The New FinCEN Huione Group Rule: What Financial Firms Must Know

The Treasury Department's Financial Crimes Enforcement Network (FinCEN) has imposed a special measure regarding Huione Group, a foreign financial institution based in Cambodia that FinCEN found to be of primary money laundering concern under section 311 of the USA PATRIOT Act. Published as 90 FR 48295 on October 16, 2025, the rule is effective November 17, 2025. For covered U.S. financial institutions, that date is when two binding obligations start applying at once: a prohibition on correspondent accounts for Huione Group, and a due diligence duty covering every other foreign correspondent relationship the institution maintains.

This guide explains, in plain English, what the rule does, who it touches, what financial firms should do before the effective date, and how a firm can operationalize the ongoing screening and due diligence work at volume. It leads with the obligation and the date, not with any product. The aim is to give BSA/AML and compliance teams a clear, sourced picture they can act on without re-reading the full Federal Register entry themselves.

Key Takeaways

• A Treasury Department (FinCEN) final rule, cited as 90 FR 48295, imposes a special measure regarding Huione Group and is effective November 17, 2025.

• Covered U.S. financial institutions may not open or maintain a correspondent account for, or on behalf of, Huione Group as of the effective date.

• Covered institutions must also apply special due diligence to their other foreign correspondent accounts, reasonably designed to guard against those accounts being used to process transactions involving Huione Group.

• The rule revises 31 CFR Part 1010 and carries RIN 1506-AB68; it was published October 16, 2025.

• This post is informational only and is not legal or tax advice; consult a qualified attorney or tax advisor before acting on any specific situation.

What this rule actually does

Acting under section 311 of the USA PATRIOT Act, FinCEN found Huione Group to be a foreign financial institution of primary money laundering concern and responded with the most restrictive tool available under that authority: a prohibition on correspondent account access. The rule requires covered U.S. financial institutions to stop opening or maintaining correspondent accounts for, or on behalf of, Huione Group, as stated in 90 FR 48295. It is worth reading that scope carefully: the special measure targets one named foreign institution, but the compliance work it creates reaches every foreign correspondent account a covered institution holds, not just accounts already known to touch Huione Group.

That is because the rule does not stop at direct relationships. It also requires covered institutions to apply special due diligence to their foreign correspondent accounts generally, reasonably designed to guard against the use of those accounts to process transactions involving Huione Group (90 FR 48295). In practice, that means a covered institution cannot satisfy this rule by confirming it has no Huione Group account of its own; it also has to show that its due diligence program is designed to catch Huione Group exposure flowing indirectly through other foreign banks' U.S. correspondent activity.

The published date and the effective date matter separately here. October 16, 2025, is when the rule appeared in the Federal Register; November 17, 2025, is when the prohibition and the due diligence duty become binding on covered institutions (90 FR 48295). Any internal project plan or vendor screening update that has not accounted for the November date is a plan that is not yet aligned with when the obligations actually take effect.

Key facts and citation

The table below is a plain restatement of the rule's own citation data. Every value traces to the rule as published in the Federal Register; nothing here is estimated.

The two obligations under the rule

Stripped of legal phrasing, covered institutions face two distinct duties rather than one. The first is a flat prohibition: no correspondent account for Huione Group, direct or indirect, from the effective date forward. The second is a standing due diligence duty that applies regardless of whether the institution believes it has any Huione Group exposure at all. Both obligations come from the same rule text and share the same effective date (90 FR 48295).

Who is affected

The rule's obligations fall on "covered U.S. financial institutions" — the population FinCEN regulates under the Bank Secrecy Act framework, which generally includes banks, broker-dealers, credit unions, and other institutions subject to FinCEN's jurisdiction. The rule does not carve out an exemption based on institution size; a firm's first task is to confirm it is a covered institution at all, and its second is to check every foreign correspondent relationship it holds, not only the ones it associates with higher risk.

What Financial Firms should do before the date

The most important thing a financial firm can take from this rule is that both obligations apply from the effective date forward, with no phase-in period described in the rule. A firm that treats a "special measure" as a soft warning risks treating a binding prohibition as optional guidance. The rule requires covered institutions to meet both obligations by November 17, 2025 (90 FR 48295); it does not describe a grace period after that date.

A sensible, sourced preparation path looks like this. First, confirm whether the firm is a covered U.S. financial institution under the Bank Secrecy Act framework FinCEN administers, since that determines whether the prohibition and the due diligence duty apply at all. Second, search existing correspondent account records for any direct relationship with Huione Group, and close any that exist before the effective date, because the rule requires covered institutions not to open or maintain such an account (90 FR 48295). Third, extend Huione Group screening to every foreign correspondent account the firm maintains, not only accounts believed to touch Huione Group directly, since the due diligence duty is designed to catch indirect exposure through other foreign banks' U.S. correspondent activity. Fourth, document the due diligence methodology applied and retain records of the screening steps taken, since an examiner will look for evidence the special measure was operationalized, not merely acknowledged.

Throughout, the operative framing is that the rule requires covered institutions to meet both obligations by the effective date, and covered firms must confirm which of their accounts and relationships fall in scope. This is a description of the law as published in the Federal Register, not a personalized legal command to any reader, and it is not a substitute for advice from your own counsel.

Operationalizing the due diligence work at volume

The hard part for most firms is not the first read of this special measure — it is keeping Huione Group screening current across every foreign correspondent account, including relationships opened after the effective date, while the Federal Register keeps publishing related BSA/AML actions on its own schedule. That is a monitoring and documentation problem, and monitoring at volume is where US Tech Automations fits. Configured against the Federal Register feed, US Tech Automations' agentic workflow platform can monitor new documents tied to this rulemaking and its RIN 1506-AB68, flag correspondent accounts that need a fresh due diligence review, and route the resulting documentation into a named BSA/AML reviewer's queue instead of a shared inbox — so the prohibition and the due diligence duty both stay operational well past the first week after November 17, 2025.

How this fits the broader regulatory window

This rule does not exist in isolation. It is one of 259 federal rules sealed in our point-in-time index of rules published July 1, 2024 – July 5, 2026 by 10 agencies governing our covered industries. Section 311 special measures are a recurring category within that window, and each one names a different foreign institution with its own effective date and its own correspondent-account fact pattern. A firm that tracks only the special measures it already knows about, on the schedule it first wrote down, will eventually miss one that lands on top of an existing due diligence workload. Firms that want the monitoring and documentation workflow described above built out end-to-end can see current US Tech Automations plans for details.

The takeaway for compliance leadership is straightforward: this special measure is binding as of November 17, 2025, it creates two distinct obligations rather than one, and it is unlikely to be the last Section 311 action a covered institution has to absorb. Building a durable way to watch the regulatory stream — and to route what matters to the people who can act on it — pays off well beyond this single rule.

Frequently asked questions

What is the effective date of FinCEN's Huione Group special measure?

The rule is effective November 17, 2025, as stated in the rule published at 90 FR 48295. It was published in the Federal Register on October 16, 2025.

What does the special measure actually prohibit?

Covered U.S. financial institutions may not open or maintain a correspondent account for, or on behalf of, Huione Group, effective November 17, 2025 (90 FR 48295).

Does the rule only affect institutions with a direct relationship to Huione Group?

No. The rule also requires covered institutions to apply special due diligence to their other foreign correspondent accounts, reasonably designed to guard against those accounts being used to process transactions involving Huione Group (90 FR 48295).

Which part of the Code of Federal Regulations does this rule affect?

The rule revises the regulations at 31 CFR Part 1010. The RIN for the rulemaking is 1506-AB68.

Which agency issued this rule?

The rule was issued by the Treasury Department through its Financial Crimes Enforcement Network (FinCEN), acting under section 311 of the USA PATRIOT Act (90 FR 48295).

What counts as a "covered financial institution" under this rule?

The rule applies to covered U.S. financial institutions as defined under the Bank Secrecy Act framework FinCEN administers. The rule text at 90 FR 48295 is the controlling definition, and a qualified BSA/AML attorney can confirm how it applies to a specific institution.

Related guidance

For related financial-services and AML compliance coverage, see our notes on FinCEN's special measure regarding Al-Huda Bank, the geographic targeting order for financial services, and beneficial ownership information reporting requirements.

Disclaimer

This article is provided for informational purposes only and does not constitute legal or tax advice. Reading it does not create an attorney-client relationship. Regulatory requirements are fact-specific, and you should consult a qualified attorney or tax advisor before acting on any matter discussed here. Every date, citation, RIN, CFR reference, and figure in these posts is copied verbatim from the Federal Register and eCFR as of the snapshot date. Nothing is estimated, modeled, or extrapolated. This is not legal or tax advice.

Last reviewed: July 5, 2026.

Source: Federal Register / eCFR — 90 FR 48295; current text via eCFR, 31 CFR Part 1010.