Enforcement Expectations for AML Violations
ציפיות אכיפה בנוגע להפרות של איסור הלבנת הון
Question: What are the recent developments signaling regulatory scrutiny on anti-money laundering (AML) violations?
Answer: FinCEN imposes a record penalty for repeat AML failures against UBS Financial Services Inc.
On August 3, 2026, the U.S. Financial Crimes Enforcement Network (“FinCEN”) imposed a $125 million civil monetary penalty on UBS Financial Services Inc. (“UBSFS”) for willful violations of the Bank Secrecy Act (“BSA”). FinCEN described the penalty as the largest ever imposed against a broker-dealer for BSA violations. [1]
This was FinCEN’s second enforcement action against UBSFS. In 2018, UBSFS paid a $14.5 million penalty for, among other things, weaknesses in its automated monitoring of foreign-currency wires. UBSFS subsequently assured FinCEN that it would remediate those deficiencies, but, according to FinCEN, it did not. Between 2019 and 2023, UBSFS failed to appropriately monitor more than 50,000 foreign-currency wires with an aggregate value exceeding $10 billion.
Risk-based controls must work in practice
FinCEN identified deficiencies in UBSFS’s customer due diligence, particularly concerning high-risk customers with ties to Russia and Latin America. The deficiencies included failures to appropriately assess risks associated with customers’ source of wealth and negative media concerning alleged corruption, fraud and money laundering. In some cases, concerns raised by a UBS affiliate were not appropriately addressed.
The case therefore highlights that risk information must translate into action. A compliance program may identify adverse media, source-of-wealth concerns or other red flags, but those signals have limited value if they do not trigger appropriate escalation, investigation and, where warranted, reporting.
The takeaway
The UBSFS penalty sends a particularly strong message to institutions that have already been subject to regulatory scrutiny: repeating a previously identified compliance failure can transform a significant compliance issue into a major enforcement event.
For compliance functions, the practical lesson is straightforward: “remediated” should mean demonstrably effective—not merely implemented. Companies should periodically revisit significant historical findings and regulatory commitments, test whether the underlying controls are actually working, and ensure that material deficiencies are escalated appropriately.
In an increasingly data-driven regulatory environment, the question is no longer simply whether an organization has an AML program. The question is whether it can demonstrate that the program works when it matters.
[1] https://www.fincen.gov/news/news-releases/fincen-assesses-historic-125-million-penalty-against-ubs-financial-services-inc
ציפיות אכיפה בנוגע להפרות של איסור הלבנת הון
Question: What are the recent developments signaling regulatory scrutiny on anti-money laundering (AML) violations?
Answer: FinCEN imposes a record penalty for repeat AML failures against UBS Financial Services Inc.
On August 3, 2026, the U.S. Financial Crimes Enforcement Network (“FinCEN”) imposed a $125 million civil monetary penalty on UBS Financial Services Inc. (“UBSFS”) for willful violations of the Bank Secrecy Act (“BSA”). FinCEN described the penalty as the largest ever imposed against a broker-dealer for BSA violations. [1]
This was FinCEN’s second enforcement action against UBSFS. In 2018, UBSFS paid a $14.5 million penalty for, among other things, weaknesses in its automated monitoring of foreign-currency wires. UBSFS subsequently assured FinCEN that it would remediate those deficiencies, but, according to FinCEN, it did not. Between 2019 and 2023, UBSFS failed to appropriately monitor more than 50,000 foreign-currency wires with an aggregate value exceeding $10 billion.
Risk-based controls must work in practice
FinCEN identified deficiencies in UBSFS’s customer due diligence, particularly concerning high-risk customers with ties to Russia and Latin America. The deficiencies included failures to appropriately assess risks associated with customers’ source of wealth and negative media concerning alleged corruption, fraud and money laundering. In some cases, concerns raised by a UBS affiliate were not appropriately addressed.
The case therefore highlights that risk information must translate into action. A compliance program may identify adverse media, source-of-wealth concerns or other red flags, but those signals have limited value if they do not trigger appropriate escalation, investigation and, where warranted, reporting.
The takeaway
The UBSFS penalty sends a particularly strong message to institutions that have already been subject to regulatory scrutiny: repeating a previously identified compliance failure can transform a significant compliance issue into a major enforcement event.
For compliance functions, the practical lesson is straightforward: “remediated” should mean demonstrably effective—not merely implemented. Companies should periodically revisit significant historical findings and regulatory commitments, test whether the underlying controls are actually working, and ensure that material deficiencies are escalated appropriately.
In an increasingly data-driven regulatory environment, the question is no longer simply whether an organization has an AML program. The question is whether it can demonstrate that the program works when it matters.
[1] https://www.fincen.gov/news/news-releases/fincen-assesses-historic-125-million-penalty-against-ubs-financial-services-inc
