Bank of America Pays $1.21 Billion Over AML Failures

Bank of America will pay $1.21 billion to resolve anti-money-laundering lapses and alleged sanctions violations, according to Compliance Week.

The figure is the hardest fact in this story, and it lands in a familiar place: the intersection of the Bank Secrecy Act (the U.S. statute requiring banks to monitor and report suspicious financial activity) and OFAC sanctions rules (restrictions administered by the Treasury's Office of Foreign Assets Control on dealings with sanctioned countries and persons).

What do the allegations involve?

The settlement, as reported, bundles two distinct categories of misconduct.

• AML lapses. These are failures in a bank's controls for detecting and reporting suspicious transactions — think of a smoke detector that stays silent while the kitchen burns.
• Alleged sanctions violations. These concern payments or services that may have touched sanctioned parties. The word "alleged" matters here: the bank resolved the claims without an admission that mirrors a criminal conviction on that specific point.

Compliance Week's report frames the $1.21 billion as covering both tracks in a single resolution.

Who enforces these rules?

U.S. bank AML enforcement typically runs through several regulators at once. The OCC (Office of the Comptroller of the Currency), the Federal Reserve, FinCEN (the Financial Crimes Enforcement Network, Treasury's AML arm) and OFAC each hold pieces of the mandate. Large resolutions like this one usually combine penalties and remediation orders from several of these bodies.

The precise allocation of the $1.21 billion among agencies, and the date of the formal announcement, appear in the Compliance Week reporting that first carried the figure. Readers should treat the number itself — not any breakdown — as the confirmed core of the story.

What does a penalty like this change for practitioners?

For compliance officers and outside counsel, the practical consequence is straightforward. A nine-figure resolution signals that AML program deficiencies — not just completed money laundering — carry material price tags on their own. It is one thing to pay for what happened. It is another to pay for what your systems failed to catch, which is exactly the exposure this kind of settlement names.

That shifts the calculus on budget decisions. Transaction monitoring systems, suspicious activity reporting (the filings banks must make when transactions look irregular) and sanctions screening all cost money before they save it. A $1.21 billion benchmark gives general counsel a concrete number to weigh against the cost of upgrading those controls.

How does this fit the enforcement pattern?

Large U.S. banks have paid multi-billion-dollar AML and sanctions penalties before. Each resolution tends to follow the same architecture:

• a civil money penalty;
• a consent order (a binding agreement with the regulator requiring fixed changes);
• mandated remediation of the bank's monitoring and screening programs.

The Bank of America figure sits within that tradition. It's large, but it isn't an outlier in a category where penalties have crossed the billion-dollar line before.

For a bank of this scale, the remediation commitments often matter more than the headline number. They dictate years of audited spending on systems and staff.

What should readers watch next?

The underlying Compliance Week report is the primary source for the $1.21 billion figure and the scope of the allegations. Watch for three things as the record develops.

• The formal consent orders or settlement agreements, which will set out the specific control failures.
• Any OFAC component, which will identify the sanctions programs at issue.
• The remediation timeline, which shows how regulators expect the bank to fix what broke.

Those documents will do what press releases don't: name the gaps, line by line, that cost Bank of America $1.21 billion.