One UBS client moved to Russia in 2014 and received transfers from a Russian bank account for years — totaling $2.3 million. During all this time, the company never updated his risk profile, even though, according to the SEC, these transactions clearly did not match the stated account behavior pattern. This is just one episode from the case that cost the Swiss bank's brokerage division $125 million — a record penalty for such violations in U.S. history.
Who paid and how much actually
The U.S. Treasury Department's anti-money laundering unit FinCEN fined UBS Financial Services $125 million — the largest penalty ever imposed on a brokerage firm for Bank Secrecy Act violations. But the amount is more complex than it appears: UBS simultaneously settled with four regulators at once — $20 million to the SEC, $20 million to FINRA, and $8 million to the CFTC, and FinCEN credited these payments toward its $125 million fine. In other words, approximately $62 million in "real money" will go to the Treasury, and UBS may not pay up to $15 million at all if it successfully completes a review of its control systems.
Formally, this looks like a discount for good behavior in advance. In essence, it's an acknowledgment that for a bank of this scale, a fine also has a pain threshold that the regulator is willing to ease somewhat in exchange for real reforms, not just promises.
This is the second time
In December 2018, UBS already paid for nearly the same thing — $14.5 million for weak monitoring of wire transfers. The company promised to fix the system. According to FinCEN, UBSFS assured the regulator that it would soon eliminate the problem, but it did not — and continued to allow transfers to pass without oversight for another five years. As a result, more than 50,000 currency transactions totaling over $10 billion slipped through the control system between 2019 and 2023. The company did not self-report this to FinCEN: the regulator found out during an inspection.
FinCEN Director Andrea Gacki stated it directly: repeat offenders risk the integrity of the financial system, especially when they open it to high-risk clients without effective controls.
Clients the bank did not want to notice
The second part of the case is not about a technical monitoring failure, but about a conscious choice not to see the obvious. Among high-risk clients from Russia and Latin America was a Russian oligarch close to Vladimir Putin: he opened and maintained accounts at UBS despite publications about the origin of his wealth, suspicions of money laundering, and connections to a company that invested in Iranian digital assets.
Regulators found that UBS systematically failed to verify the source of money for such clients, ignored negative news about possible corruption or fraud, and did not update risk profiles. According to the investigation, in at least one case, the bank continued to work with a client even after its own affiliated division expressed concerns due to negative press.
UBSFS acknowledged that it willfully violated the law — not due to negligence by an individual employee, but as an institutional practice over years.
What the bank must now do
- Hire an independent auditor and conduct a full review of missed suspicious transactions.
- Rebuild the control system with a focus on risks related to the U.S. southern border, drug cartels, as well as Iran, Russia, and Venezuela.
- Maintain documentation for at least six years — so that regulators can verify compliance with promises.
If a follow-up inspection reveals previously undisclosed suspicious transactions, the case could proceed to the Department of Justice — meaning the civil penalty could turn into a criminal liability risk.
Context that makes this story not unique
UBS is neither the only nor the first bank to pay for toxic ties to Russia and weak controls. At the beginning of 2026, the European Union added Russia to its money laundering blacklist. And just months earlier, in December 2025, the U.S. lifted enhanced oversight from Danske Bank — after a three-year probationary period imposed due to the Russian money laundering scandal. Danske completed this path in three years. UBS received a second chance in 2018 and used it to continue ignoring the problem for another five years.
The question now is simple: will this penalty — eight times larger than the previous one — be the threshold of pain after which repeat offenses truly end, or will we see a third FinCEN case against the same bank in a few years with the same language about "high-risk clients"?
