View the chart data
| Component without double-counting | Amount |
|---|---|
| OCC portion credited toward FinCEN penalty | $750,000,000 |
| Remaining FinCEN/Treasury payment | $450,000,000 |
| Separate OFAC settlement | $11,662,930 |
| Combined total | $1,211,662,930 |
Bank of America (NYSE: BAC) faces a repair job that extends beyond its new $1.2 billion financial-crime penalty. U.S. regulators announced the action against its bank subsidiary on October 13, citing failures to detect and report suspicious transactions. Required independent reviews mean the work continues after the fine is settled. [1] [2] [3]
The action arrived just before the company's October 14 earnings release. Its investor-relations page reports $6.9 billion of net income for the quarter ended September 30. That shows a profitable business, while the regulators' findings raise a separate question about how reliably it controls the risks that come with its scale. [5]
One penalty, two overlapping assessments
The Financial Crimes Enforcement Network, or FinCEN, is the Treasury bureau that enforces financial-crime reporting rules. It assessed the $1.2 billion penalty. The Office of the Comptroller of the Currency, or OCC, supervises national banks and assessed $750 million for Bank of America's deficient controls. [1] [2]
Those amounts cannot simply be added. FinCEN's order credits the OCC payment against its own assessment, leaving $450 million to be paid separately to Treasury. A further sanctions settlement is outside that credit. The distinction matters because it keeps the financial burden in proportion without making the underlying failures seem smaller. [3]
The systems missed warning signs
The Bank Secrecy Act requires banks to maintain safeguards and report activity that may involve illicit finance. Bank of America admitted willful violations in its civil resolution with FinCEN. This is a civil enforcement action; suspicious transactions are not automatically proven criminal transactions. [2] [3]
The OCC describes weaknesses in transaction monitoring, escalation to investigators, staff training and internal audits. It says significant breakdowns persisted after a December 2024 order requiring improvements. The concern is therefore whether the bank can make its controls work consistently, rather than simply announce another program. [1]
“Financial institutions are on the front lines of protecting our economic and national security.”
Scott Bessent, U.S. Treasury Secretary · Treasury announcement, October 13, 2026 [6]
Sanctions failures bring a separate settlement
The Office of Foreign Assets Control, or OFAC, administers U.S. sanctions. It announced an $11.7 million settlement covering 475 apparent violations. Problems included processing payments involving blocked banks and mishandling alerts for people matching sanctions records. OFAC classified the apparent violations as non-egregious, but largely not voluntarily disclosed. [4]
That settlement adds to the net financial burden. It also illustrates why effective monitoring needs several parts to work together: identifying the customer, keeping records current and acting on alerts. Improving one part cannot guarantee that every other weakness has been addressed.
Paying the fine does not finish the work
The consent order requires an independent review of historical transactions to identify activity that should have been reported. Treasury also describes independent checks of monitoring, customer checks and the data supporting those systems. These are reviews of whether controls are effective, with further work required under the resolution. [3] [6]
Bank of America's reach makes execution significant. Its business spans consumer banking, business lending, wealth management and payments. Reliable controls help those services move money through the financial system. Repairs can require staff, technology and management attention, although the cited announcements do not quantify the eventual bill or its effect on future profits. [7]
The penalty settles a defined financial obligation. It does not by itself show that the monitoring weaknesses are fixed. For Bank of America, restoring confidence depends on completing the required reviews and demonstrating that improved controls work across the business.