A coordinated resolution with actual admissions
FinCEN assessed U.S. Bank National Association $185 million in February 2018 for Bank Secrecy Act deficiencies. In the related civil stipulation, the bank admitted, acknowledged and accepted responsibility for the incorporated statement of facts and additional specified conduct. This is materially different from a settlement in which the respondent neither admits nor denies the findings. [1][2]
Parent company U.S. Bancorp entered a deferred prosecution agreement, or DPA, in connection with two felony BSA charges. The Justice Department announced a $528 million obligation and a two-year deferral conditioned on compliance. An admission within a DPA is not a guilty plea or conviction. The later dismissal of the charges is also different from a trial acquittal. [3]
The monitoring constraint
FinCEN’s assessment described a transaction-monitoring system configured to produce a fixed number of alerts, with caps on six of its 22 scenario-based queries. The caps remained despite testing that identified missed suspicious-activity reporting. The agency also discussed a re-alerting policy that could suppress new signals and gaps in monitoring noncustomer money-transfer activity. Its concern was whether the program reflected the bank’s risk, rather than whether a vendor’s software was inherently unlawful. [1]
The bank’s stipulation recorded that a look-back generated 24,179 additional alerts and led to 2,121 suspicious activity reports. Those are separate counts. An alert is a reason to investigate; a SAR reports a legally defined suspicion after relevant review. Neither is a conviction, and the ratio cannot be read as the share of customers who were criminals. [2]
This mechanism is easy to confuse with ordinary prioritization. A queue can rank cases by urgency while retaining visibility into the remainder. A hard production cap can prevent part of the underlying activity from appearing in the queue at all. The resulting dashboard may show a manageable workload because the measurement system has been constrained, not because the underlying activity became less concerning.
Capacity can become an invisible model assumption
Suppose a hypothetical monitoring process identifies 20,000 transactions for review each month, while staffing can complete 12,000. If the system simply emits the top 12,000, the visible queue may remain stable. The missing 8,000 are not a reduction in customer activity. Whether their omission is justified depends on evidence about risk, coverage and the consequences of the threshold, rather than the convenience of the number.
The distinction resembles a credit model that approves a fixed number of applicants regardless of changing applicant quality. A fixed output count silently imposes a moving decision threshold when the distribution changes. In AML monitoring, more unusual activity can arrive while the number of alerts remains unchanged. A stable count can therefore be a sign of a rigid production constraint rather than a stable risk environment.
complicate the economics. Investigating every superficially unusual transaction can waste resources and delay attention to more important matters. Better data and calibrated scenarios may reduce unnecessary work. But reducing the queue is not itself evidence of improvement: the same visible result can arise from a more accurate system or from suppressing useful signals.
Testing below a threshold helps distinguish those possibilities. It examines some activity the main process would otherwise omit and asks whether relevant cases are being missed. The value of such testing is informational. If the results never influence the threshold, staffing or process design, the organization can acquire evidence without changing the operational constraint that created the problem.
Amounts that must not be added twice
The FinCEN stipulation provided that its $185 million obligation would be satisfied by $70 million paid to Treasury together with full payment under the DPA. The Justice Department’s $528 million amount incorporated credit for the OCC’s $75 million penalty. The Federal Reserve imposed a separate $15 million assessment. The resulting nonduplicative monetary total is $528 million plus $70 million plus $15 million, or $613 million. [2][3][4]
GAO’s 2019 BSA report independently summarized that coordination and the additional $70 million FinCEN payment. It is useful corroboration because the individual agency headlines otherwise invite a mistaken sum of $528 million, $185 million, $75 million and $15 million. The gross legal assessments and the incremental dollars paid are different measures. [5]
None of those amounts estimates the total proceeds of every potentially suspicious transaction. A penalty addresses legal violations, while transaction volume measures flows, and customer losses measure a different consequence again. Treating them as interchangeable can exaggerate or understate the economic significance of the program failure.
The response extended beyond the institution
On March 4, 2020, FinCEN announced a $450,000 penalty against former chief operational risk officer Michael LaFontaine. Its release described warnings from subordinates and regulators about caps and staffing. This was a separate personal action; its amount should not be retroactively folded into the bank’s 2018 $613 million resolution without saying that a different respondent and date are involved. [6]
The individual case underscores the link between a technical setting and resource allocation. A monitoring threshold is implemented in software, but maintaining it can be a management decision about workload and staffing. That does not mean every employee who uses the system shares the same legal responsibility. The record identifies a specific official and a specific enforcement outcome.
There is also a difference between delegating investigations and delegating accountability for whether investigations can occur. A centralized team may perform the work, yet the volume and complexity of activity arise from many business lines. A business can appear inexpensive to operate if the resources necessary to understand its transactions are omitted from its measured cost.
Later milestones, rather than a permanently open case
U.S. Bancorp’s fourth-quarter 2018 earnings release reported that the OCC had terminated its 2015 AML/BSA . This is another completed milestone in the related supervisory history, separate from the later Fed termination and criminal-case dismissal. The source is the company’s contemporaneous disclosure, rather than the OCC’s underlying signed termination. [9]
The Federal Reserve terminated its February 14, 2018 order against U.S. Bancorp and USB Americas Holdings Company on December 5, 2019, announcing that decision on December 12. U.S. Bancorp’s 2019 annual report states that the court granted dismissal of all DPA charges on February 13, 2020. The same report described February 22, 2020 as the scheduled expiration of its ongoing FinCEN settlement obligations. The latter is a contemporaneous issuer disclosure of the contractual endpoint, not a newly located FinCEN termination notice. [7][8]
The October 4, 2026 review found no later official reversal of these milestones. This article does not confuse them with U.S. Bank’s later consumer-sales or prepaid-card orders, which address different conduct. Nor does a completed DPA erase the admitted historical facts.
The case explains how a cost constraint can distort the information used to judge that same constraint. A program may appear to have enough staff because it generates only the work its staff can handle. The financial and legal consequences become visible only when the hidden workload is examined, the admissions are read and the overlapping remedies are reconciled.
Sources
- FinCEN — U.S. Bank assessment, February 15, 2018Official source · PDFBack to text: ↑1↑2
- U.S. Bank — FinCEN civil stipulation filed with SEC, February 15, 2018Filing / reportBack to text: ↑1↑2↑3
- DOJ — U.S. Bancorp DPA announcement, February 15, 2018Official sourceBack to text: ↑1↑2
- Federal Reserve — U.S. Bancorp action, February 15, 2018Official releaseBack to text: ↑
- GAO — Bank Secrecy Act report GAO-19-582, August 2019, Appendix IIIOfficial source · PDFBack to text: ↑
- FinCEN — Michael LaFontaine penalty, March 4, 2020Official releaseBack to text: ↑
- Federal Reserve — termination announcement, December 12, 2019Official releaseBack to text: ↑
- U.S. Bancorp — 2019 annual report, filed February 20, 2020, page 134Filing / reportBack to text: ↑
- U.S. Bancorp — fourth-quarter 2018 earnings release, January 2019Filing / reportBack to text: ↑