Beneficial ownership information (BOI) is data that identifies the individuals who ultimately own or control a legal entity. The Corporate Transparency Act (CTA), enacted by US Congress in 2021, required companies to report this information to FinCEN in order to combat money laundering, terrorism financing, and fraud carried out through anonymous shell companies[1].

FinCEN’s final rule, effective August 11, 2026, permanently exempts domestic US companies and US persons from beneficial ownership reporting under the CTA. The rule cuts the reporting population from roughly 32 million domestic entities to an estimated 28,000 foreign reporting companies, a reduction of more than 99%[2].

FinCEN will delete previously-filed US-person BOI in the 180-day sweep this rule sets in motion, removing beneficial ownership data from the system the CTA was built to support[3].

Cutting 32 million entities from the reporting population sharply reduces the beneficial-ownership data supply, meaning less information will be available to detect money laundering. For institutions whose own due-diligence obligations haven't changed, this represents a significant increase in risk exposure.

What does FinCEN's final rule actually change?

Foreign entities must still report beneficial owners and company applicants, but only non-US persons; a US person tied to a foreign company is now exempt from being reported at all, and foreign pooled investment vehicles report only non-US-person controllers[1].

For foreign reporting companies, the filing deadline is 30 days from Federal Register publication or from US registration, whichever is later[1]. Penalty exposure for whoever remains in scope is unchanged: civil penalties of up to $500 per day of continued violation, plus criminal exposure of up to two years’ imprisonment and $10,000 in fines for willful violations[4].

A FinCEN ID is a unique identifier a US person can obtain from FinCEN and give to a reporting company in place of submitting their own beneficial ownership information directly. Previously, holding one came with the obligation to keep that information current. Now, post-revision, the roughly 760,000 US persons who hold FinCEN IDs are relieved of any obligation to update or correct that information[1].

What does this mean for compliance programs?

Money laundering schemes can often move through several institutions, countries, and unrelated recordkeeping systems before anyone spots the pattern. The information needed to expose it usually exists somewhere, just not in a form any single compliance team can pull together on its own.

Beneficial ownership filings were one source institutions could draw on to help fill in that picture. Pulling 32 million domestic entities out of the BOI system doesn’t just shrink a government filing count, it takes a wealth of ownership records out of circulation for a compliance ecosystem that already had gaps.

Closing that BOI gap now falls to institutions themselves, tracing how entities and transactions connect across parties. For banks, the deeper cost shows up in day-to-day due diligence. A bank's duty to verify its customers’ owners hasn’t moved, but the federal database many expected to lean on now only covers a tiny fraction of the companies it used to, leaving each institution to build its own ownership picture from scratch.

The diminished federal database gives every bank a different starting point, since accuracy now depends on how rigorously each institution sources its own data[6]. The state-level data left to fill the gap varies widely in scope and often doesn’t actually identify who controls an entity, leaving banks and investigators alike with inconsistent substitutes for the data this rule took away[5].

How can institutions close the risk gap?

Tools exist to absorb the extra ownership of research, sanctions and PEP screening, and adverse-media checks pushed onto institutions, handling that volume in real time and producing a human-reviewable decision trail, rather than requiring an analyst to build one by hand for every affected counterparty. Silent Eight's Adverse News Agent and Expert CDD Agent are built for exactly that kind of workload.

Treating this rule as a straightforward win for deregulation misses the point. Filing requirements have eased, but the distance between a compliance team’s scope of information and criminal activity has grown significantly as a result. Bridging this gap still comes down to the same skill it always has: turning scattered, incomplete information into decisions that survive scrutiny, regardless of how much data FinCEN happens to be collecting.

Key takeaways

• FinCEN’s final rule, effective August 11, 2026, permanently exempts roughly 32 million US domestic entities and most US persons from BOI reporting.

• Only entities formed abroad and registered to do business in the US remain ‘reporting companies,’ an estimated 28,000 of them.

• The Customer Due Diligence (CDD) Rule is unchanged; institutions must still independently verify beneficial owners at account opening.

• Beneficial ownership filings were one piece of an already incomplete compliance picture, so removing them widens the gap between what institutions can see and what criminals actually do.

• Easing filing requirements doesn't shrink the gap between what institutions can see and what criminals do, which tools like Silent Eight's Adverse News Agent and Expert CDD Agent exist to close.