Bank of America and Financial Compliance Failures: Enforcement History, AML Constraints, and Regional Monitoring


Author: Locke Dauch
Date: April 30, 2026
Classification: Financial Regulation / AML Compliance / Institutional Risk
SII Working Paper Series: 2026(52)


Abstract

Bank of America has been subject to extensive regulatory enforcement over the past two decades, including over $64 billion in cumulative penalties across multiple categories since 2010 (Good Jobs First, 2026). In December 2024, the Office of the Comptroller of the Currency (OCC) issued a cease-and-desist order citing deficiencies in anti-money laundering (AML) compliance, including failures in Suspicious Activity Report (SAR) processes and internal controls (OCC, 2024).

At the same time, Bank of America maintains a global financial crimes compliance infrastructure, including roles based in Singapore with regional focus on Southeast Asia (Bank of America, 2026).

This paper examines the relationship between:

  1. Documented enforcement history
  2. Regulatory findings on AML compliance systems
  3. Historical monitoring gaps (including Merrill Lynch enforcement actions)
  4. Expansion of regional compliance roles
  5. A single-case illustration of customer account restriction

The paper does not assert coordinated intent or systemic conspiracy, but evaluates whether these elements reflect structural tensions between scale, compliance obligations, and enforcement capacity within global banking systems.


I. Enforcement Record and Penalty Data

According to the Violation Tracker database maintained by Good Jobs First, Bank of America has incurred:

  • $64.6 billion in penalties (2010–2026)
  • Across ~199 enforcement actions

Source:
Good Jobs First. (2026). Violation Tracker Global Database
https://violationtracker.goodjobsfirst.org

Clarification

  • Penalties span multiple categories (mortgage, securities, consumer protection, AML)
  • Aggregate figures do not imply uniform misconduct type
  • Enforcement actions reflect resolved regulatory findings, not ongoing violations

II. OCC Cease-and-Desist Order (2024)

On December 23, 2024, the OCC issued a formal enforcement action against Bank of America.

Source:
Office of the Comptroller of the Currency. (2024).
In the Matter of Bank of America, N.A., Consent Order
https://www.occ.gov

Documented Findings

  • Deficiencies in Bank Secrecy Act / AML compliance program
  • Failure to timely file Suspicious Activity Reports
  • Weaknesses in:
    • Internal controls
    • Independent testing
    • Governance structures
    • Training systems

Clarification

  • A cease-and-desist order is a serious regulatory action, but not a criminal finding
  • The order required remediation and oversight, not admission of intent

III. Merrill Lynch AML Monitoring Case (2017)

In 2017, Merrill Lynch (a Bank of America subsidiary) was fined for AML program deficiencies.

Source:
Office of the Comptroller of the Currency. (2017).
In the Matter of Merrill Lynch, Pierce, Fenner & Smith Inc.

Key Finding

  • Failure to monitor millions of transactions totaling approximately $100+ billion

Clarification

  • This reflects system design and compliance failure, not proven facilitation of illicit activity
  • The issue was exclusion from monitoring systems, not confirmed laundering outcomes

IV. Global Financial Crimes Roles – Singapore

Bank of America has publicly listed roles in Global Financial Crimes (GFC) with regional scope.

Source:
Bank of America. (2026). Careers Portal – Global Financial Crimes Roles

Documented Scope

  • Asia-Pacific compliance coverage
  • Focus on:
    • AML/CFT regulations
    • Sanctions compliance
    • Regional regulatory frameworks (including Southeast Asia)

Clarification

  • Job postings indicate compliance expansion, not operational conclusions
  • Presence in Singapore reflects regional financial hub positioning

V. Case Illustration: Account Access Restriction

This paper includes a single documented case involving:

  • Account access restriction
  • Lack of explanation provided
  • Unsuccessful remediation attempts

Regulatory Context

Under the Bank Secrecy Act (BSA):

  • Banks must file Suspicious Activity Reports (SARs)
  • Disclosure of SARs to customers is legally prohibited

Source:
Bank Secrecy Act, 31 U.S.C. § 5311 et seq.

Clarification

  • Account restrictions may result from:
    • Risk modeling
    • Compliance flags
    • Internal policies
  • Customers typically have limited recourse or visibility

VI. Structural Interpretation

Across the examined cases:

DomainObservation
Regulatory enforcementRepeated compliance failures identified over time
AML systemsDocumented gaps in monitoring and reporting
Global expansionContinued investment in compliance infrastructure
Customer experienceLimited transparency in enforcement actions

Reframed Argument

Large-scale financial institutions operate under conditions where regulatory complexity, operational scale, and risk management frameworks can produce recurring compliance failures and opaque outcomes for customers, even in the absence of coordinated intent.


VII. Limits of Analysis

LimitationImplication
Enforcement dataHistorical, not predictive
OCC findingsRegulatory, not criminal determinations
Job postingsIndicate intent, not activity
Case studySingle instance (non-generalizable)

VIII. Conclusion

This paper does not argue that Bank of America is uniquely problematic, nor that it operates outside regulatory structures.

Instead, it documents:

  • Scale-related compliance challenges
  • Repeated regulatory intervention
  • Persistent opacity in customer-facing outcomes

These patterns suggest that financial system complexity may exceed current oversight capacity, producing recurring tensions between enforcement, transparency, and operational scale.


References

  • Good Jobs First. (2026). Violation Tracker Global Database.
    https://violationtracker.goodjobsfirst.org
  • Office of the Comptroller of the Currency. (2024).
    Consent Order – Bank of America, N.A.
    https://www.occ.gov
  • Office of the Comptroller of the Currency. (2017).
    Consent Order – Merrill Lynch, Pierce, Fenner & Smith Inc.
  • Bank of America. (2026).
    Global Financial Crimes Careers Listings
    https://careers.bankofamerica.com
  • Bank Secrecy Act, 31 U.S.C. § 5311 et seq. (1970)
  • CBS News. (2002). The War on Waste

“Bank of America has paid over $64 billion in penalties and remains under active regulatory oversight. Its compliance systems have repeatedly been found deficient, even as its global monitoring footprint expands. This is not evidence of conspiracy—it is evidence of structural strain within modern financial systems.”


For practical tools and training, visit the Applied Coherence Institute.