FinCEN wants to close a renaming gap in its Huione Group ban

Last October FinCEN finished a section 311 rule against Huione Group, which it describes as "a financial services conglomerate based in Phnom Penh, Cambodia." The final rule (90 FR 48295, 16 October 2025, codified at 31 CFR 1010.664) imposed the fifth special measure: covered US financial institutions may not open or maintain a correspondent account for or on behalf of Huione Group. Among other things, FinCEN says the group "provides services that DPRK government entities use to launder the proceeds of cyber heists."

On 25 June 2026 FinCEN proposed to amend the definition of Huione Group so the ban follows the business when it changes its name (91 FR 38340).

What the proposal would change

Two things. First, it would add H-Pay Service PLC to the definition. FinCEN calls H-Pay "a newly operational component of the Huione Group" that "effectively assumed the business role of Huione Pay PLC within the Huione Group."

Second, it would add a new defined term, "successor entity," at 31 CFR 1010.664(a)(6). In the proposed text, that means "any person that replaces Huione Group by acquiring its assets, in whole or in part," and/or "carrying out the affairs of Huione Group under a new name."

The special measure itself doesn't change. FinCEN says it "remains in effect," and the proposal doesn't revisit the finding that Huione Group is of primary money laundering concern. What changes is the set of names the existing obligations attach to. FinCEN says those obligations would extend to H-Pay and to any successor entity, and that it doesn't expect the change to have a substantial impact on covered institutions because existing sanctions and BSA systems can be adapted.

The deadline moved

Comments were first due on 27 July 2026. On 24 July FinCEN extended the period, explaining that members of the public "were unable to submit comments electronically" for "six days, from June 25 to June 30, due to a technological issue with the applicable portal." Comments are now due on or before 2 August 2026.

What it could mean

Most community banks and credit unions will never see a payment that touches Huione Group directly. The exposure, where there is any, comes through correspondent relationships and through customers who fall victim to the scams that pass through networks like this one. So in our view the practical work here is small, and it's mostly about names.

If your institution screens payments or counterparties against a list of section 311 targets, add H-Pay Service PLC now. You don't need to wait for a final rule to treat a name FinCEN has publicly tied to Huione as high risk, and it costs nothing to put it on an internal watch list.

The "successor entity" definition is the harder part, and we'd like FinCEN to say more about it before it's final. A rule that covers anyone "carrying out the affairs of Huione Group under a new name" is sensible as policy. It is also something no screening tool can match on, because by definition the new name isn't known yet. In practice a small institution will meet this obligation by reading FinCEN's announcements and updating its lists when they name a new entity. A comment asking FinCEN to commit to publishing names of successor entities it identifies would be reasonable.

The other thing worth doing is a quick check with your correspondent bank, if you use one for international wires. Ask how it is handling the H-Pay addition. Its answer tells you whether anything will land on your side.

For the BSA officer at a small bank, this is a ten-minute task. We would still log it, because the next 311 rule that names a successor will look the same, and a record of how you handled this one makes the next one quicker.