What happened
If you've seen headlines about a new rule targeting ITIN holders and bank accounts, you're not imagining it. Something did change in June 2026. But it's smaller — and more specific — than a lot of the online chatter makes it sound.
Here's the timeline.
On May 19, 2026, the president signed Executive Order 14406, called "Restoring Integrity to America's Financial System." The order requires the Secretary of the Treasury to issue an advisory to financial institutions regarding the risks associated with the exploitation of the United States financial system by non-work authorized populations and their employers, including a description of red flags and typologies associated with activities such as payroll tax evasion, off-the-books wage payments, and labor trafficking or forced labor. The order gave Treasury 60 days to get that advisory out.
Treasury moved fast. On June 5, 2026, the Treasury Department's Financial Crimes Enforcement Network ("FinCEN"), jointly with the Federal Deposit Insurance Corporation ("FDIC"), the Office of the Comptroller of the Currency ("OCC"), and the National Credit Union Administration ("NCUA"), and in coordination with the Internal Revenue Service ("IRS"), issued an advisory addressing the unlawful employment of individuals without a valid work authorization and the associated risks to the US financial system. That's Advisory FIN-2026-A002, and it's what everyone's actually talking about.
What does the advisory actually say about ITINs?
Buried inside a longer advisory about payroll fraud and shell companies is a section on ITINs specifically. The advisory states that the use of an ITIN in lieu of an SSN or valid employment authorization document may be identified as a risk factor requiring enhanced due diligence to ensure the account is not being utilized to facilitate the unlawful employment of unlawful aliens. It goes further, saying the Agencies are further concerned by the use of an ITIN to obtain credit products or open depository accounts where the applicant lacks verified legal presence.
In plain English: banks are being told that if someone uses an ITIN instead of a Social Security number to open an account or apply for credit, that alone can be a flag worth a second look — not proof of anything, just a factor a bank might weigh more heavily now than before.
One law firm's analysis (name the firm if possible) called this a meaningful shift..., including correspondent accounts for foreign financial institutions, private banking accounts, and jurisdictions designated as primary money laundering concerns. That's a notable change in tone — ITINs are now sitting in a conversation they weren't really part of before.
Does the advisory ban ITIN bank accounts?
This is the part worth sitting with, because it's where a lot of anxiety is coming from that isn't backed by the actual text.
It does not ban ITIN accounts. Name the publication or organization behind this analysis, or qualify as "one legal analysis we reviewed, from [source]," if the name is available. Nothing in the advisory tells banks to stop opening accounts for ITIN holders.
It does not change the underlying identification rules. Banks have long been allowed to accept a taxpayer ID number — including an ITIN — as valid identification for account opening. Under existing CIP requirements, banks are required to identify and verify the identities of each customer, and in addition to collecting a customer's name, date of birth, and address, a bank must collect an identification number, which for a U.S. person includes a taxpayer identification number. The advisory doesn't rewrite that rule.
It's a recommendation, not a mandate. Law firm summaries are consistent on this point: the Advisory does not impose a blanket prohibition on ITIN-based accounts but signals that regulators will likely expect financial institutions to apply enhanced risk-based procedures when ITINs are used. Name the firm, e.g., "[Firm name] put it even more plainly..." — language of encouragement, not an order.
It's meant to weigh ITIN use alongside everything else, not alone. Name the outlet if known, e.g., "[Outlet name], summarizing the advisory, noted..." when conducting customer due diligence, and the agency noted that banks should evaluate ITIN usage alongside other available information when opening accounts or extending credit. The idea is a holistic picture, not an automatic red flag that triggers a denial.
Why does this still matter if nothing is banned?
Even without a ban, "enhanced due diligence" can mean real friction. It can translate into more paperwork, more questions at account opening, slower approval timelines, or a bank asking for documents it didn't used to ask for. Banks that want to stay firmly inside the advisory's recommendations may tighten their own internal policies even where the law hasn't changed.
A global mobility analysis (cite the firm or publication) flagged this exact risk...: while the order is aimed primarily at unlawful employment and related underground-economy activity, as a practical matter, lawful assignees may encounter slower account opening processes. Translation: even people with nothing to worry about could see more hoops to jump through simply because their bank is being more cautious across the board.
Is this policy finished, or could more rules be coming?
Two more dates matter here. The June 5 advisory was actually early — the Executive Order directed the Secretary of the Treasury to issue, within 60 days, a formal advisory describing red flags and typologies, and the Advisory delivered on that mandate well ahead of the mid-July 2026 deadline.
But the advisory itself isn't the end of the story. The same executive order directs the Secretary, in consultation with certain federal financial regulators, to propose changes to financial regulations to strengthen risk-based customer identification requirements for financial institutions — and that piece has its own deadline, roughly 90 days from the May 19 signing, putting it around mid-August 2026. That means actual proposed rule changes to customer due diligence requirements could still be coming. What exists right now is guidance, not a locked-in regulation.
What does this mean for your B9 account or cash advance?
B9's eligibility rules already work the way the advisory still allows: an SSN or an ITIN is accepted to open an account and qualify for a B9 Advance. Nothing about this advisory changes that. If you already bank or use a cash advance app with an ITIN, the advisory doesn't take that access away — it just means some banks may ask more questions than they used to.
If you're an ITIN holder weighing your options, our guide on cash advance apps that accept an ITIN walks through which apps still work this way and what to expect when you apply.
What can't a blog post tell you about your own situation?
This is a fast-moving regulatory story, and the rules affecting immigration status, employment, and banking can be complicated and personal. Nothing here is legal or immigration advice. If you have specific questions about your own situation — your status, your risk, or how a particular bank might treat your account — talk to an immigration attorney or an accredited nonprofit legal service. They can look at your actual circumstances in a way a blog post never can.