SEC and FinCEN Propose Rule Mandating Customer ID Programs for Investment Advisers to Combat Illicit Finance

The assumption that the U.S. financial system is a uniformly fortified fortress against illicit finance has a multi-trillion-dollar blind spot. While traditional banks and broker-dealers have spent decades building massive compliance departments to verify exactly who is moving money through their pipes, the investment advisory sector has largely operated on an honor system. Registered investment advisers (RIAs) and exempt reporting advisers (ERAs) manage over $100 trillion in assets globally, yet they have historically been exempt from the strict anti-money laundering (AML) and identity verification rules that govern the rest of Wall Street.[4]

That era of regulatory exceptionalism is ending. The Securities and Exchange Commission (SEC) and the Financial Crimes Enforcement Network (FinCEN) have jointly proposed a rule that would mandate Customer Identification Programs (CIP) for these advisers. The proposal would formally designate covered investment advisers as "financial institutions" under the Bank Secrecy Act. This reclassification forces the private capital industry to adopt the same rigorous "Know Your Customer" (KYC) standards that a retail bank applies to a customer opening a checking account.[1]

The mechanics of the proposed rule are straightforward but operationally massive. Advisers would be required to collect and verify the full legal name, date of birth, residential or business address, and taxpayer identification number of any person or entity seeking to open an account. This verification must occur within a "reasonable time" before or after the account is opened. Crucially, the rule requires advisers to maintain written compliance policies detailing exactly how they will substantiate a customer's identity and what steps they will take—including declining the account—if that identity cannot be verified.

The stakes driving this regulatory push are severe. The Treasury Department's 2024 Investment Adviser Risk Assessment explicitly warned that private funds serve as an attractive entry point for illicit proceeds. The combination of high returns and structural anonymity has made the sector vulnerable to exploitation by sanctioned oligarchs, foreign adversaries, and criminal syndicates. Because advisers have not been required to evaluate money laundering risks or identify the ultimate beneficial owners behind shell companies, illicit funds can easily be pooled with legitimate capital and invested into U.S. securities and real estate.[4]

For the industry, the compliance burden represents a structural shift. Historically, many advisers relied on the custodians holding their clients' assets—such as large broker-dealers—to perform the necessary AML and CIP checks. While the SEC has previously allowed broker-dealers to rely on the CIPs of affiliated advisers under certain conditions, the new joint proposal shifts the affirmative legal burden of identity verification directly onto the advisers themselves. They can no longer assume that because funds arrived from a U.S. bank, the client has been properly vetted.[2]

The timeline for these sweeping changes has been a source of intense industry focus. FinCEN recently finalized a broader rule extending general AML and Suspicious Activity Report (SAR) requirements to investment advisers, but subsequently delayed its effective date from 2026 to January 1, 2028. The agency cited the need to give firms adequate lead time to build compliance infrastructure and to coordinate the broader AML rollout with the specific requirements of the joint CIP proposal.[1][2][3]

Despite the delayed enforcement timeline, regulatory experts are warning firms not to misread the extension as a retreat. The underlying policy expectation remains unchanged, and building a defensible, risk-based compliance program requires significant changes to governance models, staffing, and technology infrastructure. Compliance teams are already conducting gap analyses and engaging third-party vendors to automate KYC checks, recognizing that the regulatory perimeter has permanently expanded to encompass private markets.[1]

The push to regulate investment advisers is part of a broader, government-wide effort to seal the U.S. financial system against illicit funds. As the regulatory landscape continues to evolve, the private capital industry must adapt to a new reality where transparency and accountability are no longer optional, but mandatory.[4]