Last quarter, three Money Service Businesses I advise received nearly identical letters: “After a comprehensive review of your account, we are unable to continue providing banking services. Your account will close in 30 days.” No explanation beyond “elevated risk profile.” No remediation path. No appeal.
In 2026, de-risking remains the quiet crisis in correspondent banking — and pressure is intensifying. As U.S. regulators recalibrate AML expectations through the FinCEN AML/CFT Program Rule NPRM, as OFAC and FinCEN roll out the GENIUS Act compliance regime for stablecoin issuers, and as FATF expands its grey list, the downstream effect on smaller institutions is predictable: MSBs, fintechs, VASPs, and foreign correspondent banks are finding it harder than ever to secure and retain banking access.
The uncomfortable truth? Most de-risking terminations are not driven by actual bad actors. They are driven by banks’ internal math — where the compliance cost of a customer segment no longer justifies the revenue. Here is what that looks like in 2026, and five moves your institution can make this quarter to stay on the right side of that math.
What De-Risking Actually Looks Like in 2026
De-risking is not a regulatory action. It is a business decision by a bank to terminate or restrict entire categories of customers deemed “high risk” — not because a specific customer has misbehaved, but because the aggregate risk-reward of the segment no longer makes sense on the bank’s balance sheet.
In 2026, the segments feeling the sharpest pressure are:
• Money Service Businesses — especially non-bank remittance providers serving corridors into grey-list or high-risk jurisdictions.
• Crypto/VASPs and permitted payment stablecoin issuers navigating new GENIUS Act compliance expectations.
• Foreign correspondent banks in jurisdictions added to FATF’s grey list (Kuwait and Papua New Guinea joined in February 2026).
• Social casino and sweepstakes gaming operators working through evolving state-by-state AML expectations.
• Cannabis-related businesses in U.S. states where federal-state legal conflicts persist.
Why 2026 Is Different
Three dynamics are amplifying de-risking pressure in 2026.
First, the GENIUS Act NPRM (April 8, 2026) marks the first time OFAC has explicitly required a category of financial institutions — permitted payment stablecoin issuers — to maintain an effective sanctions compliance program. Banks are reading this as a clear signal that sanctions-related enforcement is tightening, and many are quietly reducing exposure to segments perceived as sanctions-sensitive, including crypto intermediaries and cross-border payment providers.
Second, FinCEN’s April 2026 AML/CFT Program Rule NPRM will shift programs from a checklist posture to a formally risk-based, priorities-aligned model. Banks are using this moment to re-underwrite their customer portfolios. Recalibration often means walking away from relationships whose compliance burden exceeds their commercial return.
Third, FATF’s February 2026 plenary added Kuwait and Papua New Guinea to the grey list — bringing the total to 23 jurisdictions under increased monitoring, alongside Iran, DPRK, and Burma on the call-for-action list. Every new listing expands the enhanced due diligence burden on correspondent relationships that touch those corridors.
The Real Cost of De-Risking
Regulators — including FinCEN, FATF, and the World Bank — have long warned that de-risking has unintended consequences: it pushes financial flows into less-regulated channels, weakens financial inclusion, and ultimately undermines AML objectives. Yet the commercial logic inside individual banks keeps driving the trend.
For an MSB or fintech, a single correspondent termination can mean:
• 30–90 days to find a replacement bank — if possible.
• Operational disruption, delayed remittances, and customer attrition.
• A “scarlet letter” effect — other banks see the termination and decline to onboard.
• In the worst cases, outright business failure.
Five Moves to Preserve — and Strengthen — Banking Relationships
Losing a correspondent relationship is existential. Here are five moves we recommend at FinCheck — grounded in what actually keeps banks comfortable in 2026.
1. Build a “Bank-Ready” Compliance Package. Your correspondent bank’s compliance team is not your AML expert — you are. Package your program so they can evaluate it in one sitting: written AML program, annual risk assessment, OFAC policy, SAR metrics, independent audit findings and remediation status, board oversight minutes, and BSA Officer credentials. Update it annually and share proactively at relationship reviews.
2. Invest in Transaction Monitoring That Tells a Story. Modern banks expect meaningful monitoring — not just alert volume. Deploy tuned rules, document disposition rationale for every alert, and maintain a clean audit trail. If you rely on AI-driven monitoring, document the governance model around model validation, explainability, and human-in-the-loop review.
3. Own Your High-Risk Exposures. Banks expect candor. Map your customer base by risk tier. Disclose concentrations in FATF grey-list corridors, high-risk MCC/NAICS codes, or PEP relationships — and show the enhanced due diligence you apply. Counter-intuitively, transparency reduces de-risking pressure, because it shows the bank you understand and manage the risk they are worried about.
4. Pre-Empt Regulatory Change. The GENIUS Act stablecoin regime, FinCEN’s AML/CFT Program Rule, and each FATF listing update create questions your correspondent bank will eventually ask. Brief your bank first. A pre-emptive memo from your BSA Officer — “here is how the April 2026 FinCEN NPRM affects our program, and here is what we are doing about it” — positions you as a sophisticated partner, not a compliance risk.
5. Diversify Banking Relationships. Single-bank dependency is existential risk. Maintain at least two active correspondent relationships, even if one handles 80% of volume. When a termination letter arrives — and eventually, one will — you want runway, not a 30-day cliff. Begin onboarding a second bank while the first is still healthy.
FinCheck’s Perspective & Way Forward
De-risking is not going away. But the institutions most likely to retain correspondent banking in 2026 and beyond will share three traits: a credible, risk-based AML program; transparent governance; and a proactive posture toward regulatory change.
At FinCheck, our fractional CCO and AML program-build engagements are designed precisely for this moment — helping MSBs, fintechs, stablecoin issuers, social casino and sweepstakes operators, and foreign correspondent counterparties present a compliance posture that banks want to keep on their books. In a landscape where regulators reward risk-based thinking and banks reward transparency, the competitive advantage belongs to operators who can demonstrate both.
The era of check-the-box compliance is ending. The era of “show me the thinking behind your program” has begun. Position accordingly.
Protect your banking relationships — before the letter arrives. FinCheck LLC helps MSBs, fintechs, crypto/VASPs, and gaming operators build the kind of AML program that correspondent banks want to keep. Visit www.fincheckllc.com to schedule a consultation.
#AML #AMLCompliance #FinancialCrime #DeRisking #CorrespondentBanking #MSB #Fintech #GENIUSAct #FinCEN #FATF #Sanctions #OFAC #RegTech #BSA #KYC #Compliance #FractionalCCO #FinCheck
