--- title: Weekly Enforcement Action Digest slug: weekly-enforcement-action-digest-august-24-2026 date: 2026-08-24 author: Across Regulatory Intelligence excerpt: Nine new enforcement actions this week, headlined by the FTC's $2.1M Doxo settlement, a DOJ bank-fraud scheme tied to merchant onboarding, and a Federal Reserve/Alabama written agreement with SouthPoint Bancshares. regulators: FTC, Federal Reserve, DOJ, OCC, Alabama State Banking Department, State of Connecticut tags: - Enforcement - Payments - Fraud & Operational Risk - Cybersecurity metrics: - label: New Actions value: "9" - label: High Fintech Relevance value: "5" - label: BSA/AML & Sanctions value: "1" - label: Governance & Risk value: "1" --- ## Executive Summary **Key Takeaways This Week** - 9 new material enforcement actions were identified in the reviewed weekly period, together with additional policy and enforcement-status updates. - The highest fintech and sponsor-bank relevance arose from the FTC's $2.1 million Doxo bill-payment settlement, DOJ's bank-fraud case involving fake companies used to obtain merchant/payment-processing access, and the Federal Reserve/Alabama written agreement with SouthPoint Bancshares. - Major risk areas included payment and billing deception, merchant onboarding circumvention, bank fraud, insider misappropriation, ATM malware, cybersecurity, capital adequacy, liquidity/cash-flow governance, and consumer fee practices. - No new enforcement action directly targeted a sponsor-bank oversight program or BaaS arrangement. Doxo and the DOJ payment-processing case directly involved payments/financial technology activity. - Additional material updates included the FTC's proposed personalized-pricing enforcement policy statement and OCC/Federal Reserve termination actions. ## Priority Watchlist | Institution | Regulator | Date | Action | Severity | | --- | --- | --- | --- | --- | | Doxo, Inc. and two co-founders | FTC | Aug 17 | $2.1M settlement — deceptive bill-payment advertising and fees | High | | SouthPoint Bancshares, Inc. | Federal Reserve / Alabama State Banking Department | Aug 20 | Written Agreement — capital, governance, safety & soundness | High | | Thomas Emil Eide / CB Surety LLC | DOJ | Aug 21 | Guilty plea — bank fraud conspiracy, merchant onboarding | High | | Juan Manuel Gouveia-Aguilera | DOJ | Aug 21 | 96-month sentence — ATM jackpotting / bank fraud / cyber | High | | Kendrick Lamont Fugett | DOJ | Aug 20 | Federal criminal complaint — Treasury check fraud / identity theft | High | | Mabna Institute defendants (17 Iranian nationals) | DOJ | Aug 18 | Superseding indictment — cyber intrusion / IRGC-linked activity | High | ## New Enforcement Actions This Week ### 01 — Consumer Compliance / Payments #### Doxo, Inc. and Co-Founders Steve Shivers and Roger Parks **Date:** August 17, 2026 · **Regulator:** FTC · **Type:** Settlement **Key Findings** - Doxo agreed to pay $2.1 million to settle FTC allegations involving misleading search advertising and representations that allegedly caused consumers to believe Doxo was an official bill-payment channel. - The FTC alleged that Doxo added delivery fees that were not clearly disclosed and deceptively enrolled consumers in a recurring subscription program. - The action directly concerns a third-party online bill-payment platform used for utility, auto-loan, and other consumer payments. **Why It Matters** This action is directly relevant to payment fintechs, merchant/payment intermediaries, and financial institutions that support bill-payment platforms. Controls should address advertising transparency, billing disclosures, recurring enrollment, complaint patterns, and clarity regarding whether a fintech is acting as an official or third-party payment channel. **Fintech Monitoring Relevance:** High ### 02 — Consumer Compliance / Fees #### Manchester City Nissan and Related Respondents **Date:** August 19, 2026 · **Regulator:** FTC / State of Connecticut · **Type:** Settlement **Key Findings** - The FTC and Connecticut secured a $4 million settlement resolving allegations that the dealership systematically deceived consumers regarding certified used-car prices, add-ons, and government fees. - The allegations included unwanted or unauthorized add-on charges and other deceptive pricing practices. - The settlement is relevant to financing and payment programs that support auto dealers and other high-risk merchants with material consumer-fee exposure. **Why It Matters** Banks and fintechs supporting dealer financing, payments, or merchant acquiring should monitor complaint, refund, pricing, and add-on practices where deceptive merchant conduct could create regulatory or reputational exposure. **Fintech Monitoring Relevance:** Medium ### 03 — Governance / Capital / Safety and Soundness #### SouthPoint Bancshares, Inc. **Date:** August 20, 2026 release; Written Agreement dated August 14, 2026 · **Regulator:** Federal Reserve / Alabama State Banking Department · **Type:** Written Agreement **Key Findings** - The Federal Reserve and Alabama State Banking Department entered into a Written Agreement with SouthPoint Bancshares after an offsite review identified deficiencies at the holding company. - The agreement requires SouthPoint to serve as a source of financial and managerial strength to SouthPoint Bank, submit a capital plan and cash-flow projections, and maintain capital contingency planning. - SouthPoint is restricted from dividends, share repurchases, other capital distributions, and additional debt without prior supervisory approval. **Why It Matters** The action underscores holding-company responsibility for subsidiary-bank condition, capital planning, liquidity and cash-flow governance, and remediation of existing bank-level supervisory actions. Sponsor-bank programs should consider whether fintech-related growth or operational exposures are reflected in capital and contingency planning. **Fintech Monitoring Relevance:** High ### 04 — Fraud / Insider Misappropriation #### Stephanie R. Kilbert, Former Regions Bank Employee **Date:** August 20, 2026 release; prohibition effective August 12, 2026 · **Regulator:** Federal Reserve · **Type:** Prohibition Order **Key Findings** - The Federal Reserve issued a consent prohibition against a former Regions Bank relationship banker. - The order states that she misappropriated $23,902 from a customer's account in a series of transactions during 2024. - The conduct was characterized as violations of law or regulation, unsafe or unsound banking practices, or breaches of fiduciary duty involving personal dishonesty or disregard for safety and soundness. **Why It Matters** The action reinforces employee-fraud controls, customer-account monitoring, segregation of duties, transaction review, and escalation of unusual employee activity. **Fintech Monitoring Relevance:** Low ### 05 — Fraud / Insider Misappropriation #### Crystal A. Wykle, Former United Community Bank Employee **Date:** August 20, 2026 release; prohibition effective August 12, 2026 · **Regulator:** Federal Reserve · **Type:** Prohibition Order **Key Findings** - The Federal Reserve issued a consent prohibition against a former United Community Bank teller. - The order states that she misappropriated $26,917 from a customer's business accounts by skimming cash from bulk deposits and placing funds in her own savings account. - The order notes that she was convicted of larceny in July 2025 in connection with the conduct. **Why It Matters** The matter is relevant to teller controls, cash-deposit reconciliation, employee account surveillance, and insider-fraud monitoring. **Fintech Monitoring Relevance:** Low ### 06 — Information Security / Cybersecurity #### Mabna Institute — 17 Iranian Defendants **Date:** August 18, 2026 · **Regulator:** DOJ · **Type:** Superseding Indictment **Key Findings** - DOJ unsealed a superseding indictment charging 17 members of the Iran-based Mabna Institute in connection with a large-scale cyber intrusion campaign. - DOJ alleged targeting of universities, private-sector companies, government agencies, and NGOs, with theft of more than 31 terabytes of academic data and intellectual property. - DOJ stated that portions of the activity were conducted for the benefit of the Iranian government and IRGC; charges include computer intrusion and wire-fraud-related offenses. **Why It Matters** The action highlights state-linked phishing, password spraying, credential compromise, data exfiltration, and cyber-enabled fraud. Banks and fintechs should maintain controls for phishing-resistant authentication, privileged access, credential monitoring, and incident response. **Fintech Monitoring Relevance:** Medium ### 07 — Bank Fraud / Payment Processing #### Thomas Emil Eide / CB Surety LLC **Date:** August 21, 2026 · **Regulator:** DOJ · **Type:** Guilty Plea **Key Findings** - Eide pleaded guilty to bank fraud conspiracy involving fake companies used to defraud banks and enable merchant clients to obtain and use accounts they otherwise could not open. - DOJ stated that straw owners were recruited to open accounts for fake companies and that fake websites and contact information were used to deceive banks. - The scheme allowed merchant clients to gain access to payment-processing capabilities through accounts opened under false business identities. **Why It Matters** This case is directly relevant to sponsor banks, merchant acquirers, payment processors, and fintech onboarding. Controls should validate business identity, beneficial ownership, websites, contact data, expected activity, and post-onboarding changes in account use. **Fintech Monitoring Relevance:** High ### 08 — Cyber / ATM Fraud #### Juan Manuel Gouveia-Aguilera **Date:** August 21, 2026 release; sentenced August 20, 2026 · **Regulator:** DOJ · **Type:** Criminal Sentencing **Key Findings** - A Venezuelan national was sentenced to 96 months in prison for his role in ATM "jackpotting." - The court attributed more than $3.5 million in losses to the defendant's conduct. - The convictions included conspiracy to commit bank fraud, bank burglary, and computer fraud involving malware used to cause ATMs to dispense cash. **Why It Matters** The case highlights endpoint and ATM security, malware detection, cash-out monitoring, physical/logical access controls, and rapid fraud response for banks and payment networks. **Fintech Monitoring Relevance:** High ### 09 — Bank Fraud / Identity Theft #### Kendrick Lamont Fugett **Date:** August 20, 2026 · **Regulator:** DOJ · **Type:** Criminal Complaint / Arrest **Key Findings** - DOJ announced the arrest of a defendant charged with bank fraud and aggravated identity theft. - The complaint alleges use of stolen identities and fake identification to deposit more than $15 million in U.S. Treasury checks intended for businesses. - The alleged scheme involved impersonating corporate officers, fabricating documents, and manipulating banks to obtain Treasury funds. **Why It Matters** The matter is relevant to business-account authentication, check fraud, corporate identity verification, large-item review, Treasury-check controls, and cross-institution fraud detection. **Fintech Monitoring Relevance:** Medium ## Enforcement Actions by Risk Category **BSA/AML & Sanctions** — DOJ (August 18, 2026): The Mabna Institute superseding indictment concerns IRGC-linked cyber activity and wire-fraud-related conduct. No separate new OFAC enforcement action was identified in the weekly review. **Consumer Compliance** — FTC (August 17, 2026): Doxo agreed to a $2.1 million settlement over alleged deceptive bill-payment advertising, fee disclosures, and recurring subscription enrollment. FTC / Connecticut (August 19, 2026): Manchester City Nissan and related respondents agreed to a $4 million settlement over alleged deceptive pricing, add-ons, and fees. **Operational Risk & Fraud** — Federal Reserve (August 20, 2026): Two former bank employees were prohibited from banking after customer-fund misappropriation findings. DOJ (August 21, 2026): Thomas Eide pleaded guilty in a fake-company scheme used to obtain bank accounts and payment-processing access. DOJ (August 21, 2026): ATM jackpotting defendant sentenced to 96 months; losses exceeded $3.5 million. DOJ (August 20, 2026): Treasury-check fraud complaint alleges more than $15 million in checks deposited using stolen identities and fabricated documents. **Information Security & Cybersecurity** — DOJ (August 18, 2026): Superseding indictment charged 17 Mabna Institute defendants in an alleged state-linked cyber theft campaign. DOJ (August 21, 2026): ATM jackpotting sentencing involved malware used to compromise ATM systems. **Third-Party Risk / Fintech Partnerships** — FTC (August 17, 2026): Doxo is a third-party online bill-payment platform; the settlement is directly relevant to payment fintechs and financial institutions supporting third-party payment channels. DOJ (August 21, 2026): Eide's scheme allegedly enabled merchants that could not obtain legitimate accounts to access payment-processing services through fake companies. No enforcement actions directly targeting sponsor-bank oversight programs or BaaS arrangements were identified this week. **Governance & Risk Management** — Federal Reserve / Alabama State Banking Department (August 20, 2026): SouthPoint Bancshares is subject to a Written Agreement requiring source-of-strength support, capital planning, cash-flow projections, capital conservation, and quarterly progress reporting. **Financial / Capital / Liquidity Risk** — Federal Reserve / Alabama State Banking Department (August 20, 2026): SouthPoint must maintain an acceptable capital plan, assess capital sources and uses, plan for additional capital, maintain capital contingencies, and obtain approval before capital distributions or new debt. ## Key Regulatory Themes 1. **Payments and Merchant Transparency** — The Doxo settlement and Eide bank-fraud case emphasize transparency in payment channels and the need to prevent merchants from obtaining financial access through misleading identities or representations. 2. **Capital and Holding-Company Governance** — The SouthPoint action emphasizes source-of-strength obligations, capital adequacy, cash-flow planning, distribution restrictions, and supervisory remediation. 3. **Fraud and Insider-Control Effectiveness** — Federal Reserve prohibition orders and DOJ fraud cases highlight employee misconduct, stolen identities, fake businesses, Treasury checks, and large-value fraudulent transactions. 4. **Cyber-Enabled Financial and Operational Risk** — DOJ actions involving the Mabna Institute and ATM jackpotting reinforce phishing, credential theft, malware, endpoint security, and cyber-enabled financial loss risks. ## Implications for Sponsor Banks and Fintech Programs **Immediate Monitoring Considerations** - Review payment and merchant onboarding controls for fake companies, straw owners, misleading websites, false contact information, and merchants previously unable to obtain accounts. - Confirm payment-platform disclosures clearly identify third-party status, fees, recurring subscriptions, cancellation terms, and payment-method restrictions. - Review sponsor-bank capital, liquidity, and operational-risk reporting to ensure material fintech exposures and growth are incorporated into board and contingency planning. - Strengthen monitoring for employee-originated account activity, large Treasury checks, ATM anomalies, credential compromise, and malware indicators. **Areas Requiring Elevated Attention** Merchant and business identity verification; payment-platform advertising and fee disclosure; recurring billing and subscription consent; capital and liquidity contingency planning; employee fraud and customer-account access; Treasury check and large-item fraud; ATM and endpoint malware; credential theft and phishing. ## No Material Actions Identified The following regulators were reviewed and no material enforcement actions meeting the digest criteria were identified: FDIC, CFPB, FinCEN, NCUA, SEC, NYDFS, California DFPI, OFAC, and other relevant U.S. State Banking Departments, except the Alabama State Banking Department action noted above. OCC issued an August 20, 2026 enforcement release terminating a prior Formal Agreement with First National Bank of Pasco. The termination was reviewed but is not counted as a new enforcement action. The Federal Reserve also announced termination of its 2017 Deutsche Bank cease-and-desist order; that termination is likewise excluded from the new-action count. ## Additional Material Regulatory Update **FTC (August 19, 2026)** — The FTC requested public comment on a proposed enforcement policy statement regarding personalized pricing, described as the use of personal data to set prices according to individual consumer characteristics or behavior. This is a policy-development item and is not included in the new-enforcement-action count. **OCC (August 19, 2026)** — Comptroller Gould discussed digital-asset innovation and OCC work following the GENIUS Act. The remarks were reviewed as a policy signal but are not treated as an enforcement or supervisory action in the metrics. ## Sources | Regulator | Source | | --- | --- | | OCC | Aug. 20, 2026 — OCC Announces Enforcement Actions for August 2026; official OCC enforcement pages reviewed. | | FDIC | Official FDIC press release and administrative enforcement sources reviewed; no qualifying material new weekly action identified. | | CFPB | Official CFPB Enforcement Actions / Newsroom sources reviewed; no qualifying material new weekly action identified. | | FinCEN | Official FinCEN news and enforcement release sources reviewed; no qualifying material new weekly action identified. | | OFAC | Official Treasury / OFAC press and enforcement release sources reviewed; no qualifying material new weekly action identified. | | Federal Reserve | Aug. 20, 2026 — SouthPoint Bancshares Written Agreement; prohibition orders involving former employees of Regions Bank and United Community Bank; Deutsche Bank termination announcement. | | NCUA | Official NCUA press release / administrative order sources reviewed; no qualifying material new weekly action identified. | | SEC | Official SEC newsroom, enforcement and rulemaking sources reviewed; no qualifying material new weekly enforcement action identified. | | FTC | Aug. 17, 2026 — Doxo $2.1M settlement; Aug. 19, 2026 — Manchester City Nissan $4M settlement; Aug. 19, 2026 — proposed enforcement policy statement regarding personalized pricing. | | DOJ | Aug. 18–21, 2026 official DOJ and U.S. Attorney releases covering Mabna Institute cyber charges, Treasury-check fraud, Thomas Eide bank-fraud plea, and ATM jackpotting sentencing. | | NYDFS | Official NYDFS press release and enforcement sources reviewed; no qualifying material new weekly action identified. | | California DFPI | Official DFPI press release / enforcement sources reviewed; no qualifying material new weekly action identified. | | Relevant U.S. State Banking Departments | Alabama State Banking Department was a party to the SouthPoint Bancshares Written Agreement; other official state banking regulator releases reviewed where relevant. | ## Methodology Review period: August 17–24, 2026, based on official releases available by the time of this report. Public-release dates are used for weekly inclusion when an underlying order was executed earlier. Overlapping releases and underlying orders were deduplicated. Official regulator and U.S. government sources were prioritized. Criminal allegations are described as allegations unless a plea, conviction, or sentence occurred. Items were excluded where the source did not clearly support inclusion or where relevance to banking, fintech, payments, risk, or compliance was immaterial.