Bank of America hit with $1.2 billion penalty over money laundering allegations

Regulators penalized Bank of America because its anti-money-laundering program did not reliably identify, investigate, or report suspicious activity. The bank admitted willfully violating federal requirements, including duties to maintain adequate safeguards and report transactions promptly. These failures matter because banks are expected to help prevent their financial networks from being used for crime.

The most striking example involved monitoring failures across trillions of dollars in transactions. Regulators said more than $5 billion in suspicious activity was unreported or reported late. More than $1 billion involved potential national security or other high-priority risks, including Chinese money-laundering networks and suspected trade-based laundering linked to the U.S.-Mexico border.

Regulators also said Bank of America prioritized revenue while limiting compliance resources. At times, it relied on law enforcement and other outside sources to identify suspicious activity. The bank had been addressing deficiencies since a December 2024 order, but significant problems remained, leading to major penalties and a continuing compliance effort.

Money laundering is the general process of making money from crime appear legitimate. Criminals may move funds through accounts, purchases, businesses, or trade transactions so the money becomes harder to connect to its original source. The goal is to disguise where the money came from and make it usable within the normal financial system.

The article gives examples involving suspected Chinese money-laundering networks and suspected trade-based money laundering linked to the U.S.-Mexico border. In a trade-based scheme, financial activity connected to goods or payments can be used to hide the movement or value of illicit funds. Banks look for patterns that do not fit a customer’s expected activity, then investigate and report concerns.

The article does not provide a full technical definition or a step-by-step laundering scheme. It does show why detection matters: Bank of America’s monitoring failures left more than $5 billion in suspicious activity unreported or reported late, including more than $1 billion involving high-priority risks.

Bank of America faced more than $1.2 billion in penalties and settlements over anti-money-laundering and sanctions failures. The action included a $750 million civil penalty from the Office of the Comptroller of the Currency. The agency called it the largest penalty in its history, while Treasury described the overall action as including its third-largest penalty.

The underlying monitoring failure was also enormous. Regulators said the bank failed to properly monitor trillions of dollars in transactions. As a result, more than $5 billion in suspicious activity was either not reported or reported late. More than $1 billion of that amount involved potential national security and other high-priority risks.

Treasury also announced an $11.6 million settlement over hundreds of apparent sanctions violations, including violations involving Russia and Iran. The bank said it would record a $1.2 billion, non-tax-deductible charge in its third-quarter results. The figures show both the scale of the compliance breakdown and its immediate financial impact.

When a bank fails to monitor and report suspicious activity, regulators can impose penalties and require corrective action. The bank may also face settlements, public scrutiny, and substantial costs to rebuild its controls. The consequences reflect concern that criminals or high-risk networks may have used the bank’s financial network without timely detection.

Bank of America’s case shows the mechanism clearly. Regulators said the bank failed to monitor trillions of dollars in transactions and left more than $5 billion in suspicious activity unreported or reported late. The Office of the Comptroller of the Currency assessed a $750 million civil penalty, and Treasury announced additional penalties and an $11.6 million sanctions settlement.

The bank had been working under a December 2024 regulatory order, but officials said significant problems persisted. Bank of America said it had invested billions in technology and assigned thousands of employees to financial-crime work. It also said the $1.2 billion charge would appear in third-quarter results, while remediation costs were already reflected in expenses.

Banks are expected to detect suspicious transactions because they operate the accounts and payment systems through which money moves. They can compare activity with customer information, notice unusual patterns, and preserve records for authorities. Law enforcement remains important, but it cannot independently observe every transaction inside every bank.

The article shows what happens when that division breaks down. Regulators said Bank of America sometimes relied on law enforcement and other outside sources to identify suspicious activity. They also said the bank failed to properly monitor trillions of dollars in transactions, leaving more than $5 billion unreported or reported late.

That responsibility is why regulators treated the failures as serious violations rather than ordinary mistakes. Banks must maintain safeguards and report concerns so authorities can assess possible money laundering or national security risks. Bank of America said it has invested billions in technology and dedicated thousands of employees to financial-crime prevention, but regulators said significant problems persisted after a December 2024 order.

Anti-money-laundering rules and sanctions rules address different risks. Anti-money-laundering rules focus on detecting and reporting activity that may involve criminal proceeds or other suspicious conduct. Sanctions rules restrict transactions involving designated countries, people, or activities. Both protect the financial system, but they ask different questions about a transaction.

The article illustrates the distinction through two actions. Regulators said Bank of America failed to report more than $5 billion in suspicious activity, including potential laundering networks. Separately, Treasury announced an $11.6 million settlement over hundreds of apparent sanctions violations, including violations involving Russia and Iran.

Banks are responsible for enforcing both sets of rules because transactions pass through their systems. They must monitor activity, maintain safeguards, and stop or report prohibited conduct when required. In this case, the consequences covered both failures. The bank admitted willfully violating anti-money-laundering laws and said it would record a $1.2 billion charge for the broader enforcement action.

An anti-money-laundering program is the collection of rules, safeguards, systems, and staff a bank uses to detect and report possible money laundering. Its purpose is to prevent criminals from using accounts and payment networks to move suspicious funds unnoticed. The program must monitor activity, investigate warning signs, and send required reports to regulators or authorities.

The article identifies several essential elements by describing what failed at Bank of America. Regulators said the bank did not properly monitor trillions of dollars in transactions, lacked adequate safeguards, and sometimes depended on law enforcement or outside sources to identify suspicious activity. Officials also said the bank limited compliance resources while prioritizing revenue.

The bank said it has invested billions in technology and dedicated thousands of employees to fighting financial crime. Even so, regulators said significant problems continued after a December 2024 order. That means an effective program requires more than software or staffing alone. It needs adequate resources, working controls, timely reporting, and sustained management attention.