Insights/Weekly Enforcement Digest
Weekly Enforcement Action Digest
Week Ending: October 12, 2026 · Across Regulatory Intelligence
Regulators covered: OCC, Federal Reserve, OFAC, DOJ, SEC, FTC
13
New Actions
4
High Fintech Relevance
6
BSA/AML & Sanctions
7
Governance & Risk
Executive Summary — Key Takeaways This Week
- 13 qualifying enforcement, criminal or new judicial actions were identified in the review. The OCC and Federal Reserve actions against American Express are counted as one coordinated matter; the SEC SQN case is counted only for the October 8 judgments, not its earlier complaint.
- The most consequential banking finding was the $350 million American Express penalty, tied to deficient BSA/AML coverage and approximately $13 billion in suspected trade-based money laundering activity not timely or sufficiently reported.
- Direct fintech/digital-asset developments included the Uranium Finance crypto-exchange hacking conviction and SEC charges involving the Linqto online pre-IPO investment platform. OFAC announced sanctions affecting international trade and financial screening.
- No new enforcement action specifically against a sponsor-bank/BaaS arrangement was identified. Fintech and sponsor-bank monitoring implications are nevertheless material for card-product AML, sanctions, insider fraud, digital-asset controls and third-party oversight.
Priority Watchlist
| Institution | Regulator | Date | Action | Severity |
|---|---|---|---|---|
| American Express National Bank / American Express Company | OCC + Federal Reserve | Oct. 8, 2026 | Cease-and-desist orders; $350 million OCC CMP | High |
| Iranian shadow-fleet shipping and support network | OFAC / Treasury | Oct. 8, 2026 | Sanctions designations | High |
| Jonathan Spalletta / Uranium Finance | DOJ | Oct. 7, 2026 | Criminal conviction | High |
| William Sarris and Joseph Endoso / Linqto platform | SEC | Oct. 9, 2026 | Civil fraud charges | High |
| Gerardo Aquino / former TD Bank employee | DOJ | Oct. 6, 2026 | Guilty plea | High |
| Juan Francisco Ramirez / Nodus International Bank | DOJ | Oct. 7, 2026 | Criminal sentencing | High |
| Oleg Korniev / Your Mule Cashout network | DOJ | Oct. 8, 2026 | Guilty plea | High |
| Michael Edwards / stolen-check network | DOJ | Oct. 7, 2026 | Criminal sentencing | High |
| Pegasus Worldwide Logistics | OFAC | Oct. 9, 2026 | Sanctions settlement; $175,015 | Medium |
| Jefferies LLC | SEC | Oct. 9, 2026 | Cease-and-desist; censure; $650,000 penalty | Medium |
| SQN Capital Management / Jeremiah Silkowski | SEC | Oct. 8, 2026 | Court consent judgments; receiver appointment | Medium |
| Zohar Pinhasi / MonsterCloud | DOJ | Oct. 7, 2026 | Criminal indictment / arraignment | Medium |
| Greenway Auto Group | FTC | Oct. 8, 2026 | Proposed stipulated settlement | Medium |
New Enforcement Actions This Week
01 — BSA/AML; Transaction Monitoring
American Express National Bank / American Express Company
Date: October 8, 2026Regulator: OCC + Federal ReserveType: Cease-and-desist orders; $350 million OCC CMP
Key Findings
- OCC imposed a $350 million civil money penalty and cease-and-desist order against American Express National Bank; the Federal Reserve issued a coordinated order at the holding-company level. These are treated as one coordinated matter for this digest.
- OCC found the bank failed to maintain a BSA/AML program aligned with its business and gave insufficient attention to risks in its dominant credit and charge card products.
- OCC cited staffing and expertise gaps, weak independent testing and training, customer due diligence weaknesses, and failure to timely identify, evaluate, and sufficiently report approximately $13 billion in suspected trade-based money laundering activity over a decade.
Why It Matters
A direct warning that enterprise AML controls and transaction monitoring must reflect the actual risk profile of high-volume payment products, with credible management oversight.
Fintech Monitoring RelevanceHigh
02 — Sanctions; Trade Finance
Iranian shadow-fleet shipping and support network
Date: October 8, 2026Regulator: OFAC / TreasuryType: Sanctions designations
Key Findings
- Treasury announced sanctions targeting 17 vessels transporting Iranian petroleum or petrochemicals and associated shipping and management companies.
- The designations were made under Executive Order 13902 and included companies registered in multiple jurisdictions; Treasury also removed two vessels following changed circumstances.
- Treasury described front-company structures and cross-border shipping arrangements used to obscure prohibited Iranian petroleum transactions.
Why It Matters
Cross-border payments and correspondent banking can be exposed through trade-related counterparties and layered ownership even when the immediate customer is not directly designated.
Fintech Monitoring RelevanceHigh
03 — Digital-Asset Cyber Fraud
Jonathan Spalletta / Uranium Finance
Date: October 7, 2026Regulator: DOJType: Criminal conviction
Key Findings
- A jury convicted Spalletta of computer fraud and money laundering involving two attacks on decentralized cryptocurrency exchange Uranium Finance.
- DOJ said the first exploit extracted about $1.4 million and the second approximately $53.3 million, causing the platform to shut down.
- The proceeds were laundered through cryptocurrency transactions, including the Tornado Cash mixer; approximately $31 million in cryptocurrency was seized in 2025.
Why It Matters
Connects digital-asset technology vulnerabilities to loss of customer funds and laundering typologies that may reach banks and payment firms.
Fintech Monitoring RelevanceHigh
04 — Digital Investment Platform; Investor Protection
William Sarris and Joseph Endoso / Linqto platform
Date: October 9, 2026Regulator: SECType: Civil fraud charges
Key Findings
- SEC charged two former Linqto executives with allegedly misleading retail investors using an online platform to buy interests in pre-IPO companies.
- SEC alleged a subsidiary sold more than $430 million of special-purpose-vehicle interests and that platform pricing, scarcity, algorithmic pricing and legal-compliance representations were misleading.
- SEC also alleged unregistered investment-company activity and unregistered securities sales; allegations have not been adjudicated.
Why It Matters
Shows how digital distribution and platform design can create investor-protection exposure when pricing and eligibility disclosures do not match actual operations.
Fintech Monitoring RelevanceHigh
05 — Bank Insider Fraud; AML
Gerardo Aquino / former TD Bank employee
Date: October 6, 2026Regulator: DOJType: Guilty plea
Key Findings
- Former TD Bank employee pleaded guilty to taking bribes and helping launder more than $4.8 million to Colombia.
- According to DOJ, he opened fraudulent accounts, issued hundreds of debit cards and unblocked cards restricted for suspected fraud.
- DOJ said 86 accounts shared one Miami commercial address and moved over $3 million; bribes included payments via a peer-to-peer digital payment network.
Why It Matters
Provides concrete monitoring indicators for account onboarding, debit-card fraud overrides, and insider facilitation of laundering.
Fintech Monitoring RelevanceMedium
06 — Bank Governance; Insider Lending Fraud
Juan Francisco Ramirez / Nodus International Bank
Date: October 7, 2026Regulator: DOJType: Criminal sentencing
Key Findings
- Former chairman and co-owner of Nodus International Bank was sentenced to 62 months in prison and ordered to forfeit about $13.6 million.
- DOJ said he led a scheme that caused at least $23.6 million in losses by concealing insider-benefit loans and investments from directors and the Puerto Rico regulator.
- The conduct included sham investments and a transfer of a roughly $26 million nonperforming loan portfolio shortly before liquidation.
Why It Matters
Illustrates how insider transactions and governance failures can affect bank financial condition and depositor outcomes.
Fintech Monitoring RelevanceMedium
07 — Cybercrime Proceeds Laundering
Oleg Korniev / Your Mule Cashout network
Date: October 8, 2026Regulator: DOJType: Guilty plea
Key Findings
- Korniev pleaded guilty to running an international laundering service that recruited more than 15,000 U.S.-based money mules.
- DOJ said the network helped launder at least $10 million stolen from more than 750 U.S. bank accounts; the defendant admitted to at least $7 million actually laundered.
- Mules were recruited through sham employment arrangements and directed to receive funds and wire them abroad.
Why It Matters
Demonstrates the value of joining fraud, account-takeover and AML analytics across the transaction lifecycle.
Fintech Monitoring RelevanceMedium
08 — Check Fraud; Mule Accounts
Michael Edwards / stolen-check network
Date: October 7, 2026Regulator: DOJType: Criminal sentencing
Key Findings
- Edwards was sentenced to eight years in prison for a stolen-check and check-alteration scheme.
- DOJ said the scheme involved more than 2,600 stolen checks and over $55 million in intended losses, with more than $18 million deposited into co-conspirator accounts.
- Stolen checks were altered, deposited, or offered for sale through a Telegram channel.
Why It Matters
Directly relevant to check fraud, deposit risk, and downstream money-mule monitoring at banks and credit unions.
Fintech Monitoring RelevanceMedium
09 — Sanctions Screening; Blocked Property
Pegasus Worldwide Logistics
Date: October 9, 2026Regulator: OFACType: Sanctions settlement; $175,015
Key Findings
- OFAC announced a $175,015 settlement covering four apparent sanctions violations and six apparent procedural/reporting violations.
- The freight-forwarding firm allegedly facilitated importation of a machine supplied by a blocked company and failed to respond fully to an OFAC subpoena for six months.
- OFAC characterized the conduct as non-egregious and not voluntarily disclosed.
Why It Matters
Highlights third-party and trade-related sanctions exposure outside conventional bank-to-bank transfers.
Fintech Monitoring RelevanceMedium
10 — Regulatory Reporting Integrity
Jefferies LLC
Date: October 9, 2026Regulator: SECType: Cease-and-desist; censure; $650,000 penalty
Key Findings
- SEC found at least 7,700 deficient electronic blue-sheet submissions during 2018-2024, affecting data for at least 1.2 million transactions.
- Errors arose from manual mistakes, coding and programming problems, including issues involving vendor-assisted reporting.
- Jefferies accepted censure, cease-and-desist relief and a $650,000 penalty; SEC noted remediation and self-reporting of several errors.
Why It Matters
Shows that data integrity and vendor-dependent regulatory reporting can create material supervisory exposure even without alleged customer fraud.
Fintech Monitoring RelevanceMedium
11 — Investment-Adviser Governance
SQN Capital Management / Jeremiah Silkowski
Date: October 8, 2026Regulator: SECType: Court consent judgments; receiver appointment
Key Findings
- Court entered consent judgments and appointed a receiver on October 8; SEC first filed the underlying charges on September 18, so this digest counts the new judgment, not a new filing.
- SEC alleged inflated asset values, deficient audits and misleading disclosures concerning fund liquidation.
- Judgments included a $200,000 civil penalty against Silkowski and permanent industry restrictions; defendants did not admit the allegations.
Why It Matters
A governance and investor-funds case illustrating risks in weak valuation, custody and audit practices.
Fintech Monitoring RelevanceLow
12 — Cyber Incident-Response Vendor Fraud
Zohar Pinhasi / MonsterCloud
Date: October 7, 2026Regulator: DOJType: Criminal indictment / arraignment
Key Findings
- DOJ charged the owner of a ransomware remediation company with alleged wire fraud and conspiracy.
- The indictment alleges he represented that his firm could decrypt without paying attackers, while secretly making more than $8 million in ransom payments and charging clients more than $19 million.
- The allegations have not been proven; DOJ noted that ransom payment does not guarantee data recovery or removal of compromise.
Why It Matters
Shows the operational and third-party risk of relying on an incident-response provider without verification of methods and outcomes.
Fintech Monitoring RelevanceMedium
13 — Consumer Price Transparency
Greenway Auto Group
Date: October 8, 2026Regulator: FTCType: Proposed stipulated settlement
Key Findings
- FTC announced a proposed settlement of allegations that vehicle prices were advertised below the actual price customers paid.
- FTC alleged that more than 92% of transactions included additional charges averaging more than $3,350 over advertised prices.
- The proposed order addresses mandatory fees, conditional discounts, financing representations and deceptive promotional mailers; it requires court approval.
Why It Matters
An indirect but practical reminder of consumer fee transparency and advertising controls.
Fintech Monitoring RelevanceLow
Material Supervisory, Rulemaking and Follow-up Updates
- Oct. 8 — FTC: Cleo AI refunds. FTC announced distribution of more than $15.8 million in refunds to users of the cash-advance app Cleo AI, arising from an earlier case. This is a redress milestone, not a new enforcement action.
- Oct. 9 — SEC: registered-fund cross trading. SEC proposed amendments to Rule 17a-7 to broaden permitted cross trades, with enhanced pricing, oversight and aggregate reporting. This is proposed rulemaking, not an enforcement action.
- Oct. 5 — CFTC: crypto asset markets. CFTC issued an advance notice seeking input on regulation of retail crypto asset transactions and crypto asset markets. Included because of direct digital-asset relevance.
- Oct. 7 — Treasury: outbound investment penalty announcement. Treasury announced a $200,000 penalty involving Amidi LLC and an outbound investment notification. Treasury states the penalty was issued in July 2026; accordingly it is not counted as a new October enforcement action.
- Oct. 5 — OFAC: sanctions list maintenance. OFAC removed 125 entries and updated 22 entries as part of sanctions-list modernization. This is a screening data update rather than a new adverse enforcement action.
- Oct. 11 — DOJ: Alvaro Pulido Vargas. DOJ announced an arrest in connection with older 2019 and 2021 indictments alleging over $2 billion in money laundering and bribery-related schemes. The arrest is a material case development but not a newly filed indictment.
Key Regulatory Themes
- Product-aligned AML and SAR governance. The coordinated American Express orders highlight the need to assess AML risk across dominant payment products, maintain competent staffing and testing, and demonstrate effective monitoring and reporting.
- Insider and mule-enabled financial crime. The TD Bank employee plea, the Korniev mule network and the Nodus Bank case show how privileged access, fraudulent onboarding and weak escalation can facilitate illicit transfers or conceal insider benefits.
- Digital platforms, cyber exploitation and investor protection. Uranium Finance and Linqto highlight distinct risks in crypto smart contracts, platform controls, investment disclosures and downstream movement of funds.
- Sanctions and third-party data integrity. OFAC shipping designations and the Pegasus settlement emphasize beneficial-ownership and intermediary screening; Jefferies shows that reporting data quality also requires sustained validation.
Implications for Sponsor Banks and Fintech Programs
Immediate Monitoring Actions
- Backtest card and charge-product transaction-monitoring coverage, including trade-based laundering typologies and SAR escalation timeliness.
- Refresh sanctions screening for new OFAC vessels, maritime entities, beneficial owners and logistics intermediaries; verify updates and false-positive handling.
- Review employee override, debit-card unblock and repeated shared-address account-opening patterns.
- Review digital-asset partner cyber controls, mixer exposure, on/off-ramp monitoring and suspicious wallet behavior.
- Review consumer-facing investment and cash-advance marketing claims, price/fee disclosures and contractual consistency.
Control Areas to Review
- C1/C2 product-specific BSA/AML risk assessment and monitoring effectiveness.
- Independent AML testing, staffing, governance and SAR-quality assurance.
- Fraud-block overrides, shared-address accounts, mule behavior and cross-border wires.
- Sanctions screening, vessel/beneficial-ownership data and OFAC inquiry handling.
- Smart-contract risk, cyber response providers and incident-response transparency.
- Regulatory data reconciliation, vendor reporting and audit trails.
- Investment-platform disclosure, pricing, conflicts and custody/valuation controls.
No Material Actions Identified
The following regulator news/enforcement sources were checked, and no additional qualifying material new enforcement action was identified in the accessible releases for the review period: FDIC, CFPB, FinCEN, NCUA, NYDFS, California DFPI and relevant state banking department releases. This is a source-based finding, not a certification that no unpublished actions occurred. FDIC and DFPI site access was partially restricted during the review; results for those sources should be treated as qualified.
Appendix: Sources Reviewed
Action identifiers map to their primary regulator source below. Supervisory/follow-up items (S01–S06) are included for reference.
- A01 — OCC + Federal Reserve (American Express National Bank / American Express Company)
- A02 — OFAC / Treasury (Iranian shadow-fleet shipping and support network)
- A03 — DOJ (Jonathan Spalletta / Uranium Finance)
- A04 — SEC (William Sarris and Joseph Endoso / Linqto platform)
- A05 — DOJ (Gerardo Aquino / former TD Bank employee)
- A06 — DOJ (Juan Francisco Ramirez / Nodus International Bank)
- A07 — DOJ (Oleg Korniev / Your Mule Cashout network)
- A08 — DOJ (Michael Edwards / stolen-check network)
- A09 — OFAC (Pegasus Worldwide Logistics)
- A10 — SEC (Jefferies LLC)
- A11 — SEC (SQN Capital Management / Jeremiah Silkowski)
- A12 — DOJ (Zohar Pinhasi / MonsterCloud)
- A13 — FTC (Greenway Auto Group)
- S01 — FTC (Cleo AI consumer refund distribution, Oct. 8)
- S02 — SEC (proposed registered-fund cross-trading amendments, Oct. 9)
- S03 — CFTC (crypto asset markets advance notice, Oct. 5)
- S04 — Treasury (outbound investment penalty announcement, Oct. 7; penalty issued July)
- S05 — OFAC (sanctions list removals and updates, Oct. 5)
- S06 — DOJ (arrest in older Venezuelan laundering indictments, Oct. 11)
Method: public announcements and orders dated October 5–11, 2026; counts are unique cases, not regulator notices. Allegations are identified as such. The October 12 week-ending date reflects the scheduled Monday review; the U.S. review period closes October 11.
Older Digests
Week Ending October 5, 2026Ten new enforcement actions this week, led by coordinated sanctions against the A7 shadow-banking network and a Tren de Aragua ATM-jackpotting laundering operation, with no action targeting sponsor-bank or BaaS programs directly.Read >>
Week Ending September 28, 2026DOJ cryptocurrency money-laundering and bank-fraud charges, an SEC $575,000 penalty against OTC Link for Regulation SCI cybersecurity failures, and the Federal Reserve's proposed GENIUS Act stablecoin framework headline a lighter week of six enforcement actions dominated by insider fraud, management-override, and technology-governance failures.Read >>
Week Ending September 21, 2026OFAC's Iranian digital-asset sanctions on BitBank, a $100 million FTC settlement with FleetCor/Corpay, and DOJ fraud charges against two Robinhood employees headline a week dominated by digital-asset enforcement and bank-employee misconduct actions.Read >>
Week Ending September 14, 2026Eight new enforcement actions this week were led by the FTC's $12 million Humboldt Merchant Services settlement and a coordinated OFAC/DOJ sanctions and seizure action against the Xinbi Guarantee crypto-laundering marketplace, alongside accelerating Iran-related sanctions activity.Read >>
Week Ending September 7, 2026Six new enforcement actions this week were led by the FTC's $4.85M Nuvei settlement, OFAC's Golden Global Bank sanctions, and FinCEN's Southwest Border MSB GTO and digital asset scam alert.Read >>