreign pooled investment vehicles is affirmed, so such a vehicle names only a non-US person exercising substantial control, and names nobody at all if there is none.

FinCEN was blunt about which change mattered. Redefining "reporting company" was, in its own words, "perhaps the single most important change that the IFR made". Everything else in the beneficial ownership reporting framework follows from it: if an entity created by a filing with a US secretary of state is not a reporting company, no filing obligation attaches to it, and none attaches to its owners either.

ItemDetail
RuleBeneficial Ownership Information Reporting Requirement Revision
Citation91 FR 52508, RIN 1506-AB67
Announced[11 August 2026](https://www.fincen.gov/news/news-releases/fincen-permanently-ends-beneficial-ownership-reporting-requirements-millions)
Published and effective14 August 2026
Legal statusFinal rule, in force and applicable now
Still reportingForeign entities registered to do business in the United States
No longer reportingAll entities formed under US law, and all US persons

The comment record was not one-sided. FinCEN received 118 letters on the interim rule: 40 clearly supportive, 28 strongly opposed, 50 taking no clear position. Critical commenters included corporate transparency advocacy groups, think tanks, organisations representing law enforcement, and four US senators.

How big is the register now compared with its original design?

The beneficial ownership information register was built for a population more than a thousand times larger than the one it now serves. The 2022 rule modelled 32,556,929 reporting companies. FinCEN now expects about 28,000 foreign reporting companies, of which roughly 13,000 had filed by 31 December 2025, with about 1,800 new registrants a year.

MeasureOriginal 2022 reporting ruleAfter the 2026 final rule
Estimated filing population32,556,929 companiesAbout 28,000 foreign entities
Reports from domestic companiesAbout 15 million actually filed before March 2025None required
Estimated cost per report665.71 dollars, the 2022 weighted average65.09 to 930.17 dollars per foreign filer
Average annual burdenAbout 53 million hoursAbout 86,000 hours
Average annual reporting costAbout 9 billion dollarsAbout 22 million dollars

FinCEN puts the cumulative saving to entities formerly classed as domestic reporting companies at roughly 18 billion dollars since March 2025, using its own 665.71 dollar per-report estimate against 27.5 million filings that will never be made.

What happens to the data already filed?

Roughly 15 million BOI reports, or BOIRs, from domestic companies reached FinCEN before the exemption. Those filings are being stripped of their US person information. FinCEN says it will work with the National Archives and Records Administration on a single sweep of the database, removing information about individuals whose identifying document suggests a US person.

The mechanics matter for anyone tracking where copies of identity data sit. FinCEN expects to key the deletion off the identity document already on file, naming a US passport or a US driver's license as the signal. It will not ask companies or individuals to request removal, and it will not confirm to any filer that their record has gone. A notice on the FinCEN website is the only acknowledgement planned.

It is a one-time exercise, not a standing hygiene process: FinCEN does not anticipate deleting US company or US person data that appears in filings made after 10 February 2027. Data minimisation here has an end date, which is a reminder that a central store of identity records is only as safe as the last retention decision someone made.

What does this mean for your CDD and KYB obligations?

Almost nothing changes in what a regulated firm must do, and quite a lot changes in how hard it is to do it. The end of beneficial ownership reporting for domestic entities does not touch a single line of your programme's legal duties. What it removes is the corroboration those duties used to sit alongside.

The Customer Due Diligence Rule at 31 CFR 1010.230 stands unamended in text, though FinCEN has already issued guidance modifying its original timing requirement. Covered financial institutions still identify and verify the beneficial owners of their legal entity customers. The one recent softening came separately. An exceptive relief order dated 13 February 2026 lets a firm stop repeating the exercise at every subsequent account opening. Identification and verification are now limited to the first account, to any time the firm has knowledge of facts calling the previously obtained information's reliability into question, and to whatever its risk-based ongoing due diligence requires.

The ownership prong still bites at 25 percent or more of equity interests, and the control prong still requires one individual with significant responsibility to control, manage, or direct the customer. Verification must still meet the elements used for individual customers under the Customer Identification Program rules for banks, brokers or dealers in securities, mutual funds, and futures commission merchants or introducing brokers in commodities.

FinCEN addressed the point directly. Commenters asked it to dismantle the rule. It declined, saying the two regimes serve different purposes under different legal authorities, and separately confirmed that "FinCEN is still legally required to modify the CDD Rule". Section 6403(d) of the Corporate Transparency Act set the deadline for that revision at one year after the reporting rule took effect on 1 January 2024. That date has passed.

One system survives. The BO IT System remains extant and still holds foreign filings. If you onboard one of the roughly 28,000 entities in that group, beneficial ownership reporting still happens and the data is still reachable with the customer's consent. FinCEN has flagged its own expectations for that system as an open question, so document how you use it.

Three obligations shift in practice rather than in text. First, KYB verification of a domestic customer can no longer be cross-checked against a federal filing, because there is no longer a federal filing to check. Second, ongoing monitoring of ownership changes falls on the institution, since no federal filing now obliges a US company to keep an ownership record current, and state filings vary widely in what they capture. Third, sanctions and PEP screening of owners starts from what the customer discloses, which makes UBO screening and independent registry resolution the control that carries the weight. Suspicious Activity Report obligations are unchanged, but the evidence trail supporting a filing about a shell structure now begins and ends inside your own file.

What is still uncertain about beneficial ownership reporting?

FinCEN itself published the list of open questions, which is unusual and useful. It named six points it is considering clarifying, and one of them is the sharpest risk in the whole rule: the possibility that reduced collection under the Corporate Transparency Act "might imply an actual increase in financial institutions' CDD obligations".

That is the liability split nobody has resolved. Less beneficial ownership reporting at the federal level does not mean less work at the institution. Examiners assess institutions against the 2016 rule. If a national database no longer corroborates what a legal entity customer says about itself, the reasonableness of an institution's risk-based verification procedures is judged in a thinner evidentiary environment. Firms that treated the register as a corroboration source, however lightly, now have a gap in their control narrative that they must document and justify.

Three further uncertainties are worth pricing. The revision of the Customer Due Diligence Rule is overdue and slow: Treasury's Unified Agenda, published the same day as the final rule, sets the proposed rule for March 2027, with comments closing that May. A programme redesigned now may be rebuilt once it lands. Federal functional regulators have not restated their examination expectations in light of the exemption, and FinCEN's February order shows supervisory practice moving well ahead of the rule text. And the exemption rests on a Secretarial determination that collecting this data would not serve the public interest. A later Secretary could reverse that by regulation alone.

There is also a plain enforcement gap. FinCEN's reasoning is that risks return to the position before the reporting rule, not to a worse one, because the Customer Due Diligence Rule mitigates them. That holds only where a shell company actually opens an account at a covered institution. Structures that never touch one are invisible to the federal register by design.

How does the US compare with the EU and the UK?

The three largest Western regimes are diverging rather than converging. The United States has narrowed its register to foreign entities. The European Union is about to switch on a harmonised regime. The United Kingdom has moved from registration to identity verification of the people behind a company.

JurisdictionInstrumentStatus on 28 August 2026Who is captured
United States31 CFR 1010.380 as revisedIn force, domestic entities exemptForeign registered entities, non-US owners only
European UnionRegulation (EU) 2024/1624Adopted, applies from 10 July 202725 percent or more ownership interest, and control via other means, tested in parallel
United KingdomEconomic Crime and Corporate Transparency Act 2023In force since 18 November 2025Directors and people with significant control must verify their identity

For a firm onboarding across all three, one beneficial ownership reporting workflow no longer maps to one source of truth. In the EU the test will be statutory and uniform from July 2027. In the UK the register increasingly carries a verified identity behind each named person. In the US it carries almost nobody, and the customer file carries everything. Our earlier report on the FCA's findings on beneficial ownership verification gaps showed how quickly supervisors move when firms lean on registries they have not independently checked.

How should compliance teams respond?

Start by rewriting the control description. If any procedure, risk assessment or model document refers to the FinCEN database as a source for verifying a domestic legal entity customer, that reference is now wrong, and an examiner will read it as an untested control.

Replace it with what you actually do: certification from the individual opening the account, corroboration against state filings and independent registry data, and risk-based verification of each named owner.

Then re-test the ownership chain. Recursive resolution through intermediate entities is the part most programmes short-cut when a register existed to fall back on. Document the percentage arithmetic, the control-prong rationale, and where you stopped. Finally, set your position on the foreign filers: beneficial ownership reporting still binds them, so a filing gap there is now a signal rather than noise.

Zyphe was built for exactly this shape of problem: recursive ownership resolution across 240 or more corporate registries worldwide at configurable ownership thresholds, an exportable audit trail for every decision, and no central store of customer identity data to become someone else's deletion project. If your ownership checks now rest entirely on your own file, book a demo and we will walk through the AML controls that back them.

The bottom line

The federal register of company owners still exists, but for practical purposes it now covers foreign entities and nobody else. For teams running KYC and AML programmes in the United States, the beneficial ownership reporting obligation did not move; the corroboration did. Every judgement about who owns and controls a legal entity customer is now made, evidenced and defended inside your own file, with no external record to point at. Programmes that treated ownership data as a filing to be stored will feel that as risk. Programmes that treated it as a verification problem, and that hold as little of the resulting data as possible, will barely notice.

Cited sources

Michelangelo Frigo Michelangelo Frigo (Co-Founder at Zyphe) Michelangelo Frigo is a privacy and identity infrastructure expert and co-founder of Zyphe.

Frequently Asked Questions

No. Entities formed by a filing with a US secretary of state or similar office are excluded from the definition of reporting company. The exemption became permanent with the final rule effective 14 August 2026. There is no filing, no update obligation, and no deadline to track.

Entities formed under the law of a foreign country and registered to do business in a US state or tribal jurisdiction, unless they meet another exemption. They report information about the company and about beneficial owners who are not US persons. FinCEN expects that population to be roughly 28,000 entities.

Yes. The 2016 Customer Due Diligence Rule text at 31 CFR 1010.230 is unchanged, though a February 2026 exceptive relief order limits repeat collection at subsequent account openings. Institutions must identify beneficial owners when a legal entity customer first opens an account, applying the 25 percent ownership prong and the control prong, and verify each one.

If the individuals concerned appear to be US persons, yes. FinCEN plans one sweep of the database, identifying US persons from the identifying document on file. It will not confirm deletion to filers and will publish a notice on its website when the exercise is complete.

Yes, it could be reversed. The exemption rests on the Secretary's determination that collecting the data would not serve the public interest, made with the concurrence of the Attorney General and the Secretary of Homeland Security. A later determination could restore the requirement by regulation alone, with no new legislation. Congress could also legislate it back.

See privacy-first KYC in action

Verify identity without storing a single document. Reusable credentials, an exportable audit trail, and a 15-minute integration.

Book a demo