The US Treasury has fined Bank of America $1.2 billion. The civil penalty targets anti-money laundering (AML) compliance failures at the Charlotte-headquartered lender.

What did the Treasury do?

Treasury's Financial Crimes Enforcement Network, known as FinCEN, issued the penalty. FinCEN serves as the federal bureau enforcing the Bank Secrecy Act (BSA), the 1970 statute requiring banks to police dirty money. The action cites persistent failures inside Bank of America's transaction monitoring systems, where automated filters failed to catch suspicious customer activity that should have triggered review under the bank's own written compliance procedures.

What is anti-money laundering compliance?

AML refers to the rules banks follow to stop criminal proceeds entering the financial system. Compliance officers monitor customer transactions day after day. They flag unusual patterns and file suspicious activity reports (SARs) with FinCEN. Common red flags include layered wire transfers, shell-company payments, and cash deposits sitting just under reporting thresholds.

Banks must also run know-your-customer (KYC) checks at account opening and refresh them as customer profiles change. They must screen customers against sanctions lists maintained by the Office of Foreign Assets Control (OFAC) and update those screens whenever Treasury adds new names. The whole stack forms what regulators call a bank's BSA program, and gaps anywhere in that program - whether in onboarding, monitoring, or reporting - create enforcement exposure for the institution.

How big is the penalty?

The $1.2 billion figure ranks among the largest AML fines ever levied on a single US bank. For a concrete comparison, the penalty roughly matches the market value of a mid-sized regional lender traded on the New York Stock Exchange. It lands as a clear market signal about how Treasury treats compliance gaps at the largest institutions.

Smaller banks also face AML penalties, but dollar amounts usually scale with bank size and transaction volume. Treasury treats gaps at systemically important banks (SIBs) as priority enforcement matters deserving the heaviest fines, signaling that scale cuts both ways under the BSA.

What did regulators find at Bank of America?

The Treasury cited repeated failures in the bank's transaction filtering tools. These tools are supposed to catch unusual customer wires and deposits before they clear. Investigators traced the problems to outdated monitoring technology and slow remediation by management, both of which examiners view as systemic rather than isolated control breakdowns, since prior audit reports had already flagged similar weaknesses.

The bank's own internal audit reports had flagged similar weaknesses in earlier cycles. Management did not close those gaps quickly enough to satisfy FinCEN examiners reviewing the program. Regulators treat that delay as evidence of systemic, not isolated, failure.

What does this change for practitioners?

Compliance lawyers should expect FinCEN to demand more evidence of working monitoring upgrades. Written policies alone no longer satisfy examiners. Boards should review their BSA officer delegations and escalation paths. Audit committee members now face clearer personal exposure if they ignore compliance red flags.

Outside counsel should expect broader document requests during future regulatory exams, including board minutes, internal emails, and remediation project plans regulators previously left alone. Treasury appears willing to dig deeper than past administrations, sending a message to monitor harder, document better, and fix faster.

What's the regulatory backdrop?

The action fits a wider US enforcement push on financial crime controls. Federal prosecutors have charged individual bankers alongside institutions in recent years. Several global banks have paid AML penalties crossing nine figures. Treasury and the Department of Justice coordinate these cases through formal working groups, and that coordination explains why civil and criminal tracks often move together rather than running on separate timelines.

For Bank of America specifically, the fine may not end the matter. Regulators sometimes layer criminal referrals on top of civil penalties. Practitioners watching this case should track whether DOJ files parallel charges against individuals tied to the cited failures.

What happens next?

Bank of America can negotiate a consent order with FinCEN. A consent order is a binding settlement that carries no admission of liability. The bank typically pays the fine, accepts an independent monitor, and remediates the cited weaknesses on a regulator-approved timetable, and any failure to meet that timetable can trigger additional penalties.

The case will likely become a teaching example in compliance training. AML officers across the industry will study the cited failures. Law firm client alerts will reference the consent order for at least the next two years as the new baseline for what examiners expect from large-bank BSA programs.