# United States Department of the Treasury **Entity class:** Cabinet department **Domain:** United States government / finance / intelligence / sanctions **Doc Type:** Agency Node **Maturity:** Canonical ## Definition The **United States Department of the Treasury** administers federal fiscal and economic policy, revenue, public debt, currency, financial regulation, sanctions, financial intelligence, and national-security instruments directed at illicit finance. The department is often understood only through taxation, currency, and the national debt. That view misses its role as a national-security institution. [[wiki/Office of Terrorism and Financial Intelligence|Terrorism and Financial Intelligence]] applies policy, regulatory, intelligence, sanctions, information-sharing, and asset-forfeiture tools to terrorists, proliferators, hostile states, criminal networks, money launderers, cyber actors, and other threats to the financial system. ## The Financial-Intelligence Stack - [[wiki/Treasury Office of Intelligence and Analysis|Office of Intelligence and Analysis]] produces and coordinates financial intelligence and supports Treasury decisions. - [[wiki/Financial Crimes Enforcement Network|FinCEN]] administers the [[wiki/Bank Secrecy Act|Bank Secrecy Act]], receives required reports, supports analysis, and provides governed access or request mechanisms for authorized agencies. - [[wiki/Office of Foreign Assets Control|OFAC]] administers and enforces sanctions and asset-blocking programs. - [[wiki/Office of Terrorist Financing and Financial Crimes|TFFC]] develops anti-money-laundering, counter-terrorist-financing, and counter-proliferation-financing policy. - The Treasury Executive Office for Asset Forfeiture administers the Treasury Forfeiture Fund and supports participating Treasury and DHS law-enforcement agencies. Together these components can identify a financial network, warn institutions, locate accounts or transactions, impose restrictions, block assets, support forfeiture, and supply intelligence or data to an investigation. They do not collapse policy, intelligence, regulation, sanctions, and criminal prosecution into one authority. ## Where Ordinary Transaction Data Lives The fact that counterterrorism follows money does not mean every credit-card swipe is copied automatically into Treasury. [[wiki/Financial Transaction Data|Transaction records]] are distributed across merchants, processors, payment networks, issuing and acquiring institutions, and other custodians. Covered institutions submit defined BSA reports to FinCEN. Investigators can reach additional records through Section 314(a), SAR-supporting-documentation rules, subpoenas, warrants, national-security authorities, consent, or other applicable processes. This distributed architecture is precisely why pattern analysis matters. Time, place, merchant, account, travel, identity, and counterpart data can reveal a network when combined lawfully and interpreted with provenance. A transaction is an observation; its meaning depends on context and corroboration. ## Treasury, Customs, ICE, and DHS The former [[wiki/United States Customs Service|United States Customs Service]] sat inside Treasury. The 2003 homeland-security reorganization transferred customs and investigative functions into DHS components, helping create [[wiki/United States Immigration and Customs Enforcement|ICE]], [[wiki/Homeland Security Investigations|HSI]], and U.S. Customs and Border Protection. The [[wiki/Treasury Enforcement Communications System|Treasury Enforcement Communications System]] retained its historical name as its system lineage moved into DHS. This institutional inheritance helps explain why customs, trade, immigration, border, and financial investigations remain closely coupled even though modern organizational charts distribute them across Treasury, DHS, and DOJ. ## Treasury and the Secret Service After 2003 The [[wiki/United States Secret Service|United States Secret Service]] was founded inside Treasury in 1865 and transferred to DHS on **March 1, 2003**. The transfer changed the formal parent department and chain of command. **It did not eliminate the operational relationship created by the Secret Service's continuing currency, payment-system, financial-fraud, money-laundering, asset-seizure, and cyber-financial mission.** Secret Service agents report through USSS and DHS, not through Treasury. At the same time, cases can depend on Treasury-administered BSA data, FinCEN analysis and information sharing, forfeiture infrastructure, sanctions tools, and financial-sector relationships. Secret Service strategy documents explicitly call for close partnership with FinCEN and Treasury's forfeiture office. Any serious map of Treasury's operational reach should therefore identify the investigative agencies that use or complement Treasury capabilities; any serious map of Secret Service financial investigations should examine Treasury interfaces without misdescribing current command. ## Counterterrorism Role Terrorism requires resources for travel, housing, communications, recruitment, procurement, propaganda, and operations. Treasury's role is to identify and constrain those enabling networks through [[wiki/Financial Intelligence|Financial Intelligence]], [[wiki/Terrorist Financing|terrorist-financing]] policy, BSA reporting, international cooperation, sanctions, and asset denial. Investigative agencies develop criminal cases under their own authorities, while the FBI retains the lead federal terrorism-investigation role. ## Spyware Context In March 2024, OFAC designated individuals and entities associated with the Intellexa Consortium for roles in commercial spyware used to target Americans, including government officials, journalists, and policy experts. This is a concrete example of Treasury applying financial authorities to a technology and counterintelligence problem. ## Sources / Provenance - [[research/Immigration and Customs Enforcement Pattern Analysis and Information Collection (ICEPIC)|ICEPIC research dossier]] - [Treasury — Terrorism and Financial Intelligence](https://home.treasury.gov/about/offices/terrorism-and-financial-intelligence) - [Treasury — Office of Intelligence and Analysis](https://home.treasury.gov/about/offices/terrorism-and-financial-intelligence/oia) - [FinCEN — support of law enforcement](https://www.fincen.gov/resources/law-enforcement/support-law-enforcement) - [U.S. Secret Service — Investigative Strategy FY2021–2027](https://www.secretservice.gov/sites/default/files/reports/2021-01/inv-strategy-fy21-27.pdf) - [Treasury — sanctions on the Intellexa commercial-spyware consortium](https://home.treasury.gov/news/press-releases/jy2155) ## Relationships - **national-security arm:** [[wiki/Office of Terrorism and Financial Intelligence|Office of Terrorism and Financial Intelligence]]. - **financial intelligence unit:** [[wiki/Financial Crimes Enforcement Network|Financial Crimes Enforcement Network]]. - **sanctions office:** [[wiki/Office of Foreign Assets Control|Office of Foreign Assets Control]]. - **historical law-enforcement components:** [[wiki/United States Secret Service|United States Secret Service]] and [[wiki/United States Customs Service|United States Customs Service]]. - **current investigative interfaces:** [[wiki/United States Secret Service|United States Secret Service]], [[wiki/Homeland Security Investigations|Homeland Security Investigations]], the FBI, IRS Criminal Investigation, and other authorized partners. - **mission domains:** [[wiki/Financial Intelligence|Financial Intelligence]], [[wiki/Terrorist Financing|Terrorist Financing]], [[wiki/Economic Statecraft|Economic Statecraft]], and [[wiki/Counterterrorism|Counterterrorism]].