Bank of America Fined $1.2 Billion for Money-Laundering Failures

On October 13, 2026, the U.S. Treasury Department handed Bank of America a bill that was hard to miss: more than $1.21 billion in penalties for failures to police money laundering and sanctions violations, the third-largest enforcement action in the history of the Treasury's Financial Crimes Enforcement Network. The next morning, the bank reported third-quarter earnings, and the fine showed up exactly where you would expect: profits of $6.9 billion, down roughly 17 percent from a year earlier, with earnings per share of $0.91 against Wall Street's $1.10.

The numbers are only half the story. The Treasury said Bank of America failed to report more than $5 billion in suspicious transactions, including over $1 billion that posed national security and other priority illicit-finance risks. Among the flagged activity: transactions pointing to Chinese money laundering networks. Regulators concluded the bank had prioritized its revenues when building compliance programs, and had leaned too heavily on inquiries from outside parties, law enforcement and other banks, instead of its own internal controls.

The anatomy of the fine

The penalties came from three Treasury agencies. FinCEN imposed $1.2 billion, the centerpiece of the action and the third-largest penalty the agency has ever levied, behind only the record $3.4 billion against Binance in 2023 and the $1.3 billion against TD Bank in 2024. The Office of the Comptroller of the Currency assessed $750 million, its largest civil money penalty ever, an amount credited against the FinCEN figure. The Office of Foreign Assets Control settled separately for $11.66 million over 475 apparent sanctions violations.

This was not a bolt from the blue. Bank of America has been operating under a December 2024 cease-and-desist order that required it to repair a deficient anti-money laundering program, and regulators said it still failed to prioritize compliance. The consent order now requires the bank to hire an independent third party to review past transactions, identify suspicious activity it failed to detect, and report those transactions to FinCEN. In effect, the Treasury is making the bank audit its own blind spots, on its own dime.

The bank of the future is a software company. The Treasury just put a price on treating compliance like a cost center.

The quarter underneath the charge

Strip out the fine and the quarter was, as one might say, fine. The $1.2 billion charge is non-tax-deductible and cut net income by about 17 cents a share, which the bank disclosed a day before earnings. Without it, earnings per share would have been $1.08, still two cents shy of the $1.10 analysts expected. Even with the charge removed, this was a miss, not a rounding error.

The underlying businesses were a mixed picture. Net interest income jumped 8 percent, consumer banking revenue rose 4 percent, and wealth management revenue soared 13 percent. On the other side, global banking revenue was flat, global markets revenue dropped 6 percent, and investment banking fees slid 11 percent. Management raised its 2027 net interest income growth guidance to 8 percent, up from the previous 5 to 7 percent range, a signal that the core banking engine is still running.

Investors, though, were not in the mood to look past the headline. Shares sank 7.5 percent after the opening bell, the steepest early drop since April 2025, before recovering to close down 4.76 percent at $51.39. Trading volume hit 115.1 million shares, about 226 percent above the three-month average. That is the sound of the market repricing not the quarter, but the compliance risk that hangs over the next several.

Why this fine matters beyond one bank

There is a pattern worth noticing. FinCEN's three largest penalties now span crypto (Binance, 2023), a mid-size North American bank (TD Bank, 2024), and one of America's two largest banks (2026). The enforcement net keeps widening, and each step up the ladder sends the same message: the size of the institution does not buy leniency. It is part of a wider enforcement wave: Brussels just opened the first enforcement cases under the EU AI Act over rogue AI agents. This is also the largest anti-money-laundering penalty the current Treasury has imposed on a major bank, per Reuters reporting.

Treasury Secretary Scott Bessent framed it as a system risk: "Financial institutions are on the front lines of protecting our economic and national security," he said, adding that when a bank of this size fails its obligations, "the consequences extend far beyond its own walls." The bank, for its part, said financial crime compliance is serious and it is responsible for getting it right, adding that it has "invested billions of dollars in technology and dedicated thousands of employees" to fight financial crime. CFO Alastair Borthwick told reporters the bank is committed to doing everything needed to address the concerns.

Compliance is now a P&L line item

The deeper point is about how banks spend on technology. The largest U.S. banks all say they are technology companies now, and Bank of America's own statement leans on billions invested in compliance systems. The Treasury's verdict was that the systems, the spending, and the staffing did not add up to controls that worked. Regulators specifically faulted an overreliance on outside inquiries rather than internal detection, which is another way of saying the automation was not doing the job.

Fines of this scale are starting to rival the economics of entire business lines. A $1.2 billion charge wipes out nearly a fifth of a quarter's profit, and the remediation bill, lookback reviews, third-party audits, and years of heightened scrutiny, is only beginning. For bank shareholders, compliance is no longer a footnote in the risk section. It is a line item with real, recurring weight. Record fines are landing across industries: California is running its delete-week privacy enforcement sweep, and Dutch regulators fined Uber 825 million euros over automated deactivations.

The question for the industry is whether this changes behavior or just budgeting. Bank of America guided for stronger net interest income growth, and its core businesses remain solid. But every major bank is now doing the same uncomfortable math: what does it cost to build compliance that actually works, versus what does it cost when it does not? After October 14, 2026, the market has one very expensive data point for the second side of that equation.