Block has reached a preliminary settlement with the US Department of Justice, potentially paying $764 million for money laundering failures. While details of the underlying conduct and specific control failures aren't yet clear, the size of this penalty sends a strong message. Here's how your fintech compliance team should respond.
The Challenge
A prominent fintech faces a potential $764 million payment to resolve money laundering failures with the DOJ. The term "preliminary" is key; terms may change before a settlement is final. The real question for you is: if regulators examined your AML/CFT Framework tomorrow, what would they find? A penalty of this magnitude shows that enforcement against fintechs isn't limited to minor fines or modest consent orders.
Operating Environment and Constraints
Fintechs face unique pressures that can lead to AML failures:
- Growth Outpaces Controls: Onboarding speed is often prioritized, with Customer Due Diligence, Name Screening, and Transaction Monitoring Rules developed after the fact.
- Obligations Don't Scale Down: Fintechs offering payments or crypto-related products must comply with Bank Secrecy Act requirements, including risk-based programs and Suspicious Activity Report filings.
- Divided Leadership Attention: In founder-led firms, product and growth can overshadow compliance unless someone with authority advocates for it.
- Increased Regulatory Attention: A DOJ resolution indicates serious treatment of these failures, warranting criminal-division involvement. Review final settlement documents for the government's framing.
Evaluating Your Approach
While specific details of Block's approach remain unknown, use this situation to evaluate your own practices. Regulators consistently examine these areas in money laundering cases:
- Risk Assessment: Ensure your risk assessment reflects your products, customer base, and geographies. It should be updated with new launches.
- Customer Due Diligence: Demonstrate that onboarding controls vary by Customer Risk Rating, with enhanced due diligence for higher-risk customers.
- Transaction Monitoring Rules: Tune rules to your typologies, document rationale for thresholds, and ensure alerts are investigated and escalated promptly.
- Suspicious Activity Report Decisioning: Maintain a documented path from alert to FinCEN SAR (Form 111) filing, including reasons for not filing.
- Name Screening: Consistently screen against Designated Persons and Entities, and demonstrate Freezing Without Delay when required.
Results and Metrics
The potential $764 million payment is the only measurable outcome. This figure highlights the financial impact of compliance failures. The cost of building and maintaining controls is predictable, while the cost of failure is not. Use this asymmetry to argue for compliance investment with your board.
Lessons for Fintechs
While it's inappropriate to speculate on Block's internal decisions, fintechs can learn from this situation:
- Sequence Controls Ahead of Growth: Ensure adequate monitoring and due diligence before launching new products or entering new markets.
- Make Accountability Visible: Compliance culture is reflected in who can stop a launch, the independence of compliance reporting, and the resources allocated to compliance relative to revenue growth. Regulators look for evidence that senior management understood and addressed risks.
Takeaways for Your Team
- Use the Settlement as a Stress Test: Conduct a gap assessment of your AML/CFT Framework against the five control areas, and assign owners to each gap.
- Document Decisions, Not Just Outcomes: Keep written records of your rationale for tuning, declining to file, and risk acceptance.
- Involve Compliance in Product Decisions: Ensure compliance has independence and authority in decision-making.
- Present the Asymmetry Argument to Leadership: Compare the potential $764 million outcome to a controlled annual compliance budget.
- Wait for Final Terms Before Drawing Conclusions: Monitor for the final agreement and update your controls based on documented facts.
In summary, a major fintech may face a $764 million penalty for money laundering failures. Assume the same level of scrutiny applies to your team and prepare accordingly.
