Done!
2023 BSA/AML Enforcement Actions: Key Lessons for Regulated Businesses
Compliance Strategy

2023 BSA/AML Enforcement Actions: Key Lessons for Regulated Businesses

8 min read
ShareLinkedInXFacebook

FinCEN and federal prosecutors issued significant BSA/AML enforcement actions in 2023. Here's what the year's enforcement activity reveals about where regulators are focused and what compliance failures they're finding.

The 2023 BSA/AML enforcement landscape was defined by several themes: increased coordination between FinCEN, DOJ, and OFAC on multi-agency actions; continued focus on virtual currency businesses; and a notable uptick in enforcement against non-bank financial institutions that had historically operated with limited regulatory scrutiny. The year's enforcement actions provide a clear picture of where regulators are focused and what compliance failures they're finding.

Virtual currency enforcement dominated the headlines in 2023. Several major exchanges and payment processors faced enforcement actions that resulted in penalties ranging from tens of millions to billions of dollars. The common thread across these actions was a failure to implement adequate transaction monitoring and customer due diligence - specifically, a failure to identify and report suspicious activity involving high-risk customers and jurisdictions. The message from regulators was unambiguous: the virtual currency sector is subject to the same BSA standards as traditional financial institutions.

Non-bank mortgage lenders were a significant enforcement focus in 2023, particularly in markets with elevated geographic risk. Several enforcement actions against Florida-based mortgage companies cited failures in source-of-funds verification, inadequate CDD for investment property purchases, and training programs that were either absent or not specific to the mortgage context. These actions confirm that the OFR and federal regulators are coordinating more closely than at any point in the past decade.

MSB enforcement in 2023 continued to focus on structuring facilitation and inadequate SAR filing programs. Several check cashing businesses and money transmitters faced enforcement actions for failing to identify and report structuring activity by their customers. The enforcement actions consistently cited training failures - specifically, front-line staff who could not identify structuring patterns - as a contributing factor. This is a preventable failure that adequate training directly addresses.

The lesson from 2023's enforcement activity is consistent with every prior year: the businesses that face enforcement actions are not failing because of novel or sophisticated compliance challenges. They're failing because of foundational gaps - missing training records, outdated risk assessments, inadequate monitoring procedures, and SAR programs that generate filings without genuine analysis. These are gaps that a competent program review would identify and that a well-designed compliance program would prevent.

Tags

Enforcement ActionsBSA PenaltiesCompliance RiskFinCEN2023 Compliance
ShareLinkedInXFacebook
EV
Elena Vargas

BSA/AML Principal Consultant · Soflo Consulting

33 more articles
Soflo Consulting

Elena Vargas is a BSA/AML Principal Consultant at Soflo Consulting with over a decade of experience building and auditing compliance programs for regulated businesses across the United States. She specializes in enforcement action remediation, risk assessment development, and examination preparation for money services businesses, mortgage lenders, and fintech companies.

BSA Risk AssessmentEnforcement Action RemediationExamination PreparationAML Policy Development
In This Article

5 sections

Key Takeaways

  • 1Virtual currency enforcement dominated 2023 - transaction monitoring and CDD failures were the primary findings
  • 2Non-bank mortgage lenders in Florida faced increased enforcement for source-of-funds and CDD failures
  • 3MSB enforcement focused on structuring facilitation and inadequate SAR filing programs
  • 4Training failures - specifically, staff who cannot identify red flags - were cited across multiple enforcement actions
  • 5Enforcement actions consistently result from foundational gaps, not novel compliance challenges

Need Expert Guidance?

Put these insights into action. Schedule a free consultation with a Soflo Consulting compliance specialist.

Stay Ahead of Compliance

Get FinCEN updates, BSA/AML guidance, and federal compliance news delivered to your inbox - no fluff.

No spam. Unsubscribe any time.

Category

Compliance Strategy
Continue Reading

You Might Also Like

Handpicked articles to deepen your compliance knowledge

Browse all insights
What Happens If Your Company Fails an AML Audit?
Compliance Strategy
EV
Elena Vargas
9 min read

What Happens If Your Company Fails an AML Audit?

Most business owners think of an AML audit failure as a bureaucratic inconvenience - a findings letter, some corrective actions, a follow-up visit. The reality is considerably more serious, and the consequences can unfold over years. Here's exactly what regulators do when they find a program with serious deficiencies.

March 25, 2026Read article
OFAC Sanctions Compliance Is No Longer Just for Banks: What Schools, Businesses, and Professional Services Can Learn from IMG Academy's $1.7M Settlement
Compliance Strategy
AG
Argenis Galez
10 min read

OFAC Sanctions Compliance Is No Longer Just for Banks: What Schools, Businesses, and Professional Services Can Learn from IMG Academy's $1.7M Settlement

Most businesses assume OFAC sanctions compliance is a bank problem. IMG Academy's $1.7 million settlement proves otherwise. When a world-renowned sports academy gets penalized for accepting tuition payments from sanctioned-country nationals, it signals that OFAC's enforcement reach has expanded far beyond financial institutions - and that any business accepting international payments needs to rethink its exposure.

May 15, 2026Read article
What Happens After a Bad AML Program Review: A Recovery Checklist
Compliance Strategy
EV
Elena Vargas
10 min read

What Happens After a Bad AML Program Review: A Recovery Checklist

You had a review. The report came back with findings - or you have since realized the review itself was inadequate. Either way, you are now in recovery mode. This is the step-by-step checklist for what to do next: how to assess the damage, prioritize the fixes, document the remediation, and rebuild a program that will hold up the next time someone looks at it.

May 12, 2026Read article

Explore the full Insights library

50+ articles on BSA/AML compliance, FinCEN requirements, and industry-specific guidance

View all articles
Talk with Us