FinCEN’s Casino Definition Under the BSA: What 31 U.S.C. § 5312 Actually Covers

Under 31 U.S.C. § 5312(a)(2)(X), a casino, gambling casino, or gaming establishment with annual gross gaming revenue exceeding $1,000,000 is classified as a financial institution for purposes of the Bank Secrecy Act (BSA). That classification triggers the full suite of federal AML obligations: a written compliance program, currency transaction reporting, suspicious activity reporting, customer identification, and multi-year recordkeeping. For U.S. gaming operators the practical question is precise: does your platform, your property, or your vertical meet the statutory test, and if so, under which implementing regulation does it sit?

The Financial Crimes Enforcement Network (FinCEN), the U.S. Treasury bureau that administers the BSA, has implemented the § 5312(a)(2)(X) casino definition through 31 CFR Part 1021, titled “Rules for Casinos and Card Clubs.” Part 1021 is the primary regulatory instrument. Every compliance officer working in the U.S. market must be able to read the statute and the regulation together, because the scope questions that arise in practice, whether a card club is treated the same as a full casino, whether a tribal operation is in or out, whether an online platform has any BSA exposure as a casino, cannot be resolved from the statutory text alone.

The Statutory Text of § 5312(a)(2)(X)

Section 5312(a)(2) lists the businesses that qualify as “financial institutions” for BSA purposes. Subsection (X) reads:

“a casino, gambling casino, or gaming establishment with an annual gaming revenue of more than $1,000,000 which, (i) is licensed as a casino, gambling casino, or gaming establishment under the laws of any State or any political subdivision of any State, or (ii) is an Indian gaming operation conducted under or pursuant to the Indian Gaming Regulatory Act other than an operation which is limited to class I gaming (as defined in section 4(6) of such Act).”

The definition has three operative components. The gaming establishment must generate more than $1,000,000 in annual gaming revenue. It must be either state-licensed or an Indian gaming operation under the Indian Gaming Regulatory Act (IGRA). And in the tribal context, operations limited to Class I gaming are excluded.

Congress deliberately used the phrase “annual gaming revenue” rather than total revenue. Revenue from non-gaming activities at the same property, hotel rooms, restaurant receipts, entertainment tickets, does not count toward the $1,000,000 threshold for purposes of the casino classification. Non-gaming businesses operating at a casino hotel or resort are instead treated as separate trades or businesses under 31 U.S.C. § 5331, with their own cash-reporting obligations when they receive currency exceeding $10,000.

What Counts as Annual Gross Gaming Revenue?

FinCEN’s implementing regulation at 31 CFR § 1021.330 uses the phrase “gross annual gaming revenue in excess of $1,000,000” in describing which casinos are required to report directly to the Treasury Department rather than through the 31 U.S.C. § 5331 route available to smaller establishments. The figure is measured over the casino’s business year, defined in § 1021.100 as the annual accounting period by which the casino maintains its books and records for federal income tax purposes.

A casino whose gross gaming revenue falls at or below the $1,000,000 threshold in a given business year is not a financial institution under § 5312(a)(2)(X) for that period, and the full Part 1021 regime does not apply. That said, § 1021.330(c) makes clear that the non-gaming businesses at that same property, including shops, restaurants, and hotels, remain subject to currency reporting obligations under § 5331 when individual transactions exceed $10,000. The exemption for casinos over the threshold from duplicate § 5331 reporting does not relieve sub-threshold properties of their obligations on gaming-unrelated cash receipts.

Does Being State-Licensed Automatically Mean BSA Coverage?

No. A state gaming licence is a necessary but not independently sufficient condition. The establishment must also exceed the $1,000,000 annual gaming revenue threshold. A small state-licensed card room operating below that figure is not a “financial institution” under § 5312(a)(2)(X), though it may still face other federal or state-level reporting obligations.

Conversely, an unlicensed gaming operation generating tens of millions of dollars in cash throughput does not become a BSA financial institution by virtue of its scale alone: the statute requires a valid state or tribal licence. Unlicensed operations are subject to prosecution under other federal statutes, including 18 U.S.C. § 1955 (illegal gambling businesses) and 18 U.S.C. § 1956 (money laundering), but they sit outside the BSA financial institution definition that creates affirmative AML program obligations.

How Card Clubs Are Treated Differently

31 CFR Part 1021 covers both casinos and card clubs, but it does not treat them identically. The title of Part 1021 itself (“Rules for Casinos and Card Clubs”) signals the bifurcation. The AML program obligation in § 1021.210(b) applies to each casino as a class, and FinCEN has interpreted card clubs as a distinct sub-category within that framework.

The most significant operational difference appears in the recordkeeping provisions of § 1021.410(a)(11): in the case of card clubs only, records of all currency transactions by customers are required, including records in the form of currency transaction logs and multiple currency transaction logs, as well as records of all activity at cages or similar facilities, including cage control logs. Full-service casinos are not subject to this blanket currency logging requirement, their obligations run to specific transaction types enumerated in § 1021.410(a)(1) through (10).

The practical effect is that card clubs face a broader capture obligation for currency movements through their cages. A card club operating above the $1,000,000 GGR threshold must document every currency transaction at the cage level, not just those that cross the Currency Transaction Report (CTR) threshold of $10,000. This reflects the historic vulnerability of card-game venues, which often handle large volumes of smaller chip purchases and cash-outs that can serve structuring purposes.

Tribal Casino Coverage and the Class I Carve-Out

What qualifies under IGRA

The tribal prong of § 5312(a)(2)(X) covers Indian gaming operations conducted under or pursuant to IGRA, provided they are not limited to Class I gaming. Under IGRA, Class I games are traditional forms of Indian gaming and social games for minimal prizes. Class II games include bingo and certain card games. Class III games are all other forms of casino-style gaming, including slot machines, house-banked table games, and sports wagering.

A tribal casino operating Class II or Class III games above the $1,000,000 GGR threshold is therefore a financial institution under § 5312(a)(2)(X) on the same footing as a state-licensed commercial casino. It must maintain a compliant AML program under § 1021.210, file CTRs for currency transactions exceeding $10,000 during a gaming day, and file Suspicious Activity Reports (SARs) for transactions at or above $5,000 where the required predicate circumstances are present.

The Class I exclusion in practice

The Class I exclusion is narrow and has minimal practical significance for the large tribal gaming sector. Operations limited to Class I are by definition small-scale, traditional events conducted as part of tribal ceremonies or by tribal members in social contexts. No commercial tribal casino enterprise limiting itself to Class I gaming would meet the $1,000,000 GGR threshold in any event. The exclusion is a statutory measure consistent with IGRA’s overall framework, which preserves tribal sovereignty over traditional games while subjecting commercial gaming to federal and compact-based regulation.

The AML Program Obligation: What § 1021.210 Requires

Once a gaming establishment qualifies as a financial institution, § 1021.210(b) mandates a written compliance program that must, at a minimum, contain four elements.

A system of internal controls to assure ongoing compliance. The controls must address not just transaction reporting but the identification of unusual or potentially suspicious patterns across all gaming activities.

Internal and/or external independent testing for compliance, with the scope and frequency of testing commensurate with the money laundering and terrorist financing risks posed by the products and services provided by the casino.

Training of casino personnel, specifically including training in the identification of unusual or suspicious transactions to the extent that reporting is required under Part 1021, other applicable law or regulation, or the casino’s own compliance policies.

An individual or individuals designated to assure day-to-day compliance with the program. The regulation does not mandate a specific title for this role, but the person must have authority and access sufficient to execute the function.

Section 1021.210(b)(2)(v) adds a further requirement: procedures for using all available information to determine when identification is required, when a transaction pattern requires a SAR filing, and whether the casino is being used to facilitate criminal activity. This “all available information” standard is operationally significant. It means a casino cannot compartmentalise its surveillance systems, cage records, and player loyalty databases in ways that prevent its compliance function from making cross-channel assessments.

Currency Transaction Reports and the $10,000 Gaming Day Rule

Under § 1021.311, casinos must file a CTR for each transaction in currency involving cash-in or cash-out of more than $10,000. The filing obligation is measured against the gaming day, which § 1021.100 defines as the casino’s normal business day for accounting purposes. For a 24-hour operation, each gaming day is the 24-hour period the casino uses to close its books.

The aggregation rule in § 1021.313 treats multiple currency transactions as a single transaction when the casino has knowledge that they are by or on behalf of the same person and result in either cash-in or cash-out totalling more than $10,000 during any gaming day. A casino “has knowledge” for this purpose if any sole proprietor, partner, officer, director, or employee acting within the scope of their employment has knowledge of the multiple transactions, including knowledge derived from examining books, records, logs, or surveillance systems.

The cash-in side of the reporting obligation under § 1021.311(a) covers purchases of chips, tokens, and other gaming instruments, front money deposits, safekeeping deposits, payments on any form of credit including markers, bets of currency, wire transfers received for a customer, purchases of casino checks, exchanges of currency, and bills inserted into electronic gaming devices. The cash-out side mirrors this structure, covering redemptions, withdrawals, advances on credit, payments on bets, wire transfer payouts, cashing of checks, currency exchanges, and travel or complimentary expenses paid in cash.

Suspicious Activity Reports: The $5,000 Threshold

A casino must file a SAR under § 1021.320 for any transaction conducted or attempted by, at, or through the casino that involves or aggregates at least $5,000 in funds or other assets, where the casino knows, suspects, or has reason to suspect that the transaction involves funds derived from illegal activity, is designed to evade BSA requirements, or involves use of the casino to facilitate criminal activity.

The 30/60-day filing timeline operates as follows: a SAR must be filed no later than 30 calendar days after initial detection of facts that may constitute a basis for filing. If no suspect is identified, the casino may delay by an additional 30 calendar days to identify a suspect, but filing cannot be delayed beyond 60 calendar days after initial detection. Where a violation requires immediate attention, such as an ongoing money laundering scheme, the casino must also immediately notify law enforcement by telephone in addition to filing the SAR.

Obligation	Threshold	Timeframe	Instrument
Currency Transaction Report (CTR)	>$10,000 per gaming day	Filed promptly	FinCEN CTR form
Suspicious Activity Report (SAR)	≥$5,000	Within 30 days (60 max)	FinCEN SAR form
Non-gaming cash transaction	>$10,000	Filed under § 5331	IRS/FinCEN Form 8300
SAR retention period	N/A	5 years from filing	Copy + supporting docs

Online Gambling: Why Internet Platforms Are Not Casinos Under § 5312

Does an online gambling platform qualify as a financial institution under the BSA?

Not under the § 5312(a)(2)(X) casino definition, as currently written and administered. The statute requires a state licence “as a casino, gambling casino, or gaming establishment” or qualification as an Indian gaming operation under IGRA. A platform that operates solely online, licensed in a foreign jurisdiction and accepting U.S. players in a legally ambiguous status, does not hold a U.S. state licence as a casino. It therefore does not meet the statutory test, regardless of its annual gaming revenue. Operators holding only offshore licences, such as those issued in Curaçao under the post-LOK framework, fall outside the § 5312(a)(2)(X) perimeter entirely.

The Unlawful Internet Gambling Enforcement Act of 2006 (UIGEA), enacted as part of the SAFE Port Act (Pub. L. 109-347), addressed internet gambling through a different legal mechanism. The UIGEA made it unlawful for persons engaged in the business of betting or wagering to knowingly accept payment instruments in connection with unlawful internet gambling. It did not reclassify internet gambling operators as financial institutions under § 5312, nor did it create a new BSA-style AML program requirement for internet platforms. The UIGEA’s approach was to restrict payment flows to and from unlawful operations, not to impose AML program obligations on those operators equivalent to those applicable to land-based casinos.

For U.S.-licensed online casino operators in the states that permit regulated iGaming, including New Jersey, Michigan, and Pennsylvania, the analysis is different. Where an online casino operates under a licence issued by the New Jersey Division of Gaming Enforcement, the Michigan Gaming Control Board, or the Pennsylvania Gaming Control Board, and its annual gross gaming revenue exceeds $1,000,000, that operator holds a state gaming licence and meets the threshold. FinCEN has applied Part 1021 to internet gaming operations where they are conducted under a qualifying state licence, and these operators must maintain full Part 1021 programmes.

Where Do Sportsbooks Fit?

The § 5312(a)(2)(X) definition does not enumerate sportsbooks or sports betting operators as a separate category. A retail sportsbook operating within a licensed casino property, as is the common model in Nevada, New Jersey, and several other states, falls within the BSA perimeter of the casino that holds the state licence. The casino’s existing AML programme, CTR obligations, and SAR requirements apply to the sportsbook floor as part of the integrated casino operation.

The more contested scenario is the standalone mobile sports betting operator. Many states have issued dedicated sports betting licences that are distinct from full casino licences. A company holding only a state sports betting licence, not a casino licence, may not meet the § 5312(a)(2)(X) definition as literally read, because that provision describes a “casino, gambling casino, or gaming establishment” licensed as such. Whether a sports betting licence constitutes a licence as a “gaming establishment” under the statute is not definitively resolved by published FinCEN guidance as of the date of this article. Treasury’s authority under § 5312(a)(2)(Y) to designate by regulation businesses engaged in activities “similar to, related to, or a substitute for” those of a listed financial institution has not been exercised in a way that expressly includes standalone sportsbooks.

Operators running standalone sports betting platforms in the U.S. should not rely on the gap in the current guidance as a reason to defer AML programme development. The AML Act of 2020 strengthened FinCEN’s supervisory mandate, and the regulatory direction of travel is toward expanded coverage of gaming verticals. Operators should consult qualified legal counsel on their current obligations and design their compliance programmes to meet at minimum the Part 1021 standards on a voluntary basis, particularly given the $5,000 SAR threshold and aggregation principles that would clearly apply if coverage is extended.

SAR Confidentiality and Anti-Tipping Obligations

Section 1021.320(e) imposes a strict prohibition on SAR disclosure. No casino, and no director, officer, employee, or agent of any casino, may disclose a SAR or any information that would reveal the existence of a SAR. If subpoenaed or otherwise requested to disclose a SAR, the casino must decline, citing § 1021.320(e) and 31 U.S.C. § 5318(g)(2)(A)(i), and must notify FinCEN of the request and the response. The prohibition extends to government authorities: a federal, state, local, territorial, or tribal government authority may not disclose a SAR except as necessary to fulfill official duties consistent with Title II of the BSA.

The regulation provides a safe harbour at § 1021.320(f): a casino and its personnel that make a voluntary disclosure of a possible law or regulation violation, or that file a SAR as required, are protected from liability to any person for the disclosure or for any failure to notify the subject of the SAR of its existence.

The § 1010.970(c) State Exemption

FinCEN may, pursuant to § 1010.970, exempt from Part 1021 reporting and recordkeeping requirements casinos in any state whose regulatory system substantially meets the reporting and recordkeeping requirements of Chapter X. This mechanism exists because several states (Nevada being the primary example) have historically maintained their own parallel currency reporting regimes for casinos. Where such an exemption applies, the relevant casino is not required to file duplicate reports under 31 U.S.C. § 5331. The exemption does not eliminate the casino’s status as a financial institution, it adjusts the reporting channel.

Where a state gaming regulatory system “substantially meets” FinCEN’s reporting and recordkeeping requirements, casinos in that state may be exempted from duplicative federal filings, but their status as financial institutions and their AML programme obligations remain in force.

Key Resources

31 U.S.C. § 5312, Definitions and Application, Bank Secrecy Act. Available at the U.S. House Office of the Law Revision Counsel: uscode.house.gov.

31 CFR Part 1021, Rules for Casinos and Card Clubs. Current version (updated May 26, 2026) available through the eCFR at ecfr.gov. This is the authoritative but unofficial codification maintained by the Office of the Federal Register.

FinCEN Bank Secrecy Act page, Full list of BSA statutes and implementing regulations: fincen.gov/resources/statutes-and-regulations/bank-secrecy-act.

Indian Gaming Regulatory Act, 25 U.S.C. § 2701 et seq., Class I, II, and III game definitions relevant to the tribal prong of § 5312(a)(2)(X). Available at nigc.gov/laws/igra.

Unlawful Internet Gambling Enforcement Act of 2006, Pub. L. 109-347, codified at 31 U.S.C. §§ 5361, 5367. Govinfo.gov maintains the enrolled bill and the codified text.

For operators assessing their own platform’s status as a financial institution under the BSA, and for those designing Part 1021-compliant AML programmes, qualified U.S. legal counsel with experience in federal gaming and financial crimes law should be engaged. The analysis turns on the specific licence held, the revenue figure in the relevant business year, and the gaming activities conducted, and those facts must be applied to the statute and regulations as they stand at the time of assessment.