Lux Docs
Compliance

Regulatory Reporting

Multi-jurisdiction regulatory requirements for USA, UK, and Isle of Man

The regulatory package (pkg/regulatory) implements a Jurisdiction interface with concrete implementations for each supported jurisdiction. Each defines requirements, application validation rules, and transaction limits.

Jurisdiction Interface

type Jurisdiction interface {
    Name() string
    Code() string
    Requirements() []Requirement
    ValidateApplication(app *ApplicationData) []Violation
    TransactionLimits() []TransactionLimit
}

Supported jurisdictions: US (United States), UK (United Kingdom), IM (Isle of Man).

USA -- FinCEN, SEC, FINRA

FinCEN BSA Requirements

RequirementReferenceDescription
CIP31 CFR 1020.220Customer Identification Program: collect name, DOB, address, SSN/TIN
CTR31 CFR 1010.311Currency Transaction Report for transactions over $10,000
SAR31 CFR 1020.320Suspicious Activity Report for suspicious transactions $5,000+
OFAC31 CFR Part 501Sanctions screening against SDN list
Recordkeeping31 CFR 1010.410Maintain records of transactions $3,000+ for 5 years

SEC/FINRA Requirements

RequirementReferenceDescription
Accredited InvestorSEC Rule 501(a), Reg DVerification for Reg D offerings (conditional)
SuitabilityFINRA Rule 2111Investment objectives, financial status, risk tolerance
Pattern Day TraderFINRA Rule 4210$25,000 minimum equity for PDT accounts (conditional)
DisclosuresFINRA Rule 3210Control person, affiliation, PEP status
Address31 CFR 1020.220(a)(2)US residential address verification

State Requirements

RequirementReferenceDescription
MTLState Money Transmission LawsMoney Transmitter License required per state

UK -- FCA

RequirementDescription
FCA RegistrationRegistered with Financial Conduct Authority
5AMLD CDDCustomer Due Diligence under 5th Anti-Money Laundering Directive
5AMLD EDDEnhanced Due Diligence for high-risk customers
HM Treasury SanctionsScreening against UK financial sanctions list

Isle of Man -- IOMFSA

RequirementDescription
Designated BusinessRegistered as a Designated Business with IOMFSA
AML/CFT Code 2019Compliance with the AML/CFT Code of Practice 2019
Source of WealthVerification of source of wealth for all customers
Source of FundsDocumentation of source of funds for transactions

Entity Types

The pkg/entity package defines compliance requirements per regulated entity type:

EntityRegistrationNet CapitalKey Rules
ATSSEC Reg ATS, Form ATS-N$250,000Rules 300-303, quarterly ATS-N amendments
Broker-DealerSEC/FINRA/SIPC$250,000Rule 15c3-1 net capital
Transfer AgentSEC Rule 17Ad$25,000Form TA-1 (initial), Form TA-2 (annual)
MSBFinCEN, state MTLsVaries by stateCTR/SAR filing obligations

Filing Obligations

CTR Filing

Currency Transaction Reports are triggered when a single transaction or daily aggregate exceeds $10,000:

  • Filed with FinCEN
  • Due within 15 calendar days of the transaction
  • Includes customer identification and transaction details
  • The pkg/payments package detects CTR threshold crossings automatically

SAR Filing

Suspicious Activity Reports are generated by the monitoring service:

  • Filed with FinCEN within 30 calendar days of detection
  • No notification to the subject (tipping off is prohibited)
  • Retention: 5 years from filing date
  • Auto-generated narrative from alert details and transaction history

API

Query jurisdiction requirements:

curl http://localhost:8091/v1/regulatory/US -H "X-Api-Key: $API_KEY"

Returns the jurisdiction name, code, requirements array, and transaction limits.

On this page