Federal Reserve Board announces enforcement action against American Express Company to address, among other things, the firm’s failure to sufficiently detect and report certain suspicious activity related to money laundering

The Federal Reserve’s enforcement action is a formal regulatory step against American Express. It addresses the firm’s failure to sufficiently detect and report certain suspicious activity related to money laundering. The action matters because financial firms must maintain controls that help regulators identify possible illicit financial activity and keep operations within U.S. law.

The Board also found significant deficiencies in American Express’s enterprise-wide anti-money-laundering program. The problems were particularly serious at the firm’s subsidiary national bank. Separately, the Office of the Comptroller of the Currency issued an enforcement action against that bank, because it is the bank’s primary federal regulator.

The article does not state the specific corrective measures, penalties, transactions, or deadlines involved. It says the Federal Reserve’s action is intended to help ensure American Express operates in compliance with all U.S. laws and regulations. That makes the announcement broader than a single incident: it concerns the firm’s systems and their implementation.

Detecting suspicious activity means reviewing transactions and account behavior for patterns that may indicate money laundering or another financial crime. Reporting it means sending required information to the appropriate authorities when activity meets legal or regulatory standards. The purpose is to help investigators trace potentially illicit funds and prevent financial systems from being misused.

In practice, a firm may examine unusual payment patterns, rapid movement of funds, activity inconsistent with a customer’s profile, or transactions involving higher-risk circumstances. A monitoring system can generate an alert, and trained staff can investigate it. If the concern is substantiated or meets reporting rules, the firm files a suspicious-activity report through the required channel.

The article does not describe American Express’s specific alerts, customers, transactions, or reports. It states that the firm failed to sufficiently detect and report certain suspicious activity related to money laundering. That finding suggests weaknesses in both identifying relevant activity and completing the required escalation or reporting process.

The scale described by the Federal Reserve is broad. The Board identified significant deficiencies in how American Express implemented its enterprise-wide anti-money-laundering program. “Enterprise-wide” indicates that the concern involved the firm’s overall framework, rather than only one isolated transaction or one employee decision.

The article also points to a particular area of concern: the firm’s subsidiary national bank. The Board said implementation was especially deficient there. It did not provide a count of affected transactions, accounts, customers, business lines, or locations. It therefore supports a conclusion about program-wide weakness, but not a precise numerical measure of its reach.

This distinction matters because an enterprise-wide program sets expectations for detection, investigation, reporting, oversight, and controls across a financial organization. Weak implementation can affect how many parts of the system operate. The Federal Reserve’s action seeks to help American Express operate in compliance with U.S. laws and regulations, while the bank faces a separate action from its primary regulator.

The subsidiary national bank received special attention because the Federal Reserve identified significant deficiencies in how American Express’s enterprise-wide anti-money-laundering program was implemented there. The concern was not that the bank was a separate, unrelated institution. It was part of American Express, but its regulatory supervision involves a different federal agency.

The Office of the Comptroller of the Currency, or OCC, is described in the article as the primary federal regulator of the firm’s national bank. In that role, it oversees the bank’s compliance with applicable requirements and can take formal supervisory or enforcement action when weaknesses are found. The OCC issued a separate enforcement action against the bank.

The two actions reflect the regulators’ different oversight roles. The Federal Reserve acted against American Express at the firm level. The OCC acted against the national bank. The article does not provide the separate order’s terms, penalties, remediation requirements, or deadlines, so those details cannot be determined from the announcement.

When regulators find serious anti-money-laundering weaknesses, a financial firm may face formal enforcement and orders to improve its controls. Regulators can also impose monetary penalties, require independent reviews, restrict activities, or demand regular progress reports. Individual managers may face discipline or accountability if they failed to oversee required systems, although the article does not say that happened here.

Customers can experience practical effects when a firm strengthens controls. Transactions may receive more scrutiny, account information may be reviewed, and unusual activity may be delayed or questioned. These measures can protect customers and the financial system, but they can also create inconvenience. Such outcomes are general possibilities, not consequences stated in this announcement.

For American Express, the confirmed consequence is regulatory action. The Federal Reserve said its action will help ensure the firm operates in compliance with U.S. laws and regulations. The article does not identify fines, managers, customer accounts, service restrictions, remediation deadlines, or any individual customer harm.

Financial companies usually identify suspicious transactions through layered controls. They collect customer and account information, assign risk levels, screen activity, and use automated rules or models to flag unusual patterns. Investigators then review alerts, gather context, decide whether concern remains, and escalate or report activity when required.

A control can fail at several points. Data may be incomplete or inaccurate. Monitoring rules may miss activity or generate too many alerts. Staff may not investigate alerts promptly, understand the risk, document decisions, escalate concerns, or file required reports. Governance can also fail when senior leaders do not provide enough resources, testing, training, or independent oversight.

These examples draw on established financial-compliance practice; the article does not identify which specific controls failed at American Express. It says the firm did not sufficiently detect and report certain suspicious activity and that implementation of its enterprise-wide program had significant deficiencies. The announcement therefore confirms an outcome, not every technical cause.

Money laundering generally means disguising the criminal origin of money so it can be used or presented as legitimate. It may involve moving funds through accounts, businesses, payments, or assets to obscure where the money came from. The goal is to make illicit proceeds harder to trace and easier to spend or invest.

Financial institutions are legally required to help prevent laundering because they process and hold large volumes of money. Their records, monitoring systems, and reports can give authorities important leads. Requirements commonly include customer identification, risk-based monitoring, recordkeeping, staff controls, and reporting suspicious activity when legal thresholds are met.

The article focuses on American Express’s failure to sufficiently detect and report certain suspicious activity related to money laundering. It does not define laundering or explain the underlying laws. The Federal Reserve said its enforcement action will help ensure the firm operates in compliance with all U.S. laws and regulations, while the OCC separately acted against the subsidiary national bank.