OCC's $750M Bank of America Penalty Raises AML Compliance Bar

Key takeaways

• The Office of the Comptroller of the Currency announced a $750 million civil money penalty against Bank of America, N.A. on October 13, 2026.
• The OCC cited violations of the Bank Secrecy Act and its implementing regulations, including 12 CFR 21.21 and 12 CFR 21.11.
• The agency says it is the largest penalty in OCC history.
• The action is a strong signal to every national bank that AML compliance programs and suspicious activity reporting are examined and enforced.

The news

The OCC said Tuesday that it is imposing a $750 million civil money penalty on Bank of America, N.A., the bank’s national-bank subsidiary, for violations of the Bank Secrecy Act (BSA) and the regulations that implement it. The agency specifically cited 12 CFR 21.21 and 12 CFR 21.11. It described the amount as the largest in the OCC’s history.

The two provisions are central to the federal anti-money-laundering framework for national banks. Section 21.21 is the OCC’s rule requiring a bank to maintain a BSA compliance program. Section 21.11 governs the filing of suspicious activity reports. Citing both indicates that the case touches the basic structure of the bank’s AML controls and its obligation to report suspicious conduct to authorities.

The OCC is the primary federal regulator of national banks and is part of the Treasury Department.

Our analysis

What the AML compliance penalty signals

The headline is the size. A $750 million penalty that the agency calls its largest ever puts a new marker on the scale of sanctions the OCC is willing to impose for BSA failures. Compliance officers at other national banks will read it as a reference point for the cost of a deficient program, even without a full public account of the facts behind this case.

The regulatory citations are also informative. Programs under 21.21 are expected to be built on internal controls, independent testing, designated compliance staff and training. A violation of that rule generally means the framework as a whole fell short, not just that a single transaction slipped through. Pairing it with the SAR rule suggests the OCC viewed the shortfall as affecting both the program and the reporting that flows from it.

For consumers and business customers, the practical effects are indirect but real. When banks face enforcement over AML controls, they tend to invest in monitoring, customer due diligence and account-review processes. That can mean more questions, documentation requests or account restrictions for customers whose activity looks unusual. Those effects usually come through remediation work over months or years, not through any immediate change at the branch level.

For the wider industry, the action shows that large, well-resourced institutions are not insulated from BSA enforcement. Scale brings complexity, and complexity is where monitoring gaps tend to appear.

Room for disagreement

Not everyone will read the penalty as a turning point. Some industry observers argue that large fines can become a cost of doing business for the biggest banks, and that lasting change depends on required remediation, management accountability and follow-up supervision, not on the dollar figure.

Others might say a record number says little about the underlying conduct. A penalty’s size reflects many factors, and without the details of the violations, comparisons with past actions can mislead. A bank of this scale may also absorb a $750 million payment more easily than a smaller institution would absorb a much smaller one.

There is also a fair argument in the other direction: that a record penalty is itself a deterrent, because boards and executives are more likely to fund compliance when the downside is this visible.

What to watch

• Bank response. Watch how Bank of America describes the matter and any remediation commitments, and whether the order carries restrictions or required program changes beyond the monetary penalty.
• Other agencies. BSA cases sometimes involve multiple authorities. Any parallel action from other federal regulators or Treasury components would widen the picture.
• Peer behavior. Look for banks to review their own BSA programs and SAR processes, and for examiners to put more emphasis on both.
• Order details. The full text of the OCC’s order will show the specific deficiencies and corrective steps. That will determine whether the case is read as a one-off or as a template for future enforcement.