Correspondent Banking Fraud: False Assurances That Preserve Dollar Clearing

Correspondent banking money laundering fraud hides customer risks and failed controls from the U.S. bank that clears a foreign bank’s dollars. The assurance keeps the payment channel open while internal warnings tell a different story. If you work in correspondent due diligence, relationship management or payment operations, you may have seen both versions: the answer sent to the clearing bank and the customer file, audit or system limitation it left out.

What Is Correspondent Banking in AML?

Correspondent banking lets a bank receive deposits, make payments and process transactions through another bank. The bank providing those services is the correspondent. The foreign bank using them is the respondent. For dollar payments, that relationship can give the foreign bank access to the U.S. financial system and to institutions with which it has no direct relationship.

The customer making the payment may be another step away. As the HSBC criminal agreement’s statement of facts explains, the U.S. bank can handle a wire without having a direct relationship with the foreign bank’s customer. What the respondent says about its customers and controls therefore matters to the bank providing access.

Danske Bank’s guilty plea shows how that dependence can be exploited. The banks providing dollar clearing were the banks being misled. They were asked to process business without being told the risks Danske already knew.

Foreign Bank False Assurances to US Correspondent Banks

In its guilty plea, Danske Bank admitted misrepresenting its Estonian branch’s customers and anti-money laundering controls to preserve access to U.S. correspondent banks. The Justice Department’s announcement of the plea describes a conspiracy to commit bank fraud.

The plea’s factual account connects those assurances to decisions inside Danske. Its executive board canceled a planned migration to centralized technology because of the expense. A later whistleblower warning and internal audits identified problems. The bank nevertheless misrepresented its controls and customer risk to retain dollar access.

That same admitted account describes what happened when a correspondent ended its relationship with Danske. The bank sought another correspondent and misrepresented why the earlier relationship had ended.

For a relationship manager, the relevant exchange may look like ordinary account maintenance: a request for reassurance, a response about controls, an explanation for a previous bank’s exit. In Danske, those representations helped preserve the channel. The warning inside the bank and the assurance outside it belong in the same account of what happened.

Shell Company Customers, Nonresident Portfolios and AML Warnings

In correspondent banking, shell company ownership, a nonresident portfolio and AML warnings need to be read together. The customer list shows whose business the bank accepts. The ownership records show who stands behind those customers. The warnings show what the institution had learned before it described that business to a correspondent.

Danske’s admitted conduct involved shell-company customers and misleading statements about the Estonian branch’s customers and controls. The useful comparison is between the assurance and the underlying records: what the bank said it knew about ownership, what its files actually recorded, and what its audits had identified.

A questionnaire also describes how a bank expects to recognize suspicious activity. That answer can be compared with the systems actually operating, the transactions they cover and the staff available to review alerts. A risk rating matters when it determines which payments receive scrutiny. An internal warning matters when the answer sent to the correspondent carries on as though the warning never arrived.

Those comparisons turn a broad concern about a foreign portfolio into something specific. The decision to approve an answer or override a risk assessment can explain how access survived.

HSBC Put the Affiliate Exception in Writing

Under its criminal deferred prosecution agreement, HSBC admitted that its U.S. bank did not conduct due diligence on group affiliates with correspondent accounts, including HSBC Mexico. The failure followed a formal policy in the bank’s anti-money laundering procedures manuals.

Sharing a parent company did not excuse the work, but HSBC treated it as the reason to skip it. Information already inside HSBC also failed to reach the part of the business that needed it. The admitted facts describe HSBC Mexico reporting anti-money laundering problems upward to the group, with no formal mechanism for sharing information across affiliates. Senior group executives knew the problems involved U.S. dollars and dollar accounts but failed to explain their significance to their counterparts at HSBC Bank USA.

When HSBC North America’s regional compliance officer asked why the information had not been shared, the group’s head of compliance explained that HSBC does not:

HSBC trusted its U.S. bank to process the business, but not to hear what was wrong with it.

The Risk Rating Decided What the System Saw

HSBC’s admitted facts show that the U.S. bank kept Mexico in its lowest anti-money laundering risk category despite warnings about money laundering. Its monitoring settings generally left those customers’ wires outside automated review. From 2006 until May 2009, over $670 billion in HSBC Mexico transactions were excluded from that monitoring system. The risk label kept the wires out of review despite the warnings.

Staffing decisions compounded the problem. Beginning in 2007, senior business executives froze anti-money laundering staffing to cut costs and improve return on equity. An internal review later found wire-alert monitoring significantly under-resourced. Employees reported that requests for additional resources were discouraged, and eventually stopped making them.

The Financial Crimes Enforcement Network’s assessment imposed a $500 million civil penalty for Bank Secrecy Act violations. That civil penalty addressed failures that had let a far larger volume of payments pass unmonitored. Its findings connect the missing affiliate due diligence to ineffective monitoring and failures to report suspicious activity. The problem reached from the written policy to the risk rating to the people expected to review the alerts.

As HSBC’s criminal agreement describes, correspondent payments can also buy real goods that help convert criminal cash.

Nested Access Extends the Relationship Beyond the Respondent

Nested correspondent banking gives downstream banks access through another bank’s correspondent relationship. The U.S. correspondent sees its respondent as the account holder, while some payments belong to banks and customers behind it.

That structure makes the respondent’s own banking relationships part of the inquiry. Who is using the account, whose customers are sending the payments, and what does the direct respondent know about them? Customer and transaction records can show how far the service extends beyond the institution named on the account.

The Financial Crimes Enforcement Network’s HSBC assessment makes the consequence concrete. It found that foreign financial institutions and other customers of HSBC affiliates gained indirect access to the U.S. financial system without appropriate monitoring. The U.S. bank had failed to incorporate affiliates’ business purposes, expected activity, anti-money laundering supervision and compliance history into its monitoring.

Cutting Access Has a Cost Too

De-risking can restrict access for customers whose business banks find too costly to monitor. Anti-Money Laundering: Opportunities for Improvement, a 2024 paper from the Wharton Initiative on Financial Policy and Regulation, examines that tension between compliance costs and financial access, including remittances sent home by people working abroad.

Because cutting a respondent off has real costs, the decision to keep it depends on what the bank is told about its business. In the Danske account, the decision to continue access rested on representations the bank knew were misleading. An insider can compare what decision-makers were told with the customer files and internal warnings behind that relationship.

In the Justice Department’s account of Wachovia’s deferred prosecution agreement, Wachovia continued expanding business with Mexican currency exchange houses despite knowing the money laundering risks and that other U.S. banks had stopped serving them.

What an Insider’s Records Can Show

An assurance, an audit and a payment record can show different parts of the same decision. The assurance shows what the correspondent was told. The audit or internal warning shows what the respondent knew. Customer records, ownership information and transaction activity show the business those statements concerned.

Payment messages can carry another version of the contradiction. In the sanctions portion of its criminal agreement, HSBC admitted that group affiliates altered dollar-payment messages to remove information identifying sanctioned parties. The conduct caused U.S. institutions to process payments that should have been investigated, rejected or blocked. The original message and the version reaching the U.S. bank therefore answer different questions about what was known and what was shown.

For someone working inside the process, the decisive detail may be a risk override, an excluded transaction category, a staffing decision or the explanation supplied when a correspondent objects. That is how a concern about the control environment becomes a specific account of who kept the channel open and how.

Whistleblower Rewards Follow the Conduct

The Financial Crimes Enforcement Network administers the whistleblower program for Bank Secrecy Act and sanctions enforcement. Under the program’s award law, qualifying whistleblowers can collectively receive 10% to 30% of qualifying collections from covered actions imposing more than $1 million in monetary sanctions, with award processing and payment beginning only after FinCEN finalizes its regulations.

Foreign nationals and compliance or audit insiders can qualify. The law includes information learned through a person’s job. Our whistleblower experts work with you to judge which program fits the conduct and build your strongest case.

For fraud against the federal government, there is also the False Claims Act. A whistleblower case under the False Claims Act can pay 15% to 30% of what the government recovers.

When You Know What the Clearing Bank Was Told

If you know why a correspondent’s assurance file differs from the business it is clearing, speak with our whistleblower experts about that relationship. We work beside you through the whole journey, building your strongest case around the customer records and internal decisions that kept access open. We bring in money laundering whistleblower lawyers who know correspondent banking cases.