FinCEN fines UBS $125 million, raising compliance stakes for Western Union

FinCEN hit UBS Financial Services Inc. with a $125 million civil money penalty for recidivist Bank Secrecy Act violations, a move that puts a sharper spotlight on how money-moving firms prove their compliance fixes actually stick. The consent order, numbered 2026-02, covered conduct stretching from January 2019 through June 2023 and followed earlier reform obligations tied to a 2018 agreement.

FinCEN said it conducted a civil enforcement investigation and found grounds to impose the penalty under the Bank Secrecy Act and its implementing regulations. UBS Financial Services Inc. admitted the statement of facts and violations in the consent order, making the case a clear example of how regulators escalate when the same weaknesses keep resurfacing after prior remediation.

The UBS action did not stand alone. FINRA separately fined UBS Financial Services $20 million for anti-money laundering violations, the Commodity Futures Trading Commission imposed an $8 million penalty for supervision failures affecting AML transaction monitoring systems, and the U.S. Securities and Exchange Commission issued an administrative order over failures to timely file suspicious activity reports. FinCEN credited UBS with $48 million in payments to those other regulators, which helped bring the total enforcement package to the final $125 million figure.

For Western Union employees in AML, investigations, financial crime, and controls, the case is a reminder that regulators are not just looking for policies on paper. They want evidence that monitoring works, alerts are being triaged with enough quality, investigations are keeping pace, governance is pressing issues to closure, and remediation has enough follow-through to change behavior. When a firm keeps missing in the same areas, the vocabulary changes from lapse to recidivism.

Western Union has its own history here. FinCEN’s 2017 action against Western Union Financial Services, Inc. imposed an $184 million civil money penalty, and a parallel Justice Department and Federal Trade Commission settlement brought the total to $586 million in restitution and civil penalties tied to AML compliance failures and consumer fraud violations. That same year, Duncan DeVille, Western Union’s Global Head of Financial Crimes Compliance and U.S. BSA Officer, testified before the House Financial Services Subcommittee on Terrorism and Illicit Finance on the risks of managing illicit finance in remittances and money transfers.

The practical read for Western Union is straightforward: speed matters in cross-border payments, but speed without durable controls leaves the company exposed. Repeated alert-quality problems, investigation backlogs, weak governance follow-through, and underpowered screening or transaction-monitoring controls are the warning signs regulators tend to notice first, and the UBS case shows how expensive it can get when those warnings are ignored.