In a major enforcement action, 48 state financial regulators have fined Block $80 million for violations of the Bank Secrecy Act (BSA) and anti-money laundering (AML) regulations. Block, the parent company of Cash App, agreed to pay the penalty, hire an independent consultant to evaluate its BSA/AML program, and address any deficiencies identified within 12 months. The investigation revealed compliance lapses that could enable illegal activities, including money laundering and terrorism financing.
Robinhood has agreed to pay $45 million to resolve multiple charges brought by the U.S. Securities and Exchange Commission (SEC) involving its brokerage operations.
The Consumer Financial Protection Bureau (CFPB) is exploring how existing privacy and consumer protection laws can be applied to emerging digital payment systems offered by Big Tech, stablecoins, and other cryptocurrencies.
CrowdStrike, a leading cybersecurity firm, has uncovered a phishing campaign that uses its own branding to distribute cryptocurrency-mining malware.
The European Banking Authority (EBA) has released comprehensive guidelines to help financial institutions manage Environmental, Social, and Governance (ESG) risks.
The latest update to PCI DSS, version 4.0.1, introduces a critical focus on phishing-resistant authentication factors to combat evolving cyber threats. Yew Kuann Cheng, regional vice president for the Asia Pacific at the PCI Security Standards Council, emphasizes that businesses leveraging advanced anti-phishing technologies can more efficiently meet multi-factor authentication (MFA) requirements.
The Consumer Financial Protection Bureau (CFPB) has approved Financial Data Exchange (FDX) as the first official standard-setting body under its new open banking framework.
The Office of the Comptroller of the Currency (OCC) has issued a cease-and-desist order against Bank of America, N.A., citing significant deficiencies in the bank’s Bank Secrecy Act (BSA) and sanctions compliance programs. The enforcement action highlights violations and unsafe practices, including delays in filing suspicious activity reports and unresolved issues in the bank’s Customer Due Diligence processes.
