---
title: Weekly Enforcement Action Digest
slug: weekly-enforcement-action-digest-october-19-2026
date: 2026-10-19
author: Across Regulatory Intelligence
excerpt: Coordinated FinCEN/OCC/OFAC penalties against Bank of America anchor a five-matter enforcement week spanning BSA/AML, sanctions, and payment fraud, alongside four supervisory and alert developments.
regulators: FinCEN, OCC, OFAC, DOJ, NCUA, DFPI
tags:
  - Enforcement
  - BSA/AML
  - Sanctions
  - Fraud
metrics:
  - label: Priority Matters
    value: "5"
  - label: BSA/AML & Sanctions
    value: "3"
  - label: Fraud Matters
    value: "2"
  - label: Supervisory & Alerts
    value: "4"
---

## Executive Summary

**Key Takeaways This Week**

- Bank of America: coordinated FinCEN, OCC and OFAC actions concerning BSA/AML and sanctions compliance. FinCEN announced $1.2 billion, OCC $750 million (credited against the FinCEN assessment), and OFAC approximately $11.66 million. Do not sum gross assessments without the credit.
- OFAC: October 13 Cartel del Noreste designations, and October 15 Iranian financial network action, heighten screening and beneficial-ownership concerns.
- FinCEN: October 15 alert regarding potential Iranian abuse of religious charity networks; an alert, not a penalty.
- OCC: October 14 supervisory report on debanking practices at nine large national banks; not a new monetary enforcement action.
- NCUA: October 14 twelfth round of deregulation proposals; proposal only.

## Priority Watchlist

| Institution | Regulator | Date | Action | Severity |
| --- | --- | --- | --- | --- |
| Bank of America | FinCEN/OCC/OFAC | Oct 13 | Coordinated AML/sanctions penalties; BSA/AML | High |
| Iran-linked financial networks | OFAC | Oct 15 | Sanctions; correspondent and shadow banking | High |
| Cartel del Noreste network | OFAC | Oct 13 | Designations; money laundering | High |
| 777 Partners / Joshua Wander | DOJ | Oct 15 | Guilty plea; securities/wire fraud | High |
| Hasan Korkmaz | DOJ | Oct 15 | Guilty plea; card bust-out fraud | Medium |

## New Enforcement Actions This Week

### 01 — BSA/AML & Sanctions
#### Bank of America
**Date:** October 13, 2026 · **Regulator:** FinCEN, OCC, OFAC · **Type:** Coordinated civil enforcement

**Key Findings**

- Treasury announced FinCEN $1.2 billion and OCC $750 million assessments, with the OCC amount credited against FinCEN; OFAC separately settled sanctions allegations for approximately $11.66 million.
- Control impact spans SAR timeliness, transaction monitoring coverage, correspondent banking exposure, and CDD and sanctions alert handling.

**Why It Matters**

Demonstrates multi-agency exposure where monitoring and reporting controls are ineffective.

**Fintech Monitoring Relevance:** High

### 02 — Sanctions
#### Iran-linked financial and shadow banking networks
**Date:** October 15, 2026 · **Regulator:** OFAC / Treasury · **Type:** Sanctions

**Key Findings**

- Treasury announced action targeting an Iraqi bank, offshore institutions, and intermediaries associated with Iranian financial networks.
- Control impact includes refreshing sanctions screening, indirect ownership mapping, and payment-chain review.

**Why It Matters**

Intermediary banks and FX networks can obscure prohibited parties.

**Fintech Monitoring Relevance:** High

### 03 — AML / Sanctions
#### Cartel del Noreste commercial network
**Date:** October 13, 2026 · **Regulator:** OFAC · **Type:** Sanctions designations

**Key Findings**

- OFAC designated four individuals and eleven entities across horse racing and other commercial sectors.
- Control impact includes reviewing customer and beneficial-owner matches and monitoring cross-sector trade and payment flows.

**Why It Matters**

Commercial businesses may serve as laundering channels for criminal organizations.

**Fintech Monitoring Relevance:** High

### 04 — Securities Fraud / Wire Fraud
#### 777 Partners / Joshua Wander
**Date:** October 15, 2026 · **Regulator:** DOJ SDNY · **Type:** Guilty plea

**Key Findings**

- Former CEO pleaded guilty to wire and securities fraud in a scheme involving more than $500 million; agreed to forfeit at least $500 million.
- Control impact includes reviewing lender/investor representations and corroboration of pledged assets.

**Why It Matters**

Illustrates counterparty financial misrepresentation and fraud risks.

**Fintech Monitoring Relevance:** Medium

### 05 — Credit Card Fraud / Identity Theft
#### Hasan Korkmaz / San Diego Logistics Group
**Date:** October 15, 2026 · **Regulator:** DOJ SDCA · **Type:** Guilty plea

**Key Findings**

- Owner pleaded guilty in a roughly $2 million credit card bust-out and identity theft scheme.
- Control impact includes testing synthetic/stolen identity detection, rapid utilization, and linked account velocity.

**Why It Matters**

Directly relevant to issuer and payment fraud controls.

**Fintech Monitoring Relevance:** High

## Supervisory, Guidance and Rulemaking Developments (Not Counted as Enforcement)

- **OCC debanking review — October 14:** OCC reported findings from a supervisory review of customer-access practices at nine large national banks. Review account closure governance, documented reasons, and fair-access controls.
- **FinCEN charity-network alert — October 15:** FinCEN alerted institutions to possible Iranian misuse of religious charity networks. Evaluate typologies and SAR escalation.
- **NCUA deregulation proposals — October 14:** NCUA announced three regulatory proposals in its twelfth deregulation round, including fidelity bond and insurance coverage topics. Monitor comment periods; no final rule implied.
- **California DFPI insurance payout reporting — October 15:** DFPI and a state agency announced reporting requirements for financial institutions handling Los Angeles fire insurance payouts. Relevant to consumer servicing and response governance.

## Enforcement Actions by Risk Category

- **BSA/AML & Sanctions:** Bank of America; Iranian networks; Cartel del Noreste.
- **Consumer Compliance:** No separate priority consumer enforcement matter confirmed in this review.
- **Operational Risk & Fraud:** 777 Partners; card bust-out fraud plea.
- **Information Security & Cybersecurity:** No specific new priority enforcement action confirmed.
- **Third-Party Risk / Fintech Partnerships:** Indirect implications for payment intermediaries and banking partners; no BaaS-specific order confirmed.
- **Governance & Risk Management:** Bank of America remediation and OCC debanking supervisory review.
- **Financial / Capital / Liquidity:** 777 Partners investor/lender fraud; no bank-capital action confirmed.

## Four Key Regulatory Themes

- Monitoring effectiveness and SAR timeliness remain central supervisory expectations.
- Sanctions evasion increasingly relies on layered intermediaries and ostensibly legitimate businesses.
- Financial fraud controls must corroborate customer identity and counterparty representations.
- Customer-access and consumer-servicing decisions need documented, reviewable governance.

## Implications for Sponsor Banks and Fintech Programs

**Immediate Monitoring Actions:** Reassess high-risk customer transaction-monitoring scenarios; refresh sanctions and ownership screening; test SAR alert-to-filing timeliness; review payment card bust-out and identity-linkage rules.

**Control Areas to Review:** Correspondent/third-party payment chains, independent AML model testing, beneficial-owner data quality, customer closure documentation, exception escalation and evidence retention.

## No Material Actions Identified / Review Limitations

No additional priority action was confirmed from FDIC, CFPB, FTC, NYDFS, or other state banking regulators within this targeted review. This does not certify that no actions occurred. SEC listings include routine administrative proceedings not elevated here without confirmed material fintech or bank relevance. The Federal Reserve announced October 16 terminations of prior enforcement actions; terminations are not counted as new adverse enforcement.

## Appendix: Sources Reviewed

- Treasury, Bank of America: https://home.treasury.gov/news/press-releases/sb0657
- OCC, Bank of America: https://www.occ.gov/news-issuances/news-releases/2026/nr-occ-2026-89.html
- Treasury, Iranian networks: https://home.treasury.gov/news/press-releases/sb0660/
- Treasury, cartel designations: https://home.treasury.gov/news/press-releases/sb0656/
- Treasury, FinCEN alert: https://home.treasury.gov/news/press-releases/sb0661/
- OCC, debanking review: https://www.occ.gov/news-issuances/news-releases/2026/nr-occ-2026-90.html
- NCUA, deregulation: https://ncua.gov/newsroom/press-release/2026/ncua-announces-twelfth-round-deregulation-proposals
- DOJ, 777 Partners: https://www.justice.gov/usao-sdny/pr/founder-and-former-ceo-777-partners-pleads-guilty-500-million-fraud-scheme
- DOJ, card fraud: https://www.justice.gov/usao-sdca/pr/owner-santee-trucking-company-pleads-guilty-2-million-credit-card-fraud-and-identity
- Federal Reserve releases: https://www.federalreserve.gov/newsevents/pressreleases/2026-press.htm
- SEC news: https://www.sec.gov/newsroom/whats-new
- DFPI news: https://dfpi.ca.gov/
- FDIC releases: https://www.fdic.gov/news/press-releases
- CFPB newsroom: https://www.consumerfinance.gov/about-us/newsroom/
- FTC news: https://www.ftc.gov/news-events/news/press-releases
- NYDFS news: https://www.dfs.ny.gov/reports_and_publications/press_releases