Anti-money laundering compliance for your LLC: what you need to know
10,000 USD trigger an automatic CTR at your bank: BSA, KYC, CTR, SAR, FATCA and CRS are the acronyms that define AML compliance for any US LLC. Here is the plain-English read.
The US AML regime (Bank Secrecy Act, 1970, plus the Patriot Act of 2001) requires Mercury, Wise and Relay to run documentary KYC processes before processing the first transfer.
Anti-Money Laundering (AML) regulations are increasingly strict worldwide. Understanding how they affect your LLC helps you operate without problems. If you have a US LLC, these regulations affect you directly, even though your business is completely legitimate.
The good news: complying with these regulations is straightforward if you understand what's expected and maintain good practices from day one.
Why AML regulations exist
The global financial system needs mechanisms to prevent illegal activity. AML rules require financial institutions to:
- Verify customer identities (KYC. Know Your Customer)
- Monitor transactions for suspicious patterns
- Report suspicious activity to authorities (SARs. Suspicious Activity Reports)
- Maintain records of all transactions for a required period (minimum 5 years)
1. Bank account opening
When you open a Mercury account, the bank conducts AML due diligence: identity verification, business description review, source of funds inquiry. This is a protective measure for both parties. Mercury uses Column NA (FDIC insured) and must comply with all federal banking regulations.
2. Ongoing transaction monitoring
Your bank continuously monitors transactions. If patterns seem unusual compared to your stated business, they may request clarification, not an accusation, just routine verification. This is normal and expected.
3. Regulatory reports
Depending on the volume and type of transactions, your bank may be required to file reports with <a href="https://www.fincen.gov" target="_blank" rel="noopener">FinCEN</a> (Financial Crimes Enforcement Network). This doesn't mean you're under investigation. It is a routine procedure.
The Bank Secrecy Act (BSA)
The BSA is the US federal law establishing financial compliance obligations. Key requirements:
Currency Transaction Report (CTR)
Generated automatically for cash transactions over $10,000 in a single day. For most digital businesses, this isn't relevant. your transactions are electronic.
Suspicious Activity Report (SAR)
Filed by banks when they detect potentially suspicious activity. You're not notified when this happens. It is an internal bank process. The bank files it with FinCEN.
Record-keeping
Banks must maintain records of certain transactions for at least 5 years.
Good practices for AML compliance
1. Maintain business consistency
Your banking activity should match what you declared when opening the account. If your business evolves (you start billing more, enter new markets), update your profile with the bank proactively.
2. Document everything
Each significant transaction should have supporting documentation: contracts, invoices, receipts, emails. This is good for compliance AND simplifies your accounting.
3. Avoid cash transactions
Digital businesses practically don't handle cash. Keep all your transactions digital and documented. Mercury, Stripe, and Wise create automatic records.
4. Never structure transactions
Structuring. deliberately breaking a large transaction into multiple smaller ones to avoid reporting thresholds, is illegal. It's a federal crime under 31 USC ยง5324. If you need to make a large payment, make it directly.
5. Respond promptly to bank requests
If your bank asks for additional information, respond with transparency and within 24-48 hours. It's a routine process that demonstrates your professionalism.
6. Keep your LLC documentation current
Active Registered Agent, filed Form 5472, current BOI Report. all of these signal to banks and regulators that you're operating legitimately.
BOI Report and AML
The Beneficial Ownership Information (BOI) Report you file with FinCEN is part of the global anti-money laundering effort. By reporting who actually owns your LLC (with government ID verification), you contribute to corporate transparency. The BOI Report database is not public. It is only accessible to law enforcement and authorized entities.
FATCA (Foreign Account Tax Compliance Act)
US law requiring foreign financial institutions to report accounts of US citizens/residents to the <a href="https://www.irs.gov" target="_blank" rel="noopener">IRS</a>. As a non-resident, this doesn't directly apply to you, but it affects the global financial infrastructure you operate within.
CRS (Common Reporting Standard)
The <a href="https://www.oecd.org" target="_blank" rel="noopener">OECD</a>'s global standard for automatic tax information exchange between 100+ countries. Important: the US doesn't participate in CRS, but your home country may receive information about foreign accounts through other bilateral mechanisms.
What this means for you
Your Mercury account (US-based) is not automatically reported through CRS. But your Wise account (which operates in CRS-participating jurisdictions) may be. Regardless, you should always declare your foreign assets as required by your country of residence.
Your LLC as a compliance signal
Paradoxically, having a well-formed LLC with impeccable compliance positions you as a serious professional with banks and financial institutions. Problems typically arise with informal, undocumented operations, not with properly structured business entities.
Your LLC, with its EIN, filed returns, and dedicated Mercury account (Column NA, FDIC, everything in order), is exactly what the system expects to see from a professional operating internationally.
At Exentax we ensure all your compliance is impeccable from day one: IRS filings (Form 5472 + 1120), BOI Report, banking documentation. all in perfect order. You focus on your business, we make sure every filing is correct.
The AML compliance checklist for your LLC
Use this checklist to ensure your LLC maintains impeccable compliance:
| Compliance area | Action | Frequency |
|---|---|---|
| KYC documentation | Keep passport, proof of address current with all banks | When documents expire |
| Transaction documentation | Maintain invoices/contracts for all significant transactions | Ongoing |
| Mercury profile | Update business description if activity changes | As needed |
| Source of funds | Have documentation ready to explain income sources | Always available |
| Form 5472 | File with IRS (reports LLC-owner transactions) | Annual |
| BOI Report | Keep current with FinCEN | Within 30 days of changes |
| FBAR | File if US accounts exceed $10,000 | Annual |
| Operating Agreement | Keep current and signed | Update when structure changes |
| Bank statements | Download and archive monthly | Monthly |
| Expense receipts | Organize by category, keep 7+ years | Ongoing |
The fintech stack from a compliance perspective
| Tool | Compliance advantage |
|---|---|
| Mercury | Full transaction history, downloadable statements, clear audit trail |
| Stripe | Complete payment records with customer details for every transaction |
| Wise | Transparent conversion records with exact rates and fees documented |
| Relay | Sub-accounts create natural segregation for compliance purposes |
| Slash | Treasury records clearly separated from operating funds |
The Exentax approach is practical: confirm the data, prepare the evidence and close the next step.
Each tool in your financial stack creates documentation that helps you maintain compliance. When your bank asks "where does this money come from?", you can point to Stripe payment records, client invoices, and Mercury statements that tell a clear, consistent documentary line.
> <a href="/en/book">Review my case</a>
- Mercury: does not replace a banking architecture. It can be useful if expected use, counterparties, documents, backup account and movement traceability are clear from day one.
- Payoneer operates through European entities (Payoneer Europe Ltd, Ireland) that are also in scope for CRS for clients resident in participating jurisdictions.