Currency exchanges and MSBs

As of September 2026: Regulatory thresholds are stated from the regulation text as reviewed in September 2026. We did not confirm from a primary source how the court sentenced Ping Express U.S. LLC itself after its July 2022 plea; the case facts here are as DOJ described them at the plea. Western Union, Wachovia, and HSBC figures are those DOJ stated at the time of each agreement.

Also called: money services businesses · money transmitters · casas de cambio · check cashers.

What are currency exchanges and MSBs?

A money services business, or MSB, is a regulated company that handles money without being a bank. In the United States the category covers currency exchange dealers, check cashers, money transmitters, sellers of money orders and traveler’s checks, and providers and sellers of prepaid access. The Treasury’s 2024 risk assessment counts about 26,472 registered MSBs. The people who use them include migrants sending wages home, travelers, and customers who find banks too slow, too expensive, or too far away.

That ordinary usefulness is the reason MSBs matter to launderers. An exchange house on a border street, a remitter in a strip mall, or a check casher in a city neighborhood can take cash across a counter with no bank account required. The Mexican version, the casa de cambio, is simply a currency exchange house.

For most MSBs, none of this is a problem. The risk comes from two sources. One is a complicit or corrupt operator who knowingly accepts criminal cash. The other is a careless one, whose controls exist on paper but do not work, so suspicious flows pass through unnoticed. Both are visible in the enforcement record below.

How do MSBs get used to launder money?

A criminal group that holds cash faces an old problem: cash is bulky, traceable to its owner if seized, and hard to spend at scale. An MSB solves that problem in a few steps.

1. Cash goes in. Cash is handed over at a counter or agent location. The customer may or may not be identified, depending on the amount and the operator’s controls.
2. Value is pooled. The MSB deposits cash into its own bank accounts, where it mixes with the business’s legitimate takings and with other customers’ money.
3. Conversion and transfer. The MSB converts the currency and sends the value abroad, by wire, through a payment network, or by settling with a partner. This is the point at which the link to the cash’s origin is cut.
4. Payout. A recipient or an account abroad receives the funds in another currency, often described as a family payment, a business payment, or a purchase.

In the placement stage the MSB is the doorway that turns cash into bank money. In the layering stage it becomes a link in a chain, because value can be moved abroad quickly and, if the operator is complicit, with invented paperwork. In one 2023 case described in the US assessment, an unlicensed exchange owner in Paraguay accepted about $800,000 in US currency and passed it through accounts in several countries. He and his associates generated fraudulent invoices that gave the transfers a business reason. The cash had come from undercover FBI agents.

Why this technique works

Each MSB is a small door. There are thousands of them. Each sees only its own customers, so no single one sees the pattern across the system.

Conversion cuts the link. Once dollars have become pesos, or a cash deposit has become a wire, the receiving side sees a normal-looking transfer from a business that is allowed to make them.

Volume and diversity provide cover. The United States sent about $72.1 billion abroad in remittances in 2021. Criminal flows move through the same corridors as wages, so a single transfer rarely looks unusual on its own.

Oversight is stretched. The 2024 US assessment reported that the IRS examiner force, which examines MSBs for FinCEN, was still about half what it was in 2010. The same assessment notes that banks filed almost 3,580 reports in 2022 about potential unlicensed MSB activity, with many pointing to grocery, convenience, gas, and liquor stores acting as unregistered money transmitters or exchangers. That is one reason enforcement so often reaches the banks that serve MSBs.

Agents multiply the risk. A large MSB works through independent agents. If head office rewards volume and does not police its agents, the weakest agent sets the standard.

Real cases: Western Union and Ping Express

The MSB story has a bank side and a firm side. The bank side is covered in the Wachovia and HSBC cases, in which large banks served Mexican exchange houses without monitoring their flows. Those cases are linked below. Here are two cases from the firm side.

Western Union (2017). In January 2017, Western Union agreed to forfeit $586 million and entered a deferred prosecution agreement, admitting that it had willfully failed to maintain an effective anti-money laundering program and had aided and abetted wire fraud. DOJ said it was the largest forfeiture ever imposed on a money services business. According to DOJ, between 2004 and 2012 the company processed hundreds of thousands of transactions for agents and others involved in an international consumer fraud scheme, in which fraudsters posed as relatives or promised prizes, and some agents were complicit and took a cut. It also said Western Union knew certain US agents were allowing or aiding structuring by customers and, rather than act, allowed them to keep sending transactions and paid them bonuses. An FBI official said one Los Angeles agent’s company sent over $310 million to China in five years, half of it illegally structured and sent using false identification.

Ping Express (2022). Ping Express U.S. LLC was a Texas company licensed to send money to Nigeria and other African countries. In July 2022 it pleaded guilty to failing to maintain an effective anti-money laundering program. DOJ said it transmitted more than $167 million overseas in under three years, $160 million of it to Nigeria, and failed to file a single suspicious transaction report over a three-year period. The company had told state regulators it would cap first-time customers at $499, daily transactions at $3,000, and monthly ones at $4,500, but it admitted letting more than 1,500 customers break those rules, including one who sent more than $80,000 in a month. It also said it operated in states where it was not licensed, and its software for blocking such transfers did not work. One of its top customers admitted moving money for romance-scam fraudsters and other criminals. Ping’s CEO and COO were each sentenced to 27 months in prison.

The two cases differ. Western Union was a global brand whose problem was agents it rewarded and did not police. Ping was a small firm whose controls existed only in a memo. What they share is that in both, the firm’s stated rules did not match what actually happened.

How MSB laundering gets caught

Registration and licensing. Most MSBs must register with FinCEN and renew every two years, and many US states require separate licenses. Running an unlicensed money-transmitting business is a crime in its own right, so prosecutors can charge it without proving where each dollar came from.

Suspicious activity reports. An MSB must report suspicious transactions of at least $2,000 within 30 days of detecting them. The Ping case is a clean example of the failure mode: no reports at all across three years, despite a flood of unusual activity. When a firm files nothing, that silence is itself a signal, and regulators treat it as a program failure.

Examinations and bank monitoring. The IRS examines MSBs on FinCEN’s behalf. Banks that hold MSB accounts are expected to know how big the MSB’s business really is and to notice when the cash it deposits does not fit. Wachovia and HSBC are what happens when they do not.

Transaction patterns and undercover work. Investigators look for agents that cluster transactions below reporting limits, customers who spread transfers across agents, and firms whose volume exceeds their location’s plausible demand. The Paraguay case described above was built on an undercover operation. See the thresholds page for the current reporting limits, cases for the bank-side enforcement, and detection for how these controls fit together.

First published September 21, 2026 · Last updated September 21, 2026 · Legal statuses current as of September 2026