UBS Financial Services Inc. (UBSFS) has been hit with a historic $125 million civil money penalty by the US Department of Treasury’s Financial Crimes Enforcement Network (FinCEN) for deliberate violations of the Bank Secrecy Act (BSA), the main Anti-Money Laundering (AML) and Countering the Financing of Terrorism (CFT) laws in the United States. This sanction is currently the biggest penalty ever levied against a broker-dealer for BSA breaches and it serves as a potent warning that financial institutions will face harsh regulatory repercussions if they do not improve their AML compliance systems, especially for repeat offenders.

1.0 BACKGROUND

The recent enforcement action comes after authorities had discovered serious flaws in the institution’s AML program, including flaws in its automated transaction monitoring system for foreign currency wire transfer. As a result of that discovery, the institution signed a Consent Order with FinCEN in December 2018 and paid $14.5 million. UBSFS promised authorities at the time that it would quickly address these shortcomings. Nevertheless, the anticipated enhancements were either postponed or poorly executed, according to FinCEN’s later inquiry. Rather, the organization carried on with serious noncompliance, putting the American banking system at serious danger of money laundering.

2.0 KEY COMPLIANCE FAILURES

2.1 Failure to Monitor High-Risk Transactions

The failure of UBSFS to adequately monitor over 50,000 foreign currency wire transfers totaling more than $10 billion was one of the significant findsings. Due to ongoing flaws in the company’s automated surveillance systems, these transactions were not properly monitored. The fact that UBSFS neglected to notify FinCEN of these flaws was even more worrisome. The problem was only discovered by the regulator during a follow-up inquiry after a regulatory assessment.

2.2 Deficient Customer Due Diligence

Additionally, FinCEN discovered significant flaws in UBSFS’s Customer Due Diligence (CDD) program. For high-risk clients, especially those with ties to Latin America and Russia, the organization did not perform sufficient risk assessments. Investigators discovered that UBSFS failed to correctly assess the source of wealth of its clients and failed to take into account reliable negative media reports that connected certain clients to money laundering, fraud, and corruption. In several cases, internal complaints about these clients made by one of UBSFS’s affiliates were not sufficiently handled.

2.3 Failure to File Suspicious Activity Reports

Due to these shortcomings, UBSFS was unable to promptly file hundreds of Suspicious Activity Reports (SARs). SARs are essential instruments used by law enforcement to identify and disrupt financial crimes such as money laundering, terrorism funding, corruption, and sanctions evasion. According to FinCEN, UBSFS’s shortcomings prevented law enforcement from obtaining crucial information that may have supported current investigations.

3.0 REMEDIAL MEASURES TO BE UNDERTAKEN BY UBSFS

In response to the enforcement action by FinCEN, a new Consent Order has been published and UBSFS is expected to engage an independent third party to conduct a comprehensive review of historical transactions. This independent review is primarily focused to highlight and report undetected suspicious transactions to FinCEN and specifically evaluate the effectiveness of UBSFS’s AML framework in addressing key illicit finance threats involving:

• the U.S. Southwest Border and narcotics trafficking;
• Iran;
• Russia; and
• Venezuela.

FINCEN would waive up to $15,000,000 expended in the course of undertaking the independent review upon successful implementation of the recommendations by the independent third party.

4.0 COMPLIANCE LESSONS FOR FINANCIAL INSTITUTIONS

The enforcement action offers several important lessons for other financial institutions worldwide.

4.1 Remediation Must Be Timely and Effective

The fact that the majority of the penalty resulted from UBSFS’s incapacity to address flaws after authorities had already discovered them, rather than only the initial noncompliance is the most significant aspect of this case.  Regulators increasingly expect institutions to treat remediation commitments as legally significant obligations rather than administrative exercises.

4.2. Customer Due Diligence Must Be Meaningful

CDD should extend beyond collecting identification documents during onboarding. Financial institutions must continuously assess customer risk profiles, verify the legitimacy of customers’ sources of wealth, monitor adverse media, and update customer information throughout the relationship. FinCEN emphasized that effective CDD requires objective risk assessment rather than simply documenting apparent risks without implementing appropriate controls.

5.0 CONCLUSION

FinCEN’s ongoing dedication to bolstering AML enforcement and holding financial institutions responsible for systemic compliance failings is demonstrated by the UBSFS enforcement action. The record-breaking sanction serves as further evidence that adhering to AML regulations is essential to maintaining the integrity of the world’s financial system. The message is clear for financial institutions: an effective compliance framework must include strong AML programs, efficient customer due diligence, ongoing transaction monitoring, timely reporting of suspicious activity and prompt remediation of identified deficiencies. Institutions can anticipate progressively harsh enforcement measures if they do not fix recognized deficiencies, especially after previous regulatory involvement.