Bank of America fined US$1.21 billion as US flags suspected Chinese money laundering

Bank of America was fined because its systems and staff did not identify, investigate, and report suspicious transactions promptly. FinCEN found wilful failures under the Bank Secrecy Act, including late reporting of more than US$5 billion in activity. A separate OFAC case covered sanctions violations.

The suspicious activity included large transfers to China, repeated card purchases at major retailers and shipping companies, and payments to third-party cards without an apparent business purpose. The bank also missed warning signals when card spending regularly exceeded customers’ stated incomes. Its trade-based money-laundering feature was used only on cases already under investigation.

FinCEN imposed US$1.2 billion and credited US$750 million of that against an OCC payment. OFAC added about US$11.7 million, bringing the combined penalties above US$1.21 billion. The orders describe suspicious activity, but do not prove every payment involved criminal proceeds or establish Chinese government involvement.

Money laundering is the process of hiding the criminal source of money by moving it through transactions that appear lawful. It matters because banks may unknowingly provide the payment network used to store, transfer, or spend illicit proceeds. Suspicious activity does not automatically prove that every payment came from crime.

A logistics company might send a large wire to China marked only “for goods,” even when no clear commercial reason exists. Customers could also make repeated purchases from major retailers or shipping companies, or pay cards held by unrelated third parties. These transactions may look routine individually, but their pattern can reveal hidden activity.

Banks use customer information, transaction monitoring, and investigative alerts to spot unusual patterns. In this case, FinCEN said Bank of America missed signals involving residential addresses, absent web presence, and spending above stated income. Regulators also linked more than US$1 billion in late-reported activity to priority illicit-finance risks, including suspected laundering networks and potential trade-based laundering.

FinCEN said Bank of America failed to report more than US$5 billion in suspicious activity within the required timeframe. More than US$1 billion of that involved national-security and other priority illicit-finance risks. The reported amount represents transactions regulators considered suspicious, not a confirmed total of criminal proceeds.

The enforcement action imposed US$1.2 billion through FinCEN, with credit for a US$750 million payment to the OCC. OFAC separately announced an approximately US$11.7 million settlement covering 475 apparent sanctions violations involving about US$14.8 million in transactions. Together, those penalties exceeded US$1.21 billion.

Comparing the figures gives a rough sense of scale: the combined penalties were about one-quarter of the more than US$5 billion in late-reported suspicious activity. But the comparison is not a direct measure of loss or proceeds. One figure counts delayed reports, while the other counts regulatory penalties for broader compliance failures.

The transactions appeared inconsistent with legitimate businesses because they formed unusual patterns without a clear commercial explanation. Customers claimed to work in logistics or electronics, yet their activity did not match those businesses. Regulators treated the mismatch as a warning sign requiring closer review.

Examples included large transfers to China with generic descriptions such as “for goods.” Other red flags included repeated credit-card purchases at major retailers and shipping companies, payments to cards held by third parties, and transfers to counterparties operating from residential addresses with no web presence. Card spending also routinely exceeded stated income.

The key mechanism is pattern-based monitoring. A single purchase may look ordinary, but repeated payments, vague purposes, unrelated recipients, and inconsistent customer profiles can suggest trade-based money laundering or other illicit finance. FinCEN said Bank of America’s monitoring gaps prevented some activity from triggering investigations. Its newer detection feature was used only for cases already under investigation, not to create new alerts.

The Financial Crimes Enforcement Network, or FinCEN, is the Treasury bureau responsible for combating money laundering and other financial crime through financial intelligence, reporting rules, and enforcement. In this case, it examined Bank of America’s delayed suspicious-activity reporting and Bank Secrecy Act compliance.

The Office of the Comptroller of the Currency, or OCC, is the federal regulator and supervisor for national banks and certain federal savings associations. FinCEN credited US$750 million of its penalty against a payment to the OCC, avoiding duplicate punishment for related conduct. The article calls that the OCC’s largest penalty.

The Office of Foreign Assets Control, or OFAC, administers and enforces US economic sanctions. It separately settled 475 apparent violations involving Russia, Belarus, Iran, Myanmar, Somalia, narcotics, and global terrorism programmes. Those cases included payments through blocked banks and transactions matching sanctions records. The article does not connect OFAC’s findings to the suspected Chinese networks.

The immediate consequence for Bank of America is financial and operational. It said its third-quarter results would include a non-tax-deductible US$1.2 billion charge, reducing net income by around 17 US cents per share. The bank must also complete work required by regulators and address failures involving anti-money-laundering and sanctions controls.

Customers may experience more questions, delayed payments, or account reviews as monitoring improves. Legitimate businesses could face extra scrutiny when transfers have vague descriptions, unusual recipients, or activity that does not fit their stated business. The article does not say whether the relationships involving suspected networks remained open.

The case may encourage banks to use monitoring tools more proactively. FinCEN said Bank of America’s trade-based laundering feature was applied only to activity already under investigation, rather than generating new alerts. Future systems may need to combine payment patterns, customer income, business profiles, addresses, and sanctions data before suspicious activity continues.

Banks have legal duties because they sit at the center of payments and can see who sends money, who receives it, and how transactions connect. Identifying customers helps establish who is using an account and whether activity fits the customer’s stated business. Monitoring helps detect patterns that may signal money laundering, fraud, or other illicit finance.

If a bank sees repeated transfers to unexplained recipients, vague payment descriptions, or spending far above declared income, it may need to investigate and report the activity. If a payment involves a sanctioned person, bank, or jurisdiction, the bank may need to block or reject it. These controls help prevent prohibited funds from moving through ordinary commerce.

The article shows why these duties matter. Bank of America failed to report more than US$5 billion in suspicious activity on time and separately processed transactions that regulators treated as sanctions violations. The penalties show that weak controls can create major financial, legal, and reputational consequences for a bank.