Sponsor Bank for Wise, Crypto.com Told to Fix AML Program

Why It Matters

The remediation directly affects high‑volume fintech sponsors, raising compliance costs and operational risk for services used by millions of consumers. It signals heightened regulator scrutiny of small banks that power digital‑payment ecosystems.

Key Takeaways

• OCC mandates AML overhaul for Community Federal, affecting Wise and Crypto.com
• Bank must hire two consultants, including SAR look‑back specialist
• Automated alerts auto‑closed most suspicious transactions, prompting stricter monitoring
• Compliance committee with independent directors required within 15 days
• No civil penalty, but future enforcement risk remains

Pulse Analysis

Fintech companies increasingly rely on small, federally chartered banks to provide the U.S. dollar infrastructure behind money‑transfer apps and prepaid cards. Regulators have sharpened their focus on these sponsor banks after a series of high‑profile failures, from Cross River’s consent order in 2023 to Blue Ridge Bank’s AML breach in 2024. The OCC’s novel bank supervision unit now treats the rapid growth of payment‑processing lines as a distinct risk, demanding that banks match their compliance frameworks to the volume and cross‑border nature of fintech transactions.

In the latest enforcement action, Community Federal Savings Bank was ordered to rebuild its AML program after the OCC identified weak customer‑due‑diligence, an over‑reliance on automated alerts that auto‑closed most suspicious activity, and inadequate independent testing. The bank must hire two outside consultants—one to conduct a full AML review and another to reassess historical suspicious‑activity reports—while establishing a compliance committee dominated by independent directors within 15 days. A detailed remediation plan is due within 90 days, covering revamped transaction‑monitoring filters, a written CDD program, and a refreshed independent‑testing regime.

The order sends a clear message to the broader fintech ecosystem: sponsor banks must invest in robust AML controls or risk regulatory censure that could disrupt partner onboarding. While Community Federal faces no immediate civil penalty, the requirement to potentially file new SARs for past transactions underscores the agency’s willingness to look retroactively at compliance gaps. Fintech firms like Wise and Crypto.com will need to monitor the bank’s progress closely, as any delays could affect service continuity and increase operational costs across the digital payments landscape.