If you bank at Bank of America, the mid-October headlines looked alarming. On October 13, 2026, the U.S. Treasury Department announced more than $1.21 billion in penalties against the bank for anti-money laundering and sanctions failures. A day later, Bank of America reported third-quarter earnings that included a $1.2 billion regulatory settlement charge.
So should you worry about your checking account, your mortgage, or your credit card?
Short answer for most customers: your insured deposits are still protected, and this case is about how the bank monitored suspicious transactions and sanctions rules, not about a run on the bank. Still, the size of the penalty and what regulators found are worth understanding in plain English.
What FinCEN and Treasury say happened
The Financial Crimes Enforcement Network (FinCEN), part of Treasury, assessed a $1.2 billion civil penalty. The Office of the Comptroller of the Currency (OCC) assessed a $750 million civil money penalty for a deficient Bank Secrecy Act / anti-money laundering (BSA/AML) program. The Office of Foreign Assets Control (OFAC) separately settled apparent sanctions violations for about $11.6 million. Treasury described the package as the third-largest penalty in Treasury history and the largest in OCC history.
In its consent resolution with FinCEN, Bank of America admitted that it willfully violated the Bank Secrecy Act. Regulators said the bank failed to maintain an AML program that met minimum requirements, failed to perform required due diligence on certain foreign correspondent accounts, and failed to file Suspicious Activity Reports (SARs) as required.
The core allegation is concrete: Bank of America failed to timely report more than $5 billion in suspicious transactions to FinCEN. More than $1 billion of that activity, Treasury said, touched priority national-security and illicit-finance risks, including patterns consistent with Chinese money-laundering networks, fraud, and potential trade-based money laundering linked to the southwest border.
FinCEN and the OCC also described a bank that leaned too heavily on tips from law enforcement and other banks, rather than on its own monitoring systems, and that let suspicious activity pile up without timely investigation. The OCC said the bank’s transaction monitoring failed to properly cover trillions of dollars in activity and produced large numbers of late SARs.
OFAC’s piece of the case covers 475 apparent sanctions violations across programs involving Russia, Belarus, Iran, Burma, Somalia, narcotics, and global terrorism. Treasury said those problems included technical and human errors in correspondent payments, poor sanctions-alert settings, delayed watchlist updates, and mishandled accounts tied to blocked persons.
Same-week earnings put the fine on the income statement
On October 14, Bank of America reported third-quarter 2026 net income of $6.9 billion, or $0.91 per diluted share. Revenue was $30.0 billion, up 3% from a year earlier. Net interest income rose 8% to $16.4 billion.
The bank explicitly called out a $1.2 billion regulatory settlement charge that cut EPS by $0.17. On an adjusted basis that excludes the charge, it reported net income of $8.1 billion and EPS of $1.08. Capital remained above regulatory minimums, with a preliminary common equity tier 1 (CET1) ratio of 10.9% under the Standardized approach.
In other words, the penalty is large enough to dent a quarter’s earnings, and management treated it as a material noninterest expense. It is not, on the numbers the bank published, a capital crisis.
Bank of America told NBC News that financial-crime compliance is serious, that it has invested billions in technology and staff, and that it is working through the issues raised by regulators while continuing to file hundreds of thousands of SARs each year.
Should customers worry?
For depositors, the practical guardrail is still the Federal Deposit Insurance Corporation. Eligible deposits at FDIC-insured banks are generally covered up to $250,000 per depositor, per insured bank, per ownership category. A civil penalty for AML and sanctions failures does not cancel that coverage. Your paycheck, debit card, and online banking are not automatically at risk because regulators fined the bank.
What you should watch is operational follow-through. The FinCEN consent order requires a lookback to find and report suspicious activity that was missed, plus independent reviews of monitoring, customer due diligence, foreign correspondent due diligence, and related data governance. Those reviews focus on priority risks such as the southwest border and cartels, Iran, and Russia.
If you are a retail customer, the day-to-day impact may show up as more questions when you open accounts, send large wires, or do unusual international transfers. That friction is often the visible side of stronger compliance. It is annoying. It is also part of how banks try to avoid the kind of blind spots Treasury described.
If you have balances above FDIC limits at a single bank, this penalty is a useful reminder to use ownership categories, multiple insured institutions, or other tools so coverage matches your cash. That advice is evergreen. It is not a prediction that Bank of America will fail.
Shareholders and bond investors will care about the earnings hit, remediation costs, and any ongoing consent-order oversight. Everyday account holders should care about whether their money stays accessible, insured, and protected from fraud. On those points, the public record so far points to a compliance and sanctions case, not a deposit-run story.
The Bottom Line
Treasury’s case against Bank of America is serious: willful BSA admissions, more than $5 billion in late or missed suspicious-activity reporting, and additional sanctions settlements, totaling more than $1.21 billion. The bank booked the $1.2 billion charge in the same week it reported solid underlying revenue growth.
For most customers, the useful takeaway is calmer than the headline. Confirm your FDIC coverage, keep an eye on your statements, and expect tighter screening on higher-risk transactions. The penalty is meant to force better monitoring of illicit finance. It is not, by itself, a reason to abandon a bank that still reports strong capital and liquidity.