Insights/Weekly Enforcement Digest
Weekly Enforcement Action Digest
Week Ending: October 19, 2026 · Across Regulatory Intelligence
Regulators covered: FinCEN, OCC, OFAC, DOJ, NCUA, DFPI
5
Priority Matters
3
BSA/AML & Sanctions
2
Fraud Matters
4
Supervisory & Alerts
Executive Summary — Key Takeaways This Week
- Bank of America: coordinated FinCEN, OCC and OFAC actions concerning BSA/AML and sanctions compliance. FinCEN announced $1.2 billion, OCC $750 million (credited against the FinCEN assessment), and OFAC approximately $11.66 million. Do not sum gross assessments without the credit.
- OFAC: October 13 Cartel del Noreste designations, and October 15 Iranian financial network action, heighten screening and beneficial-ownership concerns.
- FinCEN: October 15 alert regarding potential Iranian abuse of religious charity networks; an alert, not a penalty.
- OCC: October 14 supervisory report on debanking practices at nine large national banks; not a new monetary enforcement action.
- NCUA: October 14 twelfth round of deregulation proposals; proposal only.
Priority Watchlist
| Institution | Regulator | Date | Action | Severity |
|---|---|---|---|---|
| Bank of America | FinCEN/OCC/OFAC | Oct 13 | Coordinated AML/sanctions penalties; BSA/AML | High |
| Iran-linked financial networks | OFAC | Oct 15 | Sanctions; correspondent and shadow banking | High |
| Cartel del Noreste network | OFAC | Oct 13 | Designations; money laundering | High |
| 777 Partners / Joshua Wander | DOJ | Oct 15 | Guilty plea; securities/wire fraud | High |
| Hasan Korkmaz | DOJ | Oct 15 | Guilty plea; card bust-out fraud | Medium |
New Enforcement Actions This Week
01 — BSA/AML & Sanctions
Bank of America
Date: October 13, 2026Regulator: FinCEN, OCC, OFACType: Coordinated civil enforcement
Key Findings
- Treasury announced FinCEN $1.2 billion and OCC $750 million assessments, with the OCC amount credited against FinCEN; OFAC separately settled sanctions allegations for approximately $11.66 million.
- Control impact spans SAR timeliness, transaction monitoring coverage, correspondent banking exposure, and CDD and sanctions alert handling.
Why It Matters
Demonstrates multi-agency exposure where monitoring and reporting controls are ineffective.
Fintech Monitoring RelevanceHigh
02 — Sanctions
Iran-linked financial and shadow banking networks
Date: October 15, 2026Regulator: OFAC / TreasuryType: Sanctions
Key Findings
- Treasury announced action targeting an Iraqi bank, offshore institutions, and intermediaries associated with Iranian financial networks.
- Control impact includes refreshing sanctions screening, indirect ownership mapping, and payment-chain review.
Why It Matters
Intermediary banks and FX networks can obscure prohibited parties.
Fintech Monitoring RelevanceHigh
03 — AML / Sanctions
Cartel del Noreste commercial network
Date: October 13, 2026Regulator: OFACType: Sanctions designations
Key Findings
- OFAC designated four individuals and eleven entities across horse racing and other commercial sectors.
- Control impact includes reviewing customer and beneficial-owner matches and monitoring cross-sector trade and payment flows.
Why It Matters
Commercial businesses may serve as laundering channels for criminal organizations.
Fintech Monitoring RelevanceHigh
04 — Securities Fraud / Wire Fraud
777 Partners / Joshua Wander
Date: October 15, 2026Regulator: DOJ SDNYType: Guilty plea
Key Findings
- Former CEO pleaded guilty to wire and securities fraud in a scheme involving more than $500 million; agreed to forfeit at least $500 million.
- Control impact includes reviewing lender/investor representations and corroboration of pledged assets.
Why It Matters
Illustrates counterparty financial misrepresentation and fraud risks.
Fintech Monitoring RelevanceMedium
05 — Credit Card Fraud / Identity Theft
Hasan Korkmaz / San Diego Logistics Group
Date: October 15, 2026Regulator: DOJ SDCAType: Guilty plea
Key Findings
- Owner pleaded guilty in a roughly $2 million credit card bust-out and identity theft scheme.
- Control impact includes testing synthetic/stolen identity detection, rapid utilization, and linked account velocity.
Why It Matters
Directly relevant to issuer and payment fraud controls.
Fintech Monitoring RelevanceHigh
Supervisory, Guidance and Rulemaking Developments (Not Counted as Enforcement)
- OCC debanking review — October 14: OCC reported findings from a supervisory review of customer-access practices at nine large national banks. Review account closure governance, documented reasons, and fair-access controls.
- FinCEN charity-network alert — October 15: FinCEN alerted institutions to possible Iranian misuse of religious charity networks. Evaluate typologies and SAR escalation.
- NCUA deregulation proposals — October 14: NCUA announced three regulatory proposals in its twelfth deregulation round, including fidelity bond and insurance coverage topics. Monitor comment periods; no final rule implied.
- California DFPI insurance payout reporting — October 15: DFPI and a state agency announced reporting requirements for financial institutions handling Los Angeles fire insurance payouts. Relevant to consumer servicing and response governance.
Four Key Regulatory Themes
- Monitoring effectiveness and SAR timeliness remain central supervisory expectations.
- Sanctions evasion increasingly relies on layered intermediaries and ostensibly legitimate businesses.
- Financial fraud controls must corroborate customer identity and counterparty representations.
- Customer-access and consumer-servicing decisions need documented, reviewable governance.
Implications for Sponsor Banks and Fintech Programs
Immediate Monitoring Actions: Reassess high-risk customer transaction-monitoring scenarios; refresh sanctions and ownership screening; test SAR alert-to-filing timeliness; review payment card bust-out and identity-linkage rules.
Control Areas to Review: Correspondent/third-party payment chains, independent AML model testing, beneficial-owner data quality, customer closure documentation, exception escalation and evidence retention.
No Material Actions Identified / Review Limitations
No additional priority action was confirmed from FDIC, CFPB, FTC, NYDFS, or other state banking regulators within this targeted review. This does not certify that no actions occurred. SEC listings include routine administrative proceedings not elevated here without confirmed material fintech or bank relevance. The Federal Reserve announced October 16 terminations of prior enforcement actions; terminations are not counted as new adverse enforcement.
Appendix: Sources Reviewed
- Treasury, Bank of America: https://home.treasury.gov/news/press-releases/sb0657
- OCC, Bank of America: https://www.occ.gov/news-issuances/news-releases/2026/nr-occ-2026-89.html
- Treasury, Iranian networks: https://home.treasury.gov/news/press-releases/sb0660/
- Treasury, cartel designations: https://home.treasury.gov/news/press-releases/sb0656/
- Treasury, FinCEN alert: https://home.treasury.gov/news/press-releases/sb0661/
- OCC, debanking review: https://www.occ.gov/news-issuances/news-releases/2026/nr-occ-2026-90.html
- NCUA, deregulation: https://ncua.gov/newsroom/press-release/2026/ncua-announces-twelfth-round-deregulation-proposals
- DOJ, 777 Partners: https://www.justice.gov/usao-sdny/pr/founder-and-former-ceo-777-partners-pleads-guilty-500-million-fraud-scheme
- DOJ, card fraud: https://www.justice.gov/usao-sdca/pr/owner-santee-trucking-company-pleads-guilty-2-million-credit-card-fraud-and-identity
- Federal Reserve releases: https://www.federalreserve.gov/newsevents/pressreleases/2026-press.htm
- SEC news: https://www.sec.gov/newsroom/whats-new
- DFPI news: https://dfpi.ca.gov/
- FDIC releases: https://www.fdic.gov/news/press-releases
- CFPB newsroom: https://www.consumerfinance.gov/about-us/newsroom/
- FTC news: https://www.ftc.gov/news-events/news/press-releases
- NYDFS news: https://www.dfs.ny.gov/reports_and_publications/press_releases
Older Digests
Week Ending October 12, 2026American Express's $350 million BSA/AML penalty anchors a 13-action week that also covers Iran-related sanctions, a Uranium Finance hacking conviction, and SEC fraud charges against Linqto executives.Read >>
Week Ending October 5, 2026Ten new enforcement actions this week, led by coordinated sanctions against the A7 shadow-banking network and a Tren de Aragua ATM-jackpotting laundering operation, with no action targeting sponsor-bank or BaaS programs directly.Read >>
Week Ending September 28, 2026DOJ cryptocurrency money-laundering and bank-fraud charges, an SEC $575,000 penalty against OTC Link for Regulation SCI cybersecurity failures, and the Federal Reserve's proposed GENIUS Act stablecoin framework headline a lighter week of six enforcement actions dominated by insider fraud, management-override, and technology-governance failures.Read >>
Week Ending September 21, 2026OFAC's Iranian digital-asset sanctions on BitBank, a $100 million FTC settlement with FleetCor/Corpay, and DOJ fraud charges against two Robinhood employees headline a week dominated by digital-asset enforcement and bank-employee misconduct actions.Read >>
Week Ending September 14, 2026Eight new enforcement actions this week were led by the FTC's $12 million Humboldt Merchant Services settlement and a coordinated OFAC/DOJ sanctions and seizure action against the Xinbi Guarantee crypto-laundering marketplace, alongside accelerating Iran-related sanctions activity.Read >>