Bank of America's $1.2 Billion AML Penalty Is a Record. Is It a Deterrent?
Bank of America will pay more than $1.21 billion to settle federal findings that it let long-standing weaknesses in its anti-money laundering program go unfixed, failed to report more than $5 billion in suspicious activity, and missed red flags tied to Chinese money laundering networks and illicit finance along the southwest border. The headline number is historic. Measured against the bank's earnings, it amounts to about 12 days of profit, and the government's announcements name no individual and no criminal charges.
What regulators found
The Financial Crimes Enforcement Network assessed a $1.2 billion civil penalty, which Yahoo Finance reports is the third-largest in Treasury Department history. As part of that resolution, Bank of America admitted it willfully violated the Bank Secrecy Act. It also admitted it failed to maintain an AML program that met the law's minimum requirements, skipped required due diligence on correspondent accounts for foreign financial institutions, and failed to file suspicious activity reports.
FinCEN said the bank failed to mitigate and report priority national security risks. According to the government's findings as reported by Yahoo Finance, the bank put revenue ahead of compliance spending and effectively left much of its suspicious-activity detection to law enforcement and other banks, letting flagged transactions sit uninvestigated for long stretches.
The Office of the Comptroller of the Currency added a $750 million civil money penalty, the largest in the agency's history, for what it called a deficient and ineffective BSA/AML program. That amount is credited against the FinCEN penalty rather than stacked on top of it. The Office of Foreign Assets Control settled separately for $11.6 million over 475 apparent violations of sanctions programs covering Iran, Russia, narcotics and global terrorism, which OFAC characterized as non-egregious but largely not voluntarily self-disclosed.
The bank must also have an outside party review previously undetected suspicious transactions and submit to independent assessments of its compliance controls.
"Even the biggest financial institutions are not above the law," Treasury Secretary Scott Bessent said. Comptroller of the Currency Jonathan Gould called the bank's response to its BSA deficiencies "unacceptable." A Bank of America spokesperson said, "Financial crime compliance is serious, and we are responsible for getting it right."
The second warning
This is not the first time regulators have told Bank of America to fix this. In December 2024, the bank agreed to an OCC cease-and-desist order over long-standing weaknesses in its anti-money laundering controls. According to the OCC, the bank did not make sufficient progress after that order. Tuesday's penalty is, in effect, the cost of ignoring the first warning.
That history matters more than the dollar figure. A consent order is supposed to be the moment a bank stops arguing and starts spending. When the same institution comes back nearly two years later with the same category of failures and a willfulness admission attached, the question is not whether regulators found the problem. It is whether anything they impose actually changes behavior.
The math on "record"
Bank of America reported $9.1 billion in net income for the second quarter of 2026, or roughly $100 million a day. At that pace, the $1.2 billion charge represents about 12 days of earnings. The bank has already told investors the hit will be a non-tax-deductible charge of $1.2 billion, about 17 cents per share, in third-quarter results due Wednesday morning. Investors shrugged accordingly: the stock fell a little more than 2% on Tuesday.
None of the government announcements mention the Justice Department, criminal charges, or any executive by name. That is consistent with how most big-bank AML cases end. TD Bank's 2024 case went further, with a corporate guilty plea, roughly $3 billion in penalties and an asset cap on its U.S. operations. Bank of America's resolution includes none of those. When the consequences land on shareholders as a one-quarter earnings charge, the people who decided compliance was a cost center to be trimmed rarely feel them.
That is the core problem with how financial crime enforcement works at the top of the market. A willfulness admission is significant on paper, and the lookback and independent assessments will cost real money and management attention. But a penalty that a bank can absorb in less than two weeks of profit, paid by shareholders rather than the people who made the decisions, reads more like a fee than a deterrent.
Bank of America will report earnings Wednesday, take questions on the charge, and almost certainly describe it as behind them. Whether it actually is depends on what the bank does over the next two years, and on whether regulators are prepared to escalate if the answer looks like the last two.
