Sources

> Disclaimer: This content is for educational and reference purposes for software builders only. It does not constitute medical, legal, financial, or regulatory advice. Consult a qualified professional before making decisions based on this content.

Authoritative Sources - AML/KYC/PSD2

US Federal Regulations (Public Domain - 17 U.S.C. § 105)

  • FinCEN BSA Regulations (31 CFR Parts 1010–1030) - Bank Secrecy Act implementing regulations including CDD Rule, SAR requirements, CTR requirements, and Travel Rule.
- URL: https://www.ecfr.gov/current/title-31/subtitle-B/chapter-X - License: Public domain (US federal government work)
  • 31 CFR § 1010.230 - CDD Rule (Beneficial Ownership)
- URL: https://www.ecfr.gov/current/title-31/subtitle-B/chapter-X/part-1010/subpart-B/section-1010.230 - License: Public domain
  • 31 CFR § 1010.311 - Currency Transaction Reporting
- URL: https://www.ecfr.gov/current/title-31/subtitle-B/chapter-X/part-1010/subpart-C/section-1010.311 - License: Public domain
  • 31 CFR § 1020.320 - SAR Filing Requirements (Banks)
- URL: https://www.ecfr.gov/current/title-31/subtitle-B/chapter-X/part-1020/subpart-C/section-1020.320 - License: Public domain
  • 31 CFR § 1020.220 - Customer Identification Programme (CIP)
- URL: https://www.ecfr.gov/current/title-31/subtitle-B/chapter-X/part-1020/subpart-B/section-1020.220 - License: Public domain
  • 31 CFR § 1010.410 - Travel Rule (Wire Transfers)
- URL: https://www.ecfr.gov/current/title-31/subtitle-B/chapter-X/part-1010/subpart-D/section-1010.410 - License: Public domain
  • 31 U.S.C. § 5324 - Structuring (Anti-Structuring Prohibition)
- URL: https://www.law.cornell.edu/uscode/text/31/5324 - License: Public domain
  • FinCEN SAR Activity Review - Trends, Tips & Issues
- URL: https://www.fincen.gov/resources/statutes-regulations/guidance/suspicious-activity-report-sar-activity-review-trends-tips-issues - License: Public domain
  • FinCEN BSA E-Filing System
- URL: https://bsaefiling.fincen.treas.gov/ - License: Public domain
  • OFAC SDN List and Sanctions Programmes
- URL: https://ofac.treasury.gov/sanctions-list-service - License: Public domain

EU Regulations (EUR-Lex CC-BY 4.0)

  • PSD2 - Directive (EU) 2015/2366/EU - Payment Services Directive 2, establishing Open Banking, SCA, and TPP licensing framework.
- URL: https://eur-lex.europa.eu/eli/dir/2015/2366/oj - License: CC-BY 4.0 (EUR-Lex)
  • PSD2 RTS on SCA - Delegated Regulation (EU) 2018/389 - Regulatory Technical Standards on Strong Customer Authentication and Common and Secure Open Standards of Communication.
- URL: https://eur-lex.europa.eu/eli/reg_del/2018/389/oj - License: CC-BY 4.0 (EUR-Lex)
  • 4th AMLD - Directive (EU) 2015/849 - Anti-Money Laundering Directive 4.
- URL: https://eur-lex.europa.eu/eli/dir/2015/849/oj - License: CC-BY 4.0 (EUR-Lex)
  • 5th AMLD - Directive (EU) 2018/843 - Anti-Money Laundering Directive 5 (PEP and crypto extensions).
- URL: https://eur-lex.europa.eu/eli/dir/2018/843/oj - License: CC-BY 4.0 (EUR-Lex)
  • eIDAS - Regulation (EU) 910/2014 - Electronic Identification and Authentication.
- URL: https://eur-lex.europa.eu/eli/reg/2014/910/oj - License: CC-BY 4.0 (EUR-Lex)
  • GDPR - Regulation (EU) 2016/679 - General Data Protection Regulation.
- URL: https://eur-lex.europa.eu/eli/reg/2016/679/oj - License: CC-BY 4.0 (EUR-Lex)

Industry and Technical Standards

  • FATF Recommendations (40 Recommendations) - International AML/CFT standards.
- URL: https://www.fatf-gafi.org/en/publications/Fatfrecommendations/Fatf-recommendations.html
  • W3C Web Authentication (WebAuthn) Level 2 - FIDO2/WebAuthn specification.
- URL: https://www.w3.org/TR/webauthn-2/
  • RFC 6238 - TOTP: Time-Based One-Time Password Algorithm
- URL: https://www.rfc-editor.org/rfc/rfc6238
  • RFC 4226 - HOTP: HMAC-Based One-Time Password Algorithm
- URL: https://www.rfc-editor.org/rfc/rfc4226
  • ISO 13616 - IBAN Standard
- URL: https://www.iso.org/standard/81090.html (reference by number; ISO text is copyrighted)
  • GLEIF - Global LEI Index
- URL: https://www.gleif.org/en/lei-data/global-lei-index
  • Berlin Group NextGenPSD2 API Standard
- URL: https://www.berlin-group.org/psd2-access-to-bank-accounts
  • UK Open Banking Standards (OBIE)
- URL: https://standards.openbanking.org.uk/
  • IVMS 101 - InterVASP Messaging Standard
- URL: https://intervasp.org/ivms101/