Bank of America Fined $1.2Bn Over Lax Money-Laundering Controls
A near-record penalty shows that regulators still expect banks to catch dirty money, and to act quickly when they do.
Bank of America has been fined $1.2bn (£0.9bn) by US regulators for failing to properly police suspicious payments passing through the bank, including transactions linked to Russia, Belarus and Mexico.
"The penalty, announced on Tuesday by the US Treasury Department and the Office of the Comptroller of the Currency (OCC), is among the largest ever imposed for anti-money laundering (AML) failures. It comes amid heightened supervisory scrutiny of Wall Street's transaction monitoring systems."
What Regulators Found: Chronic Lapses and Systemic Blind Spots
According to regulators, the deficiencies were not isolated incidents. While some lapses were attributed to operational oversights, investigators uncovered deep structural weaknesses across the bank's compliance architecture. At times, the bank failed to make even a basic effort to investigate suspicious activity.
- Unmonitored National Security Flows: Large transaction volumes linked to Russia, Belarus, and Mexican corridors were left unreviewed, including approximately $600m in trade-based transactions involving salvaged vehicles.
- Severe SAR Backlogs: While US regulations generally require Suspicious Activity Reports to be filed within 30 days, filings at the bank frequently took more than six months.
- Repeat Supervisory Findings: The lapses persisted despite formal admonitions and directives to remediate compliance oversight issued by regulators two years prior.
- Scale vs. Control: The enforcement was announced just prior to quarterly earnings reporting expected profits of around $8bn, underscoring that scale does not excuse compliance lapses.
Treasury Secretary Scott Bessent affirmed that the enforcement action demonstrates even the largest institutions are 'not above the law'. Bank of America neither admitted nor denied the allegations, stating it has invested billions in financial crime prevention and remains committed to completing all required remedial programs.
A Wider Regulatory Enforcement Wave
The penalty is part of an aggressive supervisory wave targeting major US financial institutions. It closely follows the Federal Reserve and OCC's $350m penalty against American Express for a decade of transaction monitoring deficiencies, alongside investigations into how foreign entities utilize correspondent accounts at top-tier US banks to circumvent Western sanctions. The clear message to global compliance leaders: regulatory scrutiny has intensified, and failure to resolve prior supervisory findings multiplies enforcement severity.
Where Compliance Gaps Lie
- Coverage Deficits: When trillions of dollars in correspondent and cross-border volume are not adequately covered, systemic risk goes undetected.
- Niche Sector Typologies: Sectors like salvaged vehicle trading require bespoke, trade-based monitoring rules rather than generic fiat threshold triggers.
- Alert Backlogs & QA Gaps: Severe backlog accumulation in investigation queues deprives analysts of the capacity to investigate high-risk alerts in a timely manner.
- Filing Latency: Multi-month delays in submitting SARs undermine law enforcement's ability to act on actionable intelligence.
Where SecuroQ Fits In: Explainable Workflows from Alert to SAR
These structural failures represent the exact friction points SecuroQ is designed to eliminate. The SecuroQ platform unifies transaction monitoring, graph entity resolution, and audit-ready investigation management into a single intelligence layer, preventing alerts from languishing in siloed queues.
SecuroQ's scenario library—including Scenario 01 for high-value rapid fund velocity—equips institutions with dynamic, behaviour-based monitoring that prioritizes true-positive risks and automatically compiles regulator-ready case dossiers to eliminate SAR backlogs.
Eight Actionable Remedies for Regulated Institutions
- Recalibrate Scenarios & Thresholds: Regularly review detection logic against emerging jurisdictional risks, correspondent flows, and sector-specific typologies.
- Widen Data Ingestion: Ensure all products, cross-border channels, and correspondent relationships feed into centralized monitoring without exception.
- Risk-Based Alert Prioritization: Deploy dynamic risk scoring to automatically route the most critical cases to senior investigators first.
- Strict SAR Deadline SLAs: Implement automated telemetry that tracks elapsed time from alert trigger to filing, triggering executive escalations ahead of statutory deadlines.
- Robust Quality Assurance: Conduct independent, structured reviews confirming that investigation rationales are thoroughly documented.
- Align Resourcing with Inflow Volume: Match investigative staffing and computational tooling directly to transaction scale and operational complexity.
- Accountability on Remediation: Track audit and regulatory recommendations through to completion with direct senior executive accountability.
- Continuous Model Validation: Maintain proactive, continuous testing to identify detection drift and coverage blind spots before supervisory exams.
For Bank of America, the fine is a costly reminder that regulatory compliance is measured strictly by operational outcomes: suspicious activity caught, thoroughly investigated, and reported on time. For the wider financial industry, it is a non-negotiable directive to evaluate whether existing monitoring architecture would withstand identical scrutiny.
"Sources: US Department of the Treasury; Office of the Comptroller of the Currency (OCC); SecuroQ (securoq.com)."
Eliminate SAR Backlogs & Transaction Monitoring Blind Spots
Discover how SecuroQ's Unified Investigation Engine and automated audit trails accelerate alert disposition from months to minutes.