Bank of America, the second-largest bank in the country, has formally admitted it "willfully violated" the Bank Secrecy Act. The Treasury Department says the bank sat on more than $5 billion in suspicious transactions it was legally required to report, including activity tied to Chinese money laundering networks and the southwest border. The bill is $1.2 billion, which sounds enormous until you remember how much money this institution moves in a year.
If you or I admitted to willfully violating a federal law, we would be having a very different Tuesday.
The Number, And What It Buys
Treasury announced Tuesday that Bank of America will pay $1.2 billion over violations of anti-money laundering and sanctions laws, according to NBC News and the New York Post. That makes it the third-largest penalty in Treasury history, behind a roughly $4 billion settlement with Binance in 2023 and about $3 billion with TD Bank the following year.
$750 million of the total goes to the Office of the Comptroller of the Currency. That is the largest fine the OCC has ever imposed, which tells you something about how rarely it swings at anything this size.
So, a record-setting penalty. Remember that word, "record," because we're going to come back to it.
Five Billion Dollars Nobody Told Anyone About
Here is the core of it. Treasury says Bank of America failed to timely report more than $5 billion in suspicious transactions to FinCEN, the Financial Crimes Enforcement Network. Over $1 billion of that activity implicated national security risks and other priority illicit finance concerns.
The specifics are the part that should make your coffee go cold. Treasury cited transactions "indicative of Chinese Money Laundering Networks, fraud, and potential trade-based money laundering with a substantial nexus to the southwest border."
The bank also admitted it failed to maintain an anti-money laundering program that met the minimum requirements of the law. Minimum. Not best practice. Not gold standard. The floor, and the bank went under it. It also admitted to failing to file mandatory Suspicious Activity Reports, which are the single most basic tool banks have for telling the government that something looks wrong.
475 Sanctions Violations On Top
The anti-money laundering failure was not the only item on the tab. Treasury's Office of Foreign Assets Control says Bank of America is also settling its potential civil liability for 475 apparent violations of multiple sanctions programs.
Those programs target Russia, Belarus, Iran, Burma, Somalia, narcotics, and global terrorism. The bank processed millions of dollars in payments in apparent violation of them.
The New York Post puts the OFAC settlement at $11.6 million. Run that math. That is a rounding error in the same press release that contains the word "billion." Four hundred seventy-five apparent violations, including payments touching Iran and terrorism programs, for a sum the bank probably recovers before lunch.
The Size Of The Thing That Failed
Context matters here, so let's supply it. Bank of America has more than 70 million clients and processes about $4.5 trillion in payments for individual customers every year. For corporate customers, it handles roughly $450 trillion in payments, covering payrolls, corporate credit cards, and supplier payments.
That is the pipe the suspicious money was flowing through. This is not a sketchy regional lender with a thin compliance staff. This is the plumbing of American commerce, and a federal agency says the compliance system guarding it did not meet the legal minimum.
Treasury Secretary Scott Bessent put it plainly: "When a bank of this size fails to meet its anti-money laundering and sanctions obligations, the consequences extend far beyond its own walls, exposing the entire U.S. financial system to significant illicit finance risks." He is not wrong. That is exactly why this matters.
The Bank's Response: We Care, Deeply
Bank of America issued a statement to NBC News that opens with this: "Financial crime compliance is serious, and we are responsible for getting it right." Past tense would have been more accurate, but fine.
The bank says it has "invested billions of dollars in technology and dedicated thousands of employees to combat financial crime," and that its team is "far along with and committed to completing the work required to address the issues raised by our regulators." It adds that it will keep supporting law enforcement across thousands of investigations and file hundreds of thousands of suspicious activity reports each year.
Note what that statement does. It touts the volume of reports it files while having just admitted it failed to file more than $5 billion worth. It is the corporate equivalent of a guy arguing he can't possibly be a bad driver because he owns so many cars.
Who Went To Prison Last Time
The New York Post offers a detail worth sitting with. The two penalties bigger than this one, Binance and TD Bank, both came out of the Biden administration's push on anti-money laundering enforcement. And after the Binance settlement, founder Changpeng Zhao was sentenced to four months in prison for looking the other way while criminals moved money tied to child sex abuse, drug trafficking, and terrorism.
Four months. That was the consequence for a person at the very top. Now compare it to what a second-largest-bank gets for admitting willful violations: a check, a statement about investment in technology, and a news cycle that will be over by Thursday.
No individual in this announcement is named as facing anything. The Treasury release talks about the institution, and the institution is the one that writes the check.
The Dingo Take
Treasury says this penalty sends "a clear message that even the biggest financial institutions are not above the law." The facts in this story say the opposite. A bank admitted it willfully violated federal law, admitted it missed more than $5 billion in suspicious transactions, admitted 475 apparent sanctions violations including payments touching Iran and terrorism programs, and walked away having paid a fraction of what it moves in a year. If that is what "not above the law" looks like, I'd hate to see above.
Look, the fine is real and the record is real. Credit where it's due: an administration that has spent plenty of energy hollowing out enforcement elsewhere did, in this case, extract a historic number from a giant. Fine. Take the win. But a penalty only deters if it hurts more than the misconduct paid, and nobody in this announcement has explained why a bank that handles $450 trillion in corporate payments should feel a $1.2 billion bill as anything other than a cost center.
Here is the question nobody at Treasury answered. Willful means someone knew. Someone decided. So who was it? Until a human being with a name and a corner office faces consequences that cost more than a line item, "clear message" is just a press release phrase, and the message the banks are hearing is the same one they always hear: it's a price, and you can afford it.
Comments