A financial intelligence unit is a national agency that collects reports of suspicious financial activity from banks and other regulated businesses, analyzes that data for signs of money laundering or terrorist financing, and passes the resulting intelligence to law enforcement. Every country that follows international anti-money-laundering standards runs one, and the global network now includes more than 180 FIUs coordinating across borders through the Egmont Group. In the United States, this role belongs to the Financial Crimes Enforcement Network, better known as FinCEN.
What an FIU Actually Does
An FIU sits between the private financial sector and law enforcement. Banks, money service businesses, and other regulated entities are required by law to flag transactions that look unusual. Those reports flow into the FIU, where analysts look for patterns, connections between accounts, and signs that someone is moving criminal proceeds or funding terrorism. When the analysis produces a credible lead, the FIU packages that intelligence and hands it to investigators or prosecutors who have the authority to act on it.
The distinction matters. FIUs do not make arrests, execute search warrants, or run criminal investigations. Their value comes from neutrality. Because an FIU is not a traditional policing body, financial institutions can share confidential data with it under legal protections that would not apply to a direct handoff to police. That buffer encourages more complete reporting and protects the integrity of the data pipeline.
The Three Core Functions
Every FIU performs three sequential functions that the Egmont Group defines as the operational baseline: receiving reports, analyzing them, and disseminating intelligence.
Collection
The FIU is the single national repository for suspicious transaction reports filed by regulated businesses. In the United States, those filings are called Suspicious Activity Reports. The FIU also receives currency transaction reports for cash activity above certain thresholds, along with other mandatory filings. Centralized collection ensures that data from thousands of separate institutions ends up in one place where patterns become visible.
Analysis
Analysts cross-reference incoming reports against each other and against other available data, including public records, commercial databases, and information from law enforcement agencies. The goal is to identify networks, trace the movement of funds, and determine whether a cluster of transactions points to criminal activity. This is where raw reports become intelligence. A single SAR from one bank might look unremarkable on its own, but combined with filings from three other institutions and cross-referenced against known laundering methodologies, it can reveal an operation no individual bank could see.
Dissemination
When analysis produces a credible picture of criminal financial activity, the FIU transmits an intelligence package to the appropriate domestic law enforcement or prosecutorial agency. If the trail crosses borders, the FIU can share intelligence with its counterpart in the relevant country, subject to international information-sharing protocols. The FIU decides what to disseminate and to whom.
How FIUs Are Structured Around the World
Not every country builds its FIU the same way. The Egmont Group recognizes three main organizational models, and the differences affect how information flows from the private sector to investigators.
- Administrative model. The FIU operates as an independent agency separate from both law enforcement and the judiciary. It receives financial disclosures, conducts its own analysis, and then transmits findings to prosecutors or police. This buffer design keeps raw financial data at arm’s length from investigative agencies until the FIU determines the intelligence warrants further action. The United States, through FinCEN, uses this model.
- Law enforcement model. The FIU is housed within an existing law enforcement agency. This can speed up the path from suspicious report to active investigation, but it also means the financial data lands directly inside a policing body with its own enforcement priorities.
- Judicial model. The FIU sits within the judicial branch. Suspicious activity disclosures go to investigative agencies, and the judiciary can respond with powers like freezing accounts, ordering searches, or detaining suspects.
Each model trades independence against speed. The administrative model prioritizes careful analysis and institutional separation. The law enforcement model prioritizes rapid action. Countries choose based on their legal traditions and the structure of their existing institutions.
Who Feeds Information Into the FIU
The reporting pipeline starts with the private sector. In the United States, the Bank Secrecy Act requires financial institutions to maintain records and file reports that help detect money laundering and terrorist financing.
The two most common filing obligations are:
- Currency Transaction Reports (CTRs). Any cash transaction exceeding $10,000 in a single business day must be reported. Multiple smaller cash transactions by the same person that add up to more than $10,000 in one day are aggregated and treated as a single reportable transaction.
- Suspicious Activity Reports (SARs). When a transaction or pattern of behavior seems inconsistent with a customer’s known profile or suggests possible criminal activity, the institution must file a SAR. The trigger is the nature of the activity rather than a specific dollar amount.
These obligations apply to banks, credit unions, broker-dealers, and other traditional financial institutions. They also extend to casinos, money service businesses, insurance companies, and dealers in precious metals or stones. In many countries the reporting net is wider still, covering real estate professionals, lawyers, and accountants under international standards for designated non-financial businesses and professions.
Filing Deadlines
A financial institution generally has 30 calendar days from the date it first detects potentially suspicious activity to file a SAR. If the institution cannot identify a suspect at the time of detection, it gets an additional 30 days to investigate, but the total window cannot exceed 60 days from the initial detection date.
Confidentiality and Safe Harbor
SAR filings are strictly confidential. Federal law prohibits the institution, its employees, and any government personnel with knowledge of the report from telling the subject of the filing that a SAR exists. The no-tipping-off rule applies even after an employee leaves the institution, and it extends to revealing any information that would indicate a report was made.
In exchange for mandatory reporting, the law provides a safe harbor. A financial institution that files a SAR, whether voluntarily or as required, receives complete immunity from civil liability for making the disclosure. Without that protection, banks would face an impossible choice between a legal duty to report and the risk of being sued by the customer they reported.
FinCEN: The U.S. Financial Intelligence Unit
The Financial Crimes Enforcement Network operates within the U.S. Department of the Treasury and serves as the country’s FIU. Its stated mission is to safeguard the financial system from illicit activity, counter money laundering and terrorist financing, and promote national security through the collection, analysis, and dissemination of financial intelligence.
FinCEN administers the Bank Secrecy Act, which gives the Treasury Department authority to impose reporting and recordkeeping requirements on financial institutions. The BSA’s stated purposes include requiring reports useful for criminal and tax investigations, preventing money laundering through risk-based compliance programs, facilitating the tracking of criminally sourced funds, and establishing frameworks for information sharing between financial institutions and law enforcement.
The Egmont Group and Cross-Border Cooperation
Money laundering rarely stays within one country’s borders. A domestic FIU tracing suspicious funds will often hit a wall when the money moves overseas, and at that point it needs a counterpart on the other side willing and able to help. The Egmont Group exists to make that cooperation work.
The network includes over 180 member FIUs spanning every region, from the Americas to Eurasia to West and Central Africa. It provides a secure platform for exchanging financial intelligence and promotes common standards for how FIUs operate. The Financial Action Task Force, which sets the global anti-money-laundering benchmarks, directs countries whose FIUs meet the Egmont Group’s standards to seek membership.
How Information Sharing Works
The Egmont Group’s Principles for Information Exchange, which became binding on all members as of July 2025, establish the ground rules for cross-border intelligence sharing:
- Reciprocal exchange. Member FIUs must share information freely, both on request and spontaneously when they spot something relevant to another country. The exchange works regardless of whether the requesting FIU follows an administrative, law enforcement, or judicial model.
- Domestic queries for foreign partners. An FIU that receives a request from a foreign counterpart should be able to run the same domestic searches it would run for its own cases and share the results, subject to legal restrictions in either country.
- Proportionate requests. Requests must be specific, clearly relevant, and limited in scope. Fishing expeditions that would overburden the responding FIU are discouraged.
- Urgency flags. When time matters, the requesting FIU must indicate the need for speed so the responding FIU can prioritize accordingly.
Non-compliance carries consequences. The Egmont Group maintains a formal support and compliance process for members who fall short, which can ultimately affect a country’s standing in the network. For FIUs that depend on international intelligence to track cross-border laundering, losing access would be a serious operational blow.
Institutional independence, reinforced by FATF Recommendation 29’s requirement that FIUs operate autonomously, is what keeps this whole system credible. The moment an FIU starts behaving like a police agency, the trust that makes financial institutions willing to share sensitive data erodes, and the intelligence pipeline dries up along with it.