The USA PATRIOT Act is post-9/11 US legislation that greatly expanded anti-money-laundering and counter-terrorist-financing requirements. It is the origin of many controls operators use every day, from customer identification programs to the 314 information-sharing framework and enhanced correspondent-banking scrutiny.
What is the PATRIOT Act, in plain English?
The USA PATRIOT Act is a sweeping piece of US legislation passed after the September 11 attacks. A large part of it, often called Title III, was aimed at cutting off money laundering and terrorist financing. It did not start from scratch; instead it amended and strengthened the Bank Secrecy Act, layering new obligations onto the existing AML framework.
Those obligations are the reason your daily controls look the way they do. The Act mandated customer identification programs at onboarding, imposed enhanced due diligence on correspondent and private-banking relationships, created the 314(a) and 314(b) information-sharing mechanisms, and gave the Treasury power to impose special measures against high-risk jurisdictions and institutions.
For operators, the practical framing is that the PATRIOT Act is the source of the plumbing. When someone asks why you must verify identity at account opening, or why correspondent relationships get extra scrutiny, the answer usually traces back to this Act.
What it added to AML
The Act introduced several controls that operators now treat as routine:
- Onboard — Customer identification programs. Firms must verify the identity of customers before or shortly after opening accounts.
- Correspondent — Enhanced due diligence. Correspondent and private-banking relationships require heightened scrutiny and controls.
- Share — 314(a) and 314(b). Frameworks let law enforcement query firms and let firms share information with each other.
- Target — Special measures. The Treasury can impose restrictions on high-risk jurisdictions and institutions.
Who is involved?
Who | Their role |
The US Treasury | Implements the Act through FinCEN rules and can impose special measures. |
Financial institutions | Run customer identification programs, correspondent EDD, and 314 processes. |
Law enforcement | Uses 314(a) to query institutions for accounts tied to significant investigations. |
Compliance teams | Operate the daily controls the Act created and evidence them at exams. |
What it looks like in practice
In practice
A new customer applies to open a business account at a bank. Before the account goes live, the onboarding team runs the customer identification program: it collects and verifies identifying information and screens the parties. That step exists because the PATRIOT Act requires it.
Later, the same bank receives a 314(a) request naming a subject in a terrorism-financing investigation and searches its records for a match. Separately, its correspondent-banking team applies enhanced due diligence to a foreign respondent bank, gathering ownership and control information before opening the relationship. None of these controls are optional, and all three trace directly to obligations the Act created.
Why it matters to operators
The PATRIOT Act matters because it is the origin of core daily obligations, not a historical footnote. Customer identification programs, the 314(a) and 314(b) processes, and enhanced correspondent-banking scrutiny are all things your team does routinely, and all of them exist because of this Act. Understanding that lineage helps you explain why a control is mandatory rather than discretionary.
It also matters because these obligations are examined and enforced. A weak customer identification program or a missed 314(a) search is a control failure examiners will flag, so knowing which requirements trace to the Act helps you prioritize what has to be airtight. The Act set the foundation the rest of the US AML regime builds on.
What to watch
- Customer identification program. Verifying identity at onboarding is a PATRIOT Act mandate; gaps here are basic, high-visibility failures.
- Correspondent EDD. Enhanced scrutiny of correspondent and private-banking relationships is required, including ownership and control information.
- 314(a) timeliness. Searches carry firm response windows; missing them is a documented control failure.
- 314(b) opportunities. Voluntary information sharing can strengthen a thin case; use it where it helps.
- Special measures. Treasury actions against high-risk jurisdictions or institutions can require you to restrict or exit relationships.
Quick questions
Did the PATRIOT Act create the Bank Secrecy Act?
No. The Bank Secrecy Act predates it. The PATRIOT Act amended and strengthened the BSA, adding major new AML and counter-terrorist-financing obligations rather than starting a new framework.
What is a customer identification program?
A required process for verifying the identity of customers at account opening, collecting identifying information and confirming it. The PATRIOT Act made it mandatory, which is why it is standard at every US institution.
What are the 314 processes?
314(a) lets law enforcement query institutions for accounts tied to significant investigations. 314(b) is a voluntary framework letting institutions share information with each other to identify laundering or terrorist financing.
What are special measures?
Powers the Treasury can use to impose restrictions or extra requirements on jurisdictions or institutions deemed a primary money-laundering concern. They can force firms to limit or cut certain relationships.
Why is correspondent banking singled out?
Because it lets funds move through intermediary banks with less direct visibility, which raises laundering risk. The Act requires enhanced due diligence on these relationships to close that gap.
Is the PATRIOT Act still in force?
Its AML provisions remain foundational to US financial-crime compliance, and later laws have built on them. The controls it introduced are still core parts of daily programs.