American Express Hit with $350 Million Fine for Systemic AML Compliance Breakdowns

American Express Co. was hit with a substantial $350 million fine by U.S. bank regulators on Thursday, October 8, 2026, following a determination that the financial services giant failed to maintain adequate anti-money laundering (AML) compliance programs. The enforcement action, announced concurrently by the U.S. Office of the Comptroller of the Currency (OCC) and the Federal Reserve, cited systemic breakdowns that allowed an estimated $13 billion in suspicious activity to go undetected and unreported over the past decade.

The OCC issued a civil money penalty and a cease-and-desist order against American Express National Bank, while the Federal Reserve Board issued a concurrent cease-and-desist order against American Express and its travel-related services subsidiary. According to the OCC, the $350 million penalty will be directed to the U.S. Treasury, underscoring the severity of the compliance failures.

Regulators pointed to a litany of deficiencies within American Express’s AML framework. These included inadequate resources devoted to compliance, inexperienced staff, weak training protocols for employees and directors, and significant gaps in internal controls. Furthermore, the company's customer due diligence practices and identification measures were deemed insufficient, failing to adequately verify customer identities and scrutinize transactions. The OCC also highlighted a lack of adequate independent testing, which is crucial for identifying weaknesses in compliance systems.

A particularly critical finding was that American Express National Bank's risk framework was too heavily oriented toward its deposit account products, leaving its larger and more complex credit and charge card operations without adequate scrutiny. This imbalance contributed to pervasive failures in the bank's monitoring and reporting systems, which, over the past ten years, resulted in the failure to timely identify, evaluate, and sufficiently report approximately $13 billion of suspected trade-based money laundering activity.

Comptroller of the Currency Jonathan Gould emphasized the importance of robust AML programs, stating, “The OCC expects banks of American Express’s size and complexity to devote sufficient resources to ensure compliance with laws and regulations designed to detect and prevent money laundering, which are critical to both economic and national security.” The enforcement action sends a clear message about the regulators' commitment to holding financial institutions accountable for their role in combating illicit financial flows.

American Express, for its part, did not admit or deny the regulators' findings, according to Reuters. A spokesperson for the company did not immediately respond to a request for comment at the time of the announcement. However, American Express CEO Steve Squeri acknowledged that while the firm has made progress in its compliance efforts, “there is more work to do.” The company also stated that the penalty would not impact its 2026 or 2027 guidance.

The substantial fine and cease-and-desist orders underscore the high stakes involved in AML compliance for all financial entities. For small and mid-sized businesses (SMBs) across the U.S., particularly those involved in international trade, e-commerce, or other high-volume transactions, this enforcement action serves as a stark reminder of the rigorous scrutiny applied to financial activities. While the scale of operations differs, the fundamental principles of identifying suspicious activities, conducting thorough customer due diligence, and maintaining robust internal controls remain universal requirements under regulations like the Bank Secrecy Act.

In our experience, many small and mid-sized businesses mistakenly believe that stringent anti-money laundering compliance is solely the concern of large financial institutions. However, this enforcement action against American Express serves as a powerful reminder that robust financial risk management is crucial for businesses of all sizes, particularly those engaged in complex transactions or international operations. The penalties for non-compliance, even for seemingly minor oversights, can be devastating, impacting not just finances but also reputation and operational continuity. We frequently see clients struggle with identifying suspicious activities, ensuring proper customer due diligence, and establishing effective internal controls—areas explicitly cited in the American Express case. Proactive measures, including regular audits, staff training, and the implementation of sophisticated monitoring systems, are not optional but essential safeguards in today's regulatory landscape. For businesses seeking to fortify their defenses and navigate the intricacies of financial regulations, C&S Finance Group LLC offers comprehensive financial risk management services. We help companies establish and maintain compliant frameworks, protecting them from potential liabilities. To learn more about how we can help your business, visit csfinancegroup.com.

Going forward, this enforcement action is likely to intensify regulatory focus on AML programs across the financial industry. Companies should anticipate increased scrutiny on transaction monitoring systems, customer due diligence processes, and the adequacy of internal controls. Financial institutions of all sizes are advised to proactively assess and strengthen their compliance frameworks to mitigate similar risks and avoid significant penalties.