OCC Assesses $350 Million Civil Money Penalty Against American Express

The action cites weaknesses in the bank’s AML compliance framework, signalling that regulators will pursue severe penalties where governance, risk assessment, customer due diligence, transaction monitoring, or suspicious activity reporting fall short. For compliance teams, the key takeaway is the need for continuous, board-visible oversight and independent testing. Firms should reassess their BSA/AML programs against current OCC expectations, ensure adequate resourcing and training, and document remediation.

Peer institutions—especially large banks and payment providers—should expect heightened supervisory scrutiny. Actionable steps include: (1) conduct a gap analysis of AML controls; (2) review SAR filing and CDD processes; (3) enhance transaction monitoring and alert triage; (4) strengthen board reporting and accountability; (5) prepare for possible follow-up exams or enforcement. While the direct impact is on American Express National Bank, the precedent affects all OCC-supervised institutions.

RegTech and AML solution providers may see increased demand. The financial and reputational costs of non-compliance are substantial, making proactive investment in compliance infrastructure a competitive necessity.