14th October 2026
One of America's biggest banks has been penalised for failing to identify and report suspicious financial activity. But British banks have also faced substantial fines for weaknesses in their anti-money-laundering systems. Are the safeguards working, or are regulators repeatedly finding problems after the damage has been done?
The banking industry depends on trust. Customers expect their money to be safe, businesses need reliable payment systems, and governments rely on financial institutions to help prevent criminals from moving the proceeds of fraud, drug trafficking and other illegal activities.
That trust is being tested again following a $1.2 billion penalty imposed on Bank of America by US authorities on 13 October 2026.
The penalty, equivalent to roughly £900 million at an illustrative exchange rate, is one of the largest financial enforcement actions in the history of the US Treasury. It follows findings that the bank failed to identify and report suspicious transactions properly, including activity associated with Chinese money-laundering networks and other illicit financial risks. A separate settlement of $11.6 million relates to apparent sanctions violations involving countries and activities including Russia, Iran, narcotics and international terrorism.
The American authorities said the bank's anti-money-laundering programme was deficient and ineffective. They also criticised its reliance on warnings from outside organisations rather than adequate internal monitoring.
More than $5 billion in suspicious transactions was involved in the reporting failures identified by regulators. That does not mean every transaction was criminal, but it illustrates the scale of the problem when a major bank's monitoring systems fail.
There is another important detail. Bank of America had already been ordered in 2024 to address weaknesses in its controls. Regulators say significant problems remained despite that intervention.
The bank says it has invested billions of dollars in technology and employs thousands of people to combat financial crime. It has acknowledged violations and says it is committed to completing the improvements required by regulators.
The central question is not whether a bank can process enormous quantities of money. It is whether it can do so while meeting its legal responsibilities.
Britain has had its own banking failures
It would be tempting to regard this as an American problem. Unfortunately, the UK has its own record of major banks being fined for weaknesses in their financial crime controls.
The Financial Conduct Authority, which regulates financial services in Britain, has taken enforcement action against several familiar names.
In July 2025, Barclays was fined £42 million for two separate cases involving weaknesses in the management of financial crime risks. In one, the bank failed to gather sufficient information about the risks associated with WealthTek, a firm that was not authorised to hold client money. In the other, Barclays failed to manage money-laundering risks associated with Stunt & Co.
The second case is particularly striking. Stunt & Co received £46.8 million from Fowler Oldfield, a business involved in a multimillion-pound money-laundering operation. Barclays did not adequately investigate the risks, even after receiving information from law enforcement about suspected money laundering and learning of police raids.
The FCA said the bank's failures helped facilitate the movement of funds connected with financial crime. Barclays has since been undertaking work to improve its controls.
This was not an isolated incident involving a bank unfamiliar with its responsibilities. Barclays has previously faced regulatory action over financial crime controls.
Nationwide and Santander also faced substantial penalties
In December 2025, the FCA fined Nationwide Building Society £44 million for weaknesses in its anti-financial-crime systems between October 2016 and July 2021.
Nationwide had inadequate processes for keeping customer information and risk assessments up to date and for monitoring transactions. Some customers were using personal current accounts for business activity, but Nationwide did not have appropriate procedures to manage the additional risks.
The result was that the building society could not reliably identify and manage money-laundering risks among its personal current-account customers.
Santander UK was fined £107.7 million in December 2022 for serious and persistent anti-money-laundering failures affecting its business banking operations between 2012 and 2017.
The problems affected oversight of more than 560,000 business customers. Santander had weaknesses in verifying what customers said their businesses would do and in checking whether the money passing through their accounts matched those explanations.
The FCA concluded that the failures created a prolonged and serious risk of money laundering and financial crime.
These cases cover different periods and types of failure. They should not be treated as evidence that every bank has the same weaknesses today. But they demonstrate that problems with customer checks, transaction monitoring and the response to warning signs have repeatedly emerged in British banking.
How are UK banks supposed to prevent money laundering?
Banks are required to understand who their customers are, assess the risks they present and monitor transactions for suspicious activity.
For a straightforward personal account, this might mean checking a customer's identity and investigating transactions that appear inconsistent with the account's normal use. For a business, it can require understanding its ownership, its commercial activities, the expected movement of money and the people who ultimately benefit.
A bank cannot assume that a customer is legitimate simply because the account has been open for years or the transactions have passed through its systems without an obvious problem.
Where suspicious activity is identified, banks have legal reporting obligations. In the UK, suspicious activity reports can be submitted to the National Crime Agency. Banks must also comply with sanctions restrictions and maintain appropriate controls against terrorist financing.
Technology is an important part of this process. Automated systems can flag unusual payment patterns, identify links between accounts and highlight transactions that merit further investigation.
But technology alone cannot solve the problem. Systems need to be properly designed, staff need appropriate training, and managers must ensure that warnings are investigated rather than ignored or left waiting in a queue.
The American case is a reminder that a bank can spend heavily on technology and still fail if its procedures, staffing, oversight or priorities are inadequate.
Why do regulators keep finding these problems?
There is an obvious tension at the heart of modern banking.
Banks want to attract customers, process payments quickly and generate profits. Stronger checks can mean additional staff, more expensive technology, delays for customers and the loss of business where a bank decides a relationship is too risky.
There is nothing wrong with banks seeking to operate efficiently. But the cost of preventing financial crime is part of the cost of running a responsible banking business.
The danger arises when compliance becomes a box-ticking exercise, when warning signs are not followed up or when commercial considerations are allowed to outweigh the need to investigate suspicious activity.
The cases involving Bank of America, Barclays, Nationwide and Santander show different manifestations of that problem. They do not establish that all banks are deliberately putting profits ahead of the law. They do, however, raise legitimate questions about whether senior management and internal auditors are identifying weaknesses early enough.
A regulator can issue rules, conduct inspections and impose penalties. It cannot personally examine every transaction passing through every bank.
Much therefore depends on the quality of a bank's own controls and whether its senior management takes responsibility when shortcomings emerge.
Are the fines enough?
Large penalties attract headlines, but the real test is what happens afterwards.
A fine can punish a bank and provide a powerful incentive to improve. It can also affect shareholders through lower profits. However, the money paid in a penalty does not automatically compensate victims of the underlying crimes, recover stolen funds or prevent similar activity elsewhere.
There is also a question about timing. If a bank's controls are inadequate for years before the regulator intervenes, criminals may already have moved substantial sums through the financial system.
Effective enforcement therefore requires more than imposing a large penalty after the event. Regulators need to identify weaknesses promptly, insist on credible remedial plans and check that those plans have actually worked.
The US action against Bank of America includes a requirement for an independent third party to review past transactions and identify suspicious activity that the bank failed to detect at the time. That requirement is important because it looks beyond promises of future improvement to transactions that may have been missed already.
British regulators face the same broad challenge: making sure that enforcement results in lasting changes rather than another round of assurances.
What does this mean for British customers?
For ordinary customers, these cases are not a reason to assume that their own bank is unsafe or that their deposits are at risk. Anti-money-laundering failures are primarily about the bank's ability to detect and report suspicious financial activity, rather than the bank's ability to repay ordinary deposits.
Nor does a regulatory fine mean that every customer or transaction involved was criminal.
There are, nevertheless, practical consequences. Banks may ask customers for additional information about the source of funds, the purpose of payments or the nature of a business. Such checks can be inconvenient, but they are part of the safeguards intended to prevent criminals from exploiting legitimate financial services.
Customers should also expect banks to handle their information lawfully and to explain, as far as they can, why further checks are required.
The broader public interest is that criminals should not be able to move money freely through the banking system simply because a financial institution has failed to ask the right questions.
The real test is whether the system learns
Bank of America's $1.2 billion penalty is extraordinary in scale, but Britain's experience shows that the underlying issue is not confined to the United States.
Barclays, Nationwide and Santander have all faced substantial penalties for failures in financial crime controls. The details differ, and the cases relate to particular periods rather than proving that the same weaknesses persist today.
Nevertheless, a recurring pattern is visible: inadequate customer checks, insufficient monitoring, warnings that are not acted upon and weaknesses that can continue for years.
Banks are expected to be a first line of defence against money laundering. They have access to transaction information that may be difficult for law enforcement to assemble independently. That gives them both a responsibility and an important role in protecting the financial system.
The challenge for regulators is to ensure that this responsibility is taken seriously before failures become headline news.
The question for Britain is not simply how large a fine the next bank might face. It is whether the lessons from previous fines are being learned quickly enough to stop the next failure occurring.
For customers, businesses and taxpayers, that is a more important measure of success than the size of any penalty.
Sources
US Treasury: Enforcement actions against Bank of America, 13 October 2026
https://home.treasury.gov/news/press-releases/sb0657
Financial Conduct Authority: Barclays fined £42 million for financial crime control failures
https://www.fca.org.uk/news/press-releases/fca-fines-barclays-42-million-poor-handling-financial-crime-risks
Financial Conduct Authority: Nationwide fined £44 million for financial crime control failures
https://www.fca.org.uk/news/press-releases/fca-fines-nationwide-44m-failings-financial-crime-controls
Financial Conduct Authority: Santander UK fined £107.7 million for anti-money-laundering failures
https://www.fca.org.uk/news/press-releases/fca-fines-santander-uk-repeated-anti-money-laundering-failures