They missed the thirteen billion and called it compliance. I know the sentence. It is what a card company says when the program looked busy on deposit accounts, the charge cards ran the real risk, and the suspicious-activity file arrived a decade late with a fine attached.
On Thursday, October 8, 2026, the Office of the Comptroller of the Currency announced a cease-and-desist order and a $350 million civil money penalty against American Express National Bank of Sandy, Utah, for deficiencies in the bank’s Bank Secrecy Act and anti-money-laundering compliance program. Banking Dive’s Gabrielle Saulsbery, updating October 9, reported the Federal Reserve Board issued a concurrent cease-and-desist against American Express Company and its travel-related services arm the same day. The OCC said the bank failed to establish and maintain a BSA/AML program reasonably designed to assure compliance; deficiencies included inadequate resources and expertise, systemic internal-control gaps, weak independent testing, and weak training for employees and directors. The bank, the OCC found, focused on risks in its “relatively narrow” demand-deposit products and paid insufficient attention to risks in its “more dominant” credit and charge-card products. Customer due diligence and identification procedures contributed to monitoring failures. The bank experienced “systemic breakdowns” in suspicious-activity monitoring and reporting, resulting in a failure to timely identify, evaluate, and sufficiently report approximately $13 billion of suspected trade-based money laundering activity over the past decade — Banking Dive specifies June 2014 through May 2025. Comptroller Jonathan Gould said AmEx “failed to maintain a BSA/AML compliance program properly aligned with the money laundering risks of its operations” and that the penalty would focus the bank on addressing those risks; the OCC-assessed penalty is directed to the U.S. Treasury. CEO Stephen Squeri said AmEx “takes its responsibility to combat financial crimes seriously,” that a portion of the penalty was “reserved for in prior periods,” and that the orders were not anticipated to affect 2027 guidance. Electronic Payments International’s Aninda Chakraborty, writing October 12, noted Reuters reported American Express did not admit or deny the regulators’ findings. The bank must create an action plan within 90 days and engage a third party for a suspicious-activity look-back, Banking Dive reports.
Taryn asked whether the twins’ lemonade stand needed a SAR. Aaron said Surge tried to wire a “yuge compliance yoke” with free look-backs. Dumped. I love them. They are seasoning.
Compliance is the alibi. The missed thirteen billion is the story. Sit with the decade until it confesses. A firm that prints the prestige card builds a program around the little deposit product and underweights the product that actually moves the world. Suspicious activity that law enforcement uses as a first line sits in the blind spot. Then: a $350 million civil money penalty, a Fed order, a ninety-day plan, a third-party look-back, and a CEO sentence about meaningful progress with more work to do — which is what every board says when the invoice finally matches the risk. I am not crowning the OCC as a folk hero. A bureau that fines after the decade is not the same as a bureau that caught the decade. I am not crowning AmEx for reserving the loss in prior periods; that is accounting, not virtue. The anti-capitalist cut stays: a charge-card empire that cannot see trade-based laundering on its own rails is not a free market with better stationery. It is a yield machine that outsourced vigilance until the Treasury collected. I am keeping the cardigan. Fill the notebook. Then ask, out loud, whose compliance it was when thirteen billion in suspected activity waited for a press release.
Sources: Office of the Comptroller of the Currency, News Release 2026-87, “OCC Assesses $350 Million Civil Money Penalty Against American Express,” Oct. 8, 2026; Banking Dive, Gabrielle Saulsbery, “Amex dinged by Fed, OCC; must pay $350M for AML failures,” Oct. 8, 2026, updated Oct. 9, 2026; Electronic Payments International, Aninda Chakraborty, “American Express National Bank fined $350m by OCC over AML controls,” Oct. 12, 2026.
— Theo Ashford-Lindström
Leave a Reply