Bank of America’s $1.2B Fine Marks a New Era of Bank Scrutiny

The Fine That Changes the Rules

Bank of America agreed to pay $1.21 billion to settle accusations that it failed to report more than $5 billion in suspicious transactions, including $1 billion that posed national security risks. The penalty, announced by the Treasury Department on Tuesday, is the third-largest in its history — and regulators made clear this was not a routine exercise.

Scott Bessent, the Treasury secretary, did not mince words. Financial institutions, he said, are on the front lines of protecting economic and national security. When a bank of this size fails to meet its obligations, the consequences extend far beyond its own walls.

Translation: the era of penalties that banks absorb without blinking is over.

Prioritizing Revenue Over Compliance

The consent order paints a damning picture of institutional culture at one of the world’s largest banks. Regulators found that Bank of America prioritized revenue growth while building its compliance programs, relying too heavily on external inquiries from law enforcement and other financial institutions rather than developing robust internal controls.

In plain terms: the bank waited for others to do its homework. It flagged suspicious activity only when forced to by outside pressure, not through its own monitoring systems.

The Office of the Comptroller of the Currency went further, calling the bank’s compliance program “deficient and ineffective” and levying a separate $750 million civil penalty — the largest ever imposed by the regulator. The OCC cited failures to address shortcomings identified in a 2024 cease-and-desist order, suggesting the problems were neither new nor surprising to Washington.

The National Security Angle

What makes this case especially significant is the national security dimension. The Treasury said the bank mistakenly processed millions of dollars in payments violating sanctions targeting Russia and Iran, accumulating over 400 apparent violations across multiple sanctions programs. For an $11.6 million fine to OFAC, that may sound modest. But the pattern matters: a major US bank treating sanctions compliance as an afterthought, routing payments through blocked jurisdictions.

The volume — $5 billion in unreported suspicious activity — is staggering. For context, most major banks report between $20 billion and $50 billion in suspicious activity annually. Bank of America’s failure to file reports on even a fraction of what it should have suggests systemic gaps that went unchecked for years.

The Independent Monitor

The consent order requires Bank of America to hire an independent third party to review past transactions, identify suspicious activity the bank failed to detect, and report those transactions to FinCen. That is a costly, time-consuming mandate that will occupy legal and compliance teams for years.

Importantly, regulators did not impose an asset cap — a restriction that would limit how large the bank can grow. That omission matters. It signals regulators want structural reform, not punishment through constrained expansion. The message is: fix your compliance or face something worse next time.

Earnings Hit and Investor Anxiety

Bank of America confirmed the $1.2 billion charge is non-tax-deductible, which will reduce third-quarter net income by approximately 17 cents per share. Analysts had estimated adjusted earnings per share of $1.10, excluding one-offs like this fine.

Shares fell 2.7 percent in after-hours trading after closing down 1.1 percent on the day. UBS analyst Erika Najarian said she expects shares to underperform at open, noting investor concerns about higher compliance expenses and whether the bank can maintain its roughly $6 billion quarterly share buyback pace.

That buyback question is the real story for Wall Street. Bank of America has been aggressively repurchasing shares to support its stock price. A fine of this magnitude, especially one that signals deeper organizational problems, introduces uncertainty around capital allocation that investors will weigh heavily.

A Pattern, Not an Incident

American Express was hit with a $350 million penalty for similar anti-money laundering shortcomings just days before the BofA settlement. The coincidence is not accidental. Regulators are sending a coordinated message: no major financial institution is above the law, and patterns of noncompliance will be met with record penalties.

The Treasury Department has made clear that fines alone do not change behavior. The independent monitor, the public consent order, and the OCC’s civil penalty all carry reputational consequences that extend well beyond the balance sheet. Wall Street trades on reputation, and both regulators and markets now understand that compliance failures are career-ending for executives and billion-dollar events for shareholders.

What Comes Next

Every major bank now faces a recalibrated risk calculus. Compliance budgets will expand. Internal controls will face closer scrutiny. The question is not whether penalties will follow but when and how large they will be.

Bank of America’s CEO and compliance officers will face intense questioning from regulators in the coming months. The independent monitor’s findings could expose additional vulnerabilities beyond what the consent order already details. And Congress, which has been pushing for stricter bank oversight, will likely cite this case as evidence that voluntary reform is insufficient.

The $1.21 billion fine is a number. The real story is the signal: US regulators are no longer satisfied with penalties that become cost of business line items. They want structural change, and they are willing to make an example of the biggest institutions to get it.

For Bank of America, the quarter ahead will be painful. For the industry, the lesson is immediate — compliance is no longer a back-office function. It is a strategic imperative, and the cost of neglect is now written in nine figures.