From Guidance to Law: This Week in AML — May 16, 2026
Four developments this week point in the same direction. The expectations that supervisors have communicated for years through guidance, examination findings, and enforcement actions are being written into statute and treaty law.
In Washington, the CLARITY Act cleared the Senate Banking Committee on a 15 to 9 vote, with a floor vote expected after the Memorial Day recess1. The bill is being read primarily as a crypto market-structure measure, but the AML provisions are the part program leaders should focus on. CLARITY embeds customer identification, customer due diligence, sanctions screening, and distributed-ledger-analytics-based SAR monitoring directly into the BSA framework for digital-asset intermediaries. It also creates a regulator-blessed AI compliance sandbox. Practices that have been encouraged through guidance from FinCEN and the federal banking agencies become statutory duties.
In Brussels, the Council of the European Union adopted the 20th sanctions package against Russia on May 142. Twenty Russian credit and financial institutions were listed, along with third-country banks in Azerbaijan, Laos, and Kyrgyzstan and four named non-bank payment agents. The anti-circumvention perimeter is no longer an interpretive matter. It is codified, with extraterritorial reach into the Caucasus and Southeast Asia.
In London, the United Kingdom’s new Sanctions End-Use Controls came into force on May 13 across 11 sanctions regimes3. Once His Majesty’s Government formally informs an exporter that a transaction carries diversion risk, proceeding without a license is a criminal offence. The duty to escalate is no longer best practice. It is enforceable law.
And in Washington again, FinCEN issued its first stand-alone alert focused on the Islamic Revolutionary Guard Corps, with a red-flag taxonomy that spans oil-smuggling, exchange-house front companies, and digital-asset off-ramps4. It is a SAR-detection lens that sits beside OFAC’s designation overlays rather than overlapping with them.
If a program already runs strong CDD, refreshes sanctions screening on a tight cadence, and watches digital-asset on- and off-ramps, none of this is disruptive. The work just stops being optional. Programs that have been deferring those investments have a few months to catch up.
Citations
1. U.S. Senate Committee on Banking, Housing, and Urban Affairs. Markup of the CLARITY Act, May 14, 2026. https://www.banking.senate.gov
2. Council of the European Union. Press release on the 20th package of restrictive measures against Russia, May 14, 2026. https://www.consilium.europa.eu
3. His Majesty’s Government, Office of Financial Sanctions Implementation and Foreign, Commonwealth and Development Office. Sanctions End-Use Controls, in force May 13, 2026. https://www.gov.uk/government/organisations/office-of-financial-sanctions-implementation
4. Financial Crimes Enforcement Network (FinCEN). Alert on Islamic Revolutionary Guard Corps Financial Activity, May 11, 2026. https://www.fincen.gov