Feature Operational Risk
FinCEN's Southwest Border GTO Just Expired. Here's What MSBs in Four States Need to Know Now.
FinCEN's expanded Southwest Border Geographic Targeting Order expired September 2, 2026, ending enhanced $1,000 CTR requirements for MSBs in border counties of AZ, CA, NM, and TX. The enforcement operation behind it hasn't stopped. Here's what MSBs should do now and what to expect next.
Table of Contents
TL;DR
- FinCEN’s Southwest Border GTO expired September 2, 2026, ending the special $1,000 CTR threshold for MSBs in border counties of AZ, CA, NM, and TX.
- The enforcement operation that ran alongside it — involving analysis of 1 million CTRs and 87,000 SARs — is still active: 6 notices of investigation were issued and dozens of MSBs were referred to the IRS for examination.
- MSBs that received compliance outreach letters are still under review, and records generated during the GTO period remain subject to examination for five years.
- Expect a renewal: FinCEN has issued this GTO in six-month cycles since March 2025, and Southwest border financial flows remain a stated enforcement priority.
On September 2, 2026, FinCEN’s expanded Southwest Border Geographic Targeting Order quietly expired. For money services businesses in covered border counties across Arizona, California, New Mexico, and Texas, the special $1,000 CTR reporting threshold is gone. Standard BSA rules apply again.
What doesn’t expire: the enforcement operation that ran alongside it.
FinCEN’s Southwest border GTO wasn’t just an enhanced reporting requirement — it was a data collection tool for a larger enforcement initiative targeting MSBs it suspected of facilitating bulk-cash smuggling, drug trafficking proceeds, and cartel-connected money movement. The agency was specific about this: it analyzed more than 1 million Currency Transaction Reports and approximately 87,000 Suspicious Activity Reports to identify which MSBs appeared noncompliant, which were in high-risk areas, and which warranted formal investigation.
The GTO has expired. The analysis has not stopped.
What the March 2026 GTO Required
FinCEN issued the March 2026 Southwest Border GTO on March 10, 2026, effective March 7 through September 2. It was the third consecutive six-month order in a series that began in March 2025 and expanded with each renewal.
The core requirement: money services businesses located in designated counties and ZIP codes in Arizona, California, New Mexico, and Texas had to file Currency Transaction Reports for cash transactions between $1,000 and $10,000 — compared to the standard BSA threshold of $10,000. The practical effect was that covered MSBs had to report transactions that would ordinarily not trigger any CTR obligation.
The March 2026 order also modified the standard CTR filing timeline. Where the BSA generally requires CTRs within 15 calendar days, the GTO extended that window to 30 days for covered transactions, reflecting the administrative burden of significantly higher filing volumes.
The expanded geographic footprint covered specific counties and ZIP codes in all four border states. Not every MSB in AZ, CA, NM, or TX was covered — the order targeted areas proximate to the U.S.-Mexico border and certain inland areas associated with bulk cash movement.
What “Geographic Targeting” Means Legally
GTOs are issued under 31 U.S.C. § 5326, which authorizes the Secretary of the Treasury to issue an order requiring any domestic financial institution or domestic nonfinancial trade or business in a geographic area to report certain financial transactions. GTOs have a maximum duration of 180 days — which is why FinCEN issues them in six-month cycles. They do not require notice-and-comment rulemaking.
The authority is broad. FinCEN can require reporting that goes well below the standard BSA thresholds whenever it determines doing so is needed to carry out the purposes of the Bank Secrecy Act or prevent evasion of BSA requirements. The Southwest border series is among the most sustained uses of this authority in FinCEN’s history.
The Enforcement Operation Behind the GTO
The GTO was not just a compliance exercise. In late 2025, FinCEN announced a “data-driven enforcement operation” targeting MSBs along the Southwest U.S. border — its first explicitly analytics-led MSB enforcement sweep. The results as publicly announced:
- 6 notices of investigation issued to MSBs identified as potential BSA violators
- Dozens of examination referrals to the IRS, which conducts BSA examinations of non-bank financial institutions including MSBs
- 50+ compliance outreach letters sent to potentially noncompliant entities
- Analysis conducted in partnership with the Department of Homeland Security, IRS Criminal Investigation, and federal and state law enforcement
FinCEN emphasized that the operation was built on CTR and SAR data — specifically, the analysis of transaction patterns across more than 1 million CTRs and 87,000 SARs. The agency used advanced data analytics to identify MSBs whose filing behavior appeared inconsistent with their transaction volume, geographic location, or stated business model.
Six notices of investigation represents formal BSA enforcement initiation. These are distinct from outreach letters and carry the potential for civil money penalties under 31 U.S.C. § 5321. Penalties for willful BSA violations can reach $1 million or more per violation for egregious cases. The notices of investigation opened by the enforcement operation remain active.
What the GTO Expiration Actually Changes
The expiration of the GTO on September 2 changes one specific thing: the $1,000 CTR reporting threshold no longer applies. Covered MSBs revert to standard BSA requirements — CTRs for cash transactions exceeding $10,000, structuring prohibitions, SAR obligations, and standard program requirements.
What it does not change:
Record retention obligations. GTO-related records — CTRs filed during the GTO period, internal documentation, transaction logs — must be retained consistent with BSA requirements (generally five years). FinCEN and the IRS retain authority to examine these records.
Pending IRS examination referrals. MSBs referred to the IRS for BSA examination as part of the enforcement operation are still subject to those examinations. An IRS BSA exam is not triggered or extinguished by GTO status.
Compliance outreach letter responses. If your institution received a compliance outreach letter and has not yet responded — or received a response request for additional information — that process continues.
Open notices of investigation. The six MSBs that received formal notices of investigation are still in FinCEN’s enforcement pipeline.
Ongoing SAR/CTR monitoring. The BSA program obligations that exist independent of the GTO — including SAR filing, KYC, transaction monitoring — don’t change. In fact, based on the enforcement operation’s findings, examiners will be looking at whether programs in this region are robust.
What to Expect Next: Likely Renewal
Based on the GTO series pattern:
| Order Period | Status |
|---|---|
| March 2025 – September 2025 | Expired; renewed |
| September 2025 – March 2026 | Expired; expanded and renewed |
| March 2026 – September 2, 2026 | Just expired |
| Fall 2026? | Watch for renewal |
FinCEN has renewed this GTO twice already, and has publicly described the Southwest border as a sustained enforcement priority. The data-driven operation suggests the agency is actively building enforcement cases — which typically argues for continued data collection, not a pivot away from it.
No announcement has been made as of the date of this post about a renewal. If a new GTO is issued, FinCEN will publish it in the Federal Register and announce it via press release. Covered MSBs in the previous geographic areas should monitor FinCEN’s enforcement page and Federal Register for a new order.
The Structural BSA Problem FinCEN Is Trying to Fix
The Southwest border GTO series targets a specific failure mode: MSBs that serve as conduits for bulk-cash movement tied to drug trafficking and cartel activity, either willfully or because their BSA programs are inadequate to detect it.
FinCEN’s analysis of 87,000 SARs makes clear that the agency believes underreporting is significant in this corridor. The $1,000 threshold was designed to generate CTR data on transactions that would otherwise be invisible — either because they fall below the standard threshold or because structuring has broken them up.
The six notices of investigation and dozens of IRS referrals represent the output of that analysis: MSBs whose CTR and SAR patterns suggested something was wrong.
Structural compliance failures FinCEN has historically cited in Southwest border MSB cases:
Inadequate geographic risk assessment. MSBs in high-risk border corridors bear heightened BSA obligations because of the environment they operate in. A generic, one-size-fits-all BSA program doesn’t reflect the specific risks of a border-area location with significant cash volume. Examiners expect the risk assessment to identify geographic exposure explicitly.
CTR completeness and accuracy failures. GTO-generated CTRs need to be filed accurately and on time. Patterns of missing CTRs, late CTRs, or CTRs with incomplete customer identification are examination findings.
SAR filing gaps. High cash volume, repeated transactions just below the $10,000 threshold (structuring), and customers moving funds to accounts in Mexico are all SAR triggers. Examiners look for whether the BSA program identified and filed on these patterns.
Customer identification program deficiencies. CIP failures — incomplete identity verification, inadequate source-of-funds documentation — are common findings in MSB examinations, particularly in locations with significant cash-intensive businesses and cross-border customers.
Six Steps for Covered MSBs Right Now
1. Audit your GTO-period filings. Review CTRs filed during the March–September 2026 GTO period for accuracy, completeness, and timeliness. Identify any gaps. If you find errors or omissions, voluntarily correcting them — with documentation — is better than having examiners find them.
2. Respond to outreach letters. If FinCEN sent your institution a compliance outreach letter, that response is your chance to demonstrate that your BSA program is functioning. Work with BSA counsel to prepare a substantive response that documents your program, your controls, and any corrective actions already taken.
3. Retain legal counsel on notices of investigation. If your institution received a formal notice of investigation, this is not a situation for self-representation. BSA counsel needs to be involved immediately. These notices can lead to civil money penalties; the cases that fare best are those where institutions cooperate, provide complete records, and demonstrate genuine remediation.
4. Update your BSA risk assessment. Your written risk assessment should specifically address the Southwest border enforcement environment — geographic risk, cash-intensive customer segments, structuring risk, and cross-border transaction patterns. This is especially true if your institution operates in the covered counties.
5. Brief your BSA officer and board. The enforcement operation and GTO series are material developments for any covered MSB. Your BSA officer and board or risk committee should be aware of the operating environment, the status of any FinCEN or IRS contacts, and the institution’s program posture.
6. Prepare for renewal. Set a calendar reminder for mid-September through early October to check for a new GTO. If one is issued, your institution needs to comply from its effective date — which may be earlier than the announcement date.
So What?
The Southwest Border GTO expiring doesn’t mean FinCEN’s attention to this corridor is winding down. It means the current data-collection phase has concluded and the enforcement phase is continuing. Six open notices of investigation, dozens of IRS referrals, and 50+ outreach letters are not paperwork — they’re the front end of enforcement cases.
For MSBs in Arizona, California, New Mexico, and Texas: the GTO is gone, but the scrutiny isn’t. Use the window before a likely renewal to get your BSA program in order, your records confirmed complete, and your risk assessment updated. An IRS BSA exam is much harder to manage when your documentation is thin.
Tracking BSA compliance KRIs — CTR filing rates, SAR volumes, exception rates, high-risk customer concentrations — is one of the most common gaps FinCEN and IRS examiners find in MSB programs. The KRI Library includes 10 BSA/AML-specific KRIs with pre-calibrated green/amber/red thresholds designed for exactly the metrics regulators ask about.
Related reading:
◆ Need the working template?
Start with the source guide.
These answer-first guides summarize the required fields, evidence, and implementation steps behind the templates practitioners search for.
◆ Related template
KRI Library (132 Key Risk Indicators)
132 KRIs with thresholds, data sources, and escalation triggers pre-built for financial services.
◆ Immaterial Findings · Weekly
Sharp risk & compliance insights. No fluff.
◆ FAQ
Frequently asked questions.
What was the March 2026 Southwest Border GTO?
What happens now that the GTO expired September 2?
Are MSBs that received FinCEN compliance outreach letters still at risk?
What does a FinCEN notice of investigation mean for an MSB?
Is FinCEN likely to renew the Southwest Border GTO again?
What should MSBs in the covered area do right now?
Author
Rebecca Leung
Rebecca Leung has 8+ years of risk and compliance experience across first and second line roles at commercial banks, asset managers, and fintechs. Former management consultant advising financial institutions on risk strategy. Founder of RiskTemplates.
◆ Related framework
KRI Library (132 Key Risk Indicators)
132 KRIs with thresholds, data sources, and escalation triggers pre-built for financial services.
◆ Keep reading
Related posts.
Operational Risk
FinCEN Hit UBS With a Record $125 Million 'Willful' BSA Fine — and FINRA Added $20 Million More. What the Double-Barrel Enforcement Action Means for Your AML Program.
FinCEN's $125 million penalty against UBS Financial Services — the largest BSA fine ever imposed on a broker-dealer — combined with FINRA's simultaneous $20 million fine creates a $145 million enforcement landmark. Both actions trace back to the same root cause: UBS knew its transaction monitoring had gaps, promised to fix them after a 2018 settlement, and didn't. Here's what 'reasonably designed' AML monitoring actually requires.
Sep 8, 2026
Operational Risk
The OCC's Spring 2026 Risk Perspective Named Three Operational Threats. Here's What Your Program Needs to Fix.
The OCC's Spring 2026 Semiannual Risk Perspective shifted focus from credit risk to operational resilience—flagging legacy technology, rising fraud, and sophisticated cyber threats as the top concerns. Here's what that means for your risk program.
Aug 31, 2026
Operational Risk
FDIC Reciprocal Deposits Rule: The New $30 Billion Cap Is Not a Liquidity Free Pass
The FDIC reciprocal deposits rule raises the nonbrokered cap and expands agent-institution eligibility. Here is the treasury control plan.
Aug 29, 2026