Bank of America's $1.21 billion BSA penalty

Week’s Lead Stories

TREASURY · OCC · FINCEN · OFAC · OCT 13 · ORDER FINAL
Bank of America's $1.21 billion BSA penalty
Bank of America entered the week under a December 2024 cease-and-desist order to fix longstanding Bank Secrecy Act (BSA) deficiencies. On October 13, Treasury and the OCC imposed more than $1.21 billion in penalties, which Treasury called the third-largest in its history. The Financial Crimes Enforcement Network (FinCEN) assessed $1.2 billion, crediting the OCC's $750 million civil money penalty, the largest the agency has imposed. The Office of Foreign Assets Control (OFAC) settled separately for $11.6 million. The penalty punishes slow remediation, not a new gap. More than a year after the 2024 order, alerts still went unescalated.

FINCEN · OCC · OCT 13 · LOOKBACK ORDERED

▸

What the lookback reaches: The bank failed to file suspicious activity reports on more than $5 billion in transactions, over $1 billion of it tied to national security risks such as Chinese money laundering networks. Its monitoring did not properly cover trillions of dollars, and it processed potential trade-based laundering after the 2024 order. The bank admitted the violations FinCEN cited. FinCEN's consent order requires a third-party lookback to find and report transactions that went undetected. It also orders independent reviews of monitoring, customer due diligence, foreign correspondent due diligence and data governance, tailored to the southwest border, cartels, narcotics trafficking, Iran and Russia. No deadlines are stated. Chief Financial Officer Alastair Borthwick said the order carries no asset cap. Better Markets' Dennis Kelleher called the settlement a slap on the wrist.

OCC · CFPB · OCT 14 · INVESTIGATION OPENED

▸

Nine banks, two agencies: The OCC reported on October 14 that all nine of the largest national banks it supervises had adopted reputation risk policies; those policies let political considerations, public opinion and social pressure shape who got banking services. The review covered 2020 through September 2025, nearly 100,000 complaints and about 420,000 pages of documents. Coal and firearms took the heaviest restrictions. The same day, the Consumer Financial Protection Bureau (CFPB) said it will investigate JPMorgan Chase, Bank of America, Citibank, Wells Fargo, U.S. Bank, Capital One, PNC, TD Bank and BMO Bank. The bureau will test them under the Equal Credit Opportunity Act and the Fair Credit Reporting Act, with adverse action notices a focus. It will also apply its ban on unfair, deceptive, or abusive acts or practices. Its review covers "the institutions featured in OCC's report and others."

OCC · OCT 14 · NO COMPLIANCE DATE

▸

The standard for exits: The OCC has dropped reputation risk from its supervision. It wants customer decisions to rest on measurable, impartial, risk-based standards a bank adopts in advance. In Lexington, Ky., Comptroller Jonathan Gould said the agency is not forcing banks to serve every customer. He praised Rep. Andy Barr's FIRM Act and Fair Access to Banking Act, which would write those protections into law. In court, JPMorgan renewed its bid in a new venue to dismiss the Trump debanking suit, arguing the allegations are too thin to show what the bank said, when or to whom. American Banker noted the report does not quantify the scale. Neither document sets a compliance date.

OCC · FDIC · OCT 13 · COMMENTS CLOSED

▸

The CRA file's structural objection: Comments on the OCC and Federal Deposit Insurance Corporation (FDIC) Community Reinvestment Act (CRA) proposal closed October 13. The sharpest objection concerns who wrote it. The Conference of State Bank Supervisors (CSBS) took no side on most policy changes. It warned that similar banks would face different CRA rules depending on their federal supervisor, with different results in merger reviews, branching and financial holding company powers. Seven states and the District of Columbia have their own CRA laws, so a state nonmember bank could be intermediate under the proposal and large under state law. CSBS asked the FDIC, OCC and Federal Reserve to adopt one approach. The Independent Bankers Association of Texas urged a pause until a unified interagency rule exists.

OCC · FDIC · COMMENTS CLOSED

▸

Thresholds and the dollars at stake: Raising the large-bank threshold to $10 billion from $1.649 billion would leave about 2.4 percent of the two agencies' banks under the large-bank exam, down from 13.4 percent. The Independent Community Bankers of America (ICBA) wants $10 billion as the community-bank line. ICBA was a plaintiff in the suit that led a federal court to enjoin the agencies' 2023 CRA rules. About 90 percent of insured institutions fall below $10 billion. The Utah Bankers Association calculated that 42 banks in the Salt Lake City area would face roughly $1.95 billion a year in community development requirements under the proposal's Option 1. The National Community Reinvestment Coalition estimated that the proposal would reduce community development investment by $1.6 billion to $1.9 billion a year. It asked for a 60-day extension.

Regulatory Developments

FED · FDIC · FSB · NOV 30 · COMMENT BY NOV 30

▸

Stablecoin rules against the statute's clock: Banking groups asked the Federal Reserve to extend comments on its GENIUS Act proposals (91 FR 61580) from November 30 to January 29. That date falls after January 18, 2027, when the Act takes effect unless a final rule moves it sooner. The OCC, FDIC and National Credit Union Administration proposals also remain unfinalized. FDIC Chair Travis Hill said regulators have more work to do on tokenized deposits. One open question is how 24-hour settlement would affect failed-bank resolutions. On October 12 the Financial Stability Board told G20 finance ministers that a global stablecoin can span several entity types and national authorities. No single jurisdiction can fully address that coordination problem, it found. The same package finalized sound practices on AI adoption and imposes no obligation on US banks.

FED · OCT 14 · NO NEW REQUIREMENTS

▸

Bowman's SVB accounting: Vice Chair for Supervision Michelle Bowman said October 14 that an independent review found examiners identified Silicon Valley Bank's rate and liquidity exposure at least nine months before it failed. Unclear decision rights between Board and Reserve Bank staff held up escalation. The Fed is clarifying those rights and holding examiners and supervisory leaders directly accountable. Fed Chair Kevin Warsh said in Bangkok on October 16 that he will spend the next 100 days on supervision, regulation, payments and other functions beyond rates. The Board itself is under pressure. The President has called Governor Lisa Cook to a White House hearing, according to the Bank Policy Institute's October 17 roundup; the hearing's date has not been reported.

OCC · FED · FDIC · OCT 14 · COMMENTS CLOSED

▸

Exam-cycle relief, open questions: The agencies' interim final rule implements section 903 of the 21st Century ROAD to Housing Act. It raises the asset ceiling for an 18-month on-site exam cycle to $6 billion. The American Bankers Association backed it but asked whether de novo banks in their first three years qualify. It also asked the agencies to describe warning signs, such as rapid asset growth, that would justify more frequent exams. Comments closed October 14.

CFTC · OCT 13 · OCT 15 · COMMENTS BY DEC 14

▸

Crypto rules, and a settlement that stands: The Commodity Futures Trading Commission's (CFTC) advance notice on retail crypto trading reached the Federal Register on October 13. It covers Regulation Crypto Asset Transactions and Regulation Crypto Asset Markets. Comments close December 14. On October 15 a New York federal judge denied the CFTC and Gemini's joint request to vacate the settlement that ended a Biden-era case. He found no material change in the facts. A shift in crypto policy, he held, did not justify vacating the order.

OFAC · FINCEN · OCT 13 · OCT 15 · DESIGNATIONS EFFECTIVE

▸

Cartel and Iran designations: OFAC on October 13 sanctioned four individuals and 11 entities tied to Cartel del Noreste. Their businesses span quarter horse racing, construction, trucking, and oil and gas. On October 15, Treasury designated two Iranian banks and an Iraqi bank under Executive Order 13902. FinCEN issued an alert listing four red flags for Iranian diversion of religious tithes through charities. Blocking obligations attached the moment each listing took effect. Treasury Secretary Scott Bessent said the cartel action exposes its use of horse racing to launder proceeds.

…and 2 further developments this week — the full log is at lexregpulse.com.

Market & Macro Signals

▸

Inflation reopens the October question: September's consumer price index rose 3.7 percent, hotter than expected. Producer prices for final demand rose 1.3 percent in the month, the largest gain since March 2022. The Fed lifted its target range to 3.75 to 4 percent on September 16, its first increase since July 2023. Most committee members said in the minutes they may need a second increase before year-end. Regional presidents split this week. Boston's said inflation will likely spark more increases, and San Francisco's said increases are likely needed but not urgently. New York's sees no need for a hike in 2027. Warsh declined to signal his next move, and bets on an October hold strengthened after he spoke.

▸

Yields off the peak, spreads wider: The 10-year Treasury yield closed at 5.31 percent on October 5, its highest close of the past year. It stood at 5.09 percent Friday morning. The 2-year was at 4.74 percent. The high-yield spread widened about 9 basis points to 3.25 percentage points. SOFR, the overnight rate banks pay for funding, fixed at 3.87 percent on October 8.

▸

Gulf escalation and crude: Brent touched $110 a barrel as Iran escalated attacks around the Strait of Hormuz. A missile attack the kingdom blamed on Houthi militants hit Saudi Aramco's headquarters. Iran's Revolutionary Guards said two tankers hit naval mines on October 17, an account no one has independently confirmed. Ship attacks in the strait have reached their highest level since the war began. US forces have redirected more than 130 ships under the blockade. Citi told its employees in Saudi Arabia to work from home.

▸

The AI financing trade cracks: More than $1 trillion was wiped from 20 AI and semiconductor names in one week on rate-hike and financing fears. South Korea's KOSPI fell about 8 percent Thursday, triggering a circuit breaker. Higher borrowing costs pressured indebted firms like CoreWeave and Oracle. Some Anthropic investors are weighing a valuation of around $1.5 trillion for its November share sale, down from roughly $2 trillion, CGTN reported. Its third-quarter revenue rose 45 percent to $16.8 billion.

▸

Activity holds, sentiment slips: The Fed's Beige Book found activity rising in nine of 12 districts, with softer consumer spending. Industrial production rose 0.7 percent in September. The New York Fed's services outlook index fell 10 points to -5.1, its first pessimistic reading since December 2025. The CSBS community bank sentiment index declined but stayed positive. The Fed's Survey of Consumer Finances found the share of families whose debt payments exceed 40 percent of income rose to 8.6 percent from 6.5 percent between 2022 and 2025.

Earnings Watch

▸

Earnings beat, revenue fell short: Results were mixed across reporting banks. Goldman Sachs (GS) earned $17.01 a share, well above estimates, as equities revenue jumped 72 percent to $6.44 billion. JPMorgan Chase (JPM) posted adjusted EPS of $5.75 (GAAP $5.57), short of estimates; net interest income rose 13 percent to $27.1 billion. Bank of America (BAC) posted adjusted EPS of $1.08 (GAAP $0.91) against $1.11 expected, a 3.1 percent miss. Citigroup (C) posted EPS of $2.85 against $2.71 expected, a 5.1 percent beat. Morgan Stanley (MS) posted EPS of $3.03 against $3.00 expected. State Street (STT) posted EPS of $3.69 against $3.71 expected, a slight miss.

▸ Wells Fargo misses on revenue: Wells Fargo (WFC) earned $1.87 a share on revenue below estimates; shares fell in early trading.

▸

Margins up, credit uneven: Bank of America's net interest margin rose 8 basis points from the prior quarter to 2.16 percent; net charge-offs fell 3 basis points to 0.44 percent and CET1 stood at 10.9 percent. JPMorgan's card charge-offs ran at 2.91 percent. Citigroup's CET1 was 12.8 percent and return on tangible common equity 11.5 percent. Morgan Stanley's return on tangible common equity was 22.6 percent and CET1 14.9 percent; equities trading revenue beat expectations by $909 million. Dimon flagged "sticky inflation, elevated asset prices, rising interest rates."

computed from company filings and verified earnings data

Industry Watch

▸

Banks split on outside AI agents: JPMorgan Chase blocks outside AI agents from moving money or paying bills, though they can still read balances through connectors such as Plaid. Schwab and Citi followed with their own restrictions. Bank of America, BBVA, Synchrony and Wells Fargo instead joined the Personal Agent Protocol, which lets a company set limits on agents. The stakes are deposits: lenders fear chatbots could shift billions into higher-yielding accounts, the Financial Times reported. M&T and U.S. Bancorp say agents are not yet moving consumer deposits. The Federal Trade Commission sent civil subpoenas on October 14 to OpenAI and Anthropic over agents that accessed systems without authorization.

▸

Stablecoins become a product: On October 15, Visa took its Visa Direct stablecoin payouts into commercial deployment, letting partners prefund cross-border payments in USDC. Mastercard launched Global Money Platform through BVNK, letting banks embed fiat and stablecoin accounts under their own brand through one API. Cross River Bank put Ripple's RLUSD into its core system alongside ACH and wires. Standard Chartered launched RLUSD custody. Under the GENIUS Act, from July 18, 2028, service providers may offer only coins from permitted issuers. The rules that grant that status remain proposals.

▸

Charter routes multiply: The neobank Upgrade applied for an industrial loan company charter, whose parent sits outside Fed holding-company supervision. It named Virginia Varela, a former OCC official of more than two decades, chief executive of the proposed bank. The charter would cut its reliance on partner banks Cross River and Celtic Bank. The FDIC approved four such charters in 2026, and none has opened. Rain joined the firms still seeking national trust charters despite ICBA's lawsuit. Payward, Kraken's parent, is buying Lithuania's Saldo Bank. No FDIC decision on Upgrade has been reported.

▸

AI inside bank operations: FIS made its AML Investigations Agent, built with Anthropic, available to any US bank on October 15. Bank of America has 1,000 contractors and 3,000 employees fixing software flaws found by Anthropic's Mythos and other frontier models. G7 finance ministers agreed to run simulated AI attacks on banks. A Bank of England deputy governor called AI a "systemic risk."

Cross-Agency Patterns

▸

One customer file, two tests: The Lead Stories put account decisions under opposing pressure in the same week. Bank of America was penalized for failing to escalate. The OCC and CFPB now demand that exits rest on risk criteria set in advance and match the adverse action notice.

▸

The Fed on its own clock: CSBS's CRA objection (Lead Stories) and the Fed's separate GENIUS docket (Regulatory Developments) point the same way. The OCC and FDIC are moving faster than the Board on rules that will govern the same banks.

▸

AI moves onto the supervisory agenda: The FSB's AI sound practices (Regulatory Developments), the G7 attack simulations and the FTC subpoenas (Industry Watch) came within one week. Banks are drawing their own lines on agents before any supervisor has.

▸ Products ahead of permits: The card-network launches (Industry Watch) are advancing while issuer rules remain proposals. Bank groups want more time on them (Regulatory Developments).

Bank of America's $1.21 billion BSA penalty — Weekly Intelligence Digest, Oct 18, 2026