Bank of America Hit with $1.21 Billion Penalty in Major Compliance Settlement

The US Treasury Department announced on October 13, 2026, enforcement actions imposing more than $1.21 billion in penalties against Bank of America for failures involving anti-money laundering (AML) controls, suspicious transaction reporting and sanctions compliance.

The action ranks among the largest financial enforcement penalties in US history.

According to regulators, the bank failed to report more than $5 billion in suspicious transactions to the Financial Crimes Enforcement Network (FinCEN). Separately, the Office of the Comptroller of the Currency (OCC) imposed a record $750 million civil penalty over deficiencies in the bank’s compliance programme.

The Office of Foreign Assets Control (OFAC) also reached an $11.6 million settlement concerning 475 apparent sanctions violations involving transactions connected to countries and activities subject to US sanctions.

a question arises, can a financial institution satisfy its regulatory obligations by relying on external warnings instead of maintaining effective internal monitoring systems? US regulators identified weaknesses in transaction screening, customer due diligence, suspicious activity reporting and the timely updating of sanctions watchlists.

The enforcement action also highlights the importance of adequate compliance staffing, internal audits and management accountability.

For advocates and legal professionals, the matter illustrates the interaction between the Bank Secrecy Act, its implementing regulations and US sanctions enforcement under the OFAC framework.

It demonstrates that compliance failures may trigger parallel regulatory action, substantial civil penalties and mandatory remedial measures.

The wider lesson is that financial institutions must treat compliance as a core legal obligation, not merely an administrative function.