Anti-Money Laundering (AML) Compliance for Pet Insurance MGAs: What's Required?

AML compliance is often overlooked by pet insurance MGAs because pet insurance is considered lower-risk than life insurance or annuities. However, the BSA and FinCEN regulations apply to all insurance companies, and your fronting carrier will expect you to maintain an AML program.

Talk to Our Specialists

What Is the Regulatory Framework for AML in Insurance?

The regulatory framework for AML in insurance is built on the Bank Secrecy Act (BSA), USA PATRIOT Act Section 352, FinCEN regulations, and the NAIC AML Model Regulation. Together, these laws require all insurance entities including pet insurance MGAs to maintain AML compliance programs, report suspicious activity, screen against sanctions lists, and cooperate with government investigations.

1. Bank Secrecy Act (BSA)

The BSA requires financial institutions, including insurance companies, to:

• Maintain AML compliance programs
• Report suspicious activity
• Keep records of financial transactions
• Cooperate with government investigations

2. USA PATRIOT Act Section 352

Section 352 requires every insurance company to establish an AML program that includes:

1. Internal policies, procedures, and controls
2. Designation of a compliance officer
3. Ongoing employee training program
4. Independent testing (audit) function

3. FinCEN Requirements

FinCEN (Financial Crimes Enforcement Network) regulations applicable to insurance:

• 31 CFR § 1025 Rules for insurance companies
• Suspicious Activity Report (SAR) filing obligations
• Currency Transaction Report (CTR) requirements (rare for pet insurance)
• Customer Identification Program (CIP) requirements

4. NAIC AML Model Regulation

The NAIC Insurance Model Regulation for AML compliance:

• Adopted in most states
• Requires insurers and their agents to maintain AML programs
• Sets minimum standards for customer due diligence
• Establishes training and audit requirements

What Are the MGA's Specific AML Obligations?

An MGA's AML obligations include maintaining its own AML program aligned with the carrier's requirements, reporting suspicious activity to the carrier, conducting OFAC screening at the point of application, training staff, and submitting to carrier AML audits. The MGA and carrier share responsibilities, but the MGA must independently uphold compliance at the operational level.

1. Your Role vs Carrier's Role

Obligation	MGA Responsibility	Carrier Responsibility
AML program	Maintain own program aligned with carrier	Oversee MGA compliance
SAR filing	Report suspicious activity to carrier	File SARs with FinCEN
OFAC screening	Screen at point of application	Verify and maintain screening
Training	Train MGA staff	Provide training materials
Audit	Subject to carrier AML audit	Conduct MGA AML audits
Record keeping	Maintain transaction records	Oversee record retention

2. Practical Risk Assessment

Pet insurance has lower AML risk than other insurance lines because:

• Average premiums are relatively small ($30–$100/month)
• Limited cash surrender value (unlike life insurance)
• No large lump-sum payouts (compared to life insurance)
• Policyholder is usually also the beneficiary

However, risk still exists in:

• Large commercial pet insurance programs
• Premium fraud schemes
• Claims fraud (false veterinary invoices)
• Structuring through multiple policies

How Do You Build an AML Program for a Pet Insurance MGA?

Building an AML program requires six sequential steps: conducting a risk assessment, documenting written policies and procedures, designating a compliance officer, implementing customer due diligence (CDD), establishing a training program, and arranging independent testing. Each step builds on the previous one to create a comprehensive compliance framework.

1. Risk Assessment

Conduct a written risk assessment evaluating:

• Products offered (accident-only, A&I, wellness)
• Distribution channels (direct, agent, online)
• Customer base (demographics, geography)
• Transaction types and sizes
• Geographic risk factors

2. Written Policies and Procedures

Document procedures for:

• Customer identification and verification
• OFAC/sanctions screening
• Suspicious activity detection and reporting
• Record keeping and retention
• Escalation procedures

3. Compliance Officer

Designate a BSA/AML compliance officer who:

• Has authority to implement the program
• Reports directly to senior management
• Has adequate resources and training
• Maintains current knowledge of AML regulations

4. Customer Due Diligence (CDD)

Implement CDD procedures:

• Customer Identification Program (CIP) - Verify identity at application
• OFAC screening - Check against SDN and other sanctions lists
• Risk-based due diligence - Enhanced screening for higher-risk applicants
• Ongoing monitoring - Review for unusual patterns

5. Training Program

Train all staff who interact with customers:

• Annual AML awareness training
• Red flag identification
• Escalation procedures
• Record keeping requirements
• Document training completion

6. Independent Testing

Arrange for independent testing of the AML program:

• Annual audit by internal audit or external firm
• Test transaction monitoring effectiveness
• Review policies and procedures for adequacy
• Report findings to senior management

What Are the OFAC Compliance Requirements for Pet Insurance?

OFAC compliance requires all US insurance entities, including pet insurance MGAs, to screen customers against the Specially Designated Nationals (SDN) list and other consolidated sanctions lists before binding coverage, at renewal, and when processing claims. Failure to screen can result in significant civil penalties even for unintentional violations.

1. Screening Requirements

All US insurance entities must screen against:

• SDN List - Specially Designated Nationals
• Consolidated Sanctions List - Multiple OFAC lists combined
• Sectoral Sanctions - Industry-specific restrictions

2. When to Screen

• At policy application/binding
• At policy renewal
• When adding named insureds
• When processing claims payments
• Periodically against updated lists

3. Screening Process

Step	Action
1	Screen applicant name against OFAC SDN list
2	If potential match, investigate further
3	If confirmed match, do not bind coverage
4	Report to compliance officer
5	File blocking report with OFAC if required
6	Document screening results

4. Tools

• OFAC's free Sanctions List Search tool
• Commercial screening services (LexisNexis, World-Check)
• Automated screening integrated with PAS
• Carrier-provided screening tools

How Do You Detect Suspicious Activity in Pet Insurance?

Suspicious activity in pet insurance is detected by monitoring for red flags such as multiple policies for the same pet with different information, unusually large cash premium payments, frequent policyholder changes, and suspicious veterinary documentation. Staff must be trained to recognize these indicators and follow a structured escalation and reporting process.

1. Red Flags for Pet Insurance

While rare, watch for:

• Multiple policies purchased for the same pet with different information
• Unusually large premium payments by cash or money order
• Frequent changes to policyholder information
• Claims submitted with suspicious veterinary documentation
• Requests to cancel policies shortly after large claim payments
• Applicants on sanctions or watchlists

2. Reporting Process

1. Staff identifies potential suspicious activity
2. Report to BSA/AML compliance officer
3. Compliance officer evaluates and documents
4. If warranted, report to carrier's compliance team
5. Carrier files SAR with FinCEN (if applicable)
6. Maintain all documentation confidentially

What Record Keeping Is Required for AML Compliance?

AML record keeping requires maintaining customer identification records, OFAC screening results, transaction records, internal suspicious activity reports, training records, and audit reports for a minimum of five years. Your carrier will audit these records annually to verify your AML program's effectiveness and compliance with federal and state regulations.

1. Required Records

Maintain for at least 5 years:

• Customer identification records
• OFAC screening results
• Transaction records
• Suspicious activity reports (internal)
• Training records
• Audit reports

2. Carrier Audit Expectations

Your carrier will audit your AML program:

• Annual review of AML policies
• Sample testing of OFAC screening
• Training completion verification
• Review of suspicious activity reports
• CDD procedure compliance

For compliance monitoring guidance, see our comprehensive program guide.

Talk to Our Specialists

Frequently Asked Questions

Do pet insurance MGAs need an AML program?

Yes. BSA requires all insurance entities to maintain AML programs, even though pet insurance is lower-risk.

What are the key AML program components?

Written policies, compliance officer, employee training, independent testing, CDD procedures, and suspicious activity reporting.

Does an MGA need to file SARs?

MGAs report suspicious activity to the carrier, which typically files SARs with FinCEN. Some arrangements require direct MGA filing.

What OFAC requirements apply?

Screen all customers against the SDN list. You cannot issue policies to sanctioned individuals or entities.

How often should AML training be conducted?

At minimum annually for all customer-facing staff. New hires should complete AML training during onboarding before engaging in any customer-facing activity.

What penalties can an MGA face for AML non-compliance?

Civil fines up to $25,000 per violation per day from FinCEN, criminal prosecution for willful violations, loss of carrier partnerships, and state regulatory action.

How should an MGA handle a potential OFAC match?

Do not bind coverage. Escalate to the compliance officer immediately. If confirmed, block the transaction and file a blocking report with OFAC within 10 business days.

Can an MGA outsource its AML compliance program?

Components like OFAC screening can be outsourced, but ultimate responsibility stays with the MGA. A designated internal compliance officer must oversee the program.

External Sources

• https://www.fincen.gov/
• https://sanctionssearch.ofac.treas.gov/

Internal Links

• Explore Services → https://insurnest.com/services/
• Explore Solutions → https://insurnest.com/solutions/