FinCEN flags $8bn in suspicious foreign-agent MSB payments and issues charity abuse notice

The US Treasury's Financial Crimes Enforcement Network (FinCEN) issued two documents on 30 October 2026 as part of fraud prevention measures announced in Minnesota by Treasury Secretary Scott Bessent and other senior US officials. The first is an alert on foreign-agent-directed transactions (FIN-2026-Alert009). The second is a notice on the use of charities and non-profit organizations for illicit activity (FIN-2026-NTC2).

The alert covers cross-border payments that US-based money services businesses (MSBs, such as money transmitters) send on the instructions of their foreign agents, often to a third party described as a supplier or partner. FinCEN says its analysis of Bank Secrecy Act reporting found more than $8 billion in suspicious foreign-agent-directed payments between 2021 and 2025. It notes that this reporting is tip and lead information, not proof of illegal activity. Treasury says such structures can hide the ultimate beneficiaries and purpose of payments, and can help conceal illicit activity such as funding for terrorist organizations. FinCEN also says no single customer type, including MSBs, should be treated as uniformly high risk.

Red flags in the alert include a foreign agent that regularly directs payments to third parties in jurisdictions such as China, the UAE, Egypt and East African countries (Kenya, Uganda and Djibouti); vague or repeated payment reasons such as settlement, services or business expense; recipients with no clear link to the agent, such as textile or general trading companies, companies with no web presence or newly created companies; and payments in round or near-round amounts. The alert has separate red flags for banks that serve MSBs.

The notice describes three kinds of abuse: sham charities, non-profit fraud and non-profit embezzlement. It says most US-based non-profits present low risk and asks institutions to assess each one individually. Its red flags include organizations that solicit donations but show no visible services, names that resemble established charities, sudden surges in donations or government reimbursements at new organizations, and spending that does not match the customer's known financial profile, such as significant transactions with casinos, gambling establishments or money services businesses, including those involved in digital assets. FinCEN asks filers to use the key term FIN2026FOREIGNAGENT for suspicious activity reports linked to the alert and FIN2026NPO for those linked to the notice, in SAR field 2 and in the narrative.