# FinCEN Files (September 20, 2020) A leak with a fundamentally different character than the offshore-leak series. Where [[Panama Papers]], [[Paradise Papers]], and [[Pandora Papers]] exposed the *client* side of financial secrecy — the people hiding their money — **the FinCEN Files exposed the *enforcement* side: the systematic failure of the U.S. anti-money-laundering regulatory regime**. The leak revealed that the world's largest banks knowingly moved more than **$2 trillion** in suspect transactions over nearly two decades, filing Suspicious Activity Reports (SARs) as a compliance ritual while continuing to serve the same clients, the same patterns, and the same flows. The U.S. Treasury's [[FinCEN]] received the warnings and, in the overwhelming majority of cases, did nothing. The leak made visible the operational truth that the AML regime is a paperwork compliance system, not an enforcement system. ## The Leak The FinCEN Files originated in 2018, when **Jason Leopold and Anthony Cormier of [[BuzzFeed News]]** obtained a cache of 2,121 Suspicious Activity Reports filed with the U.S. Treasury's Financial Crimes Enforcement Network ([[FinCEN]]) between 1999 and 2017. The documents had been pulled from a [[House Intelligence Committee]] inquiry related to Russian interference in the 2016 election; the source was identified in October 2018 as **Natalie Mayflower Sours Edwards**, a senior FinCEN official who pleaded guilty in 2021 to unlawful disclosure of SARs and was sentenced to six months in prison. After two years of investigation, [[BuzzFeed News]] shared the documents with the [[ICIJ]], which coordinated the global investigation. The scale: - **2,121 Suspicious Activity Reports** (out of the millions filed during the period — a small but representative sample) - **$2 trillion** in flagged-suspicious transactions documented across the leaked SARs - **400+ journalists** at **110 news organizations** in **88 countries** - Coverage began **September 20, 2020** The 2,121-SAR sample is the most under-appreciated fact about the leak. **FinCEN receives more than 2 million SARs per year.** The leaked sample was an infinitesimal fraction of the total, drawn from a House Intelligence Committee subpoena, and yet it documented $2 trillion in flagged-suspicious flows. The extrapolation is staggering and was the central analytical claim of the coverage: this is what banks routinely flag, banks routinely continue to process, and FinCEN routinely fails to act on. ## What a SAR Actually Is A Suspicious Activity Report is a filing that U.S. banks (and many non-U.S. banks with U.S. operations) are required by the Bank Secrecy Act to submit to FinCEN whenever they detect a transaction that is potentially related to money laundering, fraud, or other financial crime. The SAR itself is **not a refusal of the transaction**. The bank typically processes the transaction *and then* files the SAR. The theory is that FinCEN, having received the warning, will investigate. In practice, two things are true: 1. **Banks file SARs to satisfy compliance**, not to interrupt transactions. The SAR is the bank's legal protection: if law enforcement later determines a transaction was illicit, the bank can point to the filed SAR as evidence that it met its reporting obligation. 2. **FinCEN's investigative capacity is overwhelmed**. The agency receives more than 2 million SARs per year and has only a few hundred analytical staff. The structural mismatch means that the overwhelming majority of SARs receive no follow-up action whatsoever. The result is a system in which the SAR functions as a **regulatory laundering mechanism**: banks file the paperwork, FinCEN takes possession of the paperwork, no investigation occurs, and the suspect transaction proceeds undisturbed. The bank has met its legal duty. The client has been served. The U.S. government has "received" the warning. Nothing happens. The FinCEN Files exposed this dynamic at full scale. ## The Bank Revelations ### HSBC and the Ponzi Schemes HSBC — already convicted in 2012 for processing money for Mexican drug cartels and Iran-sanctions evasion, paying a $1.9 billion fine and entering a deferred prosecution agreement — was documented in the FinCEN Files to have continued processing payments for **a known Ponzi scheme operator (WCM777)** even after multiple internal warnings and after the operator's fraudulent character was widely known. Approximately **$80 million** from defrauded investors flowed through HSBC accounts after the bank had been formally notified of the fraud. The HSBC revelation was structurally devastating. The bank had been on **continuous federal monitorship** since its 2012 plea deal. It had been promising compliance reform. The FinCEN Files documented that the compliance reform was, in practice, paperwork-only — the bank continued moving suspect funds and continued filing SARs about its own continued movement of suspect funds. ### JPMorgan and Paul Manafort JPMorgan Chase continued processing payments for [[Paul Manafort]] for years after he had been indicted in the [[Mueller Investigation]] in October 2017. The FinCEN Files documented that the bank's compliance team had repeatedly flagged Manafort-related transactions as suspect — but the bank's relationship managers continued to service the accounts. This is the most direct Trump-orbit revelation in the FinCEN Files. The U.S.'s largest bank, the one most embedded in the federal political-financial system, continued moving money for the Trump campaign chairman after he had been federally indicted for money laundering, foreign-influence violations, and tax fraud. The bank suffered no consequence for this. ### Deutsche Bank — Russia, Iran, and the Trump Family [[Deutsche Bank]] — already known to the knowledge base as the bank that lent the Trump organization billions when no other major U.S. bank would — was documented in the FinCEN Files to have moved **62% of the entire $2 trillion** in suspect flows captured in the leaked sample. The bank's Russian operations were particularly heavily represented, including: - Flows linked to associates of [[Vladimir Putin]] and [[Oleg Deripaska]] - The "Russian Mirror Trades" scheme (already separately documented and fined) in which the bank's Moscow office had moved approximately $10 billion out of Russia - Continued processing of payments for Iran-sanctioned counterparties through subsidiary structures [[Deutsche Bank]]'s combination of Trump-family lending, Russian-money-flow dominance, and FinCEN Files prominence makes it the single most analytically important bank in the KB's Trump-Russia evidentiary chain. ### Standard Chartered — Saudi Arabia Standard Chartered — already fined for Iran-sanctions evasion in 2012 and 2019 — was documented to have processed transactions for Saudi Arabian clients that bank analysts had flagged as potentially linked to terror financing. The transactions were processed; SARs were filed; no further action followed. ### Bank of New York Mellon — Multiple Categories [[BNY Mellon]], the world's largest custodian bank, was implicated in the processing of payments for clients including [[Semyon Mogilevich]]-adjacent entities and sanctioned Russian counterparties. The bank's internal compliance had flagged the transactions; the transactions proceeded. ## The Structural Revelation: "Too Big to Jail" The FinCEN Files' deepest contribution to the KB is the documentation of the **"too big to jail"** dynamic in operational detail. The pattern is consistent across the major bank revelations: 1. The bank's compliance staff **flag the transaction as suspect** — often with detailed analysis of why 2. The bank's relationship managers **process the transaction anyway**, because the client is too lucrative or too institutionally important to lose 3. The bank **files a SAR** to satisfy its legal reporting obligation 4. [[FinCEN]] **receives the SAR** and, with rare exceptions, takes no investigative action 5. If the underlying conduct is later prosecuted, the bank can point to the SAR as evidence it met its compliance duty — and **prosecution of bank executives essentially never follows** The system is, in operational reality, a regulatory permission slip. The bank is allowed to do the questionable business as long as it files the paperwork acknowledging the business is questionable. This is the **regulatory-capture mechanism** that makes large-scale [[Money Laundering]] feasible inside the formal U.S. financial system. The offshore-leak series (Panama, Paradise, Pandora) documented how clients hide money. The FinCEN Files documented how the regulatory system designed to detect that hiding has been **operationally neutralized while remaining formally intact**. ## The American Dimension The FinCEN Files were largely an **American story** in a way the offshore-leak series was not. The SARs were filed with a U.S. agency; the banks were predominantly U.S. or major U.S.-operating institutions; the regulatory system being exposed was the U.S. AML regime. ### Regulatory Response — Essentially None The U.S. legislative and regulatory response to the FinCEN Files was strikingly minimal: - The **Anti-Money Laundering Act of 2020** (passed December 2020, three months after the leak) made some technical reforms to whistleblower incentives and corporate-disclosure requirements, but did not address the SAR-as-permission-slip dynamic - The **[[Corporate Transparency Act]]** (also December 2020) was about beneficial ownership of shell companies, not about bank AML practices — and was later struck down (March 2024) - **No major bank** has faced criminal prosecution as a direct result of the FinCEN Files revelations - **No senior bank executive** has faced criminal prosecution as a direct result of the FinCEN Files revelations - **HSBC** remained under deferred prosecution monitorship until 2017, was released from that monitorship, and faced no new prosecution post-FinCEN Files - **[[Deutsche Bank]]** paid additional fines for some specific Russian-related conduct but faced no FinCEN-Files-specific prosecution The contrast with the **whistleblower** is severe: Natalie Edwards, who leaked the documents, pleaded guilty and served prison time. None of the bank executives whose conduct she exposed faced any comparable consequence. This asymmetry is a primary [[Criminalizing Whistleblowers]] data point. ## Aftermath ### The Whistleblower's Fate - **Natalie Mayflower Sours Edwards**: Pleaded guilty in 2021 to one count of unlawful disclosure of SARs and one count of conspiracy. Sentenced to **six months in prison** and three years of supervised release. Lost her FinCEN position and federal security clearance. The leak's contribution to the public record — billions of dollars in exposed illicit flows, structural revelations about the AML system — was treated by the federal prosecutorial response as legally irrelevant. ### Market Response - **Banks named in the leak collectively lost an estimated $130 billion in market capitalization** in the first trading week after the September 20 publication; most had recovered the losses within months. The market priced the leak as embarrassment, not as material risk. ### Subsequent Leaks - [[Pandora Papers]] (October 2021) - [[Suisse Secrets]] (February 2022) - [[Cyprus Confidential]] (November 2023) ## Analytical Framework The FinCEN Files matter to this knowledge base for three reasons that set them apart from the offshore-leak series: **1. They exposed the regulatory system, not the regulated.** The offshore leaks showed wealthy clients using offshore secrecy structures. The FinCEN Files showed that the U.S. regulatory regime designed to catch those flows when they touch the U.S. financial system has been operationally neutralized — the SAR is a permission slip dressed as a warning. This is a deeper structural finding than "rich people hide money": it documents that the system designed to prevent the hiding does not work as designed. **2. They directly implicated the U.S. bank that funded Trump.** [[Deutsche Bank]] is the single largest counterparty in the leaked $2T flow data. The same bank that lent the Trump organization more than $2 billion across two decades, when no other major U.S. bank would do business with him, is also the bank most embedded in the largest Russian-and-sanctioned-counterparty money flows in the U.S. system. This is not a coincidence; it is structural. The Trump-Russia evidentiary chain runs through [[Deutsche Bank]]'s books in two directions. **3. They illustrate "too big to jail" in operational detail.** The structural fact that no senior bank executive has faced criminal prosecution for any of the conduct documented in the FinCEN Files — while the whistleblower who exposed the conduct served prison time — is the cleanest available documentation of the [[Criminalizing Whistleblowers]] dynamic in U.S. financial regulation. The system punishes the disclosure; it does not punish the conduct. If the [[Panama Papers]] are the **[[Rosetta Stone]] of dark money** and the [[Paradise Papers]] are the **photograph of Kremlin capital inside U.S. politics**, the FinCEN Files are the **autopsy of the U.S. anti-money-laundering enforcement system** — documenting that the patient died years ago and the regulatory paperwork is the embalming fluid keeping the corpse upright.