UBS Financial Services FinCEN Penalty: $125 Million AML Lessons

On 3 August 2026 the US Financial Crimes Enforcement Network (FinCEN) assessed a $125 million civil money penalty against UBS Financial Services Inc. (UBSFS), the US wealth management arm of UBS. FinCEN's news release describes it as the largest penalty ever imposed on a broker-dealer for Bank Secrecy Act (BSA) violations, and calls UBSFS a recidivist, because the firm had already agreed a $14.5 million consent order with FinCEN in December 2018. For compliance professionals, the order is a detailed lesson in what happens when known monitoring gaps are not fully closed. To build your own knowledge, see our CPD courses, which include AML and financial crime training.

This guide summarises what FinCEN found, the control failures it describes, the remedial steps it requires and the practical lessons. It is based on the FinCEN news release of 3 August 2026, FinCEN consent order number 2026-02 and the 2018 FinCEN news release. We read these through a summarising tool and the order text was truncated, so please check any figure against the original documents before you quote it.

What FinCEN found

UBSFS admitted that it willfully violated the BSA. FinCEN says the firm failed to maintain an anti-money laundering (AML) programme that met the BSA's minimum requirements and failed to report suspicious transactions accurately and on time. The order cites the AML programme rules for broker-dealers (31 U.S.C. 5318(h) and 31 C.F.R. 1023.210, including the customer due diligence requirement at 1023.210(b)(5)), the suspicious activity reporting rules (31 U.S.C. 5318(g) and 31 C.F.R. 1023.320) and FinCEN's civil penalty authority (31 U.S.C. 5321(a)(1)). It also cites the equivalent futures-commission-merchant rules at 1026.210 and 1026.320.

The relevant period in the order is 1 January 2019 to 30 June 2023. The order notes that the gap in foreign currency wire monitoring dates back to 2004, and that the 2026 violations followed the December 2018 consent order.

The control failures in detail

Foreign currency wire monitoring

The most striking finding is about wires. The consent order says more than 61,500 foreign currency wires totalling more than $10.5 billion were not appropriately monitored. FinCEN's news release describes the same issue in rounder terms, as over 50,000 wires worth more than $10 billion, so the exact count depends on how and when it is measured; quote the order if you need precision. Sampling in early 2022 found that more than 5% of foreign currency wires were excluded from the automated system and that about 12% lacked counterparty information. FinCEN says UBSFS did not disclose these failings to it; FinCEN found them in its own investigation.

The same weakness was in the 2018 order, which found that the firm's monitoring did not capture sender, recipient or country information, so it could not flag risks such as jurisdiction or politically exposed persons (PEPs). Repeating a known failure is exactly what turns a bad finding into a record penalty.

Customer due diligence and customer risk profiles

The order describes weak due diligence on high-risk customers, including customers with links to Russia, Latin America and Venezuela, and high-net-worth PEPs and their associates. FinCEN's release says the firm did not adequately address source-of-wealth risks or negative news about alleged corruption, fraud or money laundering, even after an affiliate raised concerns. The order also describes an equity syndicate that used shell companies across more than 40 accounts through December 2020. Our Starling Bank case study shows a UK parallel on high-risk customers.

Data governance, transaction monitoring and issue management

The order identifies deficiencies in data governance and transaction monitoring, and in how issues were managed and escalated. Products affected included commodities accounts, retail brokerage accounts and securities-backed loan accounts. This is a useful reminder that AML risk is not limited to banks and that unusual account types need their own monitoring logic.

Late and inaccurate suspicious activity reports

FinCEN says hundreds of suspicious transactions involving tens of millions of dollars were not reported on time or accurately. The order gives examples, including one SAR covering 157 wires of about $20 million. Our suspicious activity reporting guide explains why timeliness and accuracy are as important as the decision to file.

The penalty and how it was structured

The civil money penalty is $125 million. According to the order, $48 million is credited for payments to other US regulators: $8 million to the Commodity Futures Trading Commission, $20 million to the Securities and Exchange Commission and $20 million to the Financial Industry Regulatory Authority. The remaining amount is split into $62 million payable to the US Treasury within ten days of the effective date and $15 million due by 31 May 2028, which may be waived against qualifying expenses from the independent AML programme review. FinCEN's release says up to $15 million of review expenses can be waived if the review and the implementation of recommendations are completed satisfactorily.

Undertakings

UBSFS must carry out two independent reviews. The first is a suspicious activity lookback by an independent consultant, which reports within 180 days; any resulting SARs must then be filed within 90 days, with one 60-day extension available. The second is an independent review of the AML programme covering customer due diligence, transaction monitoring and data governance, prioritising Southwest border and cartel risks, Iran, Venezuela and Russia. The firm must also provide quarterly progress reports.

Cooperation, remediation and aggravating factors

FinCEN acknowledges that UBSFS made substantial document productions, gave regular updates and presentations and engaged a third-party vendor, but says its responses were at times delayed and incomplete. After Russia's 2022 invasion of Ukraine the firm restricted or exited many Russia-related customers. FinCEN also found that the firm's disclosure of the violations was neither timely nor voluntary, and that remediation of the monitoring gaps was not complete until late 2023. FinCEN's Director said, in effect, that repeat violators will face serious consequences. We have paraphrased that statement; please read the release for the exact wording.

Practical lessons for compliance teams

• Close the loop on prior findings. A regulator who has already identified a weakness will treat a recurrence far more seriously. Track every remediation to verified completion.
• Know what is excluded from monitoring. Measure the share of transactions that never reaches your system or lacks counterparty data, and report it.
• Self-report. FinCEN found the wire gap itself. Voluntary and timely disclosure is a mitigating factor.
• Take source of wealth seriously. Negative news and PEP links on high-value customers need a documented, senior decision.
• Cover every product line. Commodities, securities-backed lending and brokerage accounts each have their own typologies.
• Plan for lookbacks. If monitoring failed, expect to be asked to review past activity and file late SARs.

The same themes appear in FinCEN's largest bank case this year, which we cover in our Bank of America consent order guide.

Frequently asked questions

How large was the UBS Financial Services penalty?

$125 million, described by FinCEN as the largest broker-dealer BSA penalty to date. Part of it is credited against payments to the CFTC, SEC and FINRA, so the amount paid to the US Treasury is lower.

Why is the firm called a recidivist?

Because FinCEN had already assessed a $14.5 million penalty in December 2018 for similar failings, including weak monitoring of foreign currency wires.

Does AML law apply to broker-dealers?

Yes. The BSA requires broker-dealers to maintain an AML programme and to file SARs, just as banks do.

What we could not confirm

We read the FinCEN release, the 2026 order and the 2018 release through a summarising tool, and the order text was truncated after the waivers section. We could not confirm the exact effective date of the order or the terms beyond that point. The release and order give slightly different wire counts, as noted above. Please check all figures against the original FinCEN documents.