Bank of America faces $1.21 billion in penalties over money-laundering and sanctions failures

US regulators have imposed more than $1.21 billion in penalties on Bank of America over serious deficiencies in its anti-money laundering controls and apparent violations of US economic sanctions. The enforcement actions, announced on October 13, represent one of the most significant regulatory crackdowns in the bank’s history and highlight persistent concerns about the financial industry’s ability to detect and prevent illicit transactions.

The US Department of the Treasury described the action as the third-largest enforcement penalty in its history. The case centers on the bank’s failure to adequately identify, investigate and report suspicious financial activities, including transactions connected to Chinese money laundering networks and other high-priority financial crime risks.

The penalties involve several federal agencies, including the Financial Crimes Enforcement Network (FinCEN), the Office of the Comptroller of the Currency (OCC) and the Treasury Department’s Office of Foreign Assets Control (OFAC). Together, their actions underscore the importance of effective compliance systems in protecting the US financial system from criminal activity and violations of national security restrictions.

Regulators cite billions of dollars in suspicious transactions

FinCEN assessed a $1.2 billion penalty against Bank of America, alleging that the institution failed to maintain adequate safeguards to identify and report suspicious financial transactions.

According to the agency, the bank failed to report more than $5 billion in suspicious transactions. More than $1 billion of that amount was associated with priority risks involving national security and illicit finance.

Among the concerns identified by regulators were financial activities involving Chinese money laundering networks and transactions associated with activity along the US southwestern border. Such cases can involve complex networks of accounts, intermediaries and transfers designed to conceal the origins, destinations or beneficiaries of funds.

Financial institutions are expected to monitor transactions, identify unusual patterns and notify authorities when activity raises reasonable suspicions of money laundering or other financial crimes. Regulators said Bank of America’s systems and procedures were insufficient to meet those obligations.

The failure to report suspicious transactions can significantly undermine law enforcement efforts. Timely reports from banks often provide investigators with information needed to trace illicit funds, identify criminal networks and uncover links between financial transactions and broader criminal operations.

FinCEN’s action therefore reflects not only concerns about the volume of transactions that went unreported but also the potential consequences of inadequate monitoring for the detection of financial crime.

Bank admits to willfully violating the bank secrecy act

As part of its resolution with FinCEN, Bank of America admitted to willfully violating the Bank Secrecy Act, a key US law designed to help authorities detect and prevent money laundering and other illicit financial activities.

The bank’s acknowledged failures included not maintaining an adequate anti-money laundering program, not conducting required due diligence on correspondent accounts held for foreign banks, and failing to submit required suspicious activity reports.

Correspondent banking relationships allow financial institutions to provide services to other banks, often across international borders. Because these arrangements can facilitate large and complex transfers, regulators require banks to conduct appropriate due diligence and understand the risks associated with the institutions they serve.

Weaknesses in these controls can make it more difficult to detect suspicious activity moving through the international financial system.

Under the FinCEN resolution, Bank of America must also engage an independent third party to identify suspicious transactions that its previous systems failed to detect and report. This requirement is intended to help uncover potential gaps in the bank’s earlier monitoring processes and ensure that previously missed activity receives appropriate scrutiny.

The independent review also places additional pressure on the bank to demonstrate that its corrective measures are effective rather than merely procedural.

OCC imposes its largest-ever penalty

The Office of the Comptroller of the Currency separately announced a $750 million penalty against Bank of America, describing it as the largest penalty in the regulator’s history.

However, the OCC penalty is credited toward FinCEN’s $1.2 billion assessment rather than added to it as a separate amount. This distinction is important because the two agencies’ actions overlap in the overall financial resolution.

The OCC said the bank’s compliance program remained “deficient and ineffective” despite a cease-and-desist order issued in 2024. The regulator also identified weaknesses in transaction-monitoring systems that contributed to delays in filing suspicious activity reports involving billions of dollars.

The findings raise questions about why earlier regulatory intervention did not produce sufficient improvements in the bank’s compliance operations.

Cease-and-desist orders are designed to require institutions to address identified violations and correct weaknesses in their practices. When problems persist after such an order, regulators may view the situation as evidence that existing corrective measures have failed to deliver the necessary results.

For Bank of America, the latest enforcement action signals that regulators expect substantial and demonstrable improvements in its ability to monitor transactions, identify potential financial crimes and meet reporting requirements.

Additional settlement over sanctions violations

Beyond the money-laundering-related penalties, OFAC reached an $11.66 million settlement with Bank of America over 475 apparent violations of US sanctions programs.

The programs involved restrictions targeting Russia, Belarus, Iran, Myanmar and Somalia, as well as measures related to narcotics trafficking and international terrorism.

OFAC cited payments involving blocked banks, failures to give appropriate priority to sanctions alerts and delays in updating watchlists used to identify restricted individuals, organizations and financial institutions.

Sanctions compliance is a critical responsibility for banks operating within the US financial system. Institutions must screen transactions and customers against applicable restrictions and take appropriate action when payments involve sanctioned parties or prohibited activities.

Effective screening requires accurate and regularly updated information, reliable monitoring technology and clear procedures for escalating potential violations. Delays in updating watchlists or investigating alerts can allow restricted transactions to proceed before they are identified.

Although the OFAC settlement is substantially smaller than the principal penalties announced by FinCEN and the OCC, the 475 apparent violations illustrate the additional compliance challenges facing the bank.

Bank of America pledges further improvements

Bank of America said it had worked with regulators to resolve the cases and was addressing the deficiencies identified by the authorities.

A bank spokesperson emphasized the institution’s responsibility to maintain effective financial crime controls, saying, “Financial crime compliance is serious, and we are responsible for getting it right.”

The spokesperson added that the bank had invested billions of dollars in technology and assigned thousands of employees to combat financial crime. The bank also said its remediation efforts were well advanced and that it remained committed to completing the measures required by regulators.

Those commitments will now need to translate into measurable improvements in transaction monitoring, suspicious activity reporting, correspondent banking due diligence and sanctions screening.

Large financial institutions process enormous volumes of payments every day, making effective automated monitoring and risk-based oversight essential. However, technology alone cannot guarantee compliance. Banks must also ensure that employees respond appropriately to alerts, that escalation procedures work effectively and that management addresses weaknesses before they become systemic problems.

A major warning for the US banking industry

The Bank of America case sends a broader message to the financial sector: regulatory authorities expect banks to maintain effective safeguards against money laundering, sanctions evasion and other forms of illicit finance.

Failures to identify and report suspicious activity can expose institutions to substantial financial penalties, increased regulatory scrutiny and reputational damage. They can also weaken efforts by law enforcement agencies to trace illicit funds and disrupt criminal networks.

The enforcement action also demonstrates that earlier regulatory orders do not necessarily shield a bank from further penalties when serious deficiencies remain unresolved.

For Bank of America, the immediate challenge is to complete the required remediation and establish that its compliance systems can reliably detect suspicious transactions and prevent prohibited payments. Independent scrutiny and continued regulatory oversight are likely to play important roles in assessing whether the corrective measures are sufficient.

Ultimately, the case highlights a fundamental obligation of the banking industry: financial institutions must do more than process payments efficiently. They must also maintain controls capable of identifying and reporting activity that could threaten the integrity of the financial system.

Whether Bank of America’s substantial investments and promised reforms will fully address regulators’ concerns will depend on the effectiveness of the changes it implements and its ability to demonstrate sustained compliance in the years ahead.

Please follow Blitz on Google News Channel