The Relapse: UBS, FinCEN, and the Business of Swiss Compliance
The largest anti money laundering penalty ever imposed on a brokerage has gone to a bank that promised reform once before, in writing. Medicine has a word for this. So, now, does FinCEN. | Robert Nogacki, August 10, 2026
Sometime between 2019 and 2021, in the payments operations department of UBS Financial Services, somebody shortened a system label from “FX RECEIVED” to “FX RCVD.” Four characters, saved. The regulatory record notes the change and assigns it no motive; it reads like housekeeping, and it may well have been housekeeping. It is also, if one wished to blind a surveillance system without ever touching the surveillance system, more or less what the manual would prescribe: rename the feed, rename it quietly, and do it in a shop that keeps no exception queue, no mechanism for flagging the transactions that never arrive. Nobody noticed for years, which was the whole elegance of the arrangement, whoever’s elegance it was. The camera worked beautifully. It simply had no view of certain hallways, and no way of knowing that hallways were missing. Compliance, undone by an abbreviation; or by something wearing an abbreviation’s clothes. The record permits both readings and confirms neither.
That miniature comes from the official statement of facts to which UBS Financial Services Inc., the American brokerage arm of UBS, admitted in writing on Monday, August 3rd, in a consent order with FinCEN, the bureau of the U.S. Treasury that polices financial crime. The penalty: $125 million, the largest civil fine ever imposed on a broker dealer under the Bank Secrecy Act, the country’s principal statute against money laundering. The bank conceded that its violations were “willful,” a word that in the civil grammar of the statute demands no malice; reckless disregard will do, a settled preference for not knowing. It is worth noting who got the confession: the parallel settlements with the S.E.C. and FINRA were resolved without admissions, in the industry’s customary dialect of neither confirming nor denying. FinCEN alone insisted on the word, and got it.
The Relapse
To feel the weight of the document, rewind to December of 2018. UBS Financial Services had just paid FinCEN $14.5 million (of which just $5 million went to the Treasury; the balance was credited to parallel regulators) for deficiencies in its AML program, among them a failure to monitor foreign currency wires, and had assured the regulator that an automated surveillance system would be running by the middle of 2019. FinCEN closed that first file on a note of optimism, commending the bank’s “commitment and ability” to correct the issues. The 2026 order reads as the peer review of that commendation. The system went live in March of 2021. In the interim, the work of “monitoring” fell to a report assembled by hand: a dozen steps, four separate systems, data pasted into a spreadsheet, generated quarterly at best. The president of UBS’s American holding company “insisted” that the checks run monthly instead. They never did; the report retired at quarterly, undefeated. An internal slide deck from January, 2019, one month after the settlement was signed, conceded that the report remained, in the regulators’ phrase, “still not effective,” and the staff who fed it described its underlying data as “incomplete and very messy,” which, as internal candor goes, was the high point. For nearly two years, the code inside that spreadsheet systematically undercounted the value of wires, so hundreds of transactions never tripped an alert; the employees who eventually discovered the flaw took no immediate steps to tell anyone.
When the new system finally arrived, it drank from an incomplete feed. In a sample drawn from a single month in early 2022, more than five per cent of foreign currency wires never reached the monitor at all, and roughly twelve per cent arrived stripped of counterparty data, which is to say stripped of the one thing a monitor exists to see. The totals: across more than four years, upward of 61,500 foreign currency wires, worth more than $10.5 billion, moved through the firm without adequate surveillance. FinCEN notes that the gap dates to 2004. It is old enough to vote.
The customer files supply the color. A Russian oligarch, described in the order as a close associate of Vladimir Putin, generated thousands of adverse media hits across more than three hundred articles at onboarding; a later periodic review surfaced another hundred and fifty, of which the bank read the first twenty five. The suggestion that his fortune traced to the “loans for shares” privatizations of the nineties was waved off as “only speculations.” A 2012 report of a ship, registered to a company he ultimately owned, docking with weapons for a dictatorship was noted during review and taken no further; so was his stake in a firm actively invested in Iranian digital assets. The file grew fat; the reading stayed thin. When reporters connected him to a scheme said to have moved billions of euros offshore, his financial adviser reassured the compliance department that the client “simply doesn’t have the funds,” which may be the first time in the history of private banking that a client’s innocence was established by attesting to his poverty. His accounts carried a ban on wires to third parties; roughly three quarters of the more than $60 million that left them went to third parties.
Elsewhere in the file, an American professor moved to Russia in 2013 and took a post at a technical university linked to a man later placed under U.S. sanctions. In 2019, he added a Russian phone number to his profile; he logged in from Russian territory thirteen times out of fourteen; for years, the only money entering his account came from his own account at a bank in Russia. UBS updated his risk profile more than eight years after the move, during a sweep of its Russia book that followed the invasion of Ukraine. For completeness: a small circle of the same people, among them a former UBS financial adviser, spent more than a decade opening upward of forty accounts for shell companies across various branches, disguising outside financing of allocations in public offerings; one of these customers doubled his declared income in the space of four months and grew his net worth from $10 million to $40 million, prompting no questions.
The Latin American files read the same way, only warmer. One customer, an investment vehicle funded by a onetime senior official of a Latin American government, wired money to a company presenting itself as the marketing arm of a Mexican fruit and vegetable farm; the farm, per the order, functioned as a depository for political campaign financing, a detail the bank’s belated reports to the authorities omitted. Another customer spent four years moving $57 million in a loop, out of a money market fund, through one commodities account, then a second, then back into the very same fund: exercise with the cardiovascular profile of a laundromat. A third was the subject of a Mexican arrest warrant; by the time the bank got around to examining his wires, so much time had passed that it could no longer identify who had sent the money, and said as much in a report that arrived years late and half blank.
The penalty itself repays close reading. Of the $125 million, $48 million takes the form of parallel fines, $20 million each to FINRA and the S.E.C. and $8 million to the C.F.T.C., which FinCEN credits against its own bill; $62 million goes to the Treasury at once; and the final $15 million is deferred to May 31, 2028, with a proviso that FinCEN may waive it up to the documented cost of an independent review of the bank’s AML program. Part of the sentence, in other words, is payable in consultants’ invoices. The fine comes with a rewards program; it is not the bank’s first. UBS said that it coöperated with regulators and has made significant investments to strengthen its program in line with leading industry practices. Both statements are probably true. They were true in 2018 as well.
A Quarter Century of Treatment
The August settlement is not an incident; it is an entry in a file that spans a generation. In February, 2009, UBS paid $780 million and handed the I.R.S. the names of some 4,450 American clients, purchasing a deferral of prosecution for its role in hiding their income; three years later, the banker who blew the case open, Bradley Birkenfeld, collected a $104 million award from the I.R.S., having first served his own prison sentence. In 2011, a single London trader, Kweku Adoboli, burned through $2.3 billion before anyone above him noticed, a lapse in internal controls that the British regulator priced at £29.7 million (then $47.6 million). In December, 2012, the manipulation of LIBOR cost the group about $1.5 billion, and a Japanese subsidiary pleaded guilty to fraud. In May, 2015, the Justice Department concluded that the foreign exchange scandal violated the terms of the LIBOR accord, tore it up, and extracted a guilty plea from the parent company, UBS AG, itself. Recidivism, as a formal finding, is eleven years old at this bank.
France wrote its own chapter, and gave it the best costumes. Prosecutors described UBS bankers working the country at hunting parties, opera intermissions, and the French Open, carrying business cards without logos; the bank replied that it merely organized social events for clients, an explanation with the disadvantage of being available to every intelligence service as well. In 2019, a Paris court imposed €3.7 billion in fines, the largest in French history at the time, and €800 million in damages for illegally soliciting clients on French soil and laundering the proceeds of their tax fraud; an appeals court restructured the sanction in 2021; in November, 2023, the Cour de Cassation fixed the guilt for good, unlawful solicitation and aggravated money laundering, while sending the penalty back down for recalculation; and in September, 2025, the parties settled for €835 million. From €4.5 billion to €835 million: the sanction shrank by more than four fifths, which makes the legal department one of the group’s better performing profit centers. Add the FinCEN settlements of 2018 and 2026, and the rhythm is unmistakable: a serious penalty every two or three years, each with its bundle of remedial undertakings, the nonperformance of which opens the next chapter. The current order says so in so many words: the fix promised in 2018 was not delivered on time, and the regulator learned of the delays through its own investigation, not from the bank.
The Credit Suisse Dowry
Since 2023, UBS has also answered for the past of Credit Suisse, and the past is symmetrical. In 2014, Credit Suisse pleaded guilty to helping American clients evade taxes and paid $2.6 billion. In May, 2025, Credit Suisse Services AG, by then a UBS company, pleaded guilty again: for breaching the 2014 agreement and concealing a further $4 billion and more, it paid $511 million. UBS, a recidivist in its own right, had inherited a recidivist, undertakings and all.
The domestic thread is the most eloquent. In June, 2022, Switzerland’s Federal Criminal Court convicted Credit Suisse of organizational failures that had allowed a Bulgarian cocaine ring to launder its proceeds through the bank, some of them delivered in suitcases of cash; it was the first criminal conviction of a major Swiss bank ever handed down by a Swiss court. In November, 2024, the court’s appeals chamber vacated the verdict and acquitted the bank: the banker convicted alongside it had died, and without a final judgment on her conduct the bank’s liability could not be examined without violating the presumption of innocence owed to the dead. The federal prosecutor appealed the acquittal; in March of this year, the appellate judges cleared the bank once more. The running tally: the state indicted a bank, convicted it, lost the conviction to a funeral, appealed, and lost again. Every step procedurally immaculate; the sum a small miracle of subtraction. The only domestic criminal conviction of a big Swiss bank in history now exists strictly in the past tense. For proportion, recall Wegelin & Co., the country’s oldest private bank, founded in 1741: for helping conceal $1.2 billion, it pleaded guilty in 2013, paid $57.8 million, and ceased to exist. The small bank dies; the big bank pays a subscription. That is a judgment, not a finding, but the numbers decline to contradict it.
The Case for Zurich
Fairness requires laying out the other side’s best arguments before weighing them. First, scale: a global brokerage processes hundreds of millions of transactions a year, and transaction monitoring is an engineering problem in which perfect coverage does not exist; 61,500 wires in four plus years is a fraction of a fraction of the volume. Second, this is not a Swiss disease but a disease of big banking: HSBC paid nearly $2 billion in 2012 over cartel money, TD Bank pleaded guilty in 2024 and paid more than $3 billion, and the Estonian branch of Danske Bank, through which some €200 billion of suspicious money flowed, demonstrated that a Scandinavian reputation scrubs no more easily than any other. Third, UBS assisted the investigation, retained an outside consultant of its own accord, and reviewed and cut its Russia book after the invasion. Fourth, American jurisdiction is exercised extraterritorially; the fines flow to the American Treasury; the burden falls more often on foreign banks than on local ones; and a settlement is frequently a rational purchase of peace rather than a measure of guilt.
Each argument has weight; none suffices. Scale explains stray oversights; it does not explain eight years of a repair that had been diagnosed, promised in writing, and priced. The ubiquity argument is true and therefore alarming, since it describes an industry equilibrium in which the fine becomes a quiet line item in the price of banking. Assistance after the subpoena is not disclosure before it; FinCEN records that it learned of the crucial lapses on its own. And the charge of American overreach runs into an awkward question: who else would do the disciplining? FINMA, the Swiss supervisor, lacked the power throughout this entire period to fine a bank one franc; the authority to impose monetary penalties, along with a regime of personal accountability for senior managers, appeared only in the Federal Council’s package of June, 2025, transmitted to parliament this past April and still unenacted. The one domestic criminal conviction just evaporated, twice. FinCEN’s director, Andrea Gacki, promises that recidivist institutions “will face severe repercussions.” The repercussion on offer computes as follows: UBS Group reported $49.6 billion in revenue for 2025, about $136 million per sunrise, on a balance sheet of $1.62 trillion; the record fine is less than one of those sunrises. A rational board can, under these conditions, treat compliance as a licensing fee rather than as the institution’s nervous system. This is an analysis of incentives, not an accusation against individuals; incentives, however, operate regardless of anyone’s intentions.
The present moment supplies its own parenthesis. In the very week this piece appears, a joint economics committee of the Swiss parliament is meeting (sessions set for August 10th, 11th, and 31st) to consider diluting the government’s demand that UBS back its foreign subsidiaries with capital at full value: Reuters reports backing on the order of seventy or eighty per cent, industry press adds a variant substituting convertible bonds for part of the equity, trims that would shave the additional requirement, estimated at $20 billion to $22 billion, toward roughly $15 billion, depending on the variant. A week after admitting, in writing, to willful violations, the bank is negotiating the size of its own airbag. The two files are formally unrelated. The sequence speaks anyway.
A Footnote to an Obituary
In January, I updated an essay of mine on the death of Swiss banking secrecy, arguing that the sector had survived the loss of its founding product by changing products: where it once sold discretion, it now sells compliance, supervisory rigor, and stability, and a record 9.2 trillion Swiss francs under management across Swiss banking as a whole seemed to vindicate the strategy. The thesis still holds. The FinCEN order appends a footnote to it: compliance as market positioning and compliance as a working system are different goods, and the customer has no way to tell them apart before the damage is done. Private banking is what economists call a credence good; its quality is invisible in the brochure and in the fee schedule, and becomes visible only in the record of a proceeding, usually somebody else’s. A market that sells trust, and settles its accounts once every few years before a foreign regulator, will reliably deliver less trust than it invoices.
What the Client Buys
A few conclusions from practice. Choosing a bank means buying its compliance history, encumbrances included: the penalties land on the institution, but the operating costs land largely on customers, in longer questionnaires, in demands for documents a decade old, in freezes “pending clarification,” and in the wholesale termination of relationships whenever the bank sheds risk by category, as it did with its Russia book in 2022. For a client in Warsaw, where I practice, discretion was never on the menu anyway: since 2018, the automatic exchange of tax information has delivered Swiss account data to Poland’s revenue administration as a matter of routine, and the same holds across more than a hundred jurisdictions; choosing a bank today means choosing service quality and an institutional risk profile, not a veil. Documentation of one’s source of wealth is best assembled before the bank asks, because after settlements like this one the questions grow longer and the patience shorter; the client with a ready file clears the tightened procedures in weeks rather than quarters. And a terminated relationship or a frozen account is not a verdict; it is the position of a counterparty to a contract, sometimes justified, sometimes excessive, and contestable like any other.
The diagnosis from Washington is relapse. The treatment is an independent consultant whose fee may be deducted from the fine. The prognosis is chronic, with remissions timed to examinations; symptoms manageable, appetite excellent. The patient, meanwhile, feels wonderful, and will spend the rest of the month asking parliament to lower the dose.
Facts and law as of August 10, 2026. The findings concerning UBS Financial Services are drawn from the consent order announced by FinCEN on August 3, 2026, together with the statement of facts admitted by the bank; the remaining matters are cited from the publicly available judgments, settlements, and releases hyperlinked in the text. Where the record is silent, notably on the motive behind a certain abbreviation, the text says so.
Robert Nogacki – licensed legal counsel (radca prawny, WA-9026), Founder of Kancelaria Prawna Skarbiec.
There are lawyers who practice law. And there are those who deal with problems for which the law has no ready answer. For over twenty years, Kancelaria Skarbiec has worked at the intersection of tax law, corporate structures, and the deeply human reluctance to give the state more than the state is owed. We advise entrepreneurs from over a dozen countries – from those on the Forbes list to those whose bank account was just seized by the tax authority and who do not know what to do tomorrow morning.
One of the most frequently cited experts on tax law in Polish media – he writes for Rzeczpospolita, Dziennik Gazeta Prawna, and Parkiet not because it looks good on a résumé, but because certain things cannot be explained in a court filing and someone needs to say them out loud. Author of AI Decoding Satoshi Nakamoto: Artificial Intelligence on the Trail of Bitcoin’s Creator. Co-author of the award-winning book Bezpieczeństwo współczesnej firmy (Security of a Modern Company).
Kancelaria Skarbiec holds top positions in the tax law firm rankings of Dziennik Gazeta Prawna. Four-time winner of the European Medal, recipient of the title International Tax Planning Law Firm of the Year in Poland.
He specializes in tax disputes with fiscal authorities, international tax planning, crypto-asset regulation, and asset protection. Since 2006, he has led the WGI case – one of the longest-running criminal proceedings in the history of the Polish financial market – because there are things you do not leave half-done, even if they take two decades. He believes the law is too serious to be treated only seriously – and that the best legal advice is the kind that ensures the client never has to stand before a court.
