Bank of America Fined $1.2B Over Money Laundering Failures

Treasury, the OCC and OFAC fined Bank of America more than $1.21 billion on Oct. 13 over anti-money-laundering failures.

If you run an online store, a bank under this kind of order is a bank with a bigger compliance team and a longer list of things to question: supplier wires, sudden ad-spend ramps, new accounts. For an Ecommerce Paradise reader, that is the real story. None of the reports I reviewed say Bank of America has restricted business customers, so what follows separates what regulators reported from my read on where the friction could land.

Below: what FinCEN, the OCC and OFAC said, how this follows the Amex penalty from last week, and six moves to make before your own bank asks you a hard question. I covered the Amex $350 million penalty on Oct. 9, and this is the second mega-bank case in five days.

Banks are asking harder questions about who owns a business, so form your LLC with Northwest Registered Agent and start with clean paperwork. Northwest does not sell your address and puts its own on your public filings, which is why it beats the cheap formation sites that upsell you. Start your LLC the right way with Northwest →

Bank of America’s $1.2B AML Penalty: What Treasury Found

According to a FinCEN news release dated Oct. 13, 2026, the agency assessed a $1.2 billion penalty against Bank of America, N.A. for failing to mitigate and report “priority national security risks.” The OCC separately imposed a $750 million civil money penalty on the bank’s compliance program, and OFAC announced an $11.6 million settlement over apparent sanctions violations.

The numbers overlap. Per Benzinga’s account, FinCEN credited the OCC’s $750 million toward its own penalty, leaving $450 million payable to Treasury, and the combined total comes to just over $1.21 billion. Benzinga reports Treasury calls it the third-largest penalty in its history and the OCC’s largest ever.

FinCEN says the failures included not mitigating risks tied to Chinese money laundering networks and illicit finance along the southwest border. It also cites missing due diligence on correspondent accounts for foreign financial institutions and failures to file suspicious activity reports. FinCEN says the bank admitted it willfully violated the Bank Secrecy Act.

Benzinga adds that the bank reported more than $5 billion in suspicious transactions late, with over $1 billion involving priority risks, including possible trade-based money laundering tied to the southwest border. Yahoo Finance reports regulators said the bank failed to properly monitor trillions of dollars in transactions, and that Treasury said the bank put revenue ahead of compliance resources, so suspicious activity sat uninvestigated for long periods.

OFAC’s piece covers 475 apparent violations between September 2021 and April 2025, according to Benzinga. About 403 payments totaling roughly $14.3 million passed through 35 blocked banks, 32 of them sanctioned under Russia-related rules. OFAC cited “less than fulsome cooperation” and gave no base-penalty reduction.

Treasury Secretary Scott Bessent said “even the biggest financial institutions are not above the law,” per Benzinga. Comptroller Jonathan Gould called the bank’s response to its BSA deficiencies “unacceptable,” per Yahoo Finance, and described the violations as “egregious and continued,” per the Financial Times as relayed by Investing.com.

The consent order requires an outside review of previously undetected suspicious transactions and independent assessments of compliance controls. Per the FT report, it also installs an independent third-party monitor. A Bank of America spokesperson said: “Financial crime compliance is serious, and we are responsible for getting it right.” The bank will book a non-tax-deductible $1.2 billion charge in third-quarter results, about 17 cents per share, and reports earnings Wednesday, Oct. 14.

Two gaps matter. The reports I reviewed do not state the period the violations covered, and none describe any effect on customers. I have not read the full consent order, which FinCEN links from its release.

From the 2024 Order to Amex and TD: How We Got Here

This did not start Tuesday. Yahoo Finance reports that a December 2024 cease-and-desist order already required Bank of America to fix longstanding anti-money-laundering weaknesses, and that the OCC said the bank had not made sufficient progress since. The penalty is the cost of that gap.

Last week set the pattern. On Oct. 8, the OCC fined American Express National Bank $350 million and the Federal Reserve issued its own order, per Banking Dive. The OCC said the bank’s risk assessment underweighted its credit and charge card businesses and that monitoring breakdowns allowed roughly $13 billion in suspected trade-based money laundering between June 2014 and May 2025.

Banking Dive called the Amex penalty the OCC’s first civil money penalty on a bank since its $450 million action against TD in October 2024. TD’s total penalties exceeded $3.5 billion and included an asset cap, which the outlet noted was far larger. In the Amex and Bank of America reports I read, no asset cap appears.

There is a counterpoint, and it is a fair one. Amex CEO Stephen Squeri said part of the penalty was reserved in prior periods and would not affect 2026 or 2027 guidance, per Banking Dive. Benzinga puts consensus third-quarter revenue for Bank of America at $30.69 billion. By my arithmetic, $1.2 billion is about 3.9% of one quarter’s expected revenue. To a bank this size, that is a painful line item, not an existential one.

Two penalties in five days is a cluster. It is not yet a trend, and nobody has reported tighter treatment of small-business accounts. Whether compliance teams respond by questioning more customer activity is the open question, and it is where the next section picks up.

What the Bank of America Fine Means for Your Store’s Banking

My read: the first-order effect lands on a bank’s own operations, not on you. A monitor, a look-back and an independent assessment all create work, and work gets done by reviewing more alerts. More reviewed alerts means more customers get a polite email asking for documents.

The activity that draws those emails is the activity ecommerce operators generate by default. Regulators in both cases called out trade-based money laundering, which means moving value through the pricing, quantity or description of traded goods. A store paying an overseas supplier by wire for goods it never touches looks, on paper, like the pattern a monitoring model is trained to question. Most stores are fine. The ones that get questioned are the ones that cannot answer fast.

Here is where I’d expect friction, and I am flagging this as my analysis, not reporting: cross-border supplier wires, a sudden jump in monthly volume or ad spend, newly opened accounts for newly formed LLCs, and any mismatch between the legal name on the bank account, the Shopify payout and the processor. Each of those is a question a compliance analyst can ask in thirty seconds and you may need a week to answer.

Run hypothetical math, labeled as hypothetical. Say a high-ticket store sells a $4,000 item and pays the supplier $2,800 by wire before the supplier ships. A five-business-day hold on that wire pushes the ship date out a week. If 10 orders a week run that way, $40,000 in order value sits in limbo, and the delay is exactly the sort of thing that turns into a cancellation or a dispute. That is why my chargeback prevention guide matters here. It is also why Visa’s wider chargeback evidence rules from Oct. 24 raise the cost of slow shipping paperwork.

Thresholds I’d use. If one institution touches more than half of your inflows or outflows, you have a single point of failure, and I laid out the fix in my payment processor backup plan. If you wire more than a few thousand dollars a month to suppliers abroad, your paper trail is part of your banking relationship. If you do under $20,000 a month, stay domestic and have clean books, I’d expect to notice nothing.

Moving to a fintech does not make you immune. Fintech accounts run their own reviews. The point is two rails, not a better single rail.

My Mercury vs Bank of America comparison covers the tradeoffs on fees and features. My list of Mercury alternatives covers the rest of the field.

For money going overseas, Wise is the rail many operators use because every transfer leaves a clean receipt.

Credit is the other thing to watch. I wrote on Oct. 9 that the Treasury yield at a 24-year high was a reason to check your credit lines, and a bank under supervisory pressure does not get more generous with lines. That is speculation, not reporting. Still, if you carry working capital on a business line, find out now who your backup lender is. The SBA 7(a) credit box already tightening is part of the same picture.

I’m not a lawyer or a financial advisor, and nothing here is advice on where to bank. Complexity is the tax on a store that grows, and it compounds once you add suppliers, processors, entities and countries. If you would rather hand the setup to a team that does this every week, my turnkey done-for-you build sets up the entity, banking and store structure so those questions have clean answers from day one.

Banks are tightening and nobody has a perfect backup plan. Want to work through yours with other store owners and me inside the community? Join the Skool community →

6 Steps to Bank-Proof Your Store Before Year-End

Six moves, in order of how fast they pay off. None requires you to leave your bank.

Map where your money sits. List every account and processor that touches payouts, ad spend and supplier payments for the last 60 days, then mark any that carries more than half your volume. Use the framework in my Airwallex setup guide to see how a second rail changes the picture.
Open a second business account at a different institution. My Mercury application walkthrough shows what a bank asks for, and that list is also your KYC folder. Keep the second account funded with at least two weeks of operating costs.
Move overseas supplier payments onto a cross-border rail. Airwallex gives you a transfer record tied to each payment. Payoneer does the same for marketplace and supplier flows. Attach the supplier invoice to every transfer.
Build a KYC folder. Articles of organization, EIN letter, operating agreement, supplier agreements, one folder per order with invoice and shipping proof. If your entity paperwork is messy, fix it at the source through my business formation guide. Then put a virtual business address on file so your home address is not on every filing.
Reconcile weekly. A bank question you can answer in a day beats one you answer in two weeks. Finaloop and QuickBooks both do ecommerce bookkeeping, and the best choice is the one you will actually open on Mondays.
Book a human. Call your bank’s business line and ask what documentation they’d want for a large international wire. Or book a free discovery call with me if you want a second set of eyes on your setup.

For stores that bank from abroad, my address and banking checklist for non-US founders goes deeper. The same logic applies to anyone starting a US business from Canada.

Platform rails matter too. Your Shopify payouts already give you one record of cash coming in. Its Balance product now pays overseas suppliers, which is worth testing for cash going out.

Frequently Asked Questions

Did Bank of America restrict business accounts after the penalty?
None of the reports I reviewed say so. FinCEN, Benzinga, Yahoo Finance and the FT report on the penalties and required remediation, not on any customer restrictions. Treat that as the state of reporting on Oct. 13, not a guarantee.

How is this different from the Amex penalty?
Amex was a $350 million OCC penalty tied to credit and charge card monitoring, while Bank of America’s is a $1.2 billion FinCEN penalty with a $750 million OCC piece, per the reports above. My Amex breakdown has the full comparison and the card-side action steps.

Should I move my accounts away from Bank of America?
That is your decision and I am not a financial advisor. My view is that diversification matters more than the logo, and my Mercury vs Chase comparison shows another two-rail option.

What is trade-based money laundering and why would a dropshipper care?
It means moving value through trade by misstating the price, quantity or description of goods. Regulators named it in both cases. Overseas supplier payments are normal for dropshippers, so having invoices that match every wire is your protection.

What documents will a bank ask for if it flags my account?
Typically entity formation papers, ownership details, proof of business activity and invoices behind large payments. Building the folder in step four means you answer in a day.

Does this change how I should set up my LLC?
No rule changed on Oct. 13. What changed is the cost of messy paperwork. A clean entity, a business address that is not your home, and names that match across bank, Shopify and processor make reviews short. The high-ticket dropshipping guide covers the model if you are earlier in the journey.

Could this affect my payment processor?
Nothing I reviewed links the penalty to any processor, and processors have their own bank partners and rules. My read is that the more likely effect is slower payouts or extra document requests if a processor’s sponsoring bank gets stricter, which is another reason to keep a second processor ready.

Want my team to build and run your high-ticket store with clean banking and books from day one? See the turnkey done-for-you service →

That is the read for today. Bank of America reports earnings Wednesday morning, so expect the penalty and the monitor to come up on the call, and watch for any comment on how the bank treats business customers while the review runs. Subscribe to the YouTube channel for daily breakdowns. More breaking news coming through the day.

If this was useful, these go deeper:

Trevor Fenner

Trevor Fenner is an ecommerce entrepreneur and the founder of Ecommerce Paradise, a platform focused on helping entrepreneurs build and scale profitable high-ticket ecommerce and dropshipping businesses. With over a decade of hands-on experience, Trevor specializes in high-ticket dropshipping strategy, niche and product selection, supplier recruiting and onboarding, Google & Bing Shopping ads, ecommerce SEO, and systems-driven automation and scaling. Through Ecommerce Paradise, he provides free education via in-depth guides like How to Start High-Ticket Dropshipping, advanced training through the High-Ticket Dropshipping Masterclass, and fully done-for-you turnkey ecommerce services for entrepreneurs who want a faster, more hands-off path to growth. Trevor is known for emphasizing sustainable, real-world ecommerce models over hype-driven tactics, helping store owners build scalable, sellable, and location-independent brands.