What Is BSA Compliance?

Financial institutions have one clear mission: stop dirty money before it gets laundered. The Bank Secrecy Act (BSA), first passed back in 1970 and updated regularly, still sets the rules in 2026. Here’s a battle-tested checklist you can run in a single afternoon.

What’s Happening

The BSA is the legal foundation that forces banks, credit unions, money-services businesses, and even some fintechs to leave paper (or digital) trails for large and questionable cash movements. Two main duties stand out:

• File a Currency Transaction Report (CTR) when someone hands over cash or cash equivalents totaling $10,000 or more on the same business day.
• File a Suspicious Activity Report (SAR) when you suspect—but can’t prove—funds come from illegal activity, no matter the dollar amount.

It also requires four program-management pillars: solid internal controls, independent testing, a named compliance officer, and ongoing training. Miss any one of these and examiners can hit you with civil penalties or even cease-and-desist orders.

Step-by-Step Solution

1. Appoint the BSA Compliance Officer • Set up a new role in your HR system called “BSA Compliance Officer.” • In most core banking platforms (FIS, Fiserv, Jack Henry) the route is Settings → User Management → Add Role → BSA Compliance Officer. Give full BSA Admin rights.
2. Draft the Written BSA/AML Compliance Program • Grab the Word template: File → New → Search “BSA AML Program Template 2026”. • You’ll need these sections per 31 CFR §1020.210: – Internal controls – Independent testing schedule (once a year) – Designation of compliance officer – Training calendar • Save it in the shared drive under \\Compliance\BSA\Program.
3. Turn on CTR Automation (if your core supports it) • Go here: Compliance → BSA → CTR Settings → Enable “Auto-calculate daily aggregate”. • Set the threshold at $10,000 single-day aggregate. • Test it by running a $9,999 cash deposit, then a $1 deposit right after; confirm the system stays quiet, then drop another $1 to trigger the CTR.
4. Schedule Quarterly Board Reports • Create a recurring calendar event: Board Meeting → BSA Update. • Use this template: \\Compliance\BSA\Board Report Template Q1 2026.docx. • Required slides: fresh SAR/CTR trends, typologies spotted, training completion rates, open audit findings.
5. Train Staff (Annual Requirement) • Pick any SCORM-compliant LMS (Cornerstone, Moodle, etc.). • Course ID: BSA-2026-v3.2. • Everyone with customer-facing or cash-handling roles must finish it 100 %. • Certificates auto-save to \\Compliance\BSA\Training Records.
6. Keep the Logs for Five Years • Store CTR and SAR images in the secure SharePoint archive under Site → Compliance → BSA Archive → [Year]. • Use this naming format: CTR_YYYYMMDD_BranchID_Sequence.xlsx.

If This Didn’t Work

• CTRs not firing automatically? • Switch to manual mode: Compliance → BSA → CTR → New Entry → Manual Entry. • Pull yesterday’s transaction tape from the core in CSV and import it into the BSA module.
• Board reports missing risk assessment? • Grab the latest FinCEN BSA E-Filing XML risk-assessment template (updated March 2025). • Fill in the “Products & Services” tab; the tool builds heat maps for high-risk lines automatically.
• Training completion stuck at 98 %? • Run the “BSA Hold” report in the LMS: Reports → Compliance → Users with Incomplete BSA Training. • Send a bulk reminder via the LMS scheduler; if it’s still stuck, loop in HR for off-cycle completion.

Prevention Tips

Document every step; examiners care more about a clean audit trail than a spotless branch.