SEB agrees $33m New York AML penalty after Baltic control failures

SEB and its New York branch agreed to a $33 million penalty announced on 15 October by New York’s Department of Financial Services. The regulator linked its investigation to scrutiny following the Panama Papers and identified weaknesses in customer due diligence, correspondent-bank controls and the handling of suspicious-transaction alerts.[1]

Customer data and alert handling failed at different stages

DFS described deficient client files, incorrectly assessed AML risk and outdated correspondent-bank procedures. Monitoring backlogs in Estonia, Latvia and Lithuania delayed the review of transactions for money-laundering and sanctions risks. The findings concern control failures and exposure to illicit flows; they do not label every affected transaction criminal.[1]

The consent order identifies a specific model defect: the 2017 risk-scoring model did not raise a client’s risk score when important KYC data was missing. A high-risk customer could consequently receive a low-risk classification and miss the appropriate enhanced review.[4]

Customer context determines which activity warrants scrutiny, while monitoring and investigation capacity determine whether an alert receives a timely response. A gap at either stage can weaken the process even when the system continues generating alerts.

The earlier Swedish sanction is a separate proceeding

Finansinspektionen’s 2020 decision examined the period from 2015 through the first quarter of 2019. It highlighted the risks associated with non-resident customers and resident companies with foreign owners in the Baltic subsidiaries. Its findings concerned the bank’s understanding and management of those risks, including governance, resources and monitoring, rather than a simple rule that every cross-border customer must be rejected.[3]

The proceedings should be compared by their findings, periods and authorities. The SEK1bn Swedish penalty imposed in 2020 remains distinct from the new US$33m New York settlement.[3][1]

The order’s payment terms and the bank’s financial account

The order requires payment within ten days of its effective date. It bars US tax deductions or credits for the penalty and reimbursement or indemnification, including insurance. DFS also acknowledges SEB’s cooperation and remediation.[4]

SEB says the US review concerned its former Baltic due-diligence and transaction-monitoring processes during 2015–2019. It expects to recognise the settlement in fourth-quarter 2026 operating expenses, describes the financial effect as limited and leaves its full-year cost target unchanged. Those are management’s financial expectations; they are not a regulator’s assessment of the seriousness of the deficiencies.[2]

SEB says the Justice Department concluded its separate review without action and that the relevant US matters are closed. That account remains attributed to the bank; no independent DOJ closure document was inspected. The DFS order itself binds DFS and the bank, rather than other authorities.[2][4]

The case shows how incomplete customer data can feed an unsuitable risk rating and how delayed investigation can then weaken transaction monitoring. Effective remediation has to join data quality, risk classification, review capacity and a traceable response to alerts.

Report an error or submit an update