AML / Financial Crime regulatory updates from United States.
We track 82 AML / Financial Crime updates from United States regulators, published by CFTC, SEC and OCC. The archive covers 53 enforcement actions, 9 consultations and 6 news items. Most recent update: November 2026. Coverage runs from 2025 to 2026.
The release announces a court-entered default judgment against Walter Dunning Larrick III and Cambridge Financial Advisors LLC. The court found they solicited and misappropriated over $3 million from participants through false commodities trading claims, a Ponzi-like payment scheme, and false account statements.
The Securities and Exchange Commission today charged two foreign-operated, Colorado-incorporated entities, BG Wealth Sharing Ltd and DSJ Exchange Pty Ltd, for orchestrating a fraud scheme that used false SEC filings to boost confidence in their…
AI Analysis
On October 29, 2026, the SEC charged BG Wealth Sharing Ltd and DSJ Exchange Pty Ltd in the Northern District of California for allegedly raising more than $130 million from tens of thousands of retail investors through a purported crypto-trading and wealth-sharing program. The entities allegedly used false Form ADV and Form D filings, fake SEC-seal certificates, and claims of SEC approval or registration to create credibility; the case matters because multiple regulators had already identified the filings and government-registration claims as indicators of a cross-border crypto investment scam.
Key dates
2026-10-29
The SEC announced charges against BG Wealth Sharing Ltd and DSJ Exchange Pty Ltd and filed the related enforcement complaint in the U.S. District Court for the Northern District of California.
Suggested considerations
Compliance teams may wish to review third-party crypto platforms, advisers, issuers, introducers, and promoters for unsupported claims that an SEC filing represents licensing, approval, endorsement, or authorization.
Firms should consider independently verifying Form ADV, Form D, and other regulatory filings through official regulator databases and documenting the precise legal effect of each filing before relying on it in due diligence or investor communications.
Marketing and financial-promotion controls may wish to test for claims of risk-free or guaranteed returns, extraordinary monthly performance, government approval, SEC registration, fake certificates, and statements that a Rule 506(c) filing authorizes operation of a crypto exchange.
Firms with exposure to BG Wealth Sharing, DSJ Exchange, or associated promoters should consider escalating the relationship for legal, fraud, sanctions, counterparty, and suspicious-activity review and preserving relevant communications, transaction records, and onboarding materials.
Investment advisers and other regulated firms may wish to assess whether referral, custody, payment, or platform relationships involving similar schemes create customer-protection, books-and-records, disclosure, or reputational risks.
Compliance teams may wish to incorporate the related state and foreign warnings into typology monitoring, particularly indicators such as recruitment-based compensation, blocked withdrawals, advance exit or compliance fees, fake account balances, and periodic payments used to sustain investor confidence.
What changed
This is an enforcement action, not a new rule or generally applicable compliance requirement. The SEC alleges violations of the antifraud provisions of the Securities Act of 1933 and Securities Exchange Act of 1934 by both entities, and violations of Sections 204(a) and 207 of the Investment Advisers Act of 1940 by BG Wealth. The SEC is seeking permanent injunctions, disgorgement with prejudgment interest, civil penalties against both entities, and conduct-based injunctions against BG Wealth.
Compliance impact
The alleged conduct presents severe fraud, consumer-protection, reporting-integrity, and unauthorized-activity risks, with the SEC alleging more than $130 million raised from retail investors and losses exceeding $100 million as reported in industry coverage. The requested injunctions, disgorgement with prejudgment interest, civil penalties, and conduct-based restrictions could materially affect the defendants and increase scrutiny of firms that repeat unsupported SEC-registration or regulatory-approval claims.
The Office of the Comptroller of the Currency (OCC) today released enforcement actions for October 2026.
AI Analysis
The OCC announced a $350 million civil money penalty and cease-and-desist order against American Express National Bank for deficient BSA/AML controls, late suspicious activity reports, and customer identification and due diligence failures, plus a $750 million civil money penalty against Bank of America for deficient BSA/AML controls, late SARs, and inaccurate wire-transmittor information. The actions show heightened supervisory focus on risk coverage across major product lines, timely SAR escalation, data accuracy in payment messages, and remediation of deficiencies identified in earlier enforcement actions.
Key dates
2024-04-01
Bank of America self-identified the inaccurate wire-transmittor information issue, according to the OCC enforcement order; the date is included as an approximate month-level historical reference represented by the first day of the month.
2024-10-01
Bank of America stopped the inaccurate transmittor-information practice in 2024; the OCC order does not provide an exact day, so this is an approximate month-level historical reference represented by the first day of the month.
2026-10-08
The OCC announced the American Express National Bank cease-and-desist order and $350 million civil money penalty.
2026-10-13
The OCC announced the Bank of America $750 million civil money penalty, described as the largest penalty in OCC history, in coordination with Treasury and FinCEN actions.
2026-10-22
The OCC published the October 2026 consolidated enforcement-actions release.
Suggested considerations
Firms should consider reassessing whether their BSA/AML risk assessments cover the risks of all material products and services, rather than concentrating on narrower deposit activity while underweighting credit-card, charge-card, correspondent, or payment activity.
Compliance teams may wish to test end-to-end transaction-monitoring workflows for alert generation, escalation, investigation, disposition, and SAR filing, including backlog governance, aging thresholds, management information, and evidence that suspected trade-based money laundering is escalated promptly.
Firms should consider validating that customer identification, customer due diligence, beneficial-ownership information, and ongoing-risk-rating processes are complete, accurate, risk-based, and aligned to the institution's actual customer and product populations.
Banks may wish to perform a targeted review of outgoing wire data to confirm that originator or transmittor names and other required fields are accurate, consistently populated, retained, and not overwritten by deficient interfaces or manual processes.
Boards and senior management should consider documenting sufficient staffing, subject-matter expertise, training, independent testing, audit coverage, and issue-remediation ownership for BSA/AML programs.
Institutions operating under prior supervisory findings should consider independent validation that corrective actions are complete, effective, sustainable, and supported by evidence, rather than merely implemented procedurally.
Compliance teams should consider reviewing whether third-party, correspondent, and payment-processing arrangements create data-quality or monitoring dependencies that could delay SAR filing or impair law-enforcement traceability.
What changed
This publication announces enforcement outcomes rather than a new rule or generally applicable deadline. American Express National Bank is subject to a cease-and-desist order and a $350 million penalty for an inadequately designed and monitored BSA/AML program, inadequate resources and expertise, internal-control weaknesses, weak independent testing and training, systemic failures involving approximately $13 billion of suspected trade-based money-laundering activity, and customer identification and customer due diligence deficiencies.
Compliance impact
The financial and supervisory consequences are severe: the two bank penalties total $1.1 billion, and the actions include a cease-and-desist order against American Express and a repeat-remediation signal for Bank of America following a 2024 order. The cases indicate that inadequate resources, weak governance or testing, delayed SARs, incomplete product-risk coverage, and inaccurate payment data may be treated as systemic BSA/AML control failures rather than isolated operational errors.
The document announces a court default judgment in a CFTC enforcement action over a fraudulent retail forex scheme, which includes misappropriation, Ponzi-style payments, and false account statements. It concerns retail forex trading, so Capital Markets & Trading is the closest sector.
The Office of the Comptroller of the Currency is issuing this bulletin to clarify the process for filing applications and requesting waivers under the Guiding and Establishing National Innovation for U.S. Stablecoins Act (GENIUS Act).
AI Analysis
The OCC clarified how payment stablecoin issuers may submit applications and request waivers under the GENIUS Act, including a generally favorable expectation for waivers from the January 18, 2027 prior-approval requirement for existing U.S. issuers with substantially complete applications. The agency has not yet opened the application process because it is awaiting OMB approval of the related information collection, creating a timing risk that independent legal and industry commentary has characterized as a compliance cliff for issuers preparing to operate under the new framework.
Key dates
2026-10-21
The OCC issued Bulletin 2026-51 and stated that applications and waiver requests will be accepted only after OMB approves the related information collection.
2027-01-18 Deadline
The GENIUS Act and OCC final rule become effective; the Prior Approval Requirement generally applies, and unauthorized issuance of a payment stablecoin in the United States may carry criminal penalties.
2028-01-18 Deadline
The maximum statutory period for a waiver beginning on January 18, 2027 expires, subject to the terms and shorter duration of any individual waiver.
Suggested considerations
Firms should determine whether they are currently issuing a payment stablecoin in the United States and whether they fall within the OCC application pathway or another primary federal payment stablecoin regulator's pathway.
Existing issuers should consider preparing and submitting a substantially complete OCC application as soon as the agency announces that applications are accepted, rather than relying on the waiver as a substitute for authorization.
Applicants should map their submission against every prescribed application question and documentation requirement, including the business plan, management, reserve assets, issuance and redemption processes, risk management, capital and liquidity, shared services, BSA/AML, OFAC, third-party risk, enterprise risk, compliance risk, and audit functions.
Compliance teams may wish to prepare a separate written waiver request addressing the Prior Approval Requirement, identifying any additional GENIUS Act or final-rule requirements that cannot be met by January 18, 2027, and explaining the requested duration and operational rationale.
Issuers should monitor the OCC's GENIUS Act landing page and press releases for OMB approval and the opening of the application and waiver process, because the bulletin does not provide a fixed application-opening date.
Firms should maintain evidence supporting the completeness and accuracy of their applications and establish a process to respond promptly to OCC requests for missing information within the 30-day review cycles.
Prospective issuers that are not already operating in the United States should consider planning for operations to begin only after OCC approval, consistent with the agency's stated position on waiver eligibility.
Regulatory change teams should continue tracking separate FinCEN, OFAC, OCC, and other agency rulemakings concerning AML, CFT, sanctions, and customer-identification requirements rather than assuming that an OCC application or Prior Approval Requirement waiver resolves those obligations.
What changed
Beginning January 18, 2027, a person generally must be approved as a permitted payment stablecoin issuer before issuing a payment stablecoin in the United States; unauthorized issuance may carry criminal penalties. Under GENIUS Act section 5(f) and 12 CFR 15.30(g), an issuer with a substantially complete OCC application pending on January 18, 2027 may request a written waiver of the Prior Approval Requirement and other statutory or final-rule requirements that it cannot satisfy by the effective date.
Compliance impact
The impact is high for existing issuers because continued U.S. issuance after January 18, 2027 without approval or an effective waiver could violate a statutory prior-approval requirement carrying criminal penalties. The bulletin provides a potential transition path but does not create an automatic safe harbor: the application must be substantially complete, the waiver must be requested and granted, and other GENIUS Act and final-rule requirements generally remain applicable.
The CFTC obtained federal court orders against Eddy Alexandre and EminiFX Inc. for operating an unregistered commodity pool Ponzi scheme that solicited more than $262 million while claiming weekly returns of 5% to 9.99%. The orders require $228,576,962 in restitution, $15,049,500 in disgorgement subject to offset for restitution payments, and a $45,148,500 civil monetary penalty, and permanently bar the defendants from commodity-interest activity. The case reinforces that firms presenting crypto or foreign-exchange strategies as pooled investment opportunities may fall within CFTC commodity-pool and registration requirements, regardless of the technology or marketing structure used.
Key dates
2022-05-12
The CFTC filed its complaint against Alexandre and EminiFX, alleging fraudulent solicitation, misappropriation, and operation of an unregistered commodity pool.
2026-07-01
As of July 2026, the court-appointed receiver had returned more than $98 million to over 28,000 investors.
2026-10-19
The CFTC announced that the Southern District of New York had entered orders granting summary judgment, injunctive relief, and a civil monetary penalty against Alexandre and EminiFX.
Suggested considerations
Compliance teams may wish to inventory products, investment clubs, managed accounts, and digital-asset offerings that pool customer contributions and obtain exposure to forex, futures, options, or other commodity interests.
Firms should consider assessing whether their activities constitute operating a commodity pool or acting as a commodity pool operator or associated person under the Commodity Exchange Act and CFTC regulations, including whether registration or an available exemption is required.
Firms should consider validating marketing claims about returns, automated trading, proprietary technology, trading results, and risk, with particular scrutiny of unusually high or consistent returns such as weekly performance representations.
Compliance teams may wish to test segregation, custody, reconciliation, withdrawal, and use-of-funds controls to detect commingling, personal use of customer assets, payments to earlier investors, and unexplained transfers.
Firms should consider maintaining evidence supporting reported performance, trading activity, investor statements, and asset ownership so that customer communications can be reconciled to underlying records.
Digital-asset businesses may wish to review whether crypto terminology or a technology-focused structure obscures activities that remain subject to commodities, anti-fraud, registration, or customer-protection requirements.
Firms should consider escalating suspected misappropriation, fabricated performance, or unregistered commodity-pool activity through applicable internal investigation, suspicious-activity, and regulatory-reporting processes.
What changed
This is a final enforcement outcome rather than a new rule or generally applicable regulatory amendment. The Southern District of New York entered summary judgment and injunctive relief against Alexandre and EminiFX, finding that the defendants made fraudulent representations, misappropriated investor funds, and operated as an unregistered commodity pool operator, with Alexandre acting in an unregistered associated-person capacity. The judgment imposes $228,576,962 of restitution, $15,049,500 of disgorgement subject to offset by restitution payments, and a $45,148,500 civil monetary penalty.
Compliance impact
The enforcement action presents severe consequences for fraudulent or unregistered pooled commodity-interest activity: permanent market restrictions, joint-and-several restitution liability, disgorgement, and a substantial civil monetary penalty, in addition to parallel criminal sanctions. The CFTC also cautions that a restitution order may not produce full recovery where assets have been dissipated, making preventive controls, accurate disclosure, and asset segregation especially important.
Today, the Consumer Financial Protection Bureau (CFPB) announced the next step in its work to advance President Trump’s fight against the debanking of businesses and individuals on the basis of their constitutionally protected rights
AI Analysis
On October 14, 2026, the CFPB announced investigations into whether the nine largest national banks reviewed by the OCC, and other institutions, unlawfully restricted financial access based on political or religious beliefs or lawful business activities. The initiative increases consumer-financial-law scrutiny of account closures, service denials, onboarding decisions, and credit decisions, particularly where institutions relied on broad reputation-risk concepts or failed to provide accurate adverse-action reasons.
Key dates
2026-10-14
The CFPB announced the debanking investigation and enforcement initiative; the OCC released its report on the nine largest national banks on the same date.
Suggested considerations
Compliance teams may wish to inventory account closures, service restrictions, onboarding denials, credit denials, and material service-friction decisions since 2020, with particular attention to political or religious affiliations and lawful activities in firearms, oil and gas, coal, tobacco, digital assets, and other sectors identified by the OCC.
Firms should consider testing whether customer-facing reasons for adverse decisions accurately and specifically reflect the documented internal rationale, including compliance with ECOA and Regulation B adverse-action notice requirements and applicable FCRA adverse-action notice requirements.
Institutions may wish to review reputation-risk policies, sector restrictions, escalation criteria, committee materials, employee guidance, and risk taxonomies to confirm that decisions are based on objective, individualized, documented, and legally supportable risk considerations rather than generalized political, social, or reputational preferences.
Compliance teams should consider preserving relevant complaints, account-review records, escalation communications, decision logs, adverse-action notices, and policy versions in anticipation of CFPB information requests or supervisory examination.
Banks and covered nonbanks may wish to compare complaint-portal submissions and internal complaint data against account-closure and service-denial populations to identify unexplained patterns, inconsistent reasons, or failures to provide required notices.
Firms should consider assessing whether deposit-account and payment-service decisions create potential UDAAP exposure even where ECOA or FCRA does not directly apply, while continuing to apply legitimate safety, soundness, sanctions, fraud, AML, credit, and operational-risk controls.
Senior compliance and legal personnel may wish to establish governance for politically sensitive or sector-based account decisions so that risk-based controls are not removed indiscriminately and exceptions are documented, consistently applied, and subject to appropriate review.
What changed
The CFPB did not issue a new regulation or impose a new compliance deadline. It announced a supervisory and enforcement initiative implementing Executive Order 14331 and responding to the OCC's report covering conduct identified between 2020 and September 2025. The CFPB stated that it will investigate potential violations of the Equal Credit Opportunity Act, including Regulation B adverse-action requirements, the Fair Credit Reporting Act adverse-action requirements, and the prohibition on unfair, deceptive, or abusive acts or practices under the Consumer Financial Protection Act.
Compliance impact
The announcement signals heightened supervisory and enforcement risk rather than an immediate new binding obligation. Potential consequences include CFPB investigations, supervisory findings, enforcement actions, and UDAAP, ECOA, or FCRA liability, particularly where institutions cannot substantiate objective decision criteria or where adverse-action notices do not match internal reasons.
The Office of the Comptroller of the Currency (OCC) today announced a $750 million civil money penalty against Bank of America, N.A. (bank), for violations of the Bank Secrecy Act and its implementing regulations, including 12 CFR 21.21 and 12 CFR 21.11. This amount is the largest in OCC history.
AI Analysis
On October 13, 2026, the OCC imposed a record $750 million civil money penalty on Bank of America, N.A. for deficient and ineffective BSA/AML controls, including failures to monitor transactions, escalate potentially suspicious activity, file accurate and timely SARs, train BSA personnel, and maintain effective independent audit coverage. The action is especially significant because the deficiencies continued more than a year after a December 2024 cease-and-desist order, and the OCC penalty is credited against a coordinated $1.2 billion FinCEN assessment rather than being additive.
Key dates
2024-12-01
The OCC issued the December 2024 cease-and-desist order requiring Bank of America to address deficient BSA/AML controls; the publication does not specify the precise day of issuance.
2026-10-13
The OCC announced the $750 million civil money penalty and coordinated action with FinCEN.
Suggested considerations
Compliance teams may wish to perform a documented gap assessment against 12 CFR 21.21 and 12 CFR 21.11, including transaction monitoring, customer and activity risk coverage, escalation procedures, SAR timeliness and accuracy, and recordkeeping.
Banks should consider testing whether potentially suspicious activity is consistently escalated to appropriately skilled investigators and whether alert disposition processes can demonstrate timely decisions on SAR filing.
BSA officers and relevant personnel should consider competency-based training covering suspicious-activity identification, investigation, SAR preparation, trade-based money laundering indicators, and escalation responsibilities, with evidence of completion and effectiveness testing.
Internal audit and independent testing functions may wish to assess whether their scope, expertise, sampling, issue validation, and reporting are capable of detecting systemic BSA/AML weaknesses rather than merely confirming policy existence.
Management and boards of directors should consider reviewing BSA/AML remediation governance, resourcing, milestones, risk acceptance, issue escalation, and the treatment of repeated or overdue corrective actions.
Banks with material trade finance, correspondent banking, card, payments, or cross-border activity should consider targeted testing for trade-based money laundering typologies and transaction-monitoring coverage gaps.
Institutions operating under a consent order or cease-and-desist order should consider independently validating that remediation is complete and effective, rather than relying solely on management representations or closure of project milestones.
Compliance teams may wish to compare their control framework with the broader market reading of the action: industry reporting characterized the case as a record penalty driven by systemic and longstanding failures, while professional commentary on the evolving BSA/AML framework emphasizes the distinction between establishing an effective program and maintaining it in operation.
What changed
The publication is an enforcement action, not a new generally applicable rule or safe harbor. It establishes a major OCC enforcement precedent that persistent failures to implement an effective BSA/AML program after a formal supervisory order can result in exceptionally large penalties, including where deficiencies affect transaction monitoring, SAR escalation and filing, personnel competence, training, and audit effectiveness.
Compliance impact
The enforcement action signals severe supervisory consequences for widespread or systemic BSA/AML implementation failures, particularly where management has known about deficiencies or has failed to remediate them under a prior order. The OCC expressly linked the failures to late and inaccurate SARs, missed potentially suspicious activity, inadequate expertise and training, ineffective audit coverage, and potential national-security and illicit-finance risks; independent industry reporting described the coordinated penalties as a record-scale response.
Federal Reserve Board announces enforcement action against American Express Company to address, among other things, the firm’s failure to sufficiently detect and report certain suspicious activity related to money laundering
AI Analysis
On October 8, 2026, the Federal Reserve issued a cease-and-desist enforcement action against American Express Company and American Express Travel Related Services Company, Inc., citing insufficient enterprise-wide AML implementation and failures to detect and report suspicious activity, particularly at American Express National Bank. The coordinated OCC action imposed a $350 million civil money penalty on the bank and found that approximately $13 billion of suspected trade-based money laundering activity over the past decade was not timely identified, evaluated, or sufficiently reported.
Key dates
2026-10-08
Federal Reserve and OCC announced coordinated enforcement actions; the OCC imposed a $350 million civil money penalty on American Express National Bank and issued a cease-and-desist order. The Federal Reserve action applied to American Express Company and American Express Travel Related Services Company, Inc.
2027-01-06 Deadline
Approximate deadline for American Express National Bank to submit the OCC-required written Action Plan within 90 days of the October 8, 2026 order, subject to the order's day-counting conventions.
Suggested considerations
Compliance teams may wish to reassess whether the institution's BSA/AML risk assessment adequately covers its largest and most economically significant products, customer segments, transaction channels, and trade-related activity.
Firms should consider testing whether customer identification, customer due diligence, beneficial-ownership information, and transaction-monitoring scenarios are appropriately calibrated to credit-card, charge-card, merchant, cross-border, and trade-based money-laundering risks.
Management may wish to inventory staffing, subject-matter expertise, escalation capacity, data quality, model and rules governance, internal controls, independent testing, and BSA/AML training for employees and directors against the deficiencies identified in the coordinated orders.
Compliance teams may wish to conduct a lookback of previously generated alerts and transactions to assess whether suspicious activity was timely investigated, escalated, documented, and reported through SARs, including whether systemic monitoring gaps affected historical activity.
Boards and senior management should consider obtaining documented evidence that enterprise AML oversight is operating effectively at subsidiaries and that parent-level governance does not rely solely on narrow subsidiary or product risk assessments.
Affected American Express entities should track the 90-day Action Plan submission requirement and prepare supporting remediation evidence, governance reporting, milestone tracking, and supervisory communications.
Other regulated firms should consider treating the action as a supervisory signal that risk assessments, transaction monitoring, and SAR controls must be aligned to actual business volume and risk rather than to the products that are easiest to administer.
What changed
This is an enforcement action rather than a generally applicable new rule, but it establishes concrete remediation expectations for a large, complex card issuer. The coordinated OCC order requires American Express National Bank to submit, within 90 days of the October 8, 2026 order, an acceptable written Action Plan addressing all BSA/AML deficiencies and incorporating the order's substantive requirements; the OCC must provide prior written supervisory non-objection.
Compliance impact
The action is high-severity because regulators characterized the deficiencies as systemic and linked them to approximately $13 billion of suspected trade-based money laundering activity that was not timely identified, evaluated, and sufficiently reported. The $350 million penalty, coordinated parent-and-bank orders, required remediation plan, and independent commentary describing the penalty as one of the largest imposed during the current administration signal heightened supervisory expectations for risk-based AML coverage of core card and payment businesses.
The Office of the Comptroller of the Currency (OCC) today announced a cease-and-desist order and a $350 million civil money penalty against American Express National Bank, Sandy, Utah (bank), for deficiencies in the bank's Bank Secrecy Act (BSA) and anti-money laundering (AML) compliance program.
AI Analysis
The OCC imposed a $350 million civil money penalty and issued a cease-and-desist order against American Express National Bank for systemic BSA/AML weaknesses, including inadequate resources and expertise, internal-control and independent-testing deficiencies, weak training, an improperly scoped risk assessment, and breakdowns in suspicious-activity monitoring and reporting. The OCC said the bank failed to timely identify, evaluate, and sufficiently report approximately $13 billion of suspected trade-based money-laundering activity from approximately June 2014 through May 2025, underscoring that card-focused banks must align AML controls with their dominant products rather than principally with deposit-account risks.
Key dates
2026-10-08
The OCC announced the cease-and-desist order and $350 million civil money penalty against American Express National Bank; the Federal Reserve announced a coordinated action against American Express Company and American Express Travel Related Services Company.
Suggested considerations
Compliance teams may wish to reassess whether the BSA/AML risk assessment accurately reflects the institution's largest and most complex products, customer segments, payment flows, geographies, channels, and transaction types, rather than relying primarily on deposit-account risk.
Firms should consider testing whether customer identification, customer due diligence, beneficial-ownership information, and account-risk-rating processes provide sufficiently complete and reliable data for transaction monitoring and suspicious-activity reporting.
Banks may wish to conduct a targeted lookback for trade-based money-laundering indicators in card, merchant, payment, cross-border, and related repayment activity, including activity involving insiders or connected accounts, and document escalation and reporting decisions.
Compliance teams should consider validating that monitoring scenarios, alert thresholds, investigative workflows, case-management controls, quality assurance, and SAR filing processes can identify and report suspicious activity within applicable regulatory timeframes.
Boards and senior management may wish to review whether BSA/AML staffing levels, expertise, reporting lines, technology, data governance, and independent-testing coverage are proportionate to the institution's size, complexity, and risk profile.
Firms should consider strengthening role-based BSA/AML training for employees, directors, and senior management, with evidence of completion, competency, and periodic refreshers.
Internal audit or another suitably independent function may wish to perform end-to-end testing of risk assessment, customer due diligence, monitoring, investigation, SAR decisioning, and governance controls, with tracked remediation and board-level reporting.
U.S. banking organizations may wish to compare their programs against the OCC's findings and the market commentary emphasizing that the principal lesson is product-risk misalignment and the need for enterprise-wide controls, not merely remediation of isolated monitoring alerts.
What changed
This is an enforcement action and supervisory precedent, not a new generally applicable rule. The OCC required American Express National Bank to remediate a BSA/AML program that was not reasonably designed to assure and monitor compliance with the BSA and its implementing regulations. The findings specifically reinforce expectations that risk assessments cover the institution's actual product mix, including credit and charge cards; customer identification and customer due-diligence procedures support effective monitoring; transaction-monitoring and suspicious-activity reporting processes...
Compliance impact
The action is highly severe because it combines a substantial penalty with a cease-and-desist order and concerns systemic program failures over approximately a decade, including missed suspicious activity of approximately $13 billion. The consequences include substantial financial exposure, heightened supervisory scrutiny, remediation and independent-testing costs, potential reputational damage, and the risk that parent companies and affiliates will be addressed alongside the regulated bank.
Comptroller of the Currency Jonathan V. Gould today convened a panel of community bankers in Minneapolis, Minnesota, to discuss ongoing efforts to combat financial fraud.
Why this matters
This is a news release announcing the Comptroller's visit to Minneapolis and launch of a new fraud reporting tool for OCC-regulated institutions. While it addresses an important issue (financial fraud), it primarily communicates existing policy positions and introduces a new reporting mechanism rather than imposing...
Proposed rule; withdrawal. FinCEN is withdrawing a notice of proposed rulemaking (NPRM) that proposed requiring banks and money service businesses (MSBs) to submit reports, keep records, and verify the identity of customers in relation to transactions involving convertible virtual currency (CVC) or digital assets with…
AI Analysis
FinCEN withdrew, effective October 6, 2026, its December 23, 2020 NPRM concerning reporting, recordkeeping, and customer-identification requirements for certain transactions involving convertible virtual currency or legal-tender digital assets and unhosted or certain foreign-hosted wallets. The proposal never became effective, so the withdrawal removes a prospective compliance framework rather than changing existing Bank Secrecy Act, AML, customer-identification, suspicious-activity-reporting, or sanctions obligations; independent industry commentary generally describes the action as reducing uncertainty and avoiding additional operational burdens.
Key dates
2020-12-23
FinCEN published the NPRM at 85 FR 83840 proposing additional reporting, recordkeeping, and identity-verification requirements for certain transactions involving unhosted or otherwise covered wallets.
2026-10-06
FinCEN withdrew the NPRM and stated that it would take no further action on that rulemaking.
Suggested considerations
Compliance teams may wish to remove implementation workstreams, testing scenarios, and policy language that were created solely for the withdrawn NPRM's proposed $3,000 recordkeeping or $10,000 reporting thresholds.
Firms should consider documenting that the NPRM was never effective and that its withdrawal does not eliminate existing obligations under the Bank Secrecy Act or applicable implementing regulations in 31 CFR parts 1010, 1020, and 1022.
Banks and MSBs may wish to reassess whether current controls for transfers involving unhosted wallets remain risk-based and supported by documented AML risk assessments, rather than treating the withdrawn proposal's thresholds as mandatory rules.
Crypto businesses should continue reviewing applicable customer-identification, customer-due-diligence, suspicious-activity-reporting, recordkeeping, transaction-monitoring, and OFAC sanctions requirements independently of this withdrawal.
Regulatory-monitoring teams may wish to track whether FinCEN or Treasury develops a replacement digital-asset framework, particularly in light of the stated policy objective that digital-asset regulation be fit for purpose.
What changed
FinCEN withdrew the NPRM published at 85 FR 83840 and stated that it will take no further action on that rulemaking. The withdrawn proposal would have required banks and money services businesses to file reports when a transaction involving an unhosted or otherwise covered wallet exceeded $10,000, or multiple such transactions exceeded $10,000 in 24 hours. It also would have required records, counterparty information, and customer identity verification for covered transactions exceeding $3,000.
Compliance impact
The immediate compliance impact is low because the withdrawn proposal was never a binding rule and therefore created no operative $3,000 or $10,000 obligations. The principal effect is reduced regulatory uncertainty and the removal of a potential future reporting and data-collection burden; existing BSA and AML obligations for covered institutions remain in force.
Withdrawal of finding and notice of proposed rulemaking. FinCEN is withdrawing its finding and proposed rulemaking, pursuant to section 311 of the USA PATRIOT Act, that international Convertible Virtual Currency (CVC) mixing is a class of transactions of primary money laundering concern and that a special measure…
AI Analysis
FinCEN withdrew, effective October 6, 2026, its October 23, 2023 finding that international convertible virtual currency mixing was a class of transactions of primary money laundering concern and its related proposed special measure under USA PATRIOT Act section 311. The withdrawal eliminates the proposed mixer-specific enhanced reporting and recordkeeping regime, but it does not remove existing Bank Secrecy Act, customer due diligence, or suspicious activity reporting obligations; independent industry commentary characterizes the outcome as a deregulatory decision that avoids a potentially broad compliance burden while preserving FinCEN's ability to monitor and address illicit mixer activity.
Key dates
2023-10-23
FinCEN published the proposed section 311 finding and special measure concerning international CVC mixing at 88 FR 72701.
2026-10-06
FinCEN's withdrawal of the finding and proposed rulemaking became effective upon Federal Register publication at 91 FR 63513.
Suggested considerations
Compliance teams should discontinue implementation work that was undertaken solely for the withdrawn section 311 CVC-mixing proposal, including plans for the proposal-specific data fields, reporting workflows, and enhanced customer records.
Firms should not interpret the withdrawal as authorization to process illicit mixer activity without controls; they should continue applying existing risk-based AML, sanctions, transaction-monitoring, escalation, and suspicious activity reporting procedures.
Crypto exchanges and other covered institutions should review whether current transaction-monitoring scenarios appropriately identify mixer exposure and other indicators of money laundering or terrorist financing under existing requirements, without treating all privacy-preserving activity as inherently suspicious.
Firms may wish to document the withdrawal in their regulatory inventory, rulemaking-impact assessments, and model or procedure change logs, while preserving controls that address independently applicable BSA or sanctions requirements.
Compliance teams should monitor future FinCEN notices, section 311 actions, enforcement activity, and interpretive guidance because FinCEN expressly reserved the possibility of future measures concerning mixers.
Legal and compliance functions should reassess any customer, product, or transaction restrictions adopted specifically in anticipation of the proposed rule and determine whether they remain justified by the firm's risk assessment, other legal requirements, or contractual obligations.
What changed
FinCEN withdrew the proposed rule published at 88 FR 72701 and the underlying section 311 finding concerning international CVC mixing. The proposed special measure one regime would have required covered financial institutions to report specified information for transactions they knew, suspected, or had reason to suspect involved international CVC mixing, including CVC type and amount, mixer and wallet information, transaction hashes, transaction dates, IP addresses, customer-identifying information, and a narrative description.
Compliance impact
The immediate compliance impact is low to moderate because no new binding reporting or recordkeeping obligation is imposed and the proposed mixer-specific regime will not take effect. The practical consequence is relief from a potentially expansive data-collection and reporting burden, while existing BSA suspicious activity reporting and risk-based AML obligations continue and FinCEN retains authority to pursue future measures.
Notice of proposed rulemaking. FinCEN is issuing a finding and notice of proposed rulemaking, pursuant to section 9714(a) of the Combating Russian Money Laundering Act (Public Law 116-283), as amended by section 6106(b) of the National Defense Authorization Act for Fiscal Year 2022 (Public Law 117-81), finding…
Why this matters
FinCEN's notice of proposed rulemaking under section 9714 of the Combating Russian Money Laundering Act establishes a finding that transactions involving A7 Network Sub-Agents constitute a class of transactions of primary money laundering concern in connection with Russian illicit finance.
The Securities and Exchange Commission today charged private fund adviser Meyer Global Management LLC (MGM) and its CEO, Owen E.H. Meyer, with defrauding investors and MGM-managed funds in connection with investments in SpaceX and other pre-IPO…
Why this matters
This is an SEC enforcement action (news item) charging a private fund adviser and its CEO with fraud. The case involves deception of retail investors in private funds holding pre-IPO interests (SpaceX and others).
The Securities and Exchange Commission today announced charges against Christopher Kenji Dinelli and Jacob David “Kobe” Frankel for allegedly orchestrating a fraud scheme that raised more than $8.7 million from 35 investors through their fund, Beyond…
Why this matters
This is an enforcement announcement (news content) rather than a binding obligation or policy statement. The case involves alleged fraud in a fund raising $8.7M from 35 investors, indicating investment management and wealth management sectors with consumer protection and financial crime implications.
This is a concluded enforcement action (default judgment and consent orders) by the CFTC against operators of a fraudulent digital assets and precious metals scheme.
This is a substantive policy speech from a Federal Reserve Governor addressing emerging AI applications in payments infrastructure. It identifies specific regulatory considerations (authentication paradigms, liability frameworks, fraud detection recalibration) and notes active industry standard-setting efforts.
The Securities and Exchange Commission today charged multiple entities that are likely operated by individuals located overseas for defrauding hundreds of retail investors, including many in the U.S., through so-called investment confidence scams where…
Why this matters
This is an SEC enforcement action charging multiple entities for investment fraud totaling $15M affecting hundreds of U.S. retail investors. The case involves social engineering via WhatsApp and other platforms to solicit investments.
Notice of proposed rulemaking. The Board of Governors of the Federal Reserve System (Board) proposes to issue regulations that would establish procedures to be followed by an insured State member bank that seeks to obtain Board approval for a subsidiary to issue payment stablecoins pursuant to the Guiding and…
Why this matters
This is a notice of proposed rulemaking (NPRM) from the Federal Reserve implementing the GENIUS Act's application procedures for insured State member banks seeking Board approval for subsidiaries to issue payment stablecoins.
This is a significant enforcement action by the CFTC against a commodity pool operator engaged in systematic fraud. The case involves false claims about trading returns, misappropriation of funds, and fictitious profits—core consumer protection and financial crime violations.
Federal Reserve Board issues enforcement action with former employee of Sandy Spring Bank
Why this matters
This is a routine enforcement action against a former employee of Sandy Spring Bank for embezzlement. The announcement is administrative in nature—it reports a consent prohibition against a named individual for criminal conduct (embezzlement).
The Securities and Exchange Commission today charged CMI Capital LLC and its founder and manager, Michael D. Williams, for an alleged fraudulent investment scheme that raised approximately $860,000 from at least 18 investors, many of whom are current or…
Why this matters
This is an SEC enforcement action charging an individual and his investment company (CMI Capital LLC) with operating a fraudulent investment scheme that defrauded approximately 18 investors of ~$860,000. The content supports classification as investment management fraud/financial crime.
Federal Reserve Board issues enforcement actions with former employee of Northstar Bank, former employee of American Express Travel Related Services Company, Inc., and former employee of Regions Bank
Why this matters
This is a standard Federal Reserve enforcement announcement detailing consent prohibition orders against three former bank employees for individual misconduct. While the actions address financial crime (misappropriation, misapplication of funds, check fraud), they are targeted at individuals rather than establishing...
The Office of the Comptroller of the Currency (OCC) today released enforcement actions for September 2026.
Why this matters
This is a standard OCC news release announcing two Orders of Prohibition against individual employees (former bankers) for criminal conduct (embezzlement and unauthorized account debits).
This is a CFTC enforcement announcement of a completed default judgment against an individual operating an unlicensed options trading scheme. The case involves fraudulent solicitation of retail client funds, misappropriation, and relief defendant disgorgement.
This is an informational news release announcing whistleblower award determinations under the Dodd-Frank Act. It covers the CFTC's enforcement program outcomes and whistleblower incentive mechanisms, which relate to market abuse detection and financial crime reporting.
This is a final rule (binding obligation) from the CFTC that modifies whistleblower award procedures. It applies broadly to all firms under CFTC jurisdiction, establishes a 30% presumption for awards ≤$5M, and becomes effective 30 days post-Federal Register publication.
The Securities and Exchange Commission today charged Ernest Ossei Boateng and two New Jersey-based companies he controls, Intercontinental Wealth Network LLC and I Wealth Network LP, for allegedly raising approximately $16 million from more than 200…
Why this matters
This is an SEC enforcement announcement (news content) charging individuals and wealth management entities with operating a Ponzi scheme. The $16 million fraud affecting 200+ investors demonstrates AML/financial crime enforcement.
This is a concluded enforcement action with binding court orders against individuals operating as commodity pool operators and sales agents. The case involves misappropriation of customer funds, material misrepresentations about trading algorithms and withdrawal rights, and failure to detect red flags regarding...
The Office of the Comptroller of the Currency (OCC), jointly with the Financial Crimes Enforcement Network (FinCEN), the Board of Governors of the Federal Reserve System, the Federal Deposit Insurance Corporation, and the National Credit Union Administration, issued answers to frequently asked questions (FAQ) related…
Why this matters
This is a multi-agency FAQ bulletin providing authoritative clarification on how banks must treat state-issued mobile driver's licenses and other verifiable digital credentials under BSA/AML CIP requirements.
Order. FinCEN is issuing this Geographic Targeting Order, requiring certain money services businesses along the southwest border of the United States to report and retain records of transactions in currency of $1,000 or more, but not more than $10,000, and to verify the identity of persons presenting such transactions.
Why this matters
This is a final rule (not a proposal) issued by FinCEN under delegated authority from the Treasury Secretary under 31 U.S.C. 5326. It creates new legal obligations for covered money services businesses to report currency transactions of $1,000–$10,000 (below the standard $10,000 CTR threshold) in specified zip codes...
On September 2, 2026, the Office of the Comptroller of the Currency, the Board of Governors of the Federal Reserve System, the Federal Deposit Insurance Corporation, the Financial Crimes Enforcement Network (FinCEN), and the National Credit Union Administration issued a statement to clarify confidentiality…
Why this matters
This is a joint regulatory statement from OCC, Federal Reserve, FDIC, FinCEN, and NCUA that clarifies the scope and application of Bank Secrecy Act confidentiality requirements for SARs.
This is a resolved enforcement action (consent order) by the CFTC against a swaps trader at a global investment bank for document destruction, false statements to regulators, and obstruction of an investigation.
The Securities and Exchange Commission today charged Mark D. Hanf, the former CEO of Novato, California-based Pacific Private Money Group LLC (PPMG), and Hoai-Nam Chu Phan, the former COO of a PPMG subsidiary, with orchestrating an offering fraud that…
Why this matters
This is a major SEC enforcement action involving fraud at a private fund manager. The scheme involved misrepresentation of fund use of capital, Ponzi-like payments, and misappropriation—core conduct violations. The scale ($80M+ raised, 190 investors, mostly seniors) and parallel criminal charges elevate significance.
Notice of proposed rulemaking. FinCEN is issuing a notice of proposed rulemaking, pursuant to section 311 of the USA PATRIOT Act, that finds the five United Arab Emirates-based branches of Banque Misr (collectively, Banque Misr UAE) to be of primary money laundering concern and proposes imposing a special measure to…
Why this matters
This is a Notice of Proposed Rulemaking (NPRM) under section 311 of the USA PATRIOT Act by FinCEN designating Banque Misr UAE as a financial institution of primary money laundering concern due to facilitation of Iranian shadow banking (USD 1.8 billion identified). The proposed special measure five prohibits U.S.
This is a CFTC enforcement settlement against an individual for misappropriating nonpublic government information to trade event contracts on a prediction market platform (KalshiEX).
Federal Reserve Board issues enforcement action with former employee of Banco Popular de Puerto Rico
Why this matters
This is a press release announcing a consent prohibition order against a named individual (former employee) for misappropriation of customer funds at a specific bank. It is informational in nature, announcing a completed enforcement action rather than establishing new obligations or precedent affecting multiple firms.
Request for comment. The Commodity Futures Trading Commission ("CFTC" or "Commission") is seeking public responses to this Request for Comment to better inform its understanding and oversight of derivatives markets in compute.
AI Analysis
The CFTC published a Request for Comment on August 21, 2026, seeking empirical and data-driven views on whether and how compute derivatives—particularly contracts referencing rented AI-compute capacity, GPU capacity, inference tokens, and perpetual futures—could be listed and overseen. The publication does not create new binding requirements, but it signals that potential listings will be assessed under existing Commodity Exchange Act requirements concerning manipulation, benchmark reliability, surveillance, customer protection, AML, and financial integrity; independent market coverage describes this as an early regulatory step linked to proposed GPU-rental futures and a potential October 5, 2026 launch by CME Group and Silicon Data, subject to regulatory review.
Key dates
2026-08-21
Request for Comment published in the Federal Register.
2026-10-20 Deadline
Comments are due, calculated as 60 days after Federal Register publication.
2026-10-05
Reported target date for CME Group and Silicon Data to list two compute or GPU-rental futures contracts, subject to regulatory review; this date is not established by the CFTC Request for Comment.
Suggested considerations
Compliance teams may wish to determine whether the firm has relevant empirical data on compute prices, volumes, counterparties, supplier concentration, utilization, capacity commitments, or bilateral contract terms that could support a CFTC submission.
Potential DCM and SEF applicants should consider mapping proposed contract specifications and settlement methodologies against CEA section 5(d), Core Principles 2, 3, 4, 5, 9, and 11, 17 CFR 38.150-38.160, 38.200-38.201, 38.250-38.258, 38.500, and 38.603, and the guidance in 17 CFR part 38 appendices B and C.
Firms developing or contributing data to a compute index should consider documenting data provenance, publication practices, governance, auditability, contributor concentration, observation-window controls, fallback mechanisms, and safeguards against manipulation by capacity providers.
FCMs, introducing brokers, and other intermediaries may wish to assess whether existing BSA/AML, KYC, onboarding, suitability, disclosure, and market-conduct controls address the risks identified for compute derivatives, including opaque bilateral markets and geopolitically sensitive supply.
Market participants may wish to submit comments by the applicable deadline, clearly referencing RIN 3038-AF77 and the Request for Comment on the Listing of Compute Derivatives Contracts, while avoiding unnecessary personal or confidential business information because submissions will be publicly posted.
Firms tracking product development should consider monitoring any subsequent DCM self-certification or Commission-approval filing, as the consultation itself does not authorize trading or postpone a proposed listing.
What changed
No final rule, approval, prohibition, or new compliance obligation was introduced. The CFTC is requesting comment on compute cash-market size, liquidity, transparency, supplier concentration, fungibility, benchmark methodology, deliverable supply, manipulation risks, surveillance feasibility, customer protection, heightened BSA/AML and KYC issues, retail protections, and the design and risks of perpetual compute futures.
Compliance impact
Immediate impact is limited because the publication is nonbinding, but it provides a significant signal about the CFTC's likely scrutiny of benchmark integrity, manipulation susceptibility, surveillance access, customer protection, and AML controls before compute contracts can be listed. Firms involved in a proposed market may face substantial evidentiary and control-design expectations under existing DCM, SEF, FCM, and intermediary rules, particularly where reference data is private, concentrated, or controlled by compute providers.
Federal Reserve Board issues enforcement actions with former employee of Regions Bank and former employee of United Community Bank
Why this matters
This is an announcement of two individual enforcement actions (consent prohibitions) against former bank employees for customer fund misappropriation. The content is factual and administrative in nature—naming individuals and their violations without establishing new policy, guidance, or broad regulatory obligations.
The Securities and Exchange Commission today charged Daniel Chu, Jerome Kollar, and Ameryn Seibold, the former CEO, CFO, and Senior Director of Finance, respectively, at Texas-based Tricolor Holdings, LLC, for their roles in an alleged multi-year scheme…
AI Analysis
On August 18, 2026, the SEC charged Tricolor Holdings’ former CEO Daniel Chu, CFO Jerome Kollar, and Senior Director of Finance Ameryn Seibold with allegedly defrauding ABS investors and lenders by double-pledging hundreds of millions of dollars of subprime auto loans, misrepresenting lien status and financial condition, and manipulating delinquency data. The action matters because independent legal, structured-finance, and industry commentary indicates that the alleged collateral shortfall exposed weaknesses in borrowing-base controls, securitization diligence, investor disclosures, and verification across private credit and subprime auto ABS markets.
Key dates
2025-09-10
Tricolor and affiliates filed for Chapter 7 bankruptcy and moved toward liquidation.
2025-12-17
The U.S. Attorney’s Office for the Southern District of New York announced criminal charges against Tricolor executives in connection with the alleged fraud.
2026-08-18
The SEC announced the civil enforcement action against Daniel Chu, Jerome Kollar, and Ameryn Seibold in the U.S. District Court for the Southern District of New York.
Suggested considerations
Firms should consider performing a targeted review of whether the same receivable, loan, vehicle, inventory item, or other asset can be pledged across multiple warehouse facilities, securitizations, lenders, or managed accounts, including through affiliates and special-purpose vehicles.
Compliance teams may wish to test collateral eligibility and borrowing-base reporting back to source-level records, payment histories, lien and ownership data, servicing systems, and independent third-party evidence rather than relying solely on management certifications.
Securitization sponsors, underwriters, and investors should consider reviewing controls for detecting loans that are delinquent, charged off, non-paying, fictitious, materially impaired, or otherwise ineligible but reported as current or eligible.
Firms should consider reconciling loan-level collateral tapes across all funding channels and establishing exception escalation, independent sign-off, segregation of duties, and documented remediation for duplicate identifiers or inconsistent pledging data.
Finance and compliance functions may wish to assess whether offering documents, investor presentations, lender certificates, and management meetings accurately describe liquidity constraints, funding needs, collateral encumbrances, and portfolio performance.
Boards and senior-management committees should consider reviewing governance over collateral operations, securitization disclosures, liquidity reporting, related-party or affiliate financing, and controls over executive certifications.
Investment managers and lenders may wish to incorporate independent collateral verification, borrowing-base audit rights, data-access rights, concentration and duplication analytics, and covenant triggers into new and renewed transactions.
Firms with relevant exposure should consider preserving records, communications, collateral tapes, system audit trails, certifications, underwriting files, and exception reports in light of parallel SEC and criminal proceedings.
What changed
The publication does not introduce a new rule, threshold, filing requirement, or compliance deadline. It announces an enforcement complaint under the antifraud provisions of the Securities Act of 1933 and Securities Exchange Act of 1934, including alleged control-person liability against Chu and aiding-and-abetting liability against all three defendants. The SEC seeks injunctions, disgorgement with prejudgment interest, civil penalties, and officer-and-director bars against Chu and Kollar.
Compliance impact
The case presents high-severity enforcement and litigation risk for firms involved in consumer ABS and private credit because the SEC alleges more than $1.9 billion was raised through offerings while collateral was double-pledged and loan performance data was manipulated; more than $945 million of ABS principal reportedly remained outstanding at bankruptcy.
Final rule. FinCEN is issuing this final rule to adopt as final and with certain limited changes the interim final rule issued on March 26, 2025, which narrowed beneficial ownership information (BOI) reporting requirements under FinCEN's regulations implementing the Corporate Transparency Act (CTA). In particular…
AI Analysis
FinCEN’s final rule (RIN 1506-AB67; 91 FR 52508), effective 2026-08-14, permanently narrows Corporate Transparency Act (CTA) beneficial ownership information (BOI) reporting to foreign reporting companies only and codifies broad exemptions for U.S. persons. It adopts, with limited changes, the 2025 interim final rule so that domestic reporting companies, U.S. person beneficial owners, U.S. person company applicants, and U.S. person holders of FinCEN IDs are no longer subject to BOI reporting or update obligations under 31 CFR 1010.380.
Key dates
2026-08-14
Effective date of FinCEN final rule "Beneficial Ownership Information Reporting Requirement Revision" (91 FR 52508; RIN 1506-AB67), permanently narrowing CTA BOI reporting to foreign reporting companies and codifying exemptions for U.S. persons and domestic reporting companies.
Suggested considerations
Compliance teams at foreign reporting companies should review the revised 31 CFR 1010.380 definition of "reporting company" and confirm that their entity meets the narrowed criteria (foreign formation plus registration to do business in a U.S. State or Tribal jurisdiction), updating BOI reporting inventories and scoping accordingly.
Foreign reporting companies should update BOI reporting procedures to ensure that reports capture beneficial owners who are non-U.S. persons while excluding U.S. person beneficial owners, including revising data collection forms, internal instructions, and system logic to avoid collecting or transmitting U.S. person BOI under the CTA framework.
Firms involved in foreign pooled investment vehicles registered in the United States may wish to revise governance and reporting processes so that BOI reports for such vehicles identify only the individual exercising substantial control (or greatest authority over strategic management) who is not a U.S. person, and cease including U.S. controllers where they qualify as U.S. persons.
Corporate secretarial and entity management functions should update CTA/BOI scoping matrices to remove domestic corporations, LLCs, and similar entities from BOI reporting obligations and to reflect that only qualifying foreign entities remain in scope, while maintaining awareness of other AML and KYC obligations that may still apply independently of the CTA.
Onboarding and registration workflows for foreign entities should be reviewed so that BOI reporting triggers, timelines, and responsibilities are aligned with the final rule’s foreign-only scope, including any remaining deadlines tied to registration dates, and that staff understand that U.S. person company applicant information is no longer required for CTA reporting.
Firms maintaining records of U.S. person beneficial owners and company applicants for CTA purposes may wish to reassess retention policies, ensuring that any continued collection or storage of such data is for other legal or risk-management purposes rather than CTA compliance, and that privacy notices and data minimization practices reflect the updated regulatory position.
Compliance teams should revise CTA-related policies, procedures, and training materials to incorporate the exemptions for U.S. persons holding FinCEN IDs, clarifying that these individuals are no longer required to update or correct BOI previously provided to obtain the identifier, and documenting any residual obligations under other BSA or AML rules.
Banks, broker-dealers, and other AML-regulated firms should consider the impact of reduced BOI availability for U.S. persons on their own customer due diligence, beneficial ownership, and risk assessment frameworks, and evaluate whether internal KYC standards or other regulatory requirements (such as customer due diligence rules) necessitate separate collection of U.S. person ownership information irrespective of FinCEN’s CTA exemptions.
What changed
The definition and scope of "reporting company" under 31 CFR 1010.380, as implemented under 31 U.S.C. 5336, are now permanently narrowed so that entities previously defined as domestic reporting companies are exempt from BOI reporting requirements, including initial, updated, and corrected BOI reports. Foreign reporting companies remain subject to BOI reporting, but the rule confirms that they are exempt from reporting beneficial ownership information for any U.S. person beneficial owners; those U.S.
Compliance impact
The final rule significantly reduces BOI reporting obligations for U.S. entities and U.S. persons while maintaining reporting duties for foreign reporting companies, shifting compliance focus and BOI data availability toward foreign-owned structures. FinCEN’s regulatory impact analysis emphasizes burden relief for small and domestic businesses and recalibrates expected costs and benefits of BOI collection under the CTA and BSA exemptive authorities.
The Securities and Exchange Commission today charged three Toms River, New Jersey residents for their roles in an affinity investment fraud that raised approximately $47 million from more than 87 investors, who were primarily members of Orthodox Jewish…
AI Analysis
The SEC charged three Toms River residents in an alleged affinity investment fraud that raised about $47 million from more than 87 investors, largely in Orthodox Jewish communities in New Jersey and New York. The case matters because the SEC says the scheme involved misrepresentations about use of proceeds, misappropriation of investor funds, Ponzi-like payments, and unregistered broker activity tied to investor solicitation.
Key dates
2019-11-01
Approximate start of the alleged fraudulent conduct described by the SEC
2023-06-30
Approximate end of the alleged fraudulent conduct described by the SEC
2026-08-13
SEC announced the enforcement action
Suggested considerations
Compliance teams may wish to review whether any compensated solicitors or referral sources are engaging in broker-like activity without registration.
Firms should consider testing whether solicitation, negotiation, and fund-collection roles could create broker-registration exposure under Exchange Act Section 15.
Firms may wish to reassess use-of-proceeds controls and verify that investor funds are not being diverted outside disclosed purposes.
Firms should consider enhancing monitoring for Ponzi-like payout patterns, especially where distributions appear funded by new investor money rather than operating cash flow.
Compliance functions may wish to review marketing and fundraising materials for consistency with the firm’s actual registration status and authority.
Firms operating in relationship-driven communities may wish to evaluate affinity-based fraud risk and strengthen independent verification of investors, counterparties, and cash flows.
What changed
This is an enforcement action, not a rulemaking or guidance release. The SEC complaint alleges that Leor Moshe solicited investments through Capital Funding ASAP LLC by claiming investor money would fund short-term business loans, while allegedly diverting more than $11 million for personal use and more than $850,000 for Ponzi-like payments to earlier investors.
Compliance impact
The SEC characterizes the conduct as serious securities fraud, including misappropriation, deceptive fundraising, and unregistered broker activity. Consequences described in the release include injunctive relief, disgorgement, prejudgment interest, civil penalties, and parallel criminal exposure.
Federal Reserve Board issues enforcement action with former employee of Regions Bank
Why this matters
This is a routine enforcement action announcement targeting a single former employee of Regions Bank for check fraud. The content is purely informational—a press release announcing an executed consent prohibition.
The SEC entered a cease-and-desist order against Deutsche Bank Securities Inc. for failing to timely investigate and file certain suspicious activity reports between April 2019 and March 2024, including instances allegedly more than two years late. The firm consented to a censure and a $4 million civil penalty, making this a significant reminder that SAR timeliness is an enforceable broker-dealer AML obligation.
Key dates
2019-04-01
Start of the period covered by the SEC’s findings on untimely SAR investigations and filings
2024-03-31
End of the period covered by the SEC’s findings on untimely SAR investigations and filings
2024-08-12
SEC press release and administrative order were posted
2024-09-11 Deadline
Civil penalty payment due within 30 days of the order’s entry, assuming the posted order date reflects the entry date
Suggested considerations
Compliance teams may wish to review SAR investigation aging standards against current internal procedures, especially for matters involving subpoenas, law-enforcement requests, or regulatory inquiries.
Firms should consider whether escalation triggers, ownership, and sign-off responsibilities for SAR determinations are clearly documented across surveillance, legal, and compliance functions.
Broker-dealers may wish to test whether case-management tools can identify stalled investigations and flag items approaching internal filing deadlines or reasonable-period expectations.
Dual registrants may wish to assess whether broker-dealer and advisory compliance workflows are coordinated for suspicious-activity matters that cut across business lines.
Training for relevant personnel may wish to be reviewed to ensure that SAR timeliness expectations and escalation protocols are understood by front office, surveillance, legal, and operations staff.
What changed
The publication does not create new rules or thresholds. It documents an enforcement action under Exchange Act Section 17(a) and Rule 17a-8, which require broker-dealers to file SARs for suspicious transactions and related activity. The SEC’s order emphasizes that firms must conduct and complete SAR investigations within a reasonable period of time, especially when the activity is connected to law-enforcement or regulatory inquiries. The outcome also shows that the SEC may treat delayed investigation and filing as a standalone compliance failure even without a substantive fraud finding.
Compliance impact
The matter is high severity because the SEC imposed formal sanctions and a monetary penalty for SAR timeliness failures, and the order suggests that delayed investigations alone can create enforcement exposure. For compliance programs, the practical consequence is heightened scrutiny of SAR governance, investigation tracking, and coordination with legal and regulatory inquiry workflows.
CFTC enforcement action against crypto trading fraud scheme involving Ponzi scheme operations. Classified as informational news announcement rather than urgent regulatory change. Primary concern is financial crime and consumer protection in digital asset markets.
Order. FinCEN is issuing this Geographic Targeting Order, requiring banks and money transmitters located in the Counties of Hennepin and Ramsey, Minnesota to retain and report records of certain payments of $3,000 or more.
AI Analysis
FinCEN issued a Geographic Targeting Order effective August 11, 2026 that requires banks and money transmitters with a branch, subsidiary, or office in Hennepin County or Ramsey County, Minnesota to retain and report records for certain covered international funds transfers of $3,000 or more. The stated purpose is to support Bank Secrecy Act enforcement and Treasury’s efforts to combat international money laundering tied to government benefits fraud in Minnesota.
Key dates
2026-08-11
Effective date of the Geographic Targeting Order
2027-02-06 Deadline
Order period ends after 180 days unless renewed
Suggested considerations
Compliance teams may wish to identify all branches, subsidiaries, and offices in Hennepin and Ramsey Counties and map which payment flows meet the Order’s definition of a Covered Transaction.
Firms may wish to update transaction-monitoring and customer due diligence workflows to capture the additional data elements required for bank or money transmitter reports, including beneficiary or recipient contact details and government-benefits-related funding questions.
Operational teams may wish to confirm readiness to submit reports through the FI Portal and to generate the required CSV files using the Minnesota Fraud GTO template and naming convention.
Records-management teams may wish to set a retention control ensuring all reports and related compliance records are preserved for five years from the last day the Order is effective.
Banks and money transmitters may wish to review whether any existing BSA or sanctions screening processes can be leveraged to identify covered international transfers meeting the $3,000 threshold.
Compliance teams may wish to test month-end reporting processes so filings occur by the end of the month following the month in which each Covered Transaction took place.
What changed
The Order creates a temporary, geographically targeted recordkeeping and reporting regime under 31 CFR Part 1010 for covered institutions in Hennepin and Ramsey Counties. A “Covered Business” is any bank under 31 CFR 1010.100(d) or money transmitter under 31 CFR 1010.100(ff)(5) with a branch, subsidiary, or office in the covered area.
Compliance impact
This is a high-severity, binding temporary reporting and recordkeeping obligation for affected institutions in two Minnesota counties. The Order states that noncompliance may trigger consequences under the Bank Secrecy Act framework and requires records to be available to FinCEN or other appropriate law enforcement or regulatory agencies upon request.
The Securities and Exchange Commission today charged New York-based investment adviser Adit Ventures Management LLC, its CEO Eric Munson, and three affiliated general partners, Adit Ventures LLC; Adit Ventures II LLC; and Adit Ventures III LLC (the…
Why this matters
SEC enforcement action against private fund adviser for alleged fraud involving CEO and general partners. Represents significant regulatory action in investment management sector with direct implications for fund governance, investor protection, and compliance standards.
Secretary of the Treasury Scott Bessent and Comptroller of the Currency Jonathan V. Gould today highlighted the Trump Administration's efforts to alleviate regulatory burden on community banks, drive economic growth on Main Street, and protect America's financial system from illicit activity during remarks at the…
Why this matters
This is a news release documenting remarks by the Secretary of the Treasury and Comptroller of the Currency at an industry roundtable. The content conveys policy signals on three themes: (1) regulatory burden reduction for community banks under Dodd-Frank, (2) focus on material financial risk in supervision, and (3)...
CFTC enforcement action against UBS Financial Services for AML transaction monitoring failures in FX wire transfers. Informational news announcement of settled charges involving supervision deficiencies and system configuration issues. Relevant to banking/trading sectors and AML compliance operations.
PRESS RELEASE | JULY 31, 2026 Joint Statement of Enforcement Policy in support of Venezuela’s Economic Recovery and Earthquake Relief Efforts WASHINGTON — The staffs of the Board of Governors of the Federal Reserve System (Federal Reserve), the Federal Deposit Insurance Corporation (FDIC), the National Credit Union…
AI Analysis
The FDIC joined the Federal Reserve, NCUA, and OCC in a joint enforcement-policy statement supporting Venezuela-related humanitarian relief and economic recovery. The statement says supervised institutions will not be cited for or enforced against under BSA/AML requirements for authorized financial services in Venezuela during the stated window, provided they meet specified compliance conditions.
Key dates
2026-07-31
Policy becomes effective for authorized financial services provided to persons or entities located in Venezuela
2027-01-29 Deadline
End of the stated commitment period for the agencies’ enforcement-policy non-action position
Suggested considerations
Compliance teams may wish to confirm whether any Venezuela-related activity is specifically authorized under applicable OFAC sanctions licenses or other authorizations before relying on the policy.
Institutions may wish to verify that their BSA/AML compliance program is currently in place and that they continue to make reasonable efforts to meet applicable BSA Requirements during the relief period.
Firms may wish to review whether they have had a final BSA-related enforcement action by FinCEN or their primary federal regulator within the prior 24 months, as that would disqualify reliance on the commitment.
Operational teams may wish to document the basis for treating transactions as covered authorized financial services in Venezuela and retain evidence supporting reliance on the enforcement-policy statement.
What changed
The agencies announced a temporary enforcement-policy commitment covering authorized financial services provided to persons or entities located in Venezuela from 2026-07-31 through 2027-01-29. During that period, the agencies state they will not take supervisory action, including citing a violation of law, or pursue an enforcement action against a supervised financial institution for BSA Requirement issues arising from such authorized services. The commitment applies only if the institution is currently compliant with an applicable BSA compliance program requirement and continues to make...
Compliance impact
The policy materially reduces near-term BSA/AML enforcement risk for covered Venezuela-related humanitarian and recovery activity, but only for institutions that satisfy the stated eligibility conditions. The agencies explicitly preserve enforcement for knowing, willful, or intentional violations and for activity outside the scope of applicable OFAC authorization or the policy's conditions.
On July 31, 2026, staffs of the Office of the Comptroller of the Currency (OCC), the Board of Governors of the Federal Reserve System, the Federal Deposit Insurance Corporation, and the National Credit Union Administration (collectively, the agencies), issued a statement of enforcement policy in support of U.S…
AI Analysis
On July 31, 2026, the OCC, Federal Reserve, FDIC, and NCUA issued a joint enforcement policy supporting humanitarian relief and financial stability efforts in Venezuela after major earthquakes. The policy matters because it creates a temporary enforcement safe harbor for eligible U.S. financial institutions that provide authorized financial services to persons or entities in Venezuela, reducing BSA-related supervisory risk during the relief period.
Key dates
2026-06-24
Venezuela experienced a pair of strong earthquakes off the northern coast west of Caracas, triggering the humanitarian crisis referenced by the agencies.
2026-07-27
FinCEN issued a substantively similar statement of enforcement policy regarding Venezuela-related financial services.
2026-07-31
The OCC, Federal Reserve, FDIC, and NCUA issued the joint enforcement policy.
2026-07-31
Start of the period during which authorized financial services to persons or entities in Venezuela are covered by the enforcement commitment.
2027-01-29 Deadline
End of the covered period for the joint enforcement commitment.
Suggested considerations
Compliance teams may wish to confirm whether current Venezuela-related activity falls within the scope of authorized financial services covered by the joint statement.
Institutions may wish to verify that their BSA compliance program remains current and that ongoing controls reflect reasonable efforts to comply during the relief period.
Firms may wish to check whether they have had any final FinCEN or OCC enforcement action involving BSA violations in the prior 24 months before relying on the policy.
Sanctions teams may wish to confirm continued compliance with all applicable OFAC-administered sanctions regulations and authorizations.
Institutions with Venezuela exposure may wish to document how they will evidence reliance on the policy and monitor the January 29, 2027 end date.
What changed
The agencies stated that eligible U.S. financial institutions that choose to provide authorized financial services to persons or entities in Venezuela will not be subject to supervisory action, including a citation for a violation of law, or enforcement action related to a Bank Secrecy Act requirement, for those services. The commitment is limited to authorized financial services provided from 2026-07-31 through 2027-01-29 and applies only to statutes or regulations specifically addressed in the joint statement.
Compliance impact
The immediate impact is moderate but targeted: institutions that qualify gain temporary relief from BSA-related supervisory and enforcement action for Venezuela-related authorized services. The agencies still expect compliance with applicable BSA requirements and OFAC sanctions, and the safe harbor is unavailable to institutions with recent final BSA enforcement actions or inadequate ongoing compliance efforts.
CFTC enforcement action against manipulative trading in event derivatives contracts. Individual engaged in market manipulation through coordinated social media misrepresentations to influence contract prices. Informational regulatory enforcement announcement with no immediate compliance deadline for industry.
Federal Reserve Board issues enforcement actions with former employee of Regions Bank and former employee of First Interstate Bank
Why this matters
This is a standard Federal Reserve enforcement announcement concerning two individual former bank employees who engaged in misappropriation of customer funds and embezzlement.
Notice of proposed rulemaking; extension of comment period. FinCEN is extending the comment period for the referenced notice of proposed rulemaking (NPRM) it published to amend the existing definition of Huione Group to include, within the definition of that group, H-Pay Service PLC, and adding and defining the term…
AI Analysis
FinCEN extended the comment period for its June 2026 proposed rule amending the Huione Group definition to add H-Pay Service PLC and define “successor entity.” The extension matters because FinCEN said a portal technology failure prevented electronic comments for six days, so it gave the public additional time to submit input.
Key dates
2026-06-25
FinCEN published the underlying NPRM to amend the Huione Group definition
2026-06-25
Electronic comment filing became unavailable due to a portal issue
2026-06-30
Portal issue period ended after six days of blocked electronic filing
2026-07-22
FinCEN dated the comment-period extension notice
2026-07-24
Federal Register publication of the extension notice at 91 FR 46761
2026-08-02 Deadline
Extended deadline for written comments on the NPRM
Suggested considerations
Consider whether to submit comments on the NPRM by the extended deadline of 2026-08-02.
Review customer, correspondent, and payment relationships for any exposure to Huione Group, H-Pay Service PLC, or entities that may be treated as successor entities if the proposal is finalized.
Assess whether internal screening, escalation, and due diligence procedures would need updates if FinCEN finalizes the expanded definition.
Monitor FinCEN’s final action on the NPRM and any resulting special-measures scope changes under 31 CFR 1010.
What changed
This publication does not impose a new final obligation; it extends the public comment deadline for an existing NPRM. The underlying proposal would amend FinCEN’s definition of Huione Group, a financial institution operating outside the United States of primary money laundering concern, to include H-Pay Service PLC and to add a defined term for “successor entity.” The extension was granted because a technological issue with the comment portal prevented electronic filing from June 25 through June 30, 2026.
Compliance impact
The immediate compliance impact is limited because this is a procedural extension, not a binding substantive rule. The practical significance is that the proposal signals FinCEN’s intent to broaden the Huione Group definition, which could affect screening, correspondent-account controls, and transaction monitoring if finalized.
The Office of the Comptroller of the Currency (OCC) today released enforcement actions for July 2026.
Why this matters
This is a standard OCC monthly enforcement actions news release announcing specific enforcement orders (cease and desist against United Texas Bank for BSA/AML deficiencies, prohibition order against individual for theft) and terminations of prior agreements.
The OCC is highlighting the updated Section 314(b) Fact Sheet recently issued by the U.S. Department of the Treasury's Financial Crimes Enforcement Network (FinCEN). The updated guidance clarifies how financial institutions can share information with each other about suspected fraud under section 314(b) of the USA…
AI Analysis
The OCC issued Bulletin 2026-30 on 2026-07-09 to highlight FinCEN’s updated Section 314(b) Fact Sheet on voluntary information sharing. The update matters because it broadens and clarifies what participating financial institutions can share to detect suspected fraud and other illicit financial activity, while operating under the Section 314(b) safe harbor.
Compliance teams may wish to review whether current Section 314(b) registration status is current and whether the institution has designated internal points of contact for information-sharing requests.
Firms may wish to assess whether existing BSA/AML and fraud-monitoring procedures explicitly cover the newly highlighted examples of shareable information, including cyber-related data and video surveillance footage.
Institutions may wish to confirm that information-sharing protocols limit disclosures to permissible Section 314(b) purposes and maintain security and confidentiality controls over information received from peers.
Banks may wish to refresh training for BSA, fraud, and investigations staff on when sharing is permissible, including the safe-harbor conditions and the scope of eligible counterparties.
Compliance teams may wish to verify that procedures for responding to requests and documenting reliance on Section 314(b) remain aligned with FinCEN’s updated fact sheet.
What changed
FinCEN’s updated Section 314(b) Fact Sheet clarifies that a participating financial institution may share information about suspected fraud, money laundering, terrorist financing, or other specified unlawful activities with any other financial institution eligible to participate in the Section 314(b) program.
Compliance impact
This is a supervisory guidance update rather than a new binding rule, but it has practical significance because it signals how regulators expect voluntary information sharing to support fraud and BSA/AML controls. The OCC emphasizes the safe harbor for eligible participants, so institutions that do not adapt their procedures may miss an opportunity to improve detection of money laundering, terrorist financing, and fraud.
Federal Reserve Board requests comment on a proposal to amend its requirements for banks to maintain anti-money laundering programs
AI Analysis
The Federal Reserve Board issued a consultation on July 7, 2026 proposing to amend its bank AML program requirements so they align with similar changes proposed by four other agencies. The proposal matters because it would push banks toward a more explicit risk-based AML/CFT framework, require FinCEN priorities to be built into risk assessments, and signal that supervision will focus on significant failures to implement an AML program rather than the mere existence of a program.
Key dates
2026-07-07
Federal Reserve Board issued the request for comment on the proposed AML program amendments
2026-09-05 Deadline
Indicative comment deadline if the proposal is published in the Federal Register on July 7, 2026; the Federal Reserve states comments are due 60 days after Federal Register publication
Suggested considerations
Compliance teams may wish to review current AML/CFT program governance against the proposed minimum program components, including risk-based controls, independent testing, training, and designated accountable oversight.
Firms may wish to map their current risk assessment methodology to the FinCEN AML priorities referenced in the proposal and identify any gaps in documentation or calibration.
Banks may wish to assess whether resources are demonstrably weighted toward higher-risk customers, products, services, and activities, since the proposal emphasizes risk-based allocation.
Compliance functions may wish to track the Federal Register publication date closely so the 60-day comment clock can be calculated once the notice is published.
Commenting stakeholders may wish to compare the Federal Reserve proposal with the parallel proposals from the other agencies to identify alignment issues or operational inconsistencies.
What changed
The proposal would amend the Federal Reserve's requirements for banks to maintain anti-money laundering programs to align with parallel proposals from four other agencies. It would require banks to allocate AML resources based on risk, with greater attention to higher-risk customers and activities. It would also require banks to incorporate the Financial Crimes Enforcement Network's AML priorities into their risk assessment processes.
Compliance impact
The regulatory impact is material because the Federal Reserve is proposing to tighten how banks evidence an effective AML/CFT program and how examiners will evaluate implementation. The Board indicates that supervision and enforcement will concentrate on significant implementation failures, which raises the stakes for documentation, governance, and demonstrable risk-based resourcing.
CFTC enforcement action against commodity pool operator for fraudulent solicitation, misappropriation of funds, Ponzi scheme operations, and false performance reporting. Involves equity index futures, options, and crypto assets. Informational news release regarding completed enforcement filing.
The Office of the Comptroller of the Currency (OCC) is issuing a notice of proposed rulemaking to implement Bank Secrecy Act (BSA) and sanctions compliance standards applicable to OCC-supervised permitted payment stablecoin issuers (PPSI), as required by the Guiding and Establishing National Innovation for U.S…
AI Analysis
The OCC issued a notice of proposed rulemaking on June 22, 2026 to implement Bank Secrecy Act and sanctions compliance standards for OCC-supervised permitted payment stablecoin issuers under the GENIUS Act. The proposal matters because it would formalize AML/CFT and OFAC compliance expectations, create an OCC enforcement framework, and establish a consultation channel with FinCEN for significant actions.
Key dates
2026-06-22
OCC bulletin announcing the notice of proposed rulemaking was issued
2026-07-22 Deadline
Planned deadline for comments, if the Federal Register publication date aligns with the bulletin date and the OCC’s 30-day comment period is measured from publication
Suggested considerations
Compliance teams may wish to assess whether the entity falls within the OCC-supervised PPSI category or within the state-qualified issuer population covered by OCC authority under the GENIUS Act.
Firms may wish to review existing AML/CFT and sanctions controls against the BSA, FinCEN, and OFAC requirements referenced in the proposal, including reporting, monitoring, and risk assessment procedures.
Compliance teams may wish to map governance, escalation, and record-sharing workflows to the proposed OCC-FinCEN consultation framework, particularly for potential significant supervisory or enforcement matters.
Firms may wish to consider whether their current policies, procedures, and internal controls are sufficiently tailored to stablecoin-specific risks and whether additional board or senior management oversight would be needed.
Compliance teams may wish to evaluate whether they should submit comments during the 30-day Federal Register comment period if aspects of the proposed framework could affect operating models or compliance design.
What changed
The proposed rule would require OCC-supervised PPSIs to comply with the BSA, sections 4(a)(5) and 4(a)(6)(B) of the GENIUS Act, and applicable FinCEN and OFAC regulations, including AML/CFT program, sanctions program, and reporting requirements. It would also create a supervision and enforcement framework for PPSI AML/CFT programs, so the OCC can take AML/CFT supervisory and enforcement action against covered issuers. The rule would establish a formal consultation process between the OCC and FinCEN when the OCC intends to initiate an AML/CFT enforcement action or a significant AML/CFT...
Compliance impact
The proposal signals a material increase in AML/CFT and sanctions compliance scrutiny for OCC-supervised stablecoin issuers, with explicit supervisory and enforcement consequences for program deficiencies. The OCC describes a framework that could support significant supervisory action or enforcement action, making program design, governance, and escalation controls more consequential for affected issuers.
CFTC enforcement resolution against Celsius founder for fraudulent digital asset platform operations involving misrepresentation of safety and risky investment strategies. Informational news announcement of concluded legal action with criminal sentencing already imposed (May 2025).
Federal Reserve Board issues enforcement action with former employee of Manufacturers and Traders Trust Company
Why this matters
This is a press release announcing a consent prohibition order against a single former employee of a bank for embezzlement. While it documents an enforcement action, it is administrative in nature—targeting an individual rather than establishing new obligations, guidance, or precedent affecting multiple firms.
CFTC whistleblower award announcement regarding fraudulent scheme enforcement. Informational content about regulatory program effectiveness and incentives for reporting violations under Commodity Exchange Act. No time-sensitive compliance requirement for firms.
Federal Reserve Board issues enforcement actions with former employee of Atlantic Union Bank and former employee of Frost Bank
Why this matters
This is a standard Federal Reserve enforcement announcement concerning two former bank employees—one for CARES Act loan fraud and one for embezzlement. While enforcement actions are important for compliance signaling, these are individual-level cases with no indication of systemic issues, new rules, or broad...
CFTC enforcement action against insider trading on prediction market platform (Polymarket). Involves misuse of nonpublic information by corporate employee for trading gains. Classified as informational news announcement rather than regulatory requirement, hence null urgency.
Federal Reserve Board issues enforcement action with former employee of Commerce Bank
Why this matters
The press release announces a consent prohibition order against a named former employee of Commerce Bank for fraudulent customer transactions. The content is purely informational—a standard enforcement announcement with no new rules, guidance, or broad regulatory signals.
This is an informational announcement of an MOU between CFTC and NHL focused on protecting integrity in prediction markets and event contracts. It addresses market abuse prevention and information sharing mechanisms rather than imposing new regulatory requirements. Classified as news/announcement with null urgency.
This regulatory update from the CFTC involves a court order against an individual for commodity pool fraud, including misappropriation of customer funds and misrepresentations.
This regulatory update from the CFTC relates to enforcement action against the former head of engineering at the crypto exchange FTX. It covers topics such as fraud, misappropriation, and cooperation with regulators, which are relevant to crypto firms and fintech companies.
This speech by CFTC Director of Enforcement David I. Miller outlines the Division's five core enforcement priorities for 2026—insider trading (especially in prediction markets), market manipulation, market abuse/disruptive trading, retail fraud, and willful AML/KYC violations—while announcing the end of "regulation by enforcement" and previewing a new cooperation policy with enhanced declination incentives. It matters because it signals a targeted, risk-based enforcement shift under Chairman Selig, emphasizing fraud detection over rulemaking, which demands immediate strengthening of surveillance, insider policies, and self-reporting in derivatives, crypto, and prediction markets. Firms face heightened scrutiny in these areas, with cooperation now explicitly tied to penalty mitigation.
Key dates
March 31, 2026
Speech delivery; Outlines priorities and previews new cooperation policy advisory
Soon after March 31, 2026
New cooperation policy advisory issuance; Expected imminently; firms should monitor CFTC site for formal release
Suggested considerations
Enhance surveillance: Implement robust monitoring for insider trading in prediction markets, manipulation in energy, disruptive trading, retail fraud signals, and AML/KYC red flags; prioritize misappropriated nonpublic info detection.
Update policies: Revise insider trading protocols to align with CEA anti-fraud provisions; train staff on prediction market risks (debunking "no insider laws apply" myth).
Strengthen cooperation readiness: Develop self-reporting/escalation processes, remediation plans, and documentation for declination credit under forthcoming policy; review prior CFTC advisories (e.g., 2025 mitigation matrix).
Conduct gap analysis: Audit AML/KYC programs for willful violations; assess exposure in priority markets (energy, prediction/crypto, retail).
Monitor updates: Subscribe to CFTC Press Room for cooperation advisory and related actions (e.g., Feb 25, 2026 Prediction Markets Advisory post-enforcement cases: https://www.cftc.gov/PressRoom/PressReleases/9185-26).
What changed
- End of "regulation by enforcement": CFTC Enforcement will focus solely on policing fraud, abuse, and manipulation under existing CEA anti-fraud provisions, avoiding policy-setting via enforcement...
Five explicit enforcement priorities: 1. Insider trading, with strong emphasis on prediction markets (e.g., misappropriation of nonpublic information violates CEA). 2.
New cooperation policy advisory (forthcoming soon): Includes "significant changes" to declination policy, building on prior frameworks like mitigation-credit matrices and safe harbors for...
Compliance impact
Urgency: High – This immediate post-appointment speech (March 31, 2026) sets 2026 priorities amid CFTC's expanding oversight of dynamic markets like prediction/crypto/swaps, with Director Miller's prosecutor background signaling aggressive pursuit of "serious violations." Firms risk enforcement in core fraud areas without proactive surveillance/cooperation; aligns with "back-to-basics" trends but elevates prediction market insider risks, demanding swift program updates to leverage new declination incentives.
This regulatory update from the CFTC targets relationship investment scams, which are a form of fraud involving crypto assets and targeting consumers. It is relevant for banking, investment management, and crypto firms, as well as broader consumer protection.
This regulatory update is relevant for banking, capital markets, and investment management firms, as it involves misappropriation of confidential information, illegal kickbacks, and market abuse.
This regulatory update from the CFTC relates to whistleblower awards, which is relevant for firms in the banking, capital markets, and crypto sectors. The topics covered include AML/financial crime, market abuse, and reporting requirements, which are important compliance areas for the affected firm types.
This regulatory update from the CFTC involves a fraud and misappropriation scheme, which impacts banking, capital markets, and crypto firms. It covers AML/financial crime, consumer protection, and licensing issues, making it a high priority for relevant firms.
This regulatory update from the CFTC involves enforcement action against a precious metals and foreign currency pool fraud, which impacts firms across the banking, investment management, and capital markets sectors. The key topics covered are consumer protection, anti-money laundering, and reporting requirements.
The Securities and Exchange Commission’s Crypto Task Force has announced the agenda and panelists for its rescheduled Roundtable on Financial Surveillance and Privacy.“New technologies give us a fresh opportunity to recalibrate financial surveillance…
Why this matters
This regulatory update from the SEC's Crypto Task Force focuses on financial surveillance and privacy, which are key topics for banking, investment management, and crypto/digital asset firms.
The Securities and Exchange Commission’s Crypto Task Force has rescheduled its Financial Surveillance and Privacy Roundtable, previously scheduled for October, to Monday, Dec. 15, 2025.“I am looking forward to getting this event back on the calendar…
Why this matters
This regulatory update from the SEC is relevant to firms in the banking, capital markets, and crypto/digital asset sectors. It covers topics related to AML/financial crime, consumer protection, and technology/cyber issues.
This regulatory update from the CFTC involves a commodity firm and its owner being ordered to pay $1.2M for fraud, indicating potential misconduct and consumer protection issues in the commodity trading/crypto space.
This regulatory update from the CFTC involves a restitution order against individuals and firms related to metals fraud, which impacts banking, capital markets, and crypto firms. It covers AML/financial crime, consumer protection, and licensing issues, making it relevant for a wide range of financial firms.