Amex Hit With $350M AML Penalty: What Store Owners Do Next

American Express National Bank agreed Thursday to a $350 million penalty from the OCC over anti-money-laundering failures tied to about $13 billion in suspected trade-based money laundering.

If you run ad spend, inventory and supplier payments through an Amex business card, that is your card issuer’s regulator saying its monitoring fell short. Nothing in the filings and coverage I reviewed changes your card terms today. What it does is put a bank under a consent order. My read is that banks under orders look harder at exactly the payments an ecommerce store makes every week: big ad charges, large supplier invoices and cross-border transfers. I cover money moves like this at Ecommerce Paradise because high-ticket stores run on float.

This is a concentration-risk story more than an Amex story. Below: what the OCC and the Federal Reserve found, how it compares with the TD Bank case, what I’d expect it to mean for card-funded stores, and five moves to make this week. If you are new to the model, start with my guide to high-ticket dropshipping.

Your bank, your card and your merchant accounts all sit on the entity you form first, and Northwest Registered Agent is the LLC formation service I’d pick for an ecommerce store. Where cheap formation sites upsell you at every step, Northwest forwards your physical mail wherever you actually operate, which matters when your store runs from another state or another country. Form your LLC with Northwest →

Amex’s $350M OCC Penalty: What Regulators Found

The Office of the Comptroller of the Currency announced a cease-and-desist order and a $350 million civil money penalty against American Express National Bank of Sandy, Utah, on Thursday, October 8, 2026, according to the OCC’s release. The Federal Reserve issued a separate cease-and-desist order the same day against parent American Express Co. and American Express Travel Related Services Co., per American Banker.

The OCC found the bank’s Bank Secrecy Act and anti-money-laundering risk assessment did not reflect its actual business, according to Banking Dive. The assessment leaned on the bank’s “relatively narrow” demand deposit products and gave too little weight to its “more dominant” credit and charge card products. The agency tied “systemic breakdowns” in suspicious activity monitoring and reporting to roughly $13 billion in suspected money laundering over the past decade.

American Banker adds the dates and the mechanics. The suspected trade-based money laundering ran from June 2014 to May 2025, including through accounts tied to bank insiders, and the bank’s controls for suspicious activity reports left some filings late, missed or incomplete. In plain terms, trade-based money laundering means disguising illicit money as payment for goods, usually by misstating what a shipment was worth.

The fixes are specific. Per American Banker, the OCC order requires a board-level compliance committee, a comprehensive remediation plan and an independent look-back to determine whether additional suspicious activity reports should have been filed. The OCC also criticized the bank’s know-your-customer processes and employee training. The Fed’s order cites deficiencies in transaction monitoring, fraud referral processes, third-party risk assessment and enterprise-wide financial crimes risk management.

Comptroller Jonathan Gould said the OCC expects banks of American Express’s size and complexity “to devote sufficient resources to ensure compliance with laws and regulations,” as quoted by Banking Dive. CEO Stephen Squeri said: “While we have made meaningful progress, we know there is more work to do.”

Amex told investors the same day, in an 8-K filing, that it had already reserved part of the penalty in prior periods, that the penalty does not affect its full-year 2026 guidance and that the cost of meeting the orders is not expected to affect 2027 guidance. The orders impose no asset cap, according to the Investing.com report on Yahoo Finance.

One caveat on my sourcing. I could not open the full consent order text, so the specifics above come from the OCC’s release as relayed by the outlets cited. PYMNTS lists three core deficiencies: insufficient program resources, a risk assessment not tailored to the business and breakdowns in suspicious activity monitoring and reporting. The coverage differs on detail, not on the headline numbers.

TD Bank’s $3B Precedent and Amex’s Lighter Terms

The closest comparison is TD Bank. On October 10, 2024, federal and state agencies announced more than $3 billion in total penalties against TD, the largest ever assessed under the Bank Secrecy Act, per a Lowenstein Sandler client alert. The OCC’s share was $450 million, and TD Bank, N.A. cannot open new U.S. branches or grow its assets without OCC permission. The alert says about 80% of TD’s transactions went unscreened for suspicious activity.

Set the two side by side. Amex: $350 million, no asset cap, no reported restriction on new products or customers. TD: $450 million from the OCC alone, a growth cap and a guilty plea. The growth restriction is the clearest reported contrast between the two actions.

There is a thread before Thursday, too. Last month the Fed and FDIC questioned the feasibility of Amex’s resolution plan, which envisioned selling the bank, operating company and parent assets in a single sale, per American Banker. Regulators raised no formal objections to any of the 15 plans under review.

The counterpoint is Amex’s own: it says it has strengthened controls, worked with regulators and law enforcement, and expects no hit to guidance. I found nothing in the coverage that reports new limits on cardholders, merchants or account openings. Banking Dive’s report does not address customer or merchant effects at all. Treat “no change for cardholders” as the current reading, not a guarantee.

I covered the other half of the same question, where a store’s working capital comes from, when Stripe and FedEx floated shipping-data loans for small businesses.

Amex Business Cards and Your Ad Spend After the Order

This section is my analysis, not reporting. My read: the consent order will not touch your card limit this month, but it raises the odds of more friction at the edges, and the edges are where ecommerce spending lives.

The OCC named customer due diligence and customer identification procedures as contributors to the monitoring failures. A bank rebuilding those controls under a regulator’s deadline usually generates more document requests and more automated flags on payments that look unusual. What looks unusual to a monitoring model is easy to list: a sudden jump in ad spend, a large first payment to a new payee, a round-dollar supplier invoice, a wire to an overseas manufacturer. A store scaling fast does all four.

Here is hypothetical math, not a forecast. Say you put $40,000 a month of Google and Meta spend on one card. A one-week hold on that card, from a flag you have to clear with a compliance team, strands about $9,000 of spend with no payment method, and ad accounts can pause when the payment method fails. A paused Shopping campaign in the middle of Q4 costs more than the hold itself. I made the same case for backup payment rails in my post on the payment processor as a single point of failure.

Scenarios, with thresholds I’d use as rules of thumb:

One card carries more than half your monthly spend. That is the number to fix. A second issuer on a second network means a flag on one card slows you down instead of stopping you. My cash-flow-first card system for high-ticket stores is how I’d split spend across cards.

You pay overseas manufacturers. On paper, your payments resemble the pattern those controls screen for: cross-border, invoice-driven and repeating. Pay those invoices through a rail built for cross-border payments, with the invoice and shipping documents attached, instead of a card. Shopify Balance now pays overseas suppliers. Stores already running on Shopify can keep that payment next to the orders it covers.

Your suppliers are US-based authorized dealers. You are mostly insulated, which is one more reason I push domestic suppliers with authorized dealer agreements and MAP pricing. Your exposure is the ad bill, not the inventory bill.

Rates matter here too. With the Fed hiking, as I covered in the latest consumer confidence and rate move, carrying a balance on any card is expensive, so a backup card is a safety net, not a financing plan.

The second-order point is the one I’d weigh most. Your card issuer, your processor and your bank are three different companies with three different compliance teams, and any one of them can slow your cash for reasons that have nothing to do with you. My read is that a store with a clean paper trail clears a flag faster than one hunting through inboxes for invoices. A proper bookkeeping stack, such as Finaloop built for ecommerce, keeps the documents regulators and banks ask for in one place.

If you would rather not run the banking, ads and supplier stack yourself, that is what my team handles in the done-for-you turnkey build. I am not a financial or legal advisor, and none of this is advice for your specific situation. Talk to your accountant or attorney before you restructure your cards.

One card carrying your ad spend is the real exposure in the Amex story. See which business cards I’d stack so no single issuer controls your cash flow. See my credit card picks →

Five Moves for Card-Funded Stores This Week

Five actions, in order of how fast they pay off:

Map where the money flows. List every recurring charge by card and processor for the last 60 days. If one card carries more than 50% of spend, that card is your single point of failure, and the rest of this list fixes it. My ecommerce accounting software ranking sorts the options by where inventory starts.
Open a second issuer card and a backup business bank account. Mercury is the fintech account I walk through step by step in my Mercury application walkthrough. I break down what the account really costs in Mercury pricing. A bank at a different regulator than your card issuer is the point.
Move overseas supplier payments off cards. Quote the transfer on Wise for your supplier’s country first. Then price Airwallex against it and compare fees and payout method side by side.
Build the paper trail now. Save every supplier invoice, dealer agreement and shipping confirmation in one folder per order, and reconcile weekly in QuickBooks or a tool like it. If a bank asks about a payment, you want the answer in minutes.
Check your business credit file before you apply for anything. Nav shows what lenders see, and a second card application should not surprise you. If you hold the Amex Business Gold, the Miles to Memories blog reported on October 6 that UPS.com replaced FedEx for the $20 monthly Flexible Business Credit after October 1. The post cites no Amex source, so verify it in your account. If you want a second set of eyes on your card and banking setup, book a discovery call and we’ll go through it.

Frequently Asked Questions

Will my Amex card be frozen or closed because of this?
Nothing in the OCC release coverage or the 8-K reporting says cardholders face new restrictions, and the orders impose no asset cap. The bank has to fix its monitoring, so expect possible extra verification on unusual payments rather than blanket closures.

Does this apply to Amex Business Gold and Platinum cards?
Reporting does not break the findings out by card product. The OCC said the bank’s risk assessment gave too little weight to its credit and charge card businesses, so the issue sits at the bank level, not with one card.

What is trade-based money laundering?
It is moving illicit money by disguising it as payment for goods, often by misdescribing or mispricing shipments. Ecommerce stores that pay overseas manufacturers can look similar on paper, which is why documentation matters. My Airwallex setup guide covers a cleaner cross-border payment setup for a high-ticket store.

Should I move all my ad spend off Amex?
My read: no. Split it. Keep your best rewards card for the biggest category and put a second issuer on a second network behind it. For the rewards side, the Miles Game podcast post on credit card points and building a business is worth a listen.

Does this change anything about forming an LLC?
Not directly. Banks and card issuers still ask for your formation documents and a real business address, so I’d form the entity before you apply for anything. See how long an LLC takes before you launch. My business formation resources cover the rest.

I am just starting a high-ticket store. Where do I begin with finances?
Start with the free mini course. Then pick a niche from my high-ticket niches list. Set up the LLC, bank account and a card before you spend a dollar on ads.

Want to compare how other store owners structure their cards, banking and backup payment rails? Join the Skool community →

That is where the Amex story stands as of Friday, October 9. The facts are still thin on what changes for everyday cardholders, so I’d treat the next few weeks as a window to build redundancy while nothing is broken. Subscribe to the YouTube channel for daily breakdowns. More breaking news coming through the day.

If this was useful, these go deeper:

Trevor Fenner

Trevor Fenner is an ecommerce entrepreneur and the founder of Ecommerce Paradise, a platform focused on helping entrepreneurs build and scale profitable high-ticket ecommerce and dropshipping businesses. With over a decade of hands-on experience, Trevor specializes in high-ticket dropshipping strategy, niche and product selection, supplier recruiting and onboarding, Google & Bing Shopping ads, ecommerce SEO, and systems-driven automation and scaling. Through Ecommerce Paradise, he provides free education via in-depth guides like How to Start High-Ticket Dropshipping, advanced training through the High-Ticket Dropshipping Masterclass, and fully done-for-you turnkey ecommerce services for entrepreneurs who want a faster, more hands-off path to growth. Trevor is known for emphasizing sustainable, real-world ecommerce models over hype-driven tactics, helping store owners build scalable, sellable, and location-independent brands.