Finn's Take· TL;DROne of the most trusted names in American banking is now facing one of the largest financial penalties in U.S. history. On October 13, the U.S. Treasury Department announced it was imposing more than $1.2 billion in fines on Bank of America — the second-largest bank in the United States — for violating anti-money laundering and sanctions laws, with the fines representing the third-largest penalty in the department's history.
Regulators said the bank failed for years to report more than $5 billion in suspicious transactions and fix long-standing anti-money-laundering problems. That's not a clerical oversight. That's a sustained, systemic breakdown at the heart of an institution that processes money for tens of millions of Americans every day.
As part of its resolution with FinCEN, Bank of America admitted that it willfully violated the Bank Secrecy Act and failed to implement and maintain an anti-money laundering program that met minimum requirements, conduct due diligence for correspondent accounts for foreign financial institutions, and file Suspicious Activity Reports. In plain terms: the bank knew it had obligations, and it didn't meet them.
More than $1 billion of the unreported activity involved national security and other high-priority risks, including Chinese money laundering networks and activity tied to the southwest border. Making matters worse, according to the Treasury's statement, "the Bank effectively outsourced to third parties a substantial portion of its proactive detection and reporting obligations." Rather than building robust internal safeguards, the bank apparently handed off those critical responsibilities — and the system failed.
Even after the Treasury Department warned Bank of America two years ago to be more vigilant about suspicious activity, transactions continued to flow. That detail is perhaps the most damning of all: regulators flagged the problem, and the bank still didn't fix it.
The Office of the Comptroller of the Currency assessed a $750 million civil money penalty for the bank's deficient and ineffective anti-money laundering compliance program, while the Office of Foreign Assets Control announced an $11.6 million settlement over apparent violations of numerous sanctions programs, including those targeting Iran, Russia, narcotics, and global terrorism.
The latest action is the third-largest penalty ever issued by the Treasury Department, behind a roughly $4 billion settlement in 2023 with Binance, the world's largest cryptocurrency exchange, and an approximately $3 billion settlement with Canada-based TD Bank the following year. The OCC's $750 million portion is itself a record — the largest fine that agency has ever imposed.
As the second-largest bank in the country, Bank of America has more than 70 million clients and processes about $4.5 trillion in payments for individual customers every year. The sheer scale of the bank's operations is exactly why regulators treat compliance failures here so seriously. Treasury Secretary Scott Bessent put it bluntly: "When a bank of this size fails to meet its anti-money laundering and sanctions obligations, the consequences extend far beyond its own walls, exposing the entire US financial system to significant illicit finance risks."
Bank of America's leadership has signaled it intends to remediate the issues. But the damage to its reputation — and to public confidence in the banking system's ability to police itself — won't be erased by a check. Regulators cited a "systemic failure" to set appropriate thresholds for triggering investigations, and said the bank had failed to make "acceptable substantial progress" correcting an earlier customer due diligence problem. That pattern of slow-walking reforms will likely draw intense scrutiny in the months ahead, as regulators watch closely to see whether this billion-dollar wake-up call finally produces real change.