How much does an AML program cost a small adviser?
Two numbers matter here, and both come from FinCEN itself, from the same rulemaking that created the requirement, not from a vendor trying to sell you something.
The one-time build
In its regulatory impact analysis, FinCEN estimated the effort to stand up a new program from nothing: "FinCEN estimates it will take approximately 120 hours... to develop the necessary policies, procedures, and controls to establish an AML/CFT program" (89 FR 72156, regulatory impact analysis, pp. 72229 to 72230, September 4, 2024). That is FinCEN's own estimate of the hours, not a dollar figure; what it costs your firm depends on whether that work is done in-house or by an outside compliance consultant, and at what hourly rate.
The cost almost nobody quotes
The number that gets left out of most conversations about this rule is the recurring one. FinCEN's same analysis states: "FinCEN estimates the average cost of such testing will be approximately $17,000... a new recurring cost for all RIAs and ERAs" (89 FR 72156, regulatory impact analysis, pp. 72229 to 72230). That is an ANNUAL figure: the independent test required by the rule is not a one-time event, it repeats every year for as long as your firm is in scope. A small firm budgeting for this rule off the 120-hour build estimate alone is missing the number that recurs every single year after.
What moves the number for your firm
FinCEN's cost estimates are averages across every covered adviser, not a quote for your specific firm. What a program actually costs you scales with the risk factors your own Form ADV discloses: whether you advise private funds, hold custody of client assets directly, participate in a wrap fee program, work with a foreign regulator, or pay solicitors for referrals. Each of those adds something a generic program does not need to cover. Check your own firm's factors below.
This page is independent research, not legal advice. It quotes FinCEN's own rulemaking with pinpoint citations. Verify anything load-bearing against the Federal Register text itself before acting on it.