$5 billion in suspicious activity. Unreported.
That is what Treasury found behind Bank of America’s $1.2B penalty — including more than $1 billion tied to national security and other priority illicit finance risks.
Three regulators. One finding.
What the orders actually say:
- $1.2B — FinCEN assessment, the third-largest penalty in Treasury’s history
- $750M — the largest penalty the OCC has ever imposed, credited against the FinCEN figure
- $11.6M — OFAC settlement covering 475 apparent sanctions violations
- >$5B — suspicious activity that was never reported
“Largely outsourced.”
The line I would underline. FinCEN found the bank had largely outsourced suspicious activity detection to law enforcement and other institutions.
Treasury said revenue was prioritized over compliance resources — and that this continued after a December 2024 cease-and-desist order.
Screening alone is not the whole answer.
Let me be direct about my own lane. Transaction monitoring generates the alert.
But an alert is only as good as what you actually know about the person behind the account. When watchlist, PEP and adverse media data is stale, thin, or keyword-matched into noise, analysts spend their days clearing false positives — and the real one waits in the queue.
Detection you own.
The layer we build:
- Watchlist, sanctions, PEP, adverse media and criminal data — returned as the issuing authority published it
- Contextualized Entity Extraction — a hit ties to the person the coverage is actually about, not everyone named near the story
- Continuous Smart Monitoring — the customer who was clean at onboarding and sanctioned eighteen months later does not go unnoticed
Does your last data refresh predate your last risk assessment?
If the answer is yes — or you are not sure — that is the conversation to have. Let’s talk at vital4.net.
Kristin Stafford
CEO & Co-Founder, VITAL4
FAQs
In coordinated actions, three U.S. regulators penalized Bank of America over anti-money laundering and sanctions failures. FinCEN assessed $1.2 billion, the OCC imposed $750 million (credited against the FinCEN amount), and OFAC settled for $11.6 million over 475 apparent sanctions violations. FinCEN found that more than $5 billion in suspicious activity went unreported.
FinCEN found that the bank’s detection of suspicious activity was largely outsourced to law enforcement and other institutions instead of being done by the bank itself, and that revenue took priority over compliance resources. The conduct reportedly continued after a December 2024 cease-and-desist order.
Transaction monitoring alerts are only as good as the customer data behind them, and stale or noisy watchlist, PEP, and adverse media data can bury real risks. A useful test for any program is whether the last data refresh predates the last risk assessment. Banks should own their detection and be able to show how it works.
Vital4 supplies watchlist, sanctions, PEP, adverse media, and criminal records data collected directly from primary sources, along with Smart Monitoring, which screens continuously and alerts teams when something changes. Contextualized Entity Extraction helps reduce false positives in adverse media screening, so reviewers can focus on genuine risk.