On May 15, 2026, the Office of the Comptroller of the Currency (OCC) released its monthly enforcement actions against national banks and federal savings associations. Among the actions disclosed was a Consent Order against Community Federal Savings Bank, a federally chartered institution based in New York, citing deficiencies in its Bank Secrecy Act and Anti-Money Laundering (BSA/AML) compliance program. The release continues a clear pattern from the OCC of using formal enforcement tools to address perceived shortcomings in BSA/AML program adequacy at federally chartered institutions.

The latest action is consistent with the OCC's broader supervisory posture, which has placed sustained emphasis on the quality, scope, and governance of BSA/AML compliance programs. By electing to proceed by way of a public Consent Order, the OCC has reinforced its willingness to escalate compliance concerns beyond informal supervisory communications. For boards of directors, senior management, and compliance leadership, the action serves as a reminder that BSA/AML program weaknesses, even where not tied to public allegations of underlying misconduct, can independently support significant enforcement outcomes.

National banks and federal savings associations should view the May 2026 enforcement release as an opportunity to revisit the core components of their BSA/AML frameworks. In particular, institutions should consider whether their enterprise-wide risk assessments accurately reflect current products, customer segments, geographies, and delivery channels, and whether the assessment methodology is updated with appropriate frequency. Transaction monitoring systems should be evaluated for the adequacy of scenarios, thresholds, tuning, and model validation, with attention to documentation supporting key design and calibration decisions.

Governance is an equally critical area of focus. Institutions should confirm that BSA/AML responsibilities are clearly allocated, that the BSA Officer is appropriately resourced and independent, and that the board receives timely, substantive reporting on program performance, issue remediation, and emerging risks. Internal audit coverage, independent testing, and management of regulatory findings should likewise be reviewed for sufficiency and credibility.

Proactive assessment and timely remediation of identified gaps remain the most effective tools for reducing enforcement exposure in this environment, particularly given the OCC's continued emphasis on BSA/AML program adequacy.

This alert is provided for general informational purposes only and does not constitute legal advice. Institutions should seek tailored counsel regarding their specific circumstances and compliance obligations.


Authors