The Lawxy Times

Author Image
Venkatesh D

Senate Calls for DOJ Criminal Probe of Bank of America

On Oct. 29, 2026, Senate Banking Committee ranking member Elizabeth Warren publicly requested that the Department of Justice open a criminal investigation into Bank of America. The request follows the Treasury Department’s $1.2 billion civil penalty for alleged anti‑money‑laundering violations under the Bank Secrecy Act. The immediate effect is heightened scrutiny of BofA’s AML compliance program and potential exposure to criminal liability. It signals that congressional pressure can trigger law‑enforcement action where civil sanctions were previously deemed sufficient.

Full News Breakdown

The Treasury’s enforcement action against Bank of America for AML failures prompted criticism from lawmakers who argued the civil sanction does not adequately deter misconduct. Senator Warren asserted that the bank’s systemic deficiencies merit a criminal probe, while Treasury and the bank maintain that the civil penalty addresses the violations. Warren issued a formal request for the Justice Department to open a criminal investigation.

  • Date: Oct. 29, 2026

  • Statutes Cited: Bank Secrecy Act (31 U.S.C. § 5311); Money‑Laundering Statute (18 U.S.C. § 2339B)

  • Key Provisions: 31 U.S.C. § 5311; 18 U.S.C. § 2339B

  • Primary Legal Issue: Whether a congressional demand can compel the DOJ to pursue a criminal investigation after a civil AML penalty.

  • Petitioner Arguments: Warren asserted that BofA’s AML controls were deficient and that a civil fine does not deter misconduct, urging a criminal probe.

  • Respondent Arguments: Treasury Department maintained that the $1.2 billion civil penalty adequately addressed the violations; BofA has not publicly responded.

  • Practical Outcome: DOJ received a formal request to consider a criminal investigation; BofA faces potential subpoenas and increased enforcement risk.

How Does This Affect You?

Before this development, practitioners were unsure whether civil AML penalties could serve as a springboard for criminal prosecution. The Senate’s request clarifies that congressional pressure can prompt the Justice Department to open a criminal probe when systemic AML failures are identified. Consequently, banks must treat AML compliance as potentially criminal, not merely civil, and adjust risk‑management frameworks accordingly.

For Lawyers & Advocates

  • Amend client AML policies to incorporate explicit procedures for responding to DOJ subpoenas under 18 U.S.C. § 2339B, because a criminal probe now looms after a civil penalty.

  • Draft or revise SAR escalation clauses in financing agreements to require immediate notice to lenders if a criminal investigation is launched, protecting creditor interests.

  • Leverage the Senate request as persuasive authority when arguing for reduced penalties in future enforcement negotiations, citing the heightened congressional concern.

  • Advise senior officers that personal liability exposure now includes possible imprisonment under the money‑laundering statute, prompting the need for individual compliance certifications.

  • Update ongoing merger‑related diligence checklists to include a “criminal AML investigation risk” line item, ensuring that buyers assess exposure before closing.

For Law Students

This case teaches that congressional oversight can act as an independent catalyst for criminal enforcement, expanding the scope of legislative influence beyond statutory interpretation. The core doctrine involves the interplay between legislative requests and prosecutorial discretion under the money‑laundering framework.

The decision is particularly relevant for the study of:

  • White‑collar criminal law

  • Financial regulatory compliance

  • Administrative law and agency discretion

  • Corporate governance and fiduciary duties

Comparable cases include United States v. HSBC Bank USA (2020, D.D.C.) and United States v. Standard Chartered (2019, S.D.N.Y.). Comparing them shows how courts distinguish between civil settlements and the threshold for criminal escalation, illuminating the doctrinal line between remedial penalties and punitive prosecution.

For Businesses

  • Large banks must convene a cross‑functional AML review before the next board meeting to certify that all SAR processes can withstand a DOJ criminal subpoena.

  • FinTech platforms handling high‑volume transfers should revise their transaction monitoring documentation to include a “criminal investigation response” protocol, or risk forced shutdowns and forfeiture.

  • Money‑service businesses need to upgrade their internal audit trails for suspicious activity reporting, because deficiencies could now trigger criminal referrals beyond civil fines.

Key Takeaways

  • Congressional demand now constitutes a recognized trigger for the Justice Department to consider criminal prosecution of AML failures after a civil penalty.

  • Compliance officers must embed criminal‑investigation response plans into AML programs, including subpoena protocols and officer certifications.

  • Regulators can coordinate with law‑enforcement agencies to pursue criminal charges when systemic AML deficiencies are identified, expanding the enforcement toolbox.

  • Watch for FinCEN’s “enhanced criminal referral criteria” rulemaking slated for early 2027, which will codify the standards for DOJ referrals.

  • In‑house counsel should update AML risk‑assessment matrices before the next quarterly board meeting to address the newly articulated criminal exposure.

Source: Warren Calls For BofA Criminal Probe After $1.2B AML Fine

Secure by design. Built for enterprise.

More About Security

Lawxy AI is designed with encrypted infrastructure, access controls, audit visibility, and enterprise-grade security standards.

SOC 2 Type I, II

GDPR

ISO 27001

VAPT Tested

See Legal Intelligence in Action?

LAWXY

Legal Intelligence Layer Businesses Rely On

Copyright© 2026 Lawxy AI. All Rights Reserved.

Secure by design. Built for enterprise.

More About Security

Lawxy AI is designed with encrypted infrastructure, access controls, audit visibility, and enterprise-grade security standards.

SOC 2 Type I, II

GDPR

ISO 27001

VAPT Tested

See Legal Intelligence in Action?

LAWXY

Legal Intelligence Layer Businesses Rely On

Copyright© 2026 Lawxy AI. All Rights Reserved.

Secure by design. Built for enterprise.

More About Security

Lawxy AI is designed with encrypted infrastructure, access controls, audit visibility, and enterprise-grade security standards.

SOC 2 Type I, II

GDPR

ISO 27001

VAPT Tested

See Legal Intelligence in Action?

LAWXY

Legal Intelligence Layer Businesses Rely On

Copyright© 2026 Lawxy AI. All Rights Reserved.