Institutional Anti-Money Laundering Failures: When Banks and Payment Firms Leave Money Unseen

Bank money laundering compliance failures occur when a bank leaves transactions outside monitoring, understates customer risk or lets warnings go unanswered. The failure can sit in a budget decision, a system setting or a manager’s refusal to close a relationship. For the person testing the model, investigating the customer or asking for more staff, the important question is what happened after the institution knew. A system can record suspicious activity that never reaches an investigator.

What Are Violations of the Bank Secrecy Act?

Violations of the Bank Secrecy Act include failures to maintain required anti-money laundering controls, perform correspondent due diligence or file timely and accurate suspicious activity reports. These duties put the institution’s own decisions under examination: what it monitored, what it understood about its customers and what it reported.

An anti-money laundering program assigns responsibility through internal controls, a compliance officer, employee training and independent testing. The bank program also requires ongoing customer due diligence. The bank program rule connects that work to understanding customer relationships, developing risk profiles and monitoring activity. Understanding what the account is for, who controls the business and whether its transactions fit that business is continuing work.

What Are the Red Flags for AML Transaction Monitoring?

Excluded transaction categories, inadequately tested thresholds, suppressed alerts and repeated findings left unresolved are red flags for AML transaction monitoring. An investigator can examine only the activity that reaches the review process. A coverage decision made earlier can remove an entire category from that view.

In the facts underlying its guilty plea, TD Bank admitted failures that included leaving domestic ACH transactions and most checks outside transaction monitoring. The Justice Department’s account of the guilty pleas ties monitoring gaps to managerial choices and constrained anti-money laundering resources. The transaction category mattered before anyone decided whether a particular payment looked suspicious.

When a bank AML program intentionally excludes transaction categories, the deployed monitoring rules, exclusion approvals and budget decisions can show how that choice was made. A policy describing coverage and a system configured to omit the activity tell different stories.

When Management Overrides the Warning

Payment company AML failures can persist when managers overrule fraud staff. Evidence of the override can show why an agent kept operating after staff recommended removal. It connects the warning to the person authorized to act and to the business that continued afterward.

Under its deferred prosecution agreement, MoneyGram admitted aiding and abetting wire fraud and failing to maintain an effective anti-money laundering program. Managers rejected fraud staff’s recommendations to terminate agents. Fraud and anti-money laundering information did not flow adequately, and the company failed to file suspicious activity reports on agents known to be involved in fraud.

The control had people who recognized the problem. Their recommendations did not become the company’s decision. Keeping the agent in the network preserved the channel through which consumers lost money to scams.

A remittance network connects an accepting agent, the principal money services business, banking arrangements, a payout agent and the recipient. Customer complaints may reveal a pattern at an agent that looks different from a review of individual transfers. In MoneyGram, the link between fraud staff and the people deciding whether agents stayed was central to the admitted failure.

That is why the override record matters alongside the original alert. We examine the recommendation, the decision, the information available to the decision-maker and what happened to the relationship afterward.

The Control Point Changes With the Business

Banks, broker-dealers, money services businesses and casinos hold different parts of a transaction. A correspondent bank sees its institutional customer. A remitter manages an agent network. A casino receives funds for a patron. The customer relationship and the way money arrives determine where a failure becomes visible.

What Is Correspondent Banking in AML?

A correspondent account lets a bank provide deposits, payments or transaction processing for a foreign financial institution. In a nested relationship, that foreign institution gives other banks access through the same account. The bank providing access can therefore be processing payments for customers further down the chain.

HSBC’s statement of facts attached to its deferred prosecution agreement describes understaffed anti-money laundering operations, a staffing freeze intended to cut costs and improve return on equity, and Mexico remaining in the lowest risk category during a period of serious exposure. HSBC also failed to monitor large populations of affiliate transactions. The risk label and the staff allocation helped determine how much scrutiny the business received.

In the facts accompanying its guilty plea, Danske Bank admitted that its executive board canceled a centralized technology migration because of its expense. A whistleblower warning and subsequent internal audits exposed problems. The bank nevertheless misrepresented its Estonian branch’s controls and customer risk to preserve access to U.S. dollar clearing.

The questionnaire sent to a correspondent and the internal audit can describe the same business very differently. We examine those representations together, including what the bank said after a correspondent challenged the relationship.

Broker-Dealers and Low-Priced Securities

Broker-dealer anti-money laundering controls reach securities activity and foreign correspondent relationships. The Financial Crimes Enforcement Network’s Canaccord Genuity order identified inadequate anti-money laundering controls, deficient foreign correspondent diligence and failures to report suspicious transactions involving low-priced securities.

Casino Patrons, Cash and Third-Party Funds

Casino controls must connect funds to the actual patron and aggregate covered cash activity across the gaming day. The Financial Crimes Enforcement Network’s Lake Elsinore consent order records admitted failures involving customer identification, cash aggregation and suspicious activity reporting.

Under its non-prosecution agreement, Wynn Las Vegas admitted using unregistered money transmitting businesses to bypass the conventional financial system. Third-party agents routed foreign patrons’ money through nominee companies into a Wynn-controlled account and then the casino cage. Proxy gamblers concealed the actual patrons.

Payment and Digital-Asset Records

Hosted-wallet providers receive, store and transmit customer value. Transfers within their own ledgers need not appear individually on a public blockchain. The Financial Crimes Enforcement Network’s guidance on convertible virtual currency examines the function the business performs. For an insider, account ownership, internal transfers and approval records can explain what an outside observer cannot see.

A payment chain can lose required identifying information even while its transfers continue to process. The funds travel-rule guidance addresses information moving with the payment. The operational question is where that information disappeared or stopped being used.

What an Insider Can Establish

An insider can connect the control promised on paper to the system in operation and the decisions that kept it there. Model versions show which scenarios ran. Exclusion approvals show which transactions were omitted. Testing results show what the institution learned about the gap. Budget and staffing decisions show its response.

The same comparison applies to customers and agents. A risk review describes the expected business. Transactions show the activity. Escalation messages and account decisions show what management did when the two diverged. In correspondent banking, the assurances sent outside the institution add another comparison with what people knew inside it.

We work through those connections with you. An engineer may understand the missing category. An investigator may understand the customer. An auditor may know when management received the finding. Together, those facts can explain why the failure persisted. Questions about suspicious activity report confidentiality and reward eligibility for compliance officers, analysts and auditors belong in that conversation with our whistleblower experts.

What Was Bank of America Fined For?

The Financial Crimes Enforcement Network’s Bank of America action addressed anti-money laundering program failures, foreign correspondent due diligence and failures to file timely and accurate suspicious activity reports. Its order describes missed or delayed reporting of over $5 billion in suspicious activity, despite internal warnings and concerns raised by law enforcement and other financial institutions. The order imposed a $1.2 billion civil penalty and credited a $750 million payment to the Office of the Comptroller of the Currency, expressly requiring a $450 million payment to Treasury.

More Alerts Do Not Measure Success

Anti-money laundering effectiveness depends on what the system detects, what people can investigate and whether useful information reaches enforcement. Anti-Money Laundering: Opportunities for Improvement, published by the Wharton Initiative on Financial Policy and Regulation in 2024, examines why effectiveness is difficult to measure and why resources and feedback matter.

The paper argues that weak parts of the system attract evasion and that feedback from public agencies can improve the information institutions collect and pass on. Applied inside an institution, that points to a concrete question: can the people responsible for a control do the work its design assumes? The Bank of America findings show why a system’s activity count can conceal the more important fact that suspicious activity never received timely review.

Whistleblower Rewards Follow the Conduct

A whistleblower case under the False Claims Act can pay 15% to 30% of what the government recovers. Bank Secrecy Act and covered sanctions matters have a separate FinCEN whistleblower award program, which provides for awards of a combined 10% to 30% of the money collected in qualifying cases, with payment to begin once its rules are final. We assess the reward route with you alongside the conduct and the decisions inside the institution.

Build a Case Around the Decisions Behind the Failure

If you know which transactions were excluded, which warning was overridden or why a risky relationship stayed open, speak with our whistleblower experts about the decision behind the failure. We build the case with you around the controls, the money and the people who had authority to act, and bring in anti-money laundering whistleblower lawyers who understand institutional compliance failures. From assessing the first control gap to pursuing the case, we work as your partners at every stage.