In October 2024, TD Bank became the first US bank ever to plead guilty to conspiracy to commit money laundering. $3.09 billion in combined penalties. $18.3 billion in suspicious transactions processed. Three criminal networks operating simultaneously through the same institution.
The scale gets the headlines. The failures are what practitioners should be studying.
---
**What actually went wrong**
Three distinct networks moved money through TD accounts at the same time; a Colombian drug trafficking network (~$100M), a fentanyl proceeds network, and the Da Hua Xu network ($653M via shell companies and structured cash deposits). None of them were using particularly sophisticated methods. They didn't need to.
**Failure 1 — Transaction monitoring frozen in time**
TD's TM system hadn't been meaningfully updated since 2014. Hundreds of thousands of transactions fell completely outside monitoring parameters, not because the patterns were novel, but because nobody updated the rules. A decade of deferred maintenance, $18B in suspicious volume.
**Failure 2 — Internal incentives suppressed escalation**
When analysts did flag suspicious activity, the bank's internal culture, which the DOJ characterized as prioritizing "convenience over compliance", actively worked against SAR filings. Customer retention mattered more than escalation. That's not a training problem. That's a governance problem.
**Failure 3 — Bribery at the branch level**
Five TD branch employees were bribed with approximately $57,000 in gift cards and cash to open fraudulent accounts and suppress escalations. That's not an isolated rogue actor situation, that's a cultural environment that made bribery feel like a viable option.
**Failure 4 — No meaningful independent testing**
The consent orders make clear that TD's independent testing function wasn't catching any of this. Either the testing wasn't genuinely independent, wasn't sufficiently scoped, or the findings weren't being escalated effectively.
**Failure 5 — The Fed noticed what the fines couldn't fix**
The Federal Reserve imposed an asset cap on TD Bank, only the second time that penalty has been applied to a major US bank. An asset cap isn't a fine. It's an operational constraint that limits growth until the Fed is satisfied with remediation. That's the penalty that actually changes board-level behavior.
---
**The "convenience over compliance" problem**
That phrase, appearing explicitly in the DOJ consent order, is worth sitting with. It's not just a characterization of TD Bank. It's a signal about how the DOJ intends to frame AML failures going forward.
If your institution's SAR filing volumes don't correlate with its risk profile, if escalation rates are anomalously low, if frontline staff understand that customer retention matters more than escalation, that pattern now has a name in federal enforcement documents. And that name is going to show up in the next examination.
---
**Discussion question:** The TM system not being updated for a decade is the detail that stands out most to us. In your experience, what's the actual barrier to keeping TM rules current; is it budget, competing priorities, model validation requirements, or something else?
---
*We cover enforcement actions like this one every Tuesday in The AML Brief — free newsletter at theamlbrief.beehiiv.com if this kind of breakdown is useful to you.*