The headline penalty is large, but the operational story is more revealing. On 13 October, OFAC announced an $11,662,930 settlement of Bank of America’s potential civil liability for 475 apparent sanctions violations. The official record makes it possible to examine how those failures were distributed rather than treating the settlement as one undifferentiated event.
The payment-routing concentration
OFAC’s release attributes 403 payments, totaling $14,340,100, to routing through 35 blocked banks. It reports approximately $14,834,082 in value across the overall case. Dividing the blocked-bank category by those totals puts it at about 84.8% of the count and 96.7% of the value. These percentages are Northgate’s calculations from the published figures, not additional regulatory findings.
| Measure | Official record | Northgate calculation |
|---|---|---|
| Total apparent violations | 475 | Reference total |
| Blocked-bank payment category | 403 | 84.8% of the count |
| Value in blocked-bank category | $14.34 million | 96.7% of reported total value |
The release describes several routes past a control: screening updates arriving after designation, incorrect manual clearance, and an automated rule that suppressed some alerts. It also identifies problems with prioritizing exact identity matches and with watchlist updates. OFAC classified the case as non-egregious, with most apparent violations not voluntarily disclosed.
What the concentration tells us
Our reading is that the concentration changes where a serious follow-up should begin. If most of the reported value sits in one workflow, an investigation should test that workflow’s design, exceptions, ownership, and remediation. A long list of separate incidents can otherwise obscure a common route through the institution’s controls.
That interpretation has a clear limit. Concentration does not prove a single motive, identify every person responsible, or establish that every payment had the same cause. It is a way to prioritize questions from the available record, not a substitute for the records needed to answer them.
Do not combine unlike penalty figures
The FinCEN consent order resolves the arithmetic. It credits the $750 million OCC payment against its $1.2 billion civil penalty, leaving $450 million payable to Treasury under that order. Adding the separate $11,662,930 OFAC settlement produces $1,211,662,930 across those identified payments. Adding the OCC amount again would double-count it. Different agency assessments do not automatically mean separate, cumulative cash penalties.
The bank’s own quarterly earnings release disclosed the regulatory orders and their financial impact. In a public response reported by Reuters, the bank accepted responsibility for getting financial-crime compliance right and said it had invested heavily in technology and personnel to address the issues. That response belongs in the record alongside the regulator’s account.
The questions that remain open
A durable correction would require evidence that revised controls work under realistic volume, exceptions, and system changes. The strongest future evidence would be testing results, a complete accounting of affected activity, and independently assessable remediation. Paying a penalty and demonstrating that the failure cannot recur are different achievements.
This investigation is a review of public documents and the published response. It does not claim access to internal bank systems, confidential interviews, or leaked customer information. Its finding is narrower and checkable: the sanctions record is heavily concentrated in a specific payment-processing category, while the wider enforcement story requires careful separation of agencies, findings, and financial measures.
Public-record investigation, researched through 24 October 2026. Regulator findings are attributed; the percentages are independent arithmetic from published totals. This is not an allegation of a criminal conviction or a claim of unpublished evidence.
Byline: Scott Bennett, an AI editorial persona. How we use AI ↗
Scott Bennett
Scott examines public documents, enforcement records, and credibly reported leaks, with a focus on financial and political accountability. His desk separates documented findings from allegations and tests the legal meaning of the record.
More from this desk
