Full Report
Two U.S. senators reintroduced legislation on Thursday that would address limits on the ability of the Secret Service to investigate efforts to launder money made through cybercrime.
Analysis Summary
# Regulation/Compliance: Combatting Money Laundering in Cyber Crime Act (Proposed)
## Overview
This proposed legislation aims to strengthen the investigative authority of the U.S. Secret Service (USSS) by updating existing laws to explicitly authorize the USSS to investigate criminal activity involving **digital assets**, specifically targeting unlicensed money transmitting businesses and financial structuring designed to evade reporting requirements in the context of cybercrime proceeds.
## Key Details
- Issuing Authority: U.S. Senators Catherine Cortez Masto (D-Nev.) and Chuck Grassley (R-Iowa) (U.S. Congress)
- Effective Date: Proposed (Not yet enacted)
- Jurisdiction: United States Federal Jurisdiction (Applicable to investigations conducted by the Secret Service within the US)
- Status: Proposed (Reintroduced legislation that has not yet progressed through Congress)
## Requirements
### Mandatory Requirements (If enacted)
1. **Authorization for Investigation:** The Secret Service must be formally authorized by law to investigate the operations of unlicensed money transmitting businesses involved in cybercrime.
2. **Scope Expansion:** USSS jurisdiction must be updated to investigate all "new forms of criminal activity involving digital assets."
3. **Targeted Activity Investigation:** Law enforcement must be authorized to investigate the structuring of financial transactions related to cybercrime proceeds intended to evade reporting and recordkeeping requirements.
### Recommended Practices (Based on Contextual Enforcement Trends)
1. Enhance inter-agency coordination (Treasury Department, DOJ) specifically for digital asset investigations.
2. Proactively map out and identify unlicensed money transmitting businesses utilizing digital assets.
3. Develop internal protocols for handling evidence and structuring investigations related to virtual currency laundering, referencing prior Treasury Department focus on virtual currency compliance.
## Affected Organizations
- Industries: Financial institutions, virtual asset service providers (VASPs), and any entity facilitating digital asset transfers that may be operating as an unlicensed money transmitter.
- Organization Size: Not explicitly defined by size, but applies to entities fitting the definition of unlicensed money transmitters.
- Geographic Scope: Primarily U.S. investigative jurisdiction, though relevant to international actors whose illicit activities impact the U.S. financial system or are subject to USSS investigation.
## Compliance Timeline
- **July 2024 (Previous Introduction):** Initial bill announced.
- **Recent Reintroduction:** Current status is pending passage in the 118th Congress.
- **Final deadline:** Full compliance timeline is contingent upon the bill's successful passage, presidential signature, and subsequent rulemaking/updated internal USSS policy.
## Implementation Guidance
### Assessment Phase
- Determine if the organization's current activities regarding digital assets align with the definition of an unlicensed money transmitter.
- Review current transaction monitoring and reporting protocols to ensure they address digital asset structuring aimed at evasion.
### Implementation Phase
- If operating as a money transmitter, engage legal counsel regarding licensing requirements under existing or updated federal/state laws.
- If subject to investigation, ensure documented cooperation frameworks are in place with the Secret Service and Treasury.
### Validation Phase
- Ensure all digital asset transactions flagged for suspicious activity are properly reported in line with existing and anticipated USSS investigative mandates.
## Technical Requirements
The proposed legislation focuses on *legal authority* rather than specific mandated technology. However, successful implementation assumes the capability to:
1. Trace and analyze transactions involving digital assets (virtual currencies).
2. Identify structural patterns in transactions designed to avoid thresholds that trigger mandatory reporting.
## Penalties & Enforcement
- Fines: Details on specific new fine structures related to enhanced USSS digital asset authority are not detailed in this summary, but enforcement will utilize existing money laundering and financial crime penalty frameworks, now with expanded USSS reach.
- Other Consequences: Increased success in prosecuting cybercriminals for money laundering violations; entities found to be operating as unlicensed money transmitters face severe criminal and civil penalties.
- Enforcement: Primarily enforced by the U.S. Secret Service, in coordination with the Treasury Department and the Department of Justice (DOJ).
## Related Standards
- Existing Anti-Money Laundering (AML) and Bank Secrecy Act (BSA) frameworks, as the bill seeks to update laws governing unlicensed money transmitters and structuring reports.
- Previous legislation championed by Senator Cortez Masto focusing Treasury Department attention on combating money laundering and terrorism financing via virtual currency.
## Resources
- Official Documentation: The specific text of the reintroduced "Combatting Money Laundering in Cyber Crime Act" (Search 118th Congress legislation records).
- Guidance Documents: Existing guidance from FinCEN regarding Virtual Asset Service Providers (VASPs) and AML obligations.
## Practical Recommendations
1. **Monitor Legislative Status:** Organizations dealing heavily in digital assets must actively track the status of this bill in Congress, as its passage will significantly alter the investigative landscape for cyber-enabled financial crime.
2. **Legal Review:** Review current operational definitions against potential new interpretations of "unlicensed money transmitting business" concerning digital assets.
3. **Prepare for Enhanced Scrutiny:** Assume that the Secret Service will have expanded capacity and focus on digital asset laundering operations, necessitating robust internal control documentation.