Bank of America hit with record $1.2 billion AML and sanctions penalty

Bank of America has been penalized $1.2 billion over anti-money-laundering and sanctions violations, a level described as a record in reporting published Oct. 14, 2026. The case highlights how compliance programs at large banks are increasingly scrutinized for both technical gaps and, in the regulator’s view, willful misconduct.

The report said regulators cited Bank of America for violations connected to the Bank Secrecy Act, the federal framework that requires financial institutions to help detect and report suspicious activity. It also pointed to failures related to sanctions compliance, an area that has intensified across U.S. banking since recent years’ expansions of enforcement priorities.

According to the same account, the regulator’s findings included “willful violations” of the Bank Secrecy Act. “Willful” in this context generally implies more than negligence, suggesting examiners concluded that the conduct reflected known or consciously disregarded compliance obligations rather than a purely accidental breakdown.

The report frames the penalty as record-setting, placing the bank’s remediation and oversight expectations in line with a broader enforcement trend where regulators use large dollar penalties to deter similar behavior across the industry. While the exact order, agency, and factual findings beyond the summary were not included in the available excerpt, the mention of both AML and sanctions suggests a compliance program that was not operating as intended.

For Bank of America, the practical impact of a penalty of this scale typically extends beyond the immediate payment. Banks facing major AML and sanctions actions often need to invest in monitoring and investigation systems, retrain staff, and strengthen governance so that customer- and transaction-level risk indicates reach decision makers with enough speed and accuracy. Regulators also tend to demand enhanced reporting on progress after such settlements.

More broadly, the enforcement posture reflects that AML and sanctions compliance are not treated as static checklists. Financial institutions are expected to adapt controls as transaction patterns evolve, new typologies emerge, and regulators adjust their expectations for data quality, escalation of red flags, and the effectiveness of internal testing.

The report did not specify in the available text what specific product lines, customer segments, or transaction categories were most central to the regulator’s conclusions, nor did it outline the timeline of the cited conduct or the remediation commitments Bank of America may have made. It also did not provide details on whether the matter was resolved through a settlement, consent order, or another type of enforcement action.

What to watch next is the regulator’s full findings and any compliance plan terms, including potential independent monitoring, reporting cadence, and measurable milestones. Investors and observers will also look for how quickly Bank of America updates its compliance infrastructure and whether the bank’s subsequent disclosures address any remaining risk areas identified by regulators.