signzy

API Marketplace

downArrow
Logo
Responsive
Decorative line

NYDFS Part 504 AML Rule

United States

United States

2017

AML/CFT

Overview

The New York Department of Financial Services (NYDFS) Part 504 Rule, effective January 2017, sets out stringent requirements for transaction monitoring and sanctions filtering programs within financial institutions operating under NYDFS supervision. It is considered one of the most rigorous state-level AML regulations in the United States, going beyond federal BSA/AML requirements by mandating direct accountability of senior management for compliance effectiveness.
The rule applies to New York–licensed banks, branches and agencies of foreign banks, trust companies, money transmitters, and check cashers. It requires these institutions to design, implement, and annually certify their AML and sanctions screening systems, ensuring they are tailored to business models and risk profiles. This regulation is particularly critical for institutions with large cross-border operations, payment networks, and correspondent banking relationships.

Key Obligations

  • Maintain a robust, risk-based transaction monitoring program to detect suspicious activity
  • Implement a sanctions filtering system aligned with OFAC and other global watchlists
  • Conduct annual certification of compliance by the board or a senior officer (personal liability for false certification)
  • Calibrate systems based on institution-specific risks, products, services, and geographies
  • Document program design, model validation, governance, and tuning processes
  • Retain supporting records for examinations and audits

FAQ

Who must comply with Part 504?

All financial institutions regulated by NYDFS, including New York branches of foreign banks.

What makes this rule unique?

The annual certification requirement, which places accountability directly on boards and senior officers.

Does Part 504 replace federal AML rules?

No, it supplements federal AML laws by adding stricter state-level expectations.

What are the penalties for violations?

Enforcement actions may include civil monetary penalties, regulatory restrictions, and personal liability for certifying officers.