Bank of America's record $1.2 billion penalty for sanctions violations and money-laundering control failures should jolt the entire financial industry out of its complacency. The fine, announced last week, is notable not just for its size but for the underlying deficiencies it exposed—deficiencies that reflect a broader disconnect between how banks approach financial crime and the national security stakes involved.
Regulators cited two critical failures at Bank of America: the bank failed to identify and report over $1 billion in suspicious activity linked to national security and other high-priority illicit finance risks, and it left 76 percent of its transaction monitoring risk weights unchanged from 2018 to 2023. Of the weights that were adjusted, roughly 80 percent were actually reduced, signaling a troubling trend toward lower scrutiny.
These findings highlight a fundamental mismatch between the operational, checklist-driven approach most banks take to compliance and the rapidly evolving geopolitical environment in which financial crime occurs. For years, money laundering and sanctions evasion have been treated primarily as back-office issues—matching patterns, flagging unusual behavior, and running names through sanctions lists. While necessary, this narrow focus misses the larger strategic purpose: why individuals and entities are sanctioned in the first place, and the national security implications of illicit finance.
Not all financial crimes carry equal weight. A local drug dealer poses a different threat than someone funneling money to North Korea's nuclear program. Understanding that distinction requires a shift in mindset—placing financial crime in the context of U.S. foreign policy and national security. Consider the ongoing confrontation with Iran: economic warfare is a central pillar of U.S. strategy, and disrupting Tehran's ability to launder funds and evade sanctions is a key objective. Missing Iranian sanctions evasion could have far greater strategic consequences than overlooking unrelated illicit transactions, such as Australian tobacco smuggling.
Yet Bank of America's five-year stagnation in risk weighting raises serious questions about institutional complacency. Between 2018 and 2023, the global risk landscape shifted dramatically—most notably with Russia's 2022 invasion of Ukraine, which triggered unprecedented sanctions and forced Russian evasion networks to adapt. Despite this, the bank's risk weights remained largely static, and regulators found instances where internal evidence of deficiencies did not lead to recalibration.
The core problem, experts argue, is a lack of geopolitical literacy among financial crime professionals. An institution cannot adapt its risk assessments if its staff and leadership do not understand how global events alter the nature of financial crime. This has led to calls for a fundamental restructuring of financial crime education in the private sector.
Industry data supports this concern. The Association of Certified Anti-Money Laundering Specialists (ACAMS) has repeatedly flagged insufficient expertise and ongoing training as major risks. In its Global Anti-Financial Crime Threats Reports, 43 percent of surveyed professionals in 2024, 50 percent in 2025, and 47 percent in 2026 cited insufficient skilled resources or ongoing training as a high or very high risk. Meanwhile, 63 percent of respondents in the 2026 report identified geopolitical instability as a high or very high risk. The industry clearly recognizes the growing importance of geopolitical threats but lacks the expertise to address them.
Professionals need to be trained not just in regulatory compliance but in how U.S. national security, foreign policy, and geopolitical shifts should drive their anti-financial crime programs. This means moving beyond screening lists and transaction monitoring systems to a deeper understanding of the illicit finance ecosystem. Companies must invest in leadership that grasps these dynamics and provides the resources and ongoing education necessary to turn static systems into dynamic ones.
The question is whether financial institutions are training employees merely to perform tasks or to think critically about the threats they are meant to counter. As Americans grow increasingly pessimistic about the nation's direction, the financial sector's ability to combat financial crime has direct implications for national security. The Bank of America fine is a warning that the current approach is insufficient—and that the cost of complacency is far higher than any penalty.
