In Puerto Rico, financial entities are subject to stringent anti-money laundering (AML) and compliance regulations that align with both federal U.S. standards and local laws. These obligations are enforced by the Office of the Commissioner of Financial Institutions (OCIF) under Acts 136-2010 and 273-2012, ensuring transparency, accountability, and integrity within the financial system.

Who Is Subject to AML Regulations?

• Money Services Businesses (MSBs) licensed under Act 136-2010
• International Financial Institutions (IFIs) licensed under Act 273-2012
• Entities dealing in convertible virtual currencies and crypto transactions
  
  

Core AML Obligations

1. AML Program: All financial entities must develop and maintain a written AML program tailored to their risk profile. The program must include internal controls, ongoing employee training, independent review, and designated compliance personnel.
   
   
2. BSA Compliance: Entities must comply with the Bank Secrecy Act (BSA), including record-keeping and reporting requirements for suspicious activity (SARs), currency transaction reports (CTRs), and customer due diligence (CDD).
   
   
3. Registration with FinCEN: All MSBs must register with the Financial Crimes Enforcement Network (FinCEN) and update their registration every two years.
   
   
4. OFAC Sanctions: Entities must screen clients and transactions against the Office of Foreign Assets Control (OFAC) list to prevent dealings with sanctioned individuals or jurisdictions.
   
   
5. Ongoing Monitoring and Reporting: Businesses must have systems to monitor transactions, flag suspicious activity, and report promptly to the appropriate authorities.
   
   

Puerto Rico-Specific Compliance Measures

• OCIF may request additional compliance documentation or conduct on-site inspections at its discretion.
• IFIs are required to employ full-time compliance staff and submit to annual audits.
• AML policies must be updated regularly and reflect the specific risks and nature of the entity’s operations.
  
  

Penalties for Non-Compliance Failure to adhere to AML obligations can result in:

• Revocation or suspension of licenses
• Civil and criminal penalties
• Reputational damage
  
  

Best Practices for Compliance

• Conduct regular risk assessments
• Keep comprehensive records of AML activities
• Use software tools for automated transaction monitoring
• Provide annual training to all relevant personnel
  
  

Conclusion

Robust AML and compliance practices are not optional in Puerto Rico—they are a legal obligation and a foundation for business credibility. Whether you’re a fintech startup or a fully licensed financial institution, establishing a culture of compliance is key to long-term success and regulatory approval.