Bank of America Admits Willful Violation: The Penalty Math

Analysis. Every figure below is sourced in the box at the end. The facts are laid out; the conclusion is yours.

In the United States, the Treasury Department announced on October 13, 2026 that Bank of America would pay more than $1.21 billion in penalties for violations of anti-money laundering and sanctions laws. The bank is the second largest in the country. Treasury called it the third largest penalty in its history. The question is what the number measures.

What the bank admitted

As part of its resolution with FinCEN, the Treasury bureau that polices financial crime, Bank of America admitted that it willfully violated the Bank Secrecy Act. Treasury says the bank failed to report on time more than $5 billion in suspicious transactions. Over $1 billion of that activity involved priority risks, including transactions indicative of Chinese money laundering networks and potential trade based money laundering linked to the southwest border.

The release also says that, as these issues arose, the bank "prioritized its revenues and minimized the impact on its required compliance resources." The bank has not been accused in the release of laundering money itself. The finding is about detecting and reporting.

Three agencies, three penalties

FinCEN assessed $1.2 billion. The Office of the Comptroller of the Currency assessed a $750 million civil money penalty. The Office of Foreign Assets Control announced an $11.6 million settlement over 475 apparent sanctions violations. Added together, those three figures come to about $1.96 billion. Treasury's headline total is "more than $1.21 billion." The release does not explain how the figures reconcile, so this article uses the headline total and the FinCEN figure as published.

Against the bank's size

FinCEN's consent order states that the bank's most recent annual financial disclosure reported net income of approximately $30.5 billion. The headline penalty of $1.21 billion is about 4.0% of that figure. The FinCEN penalty alone, $1.2 billion, is about 3.9%. Set against the more than $5 billion of late reporting, the headline total is at most about 24%, because the $5 billion is described as a floor.

Supporters of the penalty point out that it is the largest in OCC history and that the consent order requires a third party lookback to find and report transactions that went undetected, plus an independent review of the monitoring program. Critics of the system ask whether a one time payment of this size changes behavior at a bank that was already under a December 2024 cease and desist order for the same program.

The questions that remain

How should a penalty be measured: against the unreported transactions, against annual profit, or against what compliance would have cost? Who verifies the lookback the consent order requires, and when is its result published? And how does Treasury reconcile its headline total with the three penalties it lists?