Financial crime and fraud in financial services, week ending 16 October 2026

Week ending 16 October 2026 · 36 sources

Bank of America's $1.2bn AML penalty leads a heavy enforcement week

US authorities penalised Bank of America more than $1.2 billion for AML and sanctions failings, including a $750 million OCC penalty 123. Days earlier the OCC issued a $350m penalty against American Express National Bank 4.

Which way the market is moving

US regulators penalise Bank of America and Amex

Bank of America received $1.21 billion in US penalties for AML and sanctions failures, and American Express National Bank a $350m OCC penalty 1114.

The OCC imposed a $750 million civil money penalty on Bank of America, N.A. for violations of the Bank Secrecy Act 3. Total US penalties reached $1.21 billion and covered money laundering and sanctions breaches 1112. Finextra reported the bank's AML process was described as 'deficient and ineffective', with 'egregious and continued' BSA violations 8. The South China Morning Post linked the fine to suspected Chinese money laundering 13.

Bank of America's profit fell 17% after the fine 1415. Its shares fell 5% 16. Separately, the OCC issued a $350m civil money penalty against American Express National Bank for AML deficiencies, and American Express stock fell 417.

What it means: Regulators are penalising persistent AML programme weakness rather than single incidents, so institutions need evidence that monitoring and sanctions controls work end to end. The earnings and share price effects make AML effectiveness a board matter.

Questions for vendors:

  1. How does your transaction monitoring evidence scenario coverage and tuning decisions for an examiner?
  2. Can your sanctions screening show list update timing and match logic in a full audit trail?
  3. What support do you give for independent validation of detection scenarios and models?

In the registry: AML (Hawk), Know Your Business (Incode), Case Management (SymphonyAI)

Long-running AML cases and new typology alerts

SEB paid $33m to New York's regulator over a Baltic money laundering review, and Deutsche Bank was given more time to fix its AML systems 18919.

SEB and its New York branch agreed to pay $33m to the New York State Department of Financial Services 18. Reuters linked the penalty to a review of Baltic money laundering 9. In Germany, the regulator extended Deutsche Bank's deadline to fix its money laundering prevention systems 19.

Older cases also continue in court. TD Bank investors advanced a suit over money laundering issues 20. The Financial Times reported that a Kremlin-backed money launderer used a London fintech to make payments 21. FinCEN issued an alert to help institutions identify and report potential Iranian abuse of religious charity networks 22.

What it means: AML remediation can run for years and follow an institution across jurisdictions and into shareholder litigation. New typology alerts need a fast path into monitoring scenarios and customer risk models.

Questions for vendors:

  1. How quickly can a new typology, such as a FinCEN alert, be turned into a live monitoring scenario?
  2. How do you assess risk in payment intermediaries and fintech counterparties?
  3. What evidence does your platform keep to show remediation progress to a supervisor?

In the registry: AML (Hawk), MiVIP (Mitek), Know Your Business (Incode)

Fraud intelligence sharing goes cross-sector

Canadian banks and telecoms launched a shared fraud platform as the IMF and World Bank launched the Bangkok Blueprint on cyber fraud 67.

Canada's banks and telecommunications companies launched a joint fraud intelligence-sharing platform 56. The IMF and World Bank launched the Bangkok Blueprint to fight cyber fraud 7. Singapore expanded COSMIC as financial crime risks evolve 23.

Banks are also taking the message to customers. JPMorgan planned to livestream a fraud-fighting event to 700 branches, covering scam methodology and the tools banks and customers can use to fight back 24. Banking Dive said the event comes as the cost to victims soars, citing Gallup and the Federal Trade Commission 24.

What it means: Scam detection is drawing more on signals held outside the institution, such as telco data. Institutions will need data-sharing agreements, privacy assessments and systems that can use external intelligence at payment time.

Questions for vendors:

  1. Can your platform ingest consortium or telco risk signals in real time before a payment is released?
  2. How are shared signals governed for privacy, accuracy and dispute handling?
  3. How do you measure the uplift from external intelligence on scam detection rates?

In the registry: Alterya (Chainalysis), Know Your Business (Incode), AML (Hawk)

Impersonation and stolen-device fraud rise

Spanish banks reported a 150% spike in fraud from stolen devices, while impersonation threats to UK pensions and Indian bank customers drew warnings 252627.

Spanish banks reported a 150% spike in fraud conducted from stolen devices, according to BioCatch research 252829. In the UK, identity verification firm Identomat warned that impersonation fraud puts retirement savings at risk, as a pension can be lost through a single instruction 26.

In India, The Economic Times described a WhatsApp scam in which replying 'No' to a fake bank debit message can empty an account 30. SBI warned customers about a UPI 'jumped deposit scam' 27. Worldline described scams in Germany in 2026 as a €12 billion wake-up call for banks 31.

What it means: Fraud is shifting to the customer and their device, which is a direct risk for superannuation funds and wealth managers handling large one-off withdrawals, not only banks. Controls need to judge the session and the instruction as well as the credential.

Questions for vendors:

  1. How do you detect a genuine, registered device being used by the wrong person?
  2. Can you flag first-time high-value withdrawal or rollover instructions for step-up checks?
  3. What behavioural signals indicate a customer is being coached during a session?

In the registry: AML (Hawk), Account Takeover Protection (BioCatch), Alterya (Chainalysis)

Data and model provenance in compliance tooling

Napier AI said institutions now weigh where AML models were trained and on what data, as vendors announced new data and screening partnerships 103233.

Napier AI said institutions are weighing where an AML model was trained, who built it and what data it learned from 10. Sumsub, which serves over 4,000 clients, selected IPinfo as its primary source of IP geolocation and VPN detection 32. Global Screening Services partnered with Storm Reply on an AI-powered cloud capability for sanctions screening 33.

Veryfi made its Fraud Detection & Prevention Suite generally available to detect fraudulent documents and checks 34. FinCEN clarified the use of mobile driver's licences in bank onboarding 35. At Sibos, Pay.UK described how deterministic and probabilistic AI keep everyday payments fast and free from fraud 36.

What it means: Third-party data sources and model lineage are becoming part of due diligence on compliance tools. Procurement and model risk teams should expect to document upstream data, training and hosting arrangements.

Questions for vendors:

  1. Where was your model trained, on what data, and where is it hosted?
  2. Which third-party data sources feed your risk signals, and how are they validated?
  3. Do your onboarding flows accept digital credentials such as mobile driver's licences?

In the registry: Alterya (Chainalysis), Identity verification (Annature), AML (Hawk)

Regulation and supervision

Sources

  1. PYMNTS.com, 2026-10-14: US Fines Bank of America $1.2 Billion, Alleging AML and Sanctions Violations
  2. Seeking Alpha, 2026-10-13: Bank of America fined over $1.2B for anti-money laundering, sanctions violations (BAC:NYSE)
  3. Office of the Comptroller of the Currency, 2026-10-13: OCC Imposes $750 Million Assessment Against Bank of America for Deficient BSA/AML Compliance
  4. Finextra (security), 2026-10-09: Amex hit with $350m penalty for AML deficiencies
  5. Yahoo Finance, 2026-10-14: Canadian Banks, Telecom Companies Launch Joint Anti-Fraud Platform
  6. The Globe and Mail, 2026-10-14: Banks, telecoms launch fraud intelligence-sharing platform
  7. Reuters, 2026-10-14: IMF, World Bank launch 'Bangkok Blueprint' to fight cyber fraud
  8. Finextra (security), 2026-10-14: BoA fined $1.2bn over "egregious" AML deficiencies
  9. Reuters, 2026-10-15: SEB pays $33 million to New York regulator over Baltic money laundering review
  10. FinTech Global, 2026-10-15: Sovereign AI vs shared intelligence: AML’s new dilemma
  11. American Banker, 2026-10-13: BofA gets $1.21B penalty for money laundering
  12. WSJ, 2026-10-13: Bank of America to Pay $1.2 Billion to Settle Violations of Money Laundering, Sanctions Laws
  13. South China Morning Post, 2026-10-14: Bank of America fined US$1.21 billion for suspected Chinese money laundering
  14. Financial Times, 2026-10-14: Bank of America profits drop 17% after $1.2bn money laundering fine
  15. PYMNTS.com, 2026-10-14: Bank of America Profits Fall 17% Following $1.2 Billion Money Laundering Fine
  16. Yahoo Finance, 2026-10-14: Bank of America Falls 5% as $1.2B Money Laundering Penalty Drives Earnings Miss; JPMorgan Chase and Wells Fargo Hold Steady
  17. Investing.com, 2026-10-09: American Express stock falls after OCC fines bank $350M for AML lapses
  18. Finextra, 2026-10-15: SEB pays $33m to NYDFS over AML failures
  19. Reuters, 2026-10-09: German regulator extends Deutsche Bank deadline to fix money laundering prevention systems
  20. Bloomberg Law News, 2026-10-14: TD Bank Investors Advance Suit Over Money Laundering Issues
  21. Financial Times, 2026-10-09: Kremlin-backed money launderer used London fintech to make payments
  22. ABA Banking Journal, 2026-10-15: FinCEN issues alert on religious charities allegedly tied to Iran
  23. FinTech Global, 2026-10-15: Singapore expands COSMIC as financial crime risks evolve
  24. Banking Dive, 2026-10-14: JPMorgan to livestream fraud-fighting event to 700 branches
  25. BioCatch, 2026-10-14: Spanish banks report 150% spike in fraud conducted from stolen devices
  26. FinTech Global, 2026-10-15: Impersonation fraud puts UK retirement pots at risk
  27. Livemint, 2026-10-11: SBI warns of UPI fraud: How the ‘jumped deposit scam’ can drain your bank account
  28. IBS Intelligence, 2026-10-14: Spanish banks report 150% surge in stolen device fraud, research reveals
  29. Finextra Research, 2026-10-14: Spanish banks report 150% spike in fraud
  30. The Economic Times, 2026-10-15: WhatsApp scam alert: How replying ‘No’ to fake bank debit message can empty your bank account
  31. Worldline, 2026-10-12: Scams in Germany 2026: A €12 billion wake-up call for banks
  32. Finextra (security), 2026-10-14: Sumsub Selects IPinfo to Bring Evidence-Backed IP Intelligence to Fraud Prevention
  33. Finextra (cloud), 2026-10-14: GSS and Storm Reply collaborate on sanctions screening
  34. Finextra (security), 2026-10-12: Veryfi launches AI-powered fraud prevention tools
  35. FinTech Global, 2026-10-14: FinCEN clarifies use of mobile driver’s licences in bank onboarding
  36. Finextra, 2026-10-14: How Can AI in Payments Balance Innovation With Fraud Risk?

About financial crime and fraud software

Financial crime software helps institutions know their customers and stop money laundering and fraud: identity checks, screening and transaction monitoring.

Browse the products in the registry

Get the market overview every Monday: subscribe to the Vederca newsletter.