Insights/Weekly Enforcement Digest
Weekly Enforcement Action Digest
Week Ending: July 20, 2026 · Across Regulatory Intelligence
Regulators covered: DOJ, OFAC, FTC, U.S. Treasury, HM Treasury, OCC, FDIC, NCUA
6
New Actions
4
High Fintech Relevance
2
BSA/AML & Sanctions
2
Governance & Risk
Executive Summary — Key Takeaways This Week
- Identified 6 material enforcement or criminal regulatory actions, including two DOJ bank-insider sentencings, a major DOJ cybercrime indictment, an OFAC sanctions action, and two FTC enforcement resolutions.
- The most significant bank-specific matter involved two former TD Bank employees — one who facilitated large-scale money laundering activity, and another who enabled account takeover fraud and false bank records.
- OFAC targeted an international procurement and financial network supporting Iran's weapons programs, reinforcing sanctions and counterparty-screening requirements.
- No new enforcement actions directly targeted sponsor-bank oversight programs or BaaS arrangements. However, new U.S.–UK recommendations on stablecoins and digital assets have direct relevance to payments and digital asset firms.
- Key regulatory themes: BSA/AML controls, insider risk, cybersecurity infrastructure, sanctions, credit underwriting, consumer advertising, and digital asset regulatory coordination.
Priority Watchlist
| Institution | Regulator | Date | Action | Severity |
|---|---|---|---|---|
| TD Bank former employees | DOJ | Jul 15 | Criminal sentencing — insider money laundering | High |
| Media Land, ML.Cloud & associates | DOJ | Jul 14 | Criminal indictment — cybercrime hosting | High |
| Iran-linked procurement network | OFAC | Jul 15 | Sanctions — weapons proliferation finance | High |
| U.S.–UK digital asset markets | Treasury / HM Treasury | Jul 14 | Joint regulatory recommendations | Medium |
| Non-work-authorized borrowers | OCC / FDIC / NCUA | Jul 13 | Interagency guidance — credit underwriting | Medium |
| Edwards Lifesciences / Genesis MedTech | FTC | Jul 13 | $12M settlement — pre-merger reporting | Low |
New Enforcement Actions This Week
01 — BSA/AML / Insider Misconduct
Wilfredo Aquino & Edward Low / Former TD Bank Employees
Date: July 15, 2026Regulator: DOJType: Criminal Sentencing
Key Findings
- Aquino, a former TD Bank assistant store manager, was sentenced to 46 months for facilitating a money laundering network.
- DOJ stated the network moved approximately $474 million through TD Bank accounts; Aquino processed roughly 1,680 official bank checks totaling more than $92 million.
- Edward Low was sentenced to 24 months for account takeover fraud, misuse of confidential customer information, and false bank records.
Why It Matters
Reinforces the need for insider-risk monitoring, CTR quality controls, employee transaction surveillance, and privileged access controls.
Fintech Monitoring RelevanceHigh
02 — Cybersecurity / Money Laundering
Media Land, ML.Cloud & Associated Russian Nationals
Date: July 14, 2026Regulator: DOJType: Criminal Indictment
Key Findings
- DOJ unsealed an indictment against three Russian nationals and two "bulletproof hosting" companies.
- Defendants were charged with computer fraud, wire fraud, and conspiracy to commit money laundering.
- DOJ alleged the infrastructure supported cybercrime against U.S. victims resulting in more than $62 million in losses.
Why It Matters
Banks and fintechs should assess exposure to cybercrime infrastructure, suspicious hosting providers, ransomware-related activity, and cryptocurrency payment flows.
Fintech Monitoring RelevanceHigh
03 — Sanctions / Proliferation Finance
Iran-Linked Global Weapons Procurement Network
Date: July 15, 2026Regulator: OFACType: Sanctions Designations
Key Findings
- OFAC targeted an international network involved in procuring weapons and related resources for Iran's Islamic Revolutionary Guard Corps.
- Treasury identified aviation and transport firms, financial conduits, procurement agents, and travel coordinators used to obscure procurement activity.
- The action was taken under authorities targeting weapons-of-mass-destruction proliferators and their supporters.
Why It Matters
Financial institutions, fintechs, payment companies, and cross-border programs should ensure sanctions lists are updated and assess exposure to intermediary companies, financial conduits, and complex international payment chains.
Fintech Monitoring RelevanceHigh
04 — Regulatory Compliance
Edwards Lifesciences Corp. and Genesis MedTech Group
Date: July 13, 2026Regulator: FTCType: Settlement / Civil Penalties
Key Findings
- The FTC secured $12 million in penalties over alleged violations of Hart-Scott-Rodino pre-merger reporting requirements.
- FTC alleged the parties structured a transaction to avoid mandatory federal antitrust review.
- The settlement included a $10 million penalty for Edwards-related parties, a $2 million penalty for Genesis, and additional prior-notice requirements.
Why It Matters
While not directly related to banking compliance, the action reinforces expectations that regulated companies should not structure transactions to circumvent regulatory reporting or approval requirements.
Fintech Monitoring RelevanceLow
05 — Consumer Compliance / Advertising
TruHeight / Vanilla Chip LLC and Principals
Date: July 15, 2026Regulator: FTCType: Final Order
Key Findings
- The FTC finalized an order addressing allegedly deceptive and unsupported product claims.
- The respondents must pay $750,000, with a $4 million judgment partially suspended based on ability to pay.
- The order prohibits false or unsupported claims and misrepresentations involving customer reviews, including fake or incentivized reviews.
Why It Matters
Reinforces regulatory expectations around substantiation of consumer-facing claims, testimonials, reviews, marketing governance, and disclosure of incentives.
Fintech Monitoring RelevanceLow
06 — Governance / Insider Risk
Former Federal Reserve Board Adviser
Date: July 15, 2026Regulator: DOJType: Criminal Sentencing
Key Findings
- A former senior adviser to the Federal Reserve Board was sentenced to 38 months in federal prison.
- The matter involved misuse of sensitive information associated with the adviser's government role.
- The case highlights risks involving privileged information and trusted insiders.
Why It Matters
Reinforces expectations for confidential information controls, employee monitoring, privileged-access governance, and insider-risk management.
Fintech Monitoring RelevanceMedium