SEB Bank Fined $33 Million Over AML Control Failures

New York’s Department of Financial Services (NYDFS) has announced that Swedish banking group Skandinaviska Enskilda Banken AB (SEB) and its New York branch agreed to pay a $33 million penalty to resolve an investigation into anti-money laundering (AML) compliance failures.

The investigation followed the 2016 Panama Papers leak, which exposed offshore financial arrangements and raised questions about whether financial institutions had met their legal and compliance commitments.

According to NYDFS, the investigation found that SEB’s Baltic subsidiaries in Estonia, Latvia, and Lithuania had inadequate AML controls between 2015 and 2019. The department identified flaws in customer due diligence, correspondent banking relationships, risk assessments, and transaction monitoring.

Key AML failures identified

• Poor customer due diligence: The bank’s Baltic subsidiaries failed to maintain complete, accurate customer information, including beneficial ownership details, money trail information, and politically exposed person (PEP) records.
• Weak correspondent banking monitoring: SEB ignored certain high-risk foreign banking partners. Its reviews sometimes relied on simplified due diligence despite elevated money laundering risks.
• Inadequate risk assessments: The bank’s risk-scoring approach did not always increase a customer’s risk rating when important KYC information was missing. This could result in high-risk customers receiving insufficient scrutiny.
• Transaction monitoring backlogs: Monitoring systems in the Baltic subsidiaries were insufficient to detect and review suspicious activity, increasing exposure to potential money laundering and sanctions risks.

The investigation also highlighted how weaknesses in one region can create risks elsewhere. Transactions originating from SEB’s Baltic operations passed through its New York branch and U.S. financial institutions, exposing the wider financial system to potential financial crime risks.

The case demonstrates why international banking groups need consistent AML standards across subsidiaries, reliable customer data, risk-based correspondent banking reviews, and monitoring systems that can keep pace with transaction volumes.

Implications for Compliance Teams

• Improve KYC data quality: Keep customer identities, beneficial ownership, source of funds, and business activity records complete and up to date.
• Apply risk-based enhanced due diligence: Ensure high-risk customers and correspondent banks receive scrutiny according to their risk rating, rather than relying on simplified checks.
• Review risk-scoring logic: Missing or outdated customer information should trigger review and, where appropriate, a higher risk rating, not a lower level of scrutiny.
• Address monitoring backlogs: Track alert volumes, investigation delays, and unresolved cases to ensure suspicious activity is timely addressed.
• Strengthen group-wide oversight: Test whether subsidiaries apply consistent AML standards and whether risks identified in one jurisdiction are escalated across the group.

The central lesson is that AML controls must work across the entire banking process from onboarding and risk assessment to transaction monitoring and correspondent banking oversight.