UBS Financial Services is paying $125 million to the Treasury’s Financial Crimes Enforcement Network, the largest penalty FinCEN has ever levied against a broker-dealer for Bank Secrecy Act violations. That’s the headline number, but it’s not the whole bill. FINRA is layering on a separate $20 million fine, and the CFTC is adding $8 million, pushing the total past $150 million, with the SEC’s piece still to be disclosed.

The math that should worry UBS shareholders isn’t the size of the check, it’s the word “recidivist.” FinCEN fined UBSFS $14.5 million for the same foreign-currency wire monitoring failures back in December 2018. The firm promised to fix it. It didn’t. Between January 2019 and June 2023, roughly 60,000 wires worth $10 billion moved through UBSFS with monitoring gaps wide enough to swallow customers tied to Russia, Latin America and sanctioned corners of the map.

This is the pattern regulators are now pricing for: FINRA’s enforcement chief called it “escalating sanctions for recidivist misconduct,” and the roughly eightfold jump from $14.5 million to $125 million is the price tag on ignoring a first warning. Banks that treat a consent order as a paperwork exercise rather than an engineering fix should expect the next fine to carry a multiple, not just a repeat.

FinCEN is waiving up to $15 million of UBSFS’s remediation costs if the firm actually finishes the fix this time, a rare carrot attached to the usual stick. UBS calls the matter closed. FinCEN’s order still requires a third-party lookback to identify transactions that went unreported.

— Marcus Webb