Federal banking regulators hit Bank of America, N.A. (NYSE: BAC) with coordinated enforcement penalties totaling more than $1.21 billion on Tuesday, October 13, 2026, finding widespread breakdowns across the lender’s anti-money laundering controls and suspicious activity reporting programs. The enforcement actions include a $1.2 billion penalty from the Financial Crimes Enforcement Network (FinCEN) and a $750 million civil money penalty from the Office of the Comptroller of the Currency (OCC), marking the largest penalty in OCC history. Because the OCC penalty is credited against FinCEN’s assessment, the net civil penalty stands at $1.2 billion, alongside a separate $11.6 million sanctions settlement with the Office of Foreign Assets Control (OFAC).
The penalties land less than 24 hours before Bank of America is scheduled to release its third-quarter 2026 earnings results on Wednesday morning. Bank of America disclosed that it will take a non-tax-deductible charge of $1.2 billion in its third-quarter results, reducing net income by approximately 17 cents per share.
Key Takeaways for Investors and Capital Markets
- Credited Multi-Agency Penalties: FinCEN assessed a $1.2 billion penalty, while the OCC assessed a record $750 million penalty for violations under 12 CFR 21.21 and 12 CFR 21.11. Under the coordination agreement, the OCC fine is credited against FinCEN’s assessment rather than stacked on top of it.
- Earnings and Capital Impact: The $1.2 billion regulatory charge is non-tax-deductible, creating an immediate 17-cent per share headwind for Q3 2026 earnings per share (EPS). While manageable against the bank’s capital base (see our explainer on Bank Capital Ratios: CET1, Tier 1, and Tier 2), the settlement introduces elevated operational and compliance overhead.
- Third-Largest Treasury Penalty: At $1.2 billion, the FinCEN action is the third-largest fine in Treasury history, trailing only the $3.4 billion settlement with Binance in 2023 and the $1.3 billion action against TD Bank in 2024.
- Broad Remediation and Independent Oversight: Beyond monetary fines, the consent order mandates an independent review of transaction monitoring, customer due diligence (CDD), and data governance, alongside a historical lookback to catch undetected illicit flows.
Anatomy of the Enforcement Actions: FinCEN, OCC, and OFAC
The coordinated action, announced by the U.S. Department of the Treasury, addresses multi-year failures in Bank of America’s Bank Secrecy Act and anti-money laundering (BSA/AML) compliance programs. Regulators found that the institution—the second-largest bank in the United States—failed to properly monitor trillions of dollars in transactions and allowed systemic gaps in transaction monitoring to persist after entering into a December 2024 cease-and-desist order.
According to Treasury and FinCEN findings, Bank of America failed to timely report over $5 billion in suspicious transactions to FinCEN, with more than $1 billion implicating priority national security risks, including Chinese money laundering networks, narcotics trafficking, and trade-based money laundering along the U.S. southwest border. Furthermore, as noted in the Treasury release, regulators established that the bank’s transaction monitoring system was deficient, and this caused large numbers of late SARs involving billions of dollars. Many of the late SARs had indicia of money laundering.
In parallel, the Office of the Comptroller of the Currency levied its $750 million assessment under 12 CFR 21.21 (procedures for monitoring Bank Secrecy Act compliance) and 12 CFR 21.11 (suspicious activity report filing requirements). Comptroller Jonathan V. Gould stated that despite entering a binding order in December 2024 to remediate deficiencies, the bank’s program continued to reflect widespread breakdowns in internal controls, including failing to escalate suspicious activity and operating with inadequately trained BSA personnel.
A third regulatory agency, OFAC, resolved 475 apparent violations of international sanctions regimes targeting Russia, Belarus, Iran, Burma, and global terrorism with an $11.6 million settlement, stemming from technical processing errors and delayed watchlist screening.
| Agency / Regulator | Statutory / Regulatory Authority | Gross Assessment | Credited Amount | Net Payable Fine |
|---|---|---|---|---|
| FinCEN (Treasury) | Bank Secrecy Act / 31 U.S.C. 5318 | $1,200,000,000 | $0 | $450,000,000 |
| OCC | 12 CFR 21.21 & 12 CFR 21.11 | $750,000,000 | Credited against FinCEN | $750,000,000 |
| OFAC (Treasury) | Sanctions Violations (475 Apparent) | $11,600,000 | $0 | $11,600,000 |
| Total Coordinated Settlement | Interagency Action | $1,961,600,000 | ($750,000,000) | $1,211,600,000 |
How the FinCEN and OCC Penalty Crediting Mechanism Operates
A common source of confusion in capital markets reporting is the double counting of regulatory fines across multiple enforcement agencies. In major financial crime settlements involving national banks, federal regulators typically coordinate their assessments:
- Primary Assessment: FinCEN serves as the administrator of the Bank Secrecy Act and assesses a comprehensive penalty ($1.2 billion) covering broad systemic violations across the entire institution.
- Prudential Regulator Assessment: The OCC, as the primary prudential supervisor of national banks, assesses a specific civil money penalty ($750 million) for supervisory breaches and failure to comply with safety-and-soundness orders.
- Concurrent Credit: To prevent duplicate recovery for the same underlying factual conduct, FinCEN’s settlement agreement credits the $750 million paid to the OCC against its total $1.2 billion assessment. As a result, Bank of America pays $750 million directed by the OCC and $450 million directly to FinCEN, both terminating in remittances to the general fund of the U.S. Treasury.
Capital Structure and Q3 Earnings Impact
Unlike ordinary operating expenses or litigation settlements involving private contractual disputes, regulatory civil money penalties assessed by federal agencies are non-tax-deductible under Internal Revenue Code Section 162(f). Therefore, the entire $1.2 billion regulatory penalty flows directly through to Bank of America’s bottom line without providing any offsetting corporate income tax shield.
Bank of America disclosed that this non-tax-deductible charge will reduce third-quarter 2026 net income by approximately 17 cents per share. For context, Wall Street consensus estimates had projected Bank of America’s Q3 diluted EPS in the range of 80 to 85 cents. A 17-cent deduction represents a notable single-quarter earnings drag of roughly 20%, though it represents a one-off charge rather than recurring operational degradation.
Remediation Mandate and Ongoing Supervisory Risk
While the monetary fine resolves historical liabilities, the non-monetary requirements of the consent order will impose substantive ongoing scrutiny. Under the terms of the settlement, Bank of America must conduct an independent review of the effectiveness of its suspicious activity monitoring, CDD, and foreign correspondent account due diligence programs
and execute an extensive multi-year transaction lookback.
In statements responding to the penalty, Bank of America noted that it has already invested billions of dollars in technology infrastructure and deployed thousands of dedicated risk and compliance personnel to overhaul its monitoring architecture. However, market participants will closely monitor whether the OCC’s finding of persistent breakdowns leads to broader supervisory restrictions, asset caps, or heightened scrutiny on future merger and acquisition activity similar to the operational constraints previously experienced by peer lenders.
Investors will look to Chief Executive Brian Moynihan and the management team during the Q3 earnings conference call on Wednesday morning for further details regarding ongoing compliance operating expenditure, capital return targets, and the expected timeline for full remediation under the OCC’s oversight.
Sources & Further Reading
- U.S. Department of the Treasury: U.S. Treasury Announces Record Enforcement Actions Against Bank of America (Press Release sb0657)
- Office of the Comptroller of the Currency: OCC Imposes $750 Million Assessment Against Bank of America for Deficient BSA/AML Compliance (News Release 2026-89)
- Financial Crimes Enforcement Network: FinCEN Assesses $1.2 Billion Penalty Against Bank of America
- Yahoo Finance: Bank of America Hit With $1.2 Billion Penalty Over Money Laundering Failures
Disclosure: This article is for informational purposes only and is not investment advice.