Amex's $350 million AML order

Week’s Lead Stories

OCC · OCT 8 · CONSENT ORDER ISSUED
Amex's $350 million AML order
The OCC found that American Express National Bank's anti-money laundering (AML) risk assessment centered on a narrow line of demand deposit products and gave too little weight to the credit and charge cards that dominate its business. On October 8, the Office of the Comptroller of the Currency (OCC) fined the bank $350 million and placed it under a cease-and-desist order. The OCC found the bank failed to identify in time, or report in full, about $13 billion of suspected trade-based money laundering (TBML) over the past decade. The bank neither admitted nor denied the findings. Compliance chiefs should test whether their own risk reviews follow the products that earn the revenue.

FRB · OCC · OCT 8 · ORDERS ISSUED

▸

The holding company's share: The Federal Reserve's companion order (Docket 26-052-B-HC) reaches the parent, American Express Company, along with its subsidiary American Express Travel Related Services. It cites weak transaction monitoring, fraud referral processes, third-party risk reviews and enterprise-wide financial crimes risk management. Fraud referrals now appear in a federal AML order. Banks that keep fraud operations apart from Bank Secrecy Act (BSA) investigations should test whether fraud cases suggesting laundering reach the suspicious activity report (SAR) queue. The OCC order preserves actions against institution-affiliated parties, meaning individuals. None has been reported. The orders impose no asset cap.

FINCEN · OCT 6 · WITHDRAWALS EFFECTIVE

▸

FinCEN shelves two crypto reporting plans: The Financial Crimes Enforcement Network (FinCEN) withdrew two proposed rules effective October 6. The December 2020 proposal would have required banks and money services businesses to report unhosted-wallet transactions over $10,000. It would also have required records above $3,000. The October 2023 proposal would have named convertible virtual currency mixing a primary money laundering concern under section 311 of the USA PATRIOT Act. Under that proposal, banks would have reported wallet addresses, transaction hashes, IP addresses or narratives. FinCEN cited lawful users' interest in privacy on public blockchains. Both were proposals. Systems work built for either can stop or be redirected.

FINCEN · TREASURY · FRB · NCUA · COMMENT BY OCT 19

▸

Wallet questions move to the stablecoin docket: Expectations for a bank's crypto counterparties will now come from the GENIUS Act rulebook, which makes a permitted payment stablecoin issuer a BSA financial institution. FinCEN's April 10 proposal on issuer AML programs (91 FR 18582) has not been finalized. Treasury's proposed rule on who may issue, offer and sell payment stablecoins (91 FR 53368) closes for comment October 19. The Federal Reserve Board's GENIUS Act proposals (91 FR 61580) close November 30. The National Credit Union Administration (NCUA) proposed 26 stablecoin account and reporting codes for credit union call reports, a useful gauge for banks sizing their own reporting burden. No firm holds issuer approval today. The GENIUS Act takes effect January 18, 2027 unless a final rule moves it.

FRB · FDIC · OCT 6 · NO COMPLIANCE DATE

▸

The Fed redraws its supervision map: The Federal Reserve will organize bank supervision into five geographic regions drawn along state lines, replacing the 12 Reserve Bank districts. Vice Chair for Supervision Michelle Bowman announced the change October 6 at the St. Louis Fed. She said the Board will consider raising the asset thresholds where tougher standards begin later this year, with updates every five years. She also said Fed merger analysis understates competition from credit unions, nonbank lenders and branchless banks in rural markets. That critique tracks the FDIC's September 17 merger proposal, which would count credit unions in the competitive screen. FDIC comments close November 23. Acquirers near a fixed line should factor a possible threshold change into deal timing.

TREASURIES · OCT 8 · 10-YEAR AT 5.34%

▸

Yields at 2002 highs: The 10-year Treasury yield touched 5.34 percent before Thursday's open, a level no daily close has reached since April 2002, then eased to 5.25 percent before Friday's open. Reuters tied the climb to minutes of the September 15-16 Federal Open Market Committee (FOMC) meeting, released October 7, which show most members believe they may need another increase before year-end. Rising Japanese yields added the prospect of investors pulling money home. The September move took the target range to 3.75 to 4.00 percent, the first increase since July 2023. Third-quarter books closed September 30, so unrealized securities losses reported for the quarter will understate the October position. Asset-liability committees should show boards both figures.

Regulatory Developments

FRB · FDIC · OCT 9 · COMMENT BY NOV 4

▸

Insider lending on one clock: The Board (October 7) and the FDIC (October 9) extended comment on their Regulation O updates; both now close November 4. The FDIC's proposal would raise the executive-officer credit threshold from $100,000 to $400,000, indexed every five years, and lift the board-approval trigger from $500,000 to $2 million. One letter can address both agencies.

▸

CRA rewrite draws fire: Senate Banking Committee Democrats sent a letter October 9 calling for rescission of the proposed Community Reinvestment Act (CRA) reform rule. The OCC docket closes October 13. Capitol Account reports the summer FDIC and OCC overhaul gives banks more flexibility but requires lenders to verify that grants are spent locally. Banks funding community development through intermediaries should confirm they can trace that money before filing. The OCC is also renewing its CRA Qualifying Activity Confirmation Request Form. Comments on that form are due December 7.

▸

Community bank relief, on the books: The FDIC told insured institutions on October 5 that third-quarter Call Report instructions reflect the April 29 capital rule, which lowered the community bank leverage ratio requirement from 9 percent to 8 percent and lengthened the grace period from two quarters to four. The change applies to the quarter ended September 30. Separately, Comptroller Jonathan Gould unveiled a tool on October 6 for community banks to report payment fraud, American Banker reported; the OCC has not said how it will use the reports.

FRB · FDIC · OCC · OCT 5 · COMMENT BY NOV 16

▸

Core providers reach examiners: The Fed's SR 26-7, issued October 5, sends the September 11 interagency statement on core service providers to Reserve Bank examiners and supervised banks. The statement says a few large providers hold much of the core market, which weakens community banks' hand on contract terms. The agencies say they may use supervisory or enforcement authority against a provider that engages in unsafe practices. SR 26-7 sets no compliance date for banks. The agencies' proposed third-party risk guidance takes comments until November 16. The Mercadien breach shows the stakes. The auditing firm found an intrusion in November 2025, but at least nine bank and credit union clients learned six to nine months later that their customers were affected.

SUPREME COURT · OCC · OCT 5 · SG BRIEF PENDING

▸

Preemption waits on the government: The Supreme Court on October 5 neither granted nor denied three bank preemption petitions: Cantero v. Bank of America, Flagstar Bank v. Kivett and Citizens Bank v. Conti. In each, it invited the Solicitor General to file the views of the United States. How far state law reaches national banks stays open until that brief arrives. The OCC, meanwhile, moved to dismiss the multistate suit over its mortgage escrow preemption actions. It asked for dismissal, transfer or a pause. The escrow determination covers only national banks and federal savings associations.

TREASURY · FINRA · OCT 7 · PENALTIES FINAL

▸

Enforcement beyond Amex: Treasury issued its first civil penalty under the Outbound Investment Security Program on October 7. The penalty was $200,000 against Amidi, LLC, whose Chinese subsidiary took an unreported stake of about $92,478 in an AI company. Bank private equity or merchant-banking arms that own foreign subsidiaries carry the same notice duty. Coinme agreed with 34 state regulators to shut its virtual currency kiosks in multiple states over alleged BSA and AML failures. The Financial Industry Regulatory Authority (FINRA) fined Revere Securities $800,000 for missing suspicious trading around small-cap initial public offerings by foreign issuers. Revere neither admitted nor denied the findings.

OFAC · FINCEN · OCT 8 · COMMENT BY NOV 4

▸

Sanctions pull two ways: On October 8, Treasury designated 17 vessels and 13 shipping companies under Executive Order 13902, which targets Iran's petroleum sector. Front companies sit in China, Hong Kong and the Marshall Islands, among other jurisdictions. Blocking attaches the moment those listings take effect. A day later, at President Trump's direction, the Office of Foreign Assets Control (OFAC) issued a temporary general license allowing Russian diesel supply to the global market. Its terms and expiry were not available. Trade-finance desks should read the scope before treating a cargo as authorized. FinCEN's proposed ban on transmittals involving the A7 Network's foreign sub-agents published October 5. Comments close November 4.

SEC · CFTC · OCT 5 · COMMENT BY DEC 4

▸

Wealth and derivatives dockets: On October 5, the SEC asked whether credentials such as the CFP, CFA and FINRA Series 79, 86 and 87 should confer accredited investor status. Comments close December 4. Its Rule 205-3 proposal would widen "qualified client" to anyone accredited, letting credentials open performance-fee products too. That docket closes December 7. A separate Rule 17a-7 proposal would restore registered funds' ability to cross-trade most fixed-income securities with affiliates. On October 9, the CFTC proposed defining swaps to include event contracts on sports, politics, culture or weather. An interim final rule kept casino-style gambling out. Bank swap dealers could face clearing or margin duties if the proposal is finalized. No comment deadline is set for the CFTC event-contracts proposal pending Federal Register publication.

…and 1 further development this week — the full log is at lexregpulse.com.

Market & Macro Signals

▸ A second increase on the table: A Fed governor said October 8 he expects another increase if inflation shows no sign of easing. Standard Chartered expects 50 more basis points before mid-2027.

▸

Gulf escalation and crude: Crude rose to near $92 a barrel on reports of Iran strike planning, then fell to near $91 after President Trump said no strikes are planned before the midterms. After markets closed, a Houthi missile struck King Khalid International Airport in Riyadh on October 10, killing at least 12 people and injuring more than 300, Saudi officials said, CNN and CBS News reported. It was the third strike on the airport this week, Al Jazeera reported. President Trump said he is considering joining Saudi strikes on the Houthis. Banks with energy lending, trade finance or Gulf counterparty books carry the exposure as markets reopen Monday.

▸

Fed governance under pressure: The White House formed a committee on October 9 to investigate mortgage allegations against Governor Lisa Cook. American Banker described it as an effort to remove her. The Financial Times reported that the Supreme Court rebuffed the removal fight in June. Cook's lawyers say a hearing will show there is no fraud case. Her seat carries a vote on rates as well as on Board rules.

▸

Household stress in the data: The Fed's Survey of Consumer Finances, released October 9, found that the share of families with debt payments above 40 percent of income rose from 6.5 to 8.6 percent between 2022 and 2025. Real median family income rose 7 percent to $82,200. Revolving credit fell at a 4.2 percent annual rate in August. Michigan's preliminary October sentiment index fell to 46.3. Card lenders should compare the survey's measure with their own payment-to-income cutoffs.

▸

Credit appetite, tested: Banks began syndicating a $60 billion financing for Broadcom and Anthropic on October 6, a record, the Financial Times reported. SpaceX is seeking $40 billion of debt for Nvidia chips, and its credit default swaps jumped on the report. TechCrunch reported that OpenAI's revenue is $20 billion below prior projections. That matters to lenders underwriting chip debt on revenue forecasts. The New York Fed has been reviewing large banks' loans to private credit firms, Semafor reported. No findings have been reported. Abroad, China has closed nearly a quarter of its banks, the Financial Times reported.

Industry Watch

▸

Charters after the lawsuit: The Independent Community Bankers of America (ICBA) sued the OCC on October 2 in the U.S. District Court for the District of Columbia. The group argues that the rule behind the OCC's crypto trust charters exceeds its authority. Applications kept coming anyway. Modern Treasury applied for a national trust bank for stablecoin and fiat custody. Rain filed for one covering stablecoin custody, reserves and issuance. A trust charter takes no deposits and confers no right to issue a stablecoin. Erebor, the only fintech de novo yet opened, has passed $7 billion in deposits. Revolut, whose U.S. bank holds conditional OCC approval, is targeting a U.S. listing. This matters because chartered fintechs compete for deposits directly.

▸

Deals keep coming: Third Coast agreed to buy an Oklahoma bank for $240 million. TowneBank agreed to acquire BlueHarbor Bank, its fourth North Carolina purchase. Bank of Ann Arbor will buy Huron Valley Bancorp, its first deal since 2021. The Fed approved an application by Isabella Bank Corporation without describing the transaction. Old Glory Bank raised $8 million after saying that the Fed failed to approve its application because the bank is pro-crypto. Western Union and International Money Express refiled with antitrust regulators. In payments, Anchorage Digital bought Routable. Capitolis raised $220 million to buy eSecLending. The FDIC's 1998 policy statement governs its merger reviews until a final rule.

▸

Sponsor banks in court: Investors sued Coastal Financial. They allege that the bank holding company concealed credit losses at fintech partners, losses reported to have erased $470 million in market value. The suit followed a Hagens Berman investigation into its banking-as-a-service (BaaS) credit controls. The claims are allegations. No regulator has acted. Peer sponsor banks should check whether partner credit losses show in their own disclosures.

▸

Stablecoins and agents at the checkout: Samsung Wallet made USDC its default stablecoin for U.S. Galaxy users. Anchorage Digital partnered with Standard Chartered on USD accounts for non-U.S. institutions. Mastercard expanded Agent Pay with services that give issuers context on AI-initiated transactions. No clear legal rule decides who bears the loss when an AI agent exceeds its mandate. That gap lands in issuers' dispute operations. JPMorgan's Jamie Dimon said AI-related threats rose tenfold after Anthropic released its Mythos model.

Cross-Agency Patterns

FinCEN

▸

Old rules, enforced harder: FinCEN shelved two crypto proposals (Lead Stories) in the same week the OCC and the Fed penalized Amex under existing BSA rules. In the same days, 34 states shut Coinme's kiosks (Regulatory Developments). Agencies are adding few new duties while enforcing the old ones.

FDIC

▸

Thresholds that index themselves: Five-year indexing appears in the FDIC's insider-lending proposal (Regulatory Developments) as well as in Bowman's asset-threshold plan (Lead Stories). Fixed dollar lines are giving way at both agencies.

FEDERAL RESERVE

▸

Partner risk from every side: SR 26-7 and the Mercadien breach (Regulatory Developments) meet the Coastal suit and the agentic liability gap (Industry Watch). Third-party exposure now reaches banks through examiners and plaintiffs alike.

OCC

▸

Courts hold bank powers: The preemption referral and the OCC's escrow motion (Regulatory Developments) sit beside the ICBA charter suit (Industry Watch). Courts, not agencies, will settle these questions.

Amex's $350 million AML order — Weekly Intelligence Digest, Oct 11, 2026