Bank of America Faces $1.2 Billion Penalty for AML Violations Amid Crypto Debate

In December 2023, during a Senate hearing, Senator Elizabeth Warren questioned Bank of America CEO Brian Moynihan about the necessity for crypto companies to comply with the same anti-money laundering (AML) regulations that govern traditional banks. Moynihan responded affirmatively, stating that such compliance is crucial. This exchange occurred shortly after the U.S. Treasury Department revealed that Bank of America would face penalties exceeding $1.2 billion due to significant lapses in its AML practices.

The Financial Crimes Enforcement Network (FinCEN) found that Bank of America had willfully violated the Bank Secrecy Act, failing to report over $5 billion in suspicious transactions in a timely manner. This penalty includes a $750 million fine from the Office of the Comptroller of the Currency (OCC), marking it as the largest civil penalty ever imposed on a bank by the OCC. Additionally, the Office of Foreign Assets Control (OFAC) announced an $11.6 million settlement due to 475 apparent sanctions violations.

FinCEN's findings indicated that the bank's failures were concentrated in three critical areas: its AML program, due diligence on foreign correspondent accounts, and the timely filing of suspicious activity reports. Alarmingly, over $1 billion of the late-reported transactions were linked to high-priority illicit finance threats and national security risks, including connections to Chinese money laundering networks and potential trade-based laundering activities near the U.S.-Mexico border.

The OCC's investigation revealed that Bank of America exhibited systemic deficiencies in its transaction monitoring processes, which spanned trillions of dollars in financial activity. The bank's late reporting involved billions of dollars, and it was found lacking in terms of staff expertise, training, and audit processes. These failures were compounded by inadequate remediation efforts following a cease-and-desist order issued in December 2024.

The Treasury Department criticized Bank of America for its overreliance on law enforcement inquiries and referrals from other institutions to identify suspicious activities, rather than utilizing its internal monitoring systems effectively. Comptroller Jonathan Gould highlighted the bank's substantial risk profile, noting that it processes hundreds of trillions of dollars annually and has faced “widespread breakdowns” since the 2024 order.

Senate Hearing Raises Questions on Compliance

Warren's inquiries during the Senate Banking Committee hearing on December 6, 2023, focused on whether Bank of America had robust systems in place to detect and report potential terrorist financing activities. Moynihan assured her that the bank did have such systems. However, the recent findings have raised doubts about the effectiveness of these measures.

The Bank Policy Institute (BPI), of which Moynihan is a board member, has been advocating for equivalent AML obligations for crypto firms. In a policy paper published in August 2026 titled “Same Risks, Same Safeguards,” BPI argued that existing digital asset regulations leave significant gaps in illicit finance oversight within secondary markets, particularly concerning exchanges, custodians, and decentralized finance (DeFi) platforms.

The ongoing scrutiny of Bank of America’s compliance failures comes at a time when the crypto industry is also under fire for its handling of AML regulations. In 2023, Binance pleaded guilty to charges related to the Bank Secrecy Act and was fined $4.3 billion, further complicating the narrative surrounding financial compliance in both sectors.

The Broader Implications for Financial Compliance

As the debate continues over the adequacy of AML enforcement across banks and crypto firms, the implications of these findings could lead to stricter regulations for both industries. The potential for expanded Bank Secrecy Act coverage could place additional compliance burdens on exchanges, custodians, and stablecoin intermediaries, making the landscape of financial oversight increasingly complex and challenging for all involved.

Moynihan’s testimony and the subsequent findings from the Treasury Department present a critical test for both traditional banks and crypto firms regarding their adherence to AML rules. The recent penalties against Bank of America not only highlight the bank's shortcomings but also serve as a catalyst for discussions about the necessity of stringent compliance across the financial sector. As lawmakers and banking groups consider these developments, the future of AML enforcement may see a significant shift, with an emphasis on ensuring that all entities, regardless of their operational model, are held to the same standards. The outcome of these discussions could reshape the regulatory landscape, leading to enhanced scrutiny and compliance requirements that both banks and crypto companies must navigate going forward.