Canaccord Genuity FinCEN $80 Million Penalty: Securities Fraud AML Lessons

On 6 March 2026 the US Financial Crimes Enforcement Network (FinCEN) assessed an $80 million civil money penalty against Canaccord Genuity LLC, a US broker-dealer. FinCEN's release says the firm willfully violated the Bank Secrecy Act (BSA) by failing to maintain an effective anti-money laundering (AML) programme, failing to carry out proper customer due diligence, and failing to report suspicious activity linked to securities fraud. It is a useful case for anyone working in capital markets compliance, because it shows how a market-making business can be drawn into fraud through low-priced shares. If you are building your own AML knowledge, our CPD courses cover AML and financial crime.

This guide is based on FinCEN's news release of 6 March 2026 and consent order number 2026-01. We read them through a summarising tool, so check every figure against the original documents before you quote it.

The penalty and how it is structured

The civil money penalty is $80 million. According to the order, $20 million is credited for a payment to the Securities and Exchange Commission (SEC) and $20 million for a payment to the Financial Industry Regulatory Authority (FINRA). A further $5 million is suspended and can be waived if the firm completes the required lookback. That leaves $35 million payable to the US Treasury. The order covers the period from 2 March 2018 to 30 June 2024.

The order cites the BSA rules on AML programmes for broker-dealers (31 U.S.C. 5318(h) and 31 C.F.R. 1023.210), suspicious activity reports (SARs) (31 U.S.C. 5318(g) and 31 C.F.R. 1023.320), due diligence for correspondent accounts of foreign financial institutions (31 U.S.C. 5318(i) and 31 C.F.R. 1010.610) and FinCEN's penalty authority (31 U.S.C. 5321(a)).

Why the firm's business created the risk

The order says Canaccord was among the top five market makers in over-the-counter, low-priced securities between 2018 and 2022, executing nearly $70 billion of such transactions. Thinly traded microcap shares are a well-known vehicle for pump-and-dump schemes and market manipulation, so a firm in this business needs monitoring and customer due diligence that match that risk. FinCEN's finding is that the firm's controls did not.

The control failures FinCEN describes

Policies, testing, the BSA officer and training

FinCEN found unreasonable policies, procedures and internal controls, inadequate independent testing, failures by the BSA officer and inadequate training. The release adds that transaction monitoring was run by too few, poorly trained staff, and that the firm failed for years to fix weaknesses that examiners had identified.

Customer due diligence at onboarding and afterwards

The order describes weak due diligence both at onboarding and on an ongoing basis. Examples include customers whose beneficial owners were linked to media reports about sanctions investigations or to the shielding of assets, and a foreign financial institution that had bearer shares in its ownership structure when it was onboarded. Beneficial ownership is a recurring theme: if you cannot see who ultimately controls an account, you cannot judge whether its trading makes sense. Our guide to sanctions screening and alert resolution shows how the same ownership questions arise in screening.

Correspondent account due diligence

The order finds that the firm did not carry out proper due diligence on a Bahamas-based foreign bank customer, and did not apply enhanced due diligence even after the account was placed under heightened supervision.

Securities fraud-related suspicious activity

The release says the firm failed to file at least 160 SARs relating to dozens of over-the-counter securities, and that the underlying suspicious transactions run into the thousands. The order gives examples: about $100 million of suspicious transactions in a pharmaceutical microcap between January and August 2021 with no timely SAR, several million dollars in a lithium company between January and August 2019 with no SARs filed, and microcap schemes run by one customer where the firm filed on that customer only after an SEC complaint. Our suspicious activity reporting guide explains why a SAR needs to be filed when suspicion arises, not when a regulator has already acted.

Undertakings: the SAR lookback

Canaccord must engage an independent consultant, at its own expense, to review past activity. The consultant's report is due within 180 days of the order, and SARs on any identified transactions must be filed within 90 days of the report, with one 60-day extension available as of right. FinCEN will decide within 30 days of completion whether the suspended $5 million is waived.

Cooperation, remediation and aggravating factors

FinCEN records that the firm made no voluntary disclosure. Its cooperation was initially deficient, with delayed and disorganised document productions, and then improved; the firm agreed to tolling agreements and made presentations. The firm had no previous AML enforcement history, though it had faced more than a dozen formal non-AML actions since 2010. It has made improvements, including trade surveillance enhancements, more compliance staff and third-party consultants, but FinCEN gave these limited weight because they were not prompt and their effectiveness was not yet clear.

Practical lessons

• Match controls to the product. If your business trades low-priced, thinly traded securities, your monitoring must be built for manipulation typologies.
• Know the beneficial owner. Offshore partnerships, shell structures and bearer shares should trigger enhanced due diligence.
• Do not wait for the regulator. A SAR filed only after an SEC complaint tells the regulator the monitoring failed.
• Resource the function. Under-staffed, under-trained monitoring teams were a central finding.
• Fix examination findings. Repeated, unremedied exam findings are an aggravating factor. See also our UBS Financial Services case study.

Frequently asked questions

How much did Canaccord Genuity pay?

The penalty is $80 million. After the $40 million credited for SEC and FINRA payments and the $5 million suspended portion, $35 million is payable to the Treasury.

Why does a broker-dealer need an AML programme?

The BSA requires broker-dealers to have AML programmes and to file SARs, just as banks do.

What period does the order cover?

2 March 2018 to 30 June 2024.

What we could not confirm

We read the FinCEN release and consent order through a summarising tool and could not confirm the date the order was issued. The release does not state the relevant period or the undertakings; those come from the order. Please check all figures against the original FinCEN documents.