FinCEN’s Record $80 Million AML Penalty Against Canaccord Genuity

Summary of Key Facts

• Agency: S. Treasury’s Financial Crimes Enforcement Network (FinCEN)
• Target: Canaccord Genuity LLC (broker-dealer)
• Outcome: $80,000,000 civil money penalty for willful Bank Secrecy Act (BSA) violations
• Why it matters: FinCEN called it the largest BSA penalty ever imposed against a broker-dealer
• Core failures alleged: Under-resourced AML program, weak transaction monitoring, inadequate customer due diligence, and failures tied to correspondent accounts for foreign financial institutions
• Suspicious Activity Reports: FinCEN says Canaccord failed to file at least 160 SARs (suspicious activity reports) tied to dozens of OTC securities and thousands of suspicious underlying transactions
• Time period covered in the Consent Order: March 2, 2018 through June 30, 2024
• Related resolutions: The Consent Order references $20 million each to FINRA and the SEC as part of parallel investigations, with credits applied under FinCEN’s penalty structure

Why This Enforcement Action Is a Big Deal

On March 6, 2026, the U.S. Treasury Department’s Financial Crimes Enforcement Network (FinCEN) announced a record-setting $80 million civil money penalty against Canaccord Genuity LLC for willful Bank Secrecy Act (BSA) violations. According to FinCEN, the case involved serious anti-money laundering (AML) failures, including an under-resourced AML program, inadequate customer due diligence, weak transaction monitoring, and failures to file at least 160 Suspicious Activity Reports (SARs). For employees inside broker-dealers, compliance departments, and financial institutions, the action is a major reminder that AML whistleblowers can play a critical role in exposing securities-related financial crime.

This enforcement action has sprawling implications for obligations of record keepers and major economic implications for potential whistleblower rewards. Broker-dealers are gatekeepers to the capital markets, and when anti-money laundering controls fail, securities fraud, market manipulation, suspicious over the counter (OTC) trading, and cross-border financial crime can move through the system undetected, creating safety zones for criminals. That is one reason FinCEN enforcement actions, Bank Secrecy Act whistleblower reports, and AML compliance failures have become increasingly important in the financial sector.

What FinCEN Alleged

FinCEN’s announcement and the accompanying Consent Order describe multiple compliance failures. Among the themes:

An AML program that did not match the Firm’s Risk Profile

FinCEN pointed to alleged shortcomings in implementing and maintaining an AML program that met BSA requirements, including internal controls to detect suspicious activity, meaningful risk-based customer due diligence and calibrated monitoring attuned to actual risk profile.

The practical takeaway is that an AML program is not just reading words on a written policy binder but must actually have some substantive implementation. Regulators expect staffing, training, surveillance design, escalation pathways, and governance aligned with the firm’s products, customer base, and trading activity.

Missed red flags and missing SARs

FinCEN states that Canaccord failed to file at least 160 SARs relating to dozens of over-the-counter securities and thousands of underlying suspicious transactions. For AML professionals and whistleblowers, SAR failures are often one a telltale indicator of a systemic compliance breakdown. SARs matter because they are one of the key mechanisms that move actionable intelligence from financial institutions to law enforcement. A breakdown in SAR detection or escalation may become a systemic failure, especially if repeated over years.

Customer due diligence gaps that can compound risk

FinCEN emphasized alleged customer due diligence (CDD) failures, including onboarding high-risk customers reportedly tied to illicit actors and fraud-related activity. FinCEN also cited due diligence issues involving correspondent accounts for foreign financial institutions. In practice, these types of CDD failures can allow suspicious trading, microcap fraud, and foreign-linked financial misconduct to continue without timely escalation.

Regulatory feedback that did not lead to timely remediation

A point that often drives enforcement severity is what happened after the regulator flagged the issue. FinCEN’s narrative stresses the importance of prompt corrective action when deficiencies are identified and highlights the consequences of delays in meaningful remediation.

What the Bank Secrecy Act Expects From Broker-Dealers

The Bank Secrecy Act framework, as implemented through FinCEN regulations, pushes broker-dealers toward a risk-based compliance posture. For broker-dealers, AML program expectations commonly include:

• Written policies, procedures, and internal controls reasonably designed to achieve compliance
• Independent testing of those policies and controls
• Designation of responsible AML personnel
• Ongoing training
• Risk-based customer due diligence and ongoing monitoring designed to identify and report suspicious transactions

Why This Matters for AML Whistleblowers

Large AML and Bank Secrecy Act enforcement actions often begin with insiders who recognize that either the firm does not have an actual policy or alternatively, the firm’s written policies do not match what is happening in practice. Employees in compliance, surveillance, operations, onboarding, trading, and risk functions may see persistent gaps long before regulators act.

Potential warning signs may include:

• surveillance alerts routinely closed without meaningful investigation
• pressure not to escalate suspicious activity
• repeated delays or failures in SAR decision-making
• approval of high-risk customers without a documented rationale
• backlogs caused by chronic understaffing
• repeated examination findings with weak or cosmetic remediation

In the right circumstances, individuals who report original information may qualify for an award through the FinCEN Whistleblower Program of up to 30% of what the government recovers.

The FinCEN Whistleblower Program and Potential Awards

FinCEN’s press release highlighted its Whistleblower Incentive Program. Under the statute referenced by FinCEN, individuals in the United States or abroad may be eligible for awards if their information leads to a successful enforcement action with monetary penalties exceeding $1,000,000 and other requirements are met.

Not every compliance concern becomes a whistleblower matter. But this enforcement action illustrates the kinds of program failures FinCEN says it may pursue, especially where they intersect with investor harm and fraud in the securities markets.

How a Whistleblower Lawyer Can Help Report AML Violations

Financial crime enforcement often depends on insiders who understand the difference between a firm’s written AML policies and its real-world practices. An experienced whistleblower attorney can help evaluate whether the conduct may implicate the Bank Secrecy Act, suspicious activity reporting obligations, anti-money laundering requirements, or related securities laws.

In AML whistleblower matters, strategy matters. The way a concern is documented, framed, and supported can affect whether regulators treat it as a serious, credible submission. That is particularly true where the issues involve SAR failures, weak surveillance, inadequate customer due diligence, suspicious OTC activity, or repeated internal warnings that were ignored.

Brown, LLC represents whistleblowers in high-stakes fraud matters. If you have information about possible AML violations, BSA compliance failures, or suspicious trading activity, a confidential consultation can help you assess your options.

Frequently Asked Questions About FinCEN and AML Whistleblowing

Is this an SEC whistleblower case?

No. This is a FinCEN enforcement action under the Bank Secrecy Act. The Consent Order references parallel investigations involving FINRA and the SEC, but the civil penalty announced here was assessed by FinCEN.

What is a SAR? What is a Suspicious Activity Report?

A Suspicious Activity Report, or SAR, is a report that banks, broker-dealers, and other covered financial institutions file with FinCEN when they detect suspicious transactions or activity patterns that may involve money laundering, securities fraud, market manipulation, or other unlawful conduct. SARs are a core part of the Bank Secrecy Act framework because they help alert regulators and law enforcement to possible financial crime. In many enforcement actions, repeated SAR failures are not just paperwork errors. They are evidence that a firm’s anti-money laundering controls were not working in practice. SARs are designed to provide law enforcement with timely financial intelligence, so they can then index it, cross reference it and determine whether they need to act on it.

What is the FinCEN Whistleblower Program?

The FinCEN Whistleblower Program allows eligible individuals to seek awards when they provide original information leading to certain successful Bank Secrecy Act enforcement actions.

What are common signs of AML compliance failure?

Common indicators may include weak alert review processes, repeated SAR delays, high-risk customer onboarding without adequate diligence, inadequate staffing, and exam findings that are not meaningfully remediated.

Can an AML employee become a whistleblower?

Potentially, yes. Compliance, operations, surveillance, onboarding, and trading personnel may be in a position to identify serious AML or BSA failures.

Can someone outside the United States report to FinCEN?

FinCEN states that individuals located in the United States or abroad may be eligible for awards if statutory requirements are satisfied.

https://www.fincen.gov/news/news-releases/fincen-assesses-historic-80-million-penalty-against-canaccord-genuity-llc
https://www.fincen.gov/system/files/2026-03/Canaccord-Consent-Order-No-2026-01.pdf
https://www.fincen.gov/resources/statutes-and-regulations/bank-secrecy-act
https://www.fincen.gov/whistleblower-program
https://www.ecfr.gov/current/title-31/subtitle-B/chapter-X/part-1023/subpart-B/section-1023.210
https://www.law.cornell.edu/uscode/text/31/5323