A foreign bank can now face American enforcement action without operating in the United States at all. In some cases, all it takes is a dollar transaction, a correspondent account or customer activity that briefly touches the US financial system.
That is the shift now spreading through global banking and financial compliance. The United States is no longer relying only on traditional domestic enforcement against institutions physically operating inside America. Regulators and prosecutors are increasingly using the dollar system itself to pressure non-US financial institutions they believe are connected to illicit finance, sanctions exposure or high-risk transactions.
For banks outside the United States, the risk is becoming harder to ignore. Local regulatory approval may no longer protect an institution if its transactions move through US payment systems, rely on American financial intermediaries or involve customers linked to enforcement priorities like fentanyl trafficking, sanctions evasion, cryptocurrency fraud or organised crime networks.
The recent ICLG analysis of US anti-money laundering enforcement against non-US financial institutions outlined a rapidly expanding toolkit involving FinCEN, OFAC, the Department of Justice and the Federal Reserve. But the larger issue is not really the individual enforcement powers themselves. The United States has found a way to apply financial pressure far beyond its own borders because so much of global finance still depends on the dollar system.
That changes the legal position for foreign banks, payment firms, brokers, fintech businesses and crypto-linked financial institutions. US authorities are now focused less on where a bank is based and more on whether its transactions pass through American financial systems.
If that connection exists, the pressure can escalate quickly.
FinCEN has increasingly used “special measures” powers to target non-US financial institutions or transaction categories considered to present a primary money laundering concern. Those measures can range from enhanced reporting obligations to effectively cutting institutions off from the US financial system entirely.
That risk became far more serious after the expansion of FinCEN’s powers through the FEND Off Fentanyl Act, which gave US authorities broader powers to prohibit certain fund transfers involving institutions or transactions connected to opioid trafficking concerns. Recent actions against Mexican financial institutions accused of processing transactions linked to fentanyl precursor chemicals showed how aggressive these measures can become once institutions are viewed as part of a wider enforcement priority.
For many banks, the impact could be immediate. Losing access to the dollar system can become commercially devastating long before any criminal conviction takes place.
That is what makes this different from older AML enforcement models. In many cases, the pressure no longer begins in court. It begins with access. Access to dollar clearing. Access to correspondent banking. Access to payment systems. Access to banks still willing to do business with them.
Once an institution is viewed as high-risk, other banks may begin distancing themselves before formal enforcement even finishes. Some may tighten due diligence requirements. Others may reduce transaction exposure or terminate relationships entirely. For smaller regional institutions or fintech businesses that depend heavily on a limited number of correspondent relationships, that pressure alone can threaten the business itself.
The risk becomes even more serious because US authorities increasingly treat correspondent banking relationships as entry points into foreign institutions. If a foreign financial institution maintains a correspondent account in the United States, prosecutors can use that relationship to demand records connected to accounts held outside America.
That creates a difficult conflict for foreign institutions operating under local secrecy or confidentiality laws. Some banks may assume local data protections or banking secrecy rules provide protection against foreign demands. But US law specifically limits the ability to resist certain subpoenas solely because disclosure would breach foreign confidentiality obligations.
The result can place multinational institutions in an impossible position. A bank may face legal exposure at home if it discloses information and exposure in the United States if it refuses.
The consequences can escalate quickly. US authorities can pursue major financial penalties, contempt proceedings or restrictions affecting correspondent banking access. Even where a foreign institution disputes the legal basis of the request, the commercial pressure created by possible exclusion from the dollar system can become overwhelming.
The growing use of cloud-based financial infrastructure adds another layer of risk. Many financial institutions now store data using cloud providers subject to US jurisdiction. Under the CLOUD Act, American authorities can compel qualifying service providers to produce data within their possession, custody or control regardless of where the information is physically stored.
For compliance and legal teams, this creates a problem many institutions are still not fully prepared for. Data localisation alone may no longer reduce US exposure if the service provider itself remains subject to American legal process. Decisions around technology procurement, cloud architecture and third-party vendors are increasingly becoming part of AML and sanctions risk management rather than isolated IT questions.
Many institutions still handle these risks separately. AML sits with compliance teams. Data governance sits with technology departments. Sanctions screening sits elsewhere. Correspondent banking relationships are managed commercially. But US enforcement powers now cut across all of those areas at the same time.
A single high-risk customer relationship can trigger several forms of exposure simultaneously: sanctions scrutiny, correspondent banking concerns, cross-border subpoena demands, reputational fallout and possible asset seizure.
The Department of Justice has already shown how aggressively it is willing to pursue cases involving foreign institutions accused of enabling illicit financial flows through the US system. The TD Bank resolution over AML failures and the Danske Bank case involving alleged misrepresentations to US correspondent banks both showed how compliance weaknesses can evolve into criminal or fraud allegations once US financial infrastructure becomes involved.
For foreign institutions, the legal danger is no longer limited to obvious misconduct. Prosecutors increasingly focus on whether institutions ignored warning signs, failed to escalate suspicious activity, misrepresented their compliance controls or allowed insiders to facilitate illicit transactions.
Many financial institutions still think about AML enforcement mainly as a regulatory issue involving remediation and supervisory pressure. The newer enforcement model looks far more punitive. Weak compliance systems can become evidence supporting allegations of wilful blindness, facilitation or deceptive conduct.
Civil forfeiture powers make the position even more uncomfortable. US authorities can target funds held in correspondent accounts within the United States if they can show equivalent assets connected to criminal conduct exist elsewhere within the institution. In practice, this allows prosecutors to reach into US-based accounts tied to foreign banks even where the underlying conduct occurred abroad.
For banks that rely heavily on dollar liquidity or US banking relationships, the financial impact can arrive fast.
The commercial fallout may ultimately prove more damaging than the legal proceedings themselves. Institutions associated with money laundering concerns often face scrutiny from regulators, counterparties, investors and ratings agencies at the same time. Correspondent banks may exit relationships. Customers may withdraw funds. Transaction costs may rise sharply as enhanced due diligence requirements expand.
Even allegations alone can create lasting damage. Financial institutions operate heavily on confidence and trust. Once a bank becomes associated publicly with sanctions exposure, cartel-linked transactions, terrorist financing concerns or crypto fraud investigations, repairing that reputational damage can take years.
That is why compliance programmes are increasingly judged not by the existence of written policies but by whether institutions can show genuine control over risk exposure. Regulators and prosecutors want evidence that institutions understood how their transactions moved through the global financial system, identified higher-risk counterparties, escalated suspicious activity appropriately and adapted controls as enforcement priorities changed.
The institutions most exposed may not necessarily be the largest global banks. Smaller institutions, regional banks, brokers, gambling-linked financial channels, fintech businesses and crypto-facing firms often depend more heavily on a narrow group of counterparties and may have fewer resources available for complex compliance monitoring.
That makes them more vulnerable when banks and financial partners begin reassessing exposure to AML risk.
What has really changed is that US anti-money laundering enforcement increasingly resembles financial border control. American authorities do not need direct regulatory control over every institution operating globally. Control over the systems global finance depends upon can achieve similar results.
The dollar remains central to international commerce. Correspondent banking remains essential for cross-border finance. US-linked payment infrastructure remains deeply embedded throughout global banking. That gives American authorities enormous influence over institutions operating far beyond US territory.
For foreign financial institutions, the legal exposure now starts much earlier than many executives still assume. A bank does not need a Manhattan office tower to attract American scrutiny. If it clears dollar transactions, maintains correspondent relationships, serves higher-risk customers, processes cross-border transfers or relies on US-linked financial infrastructure, the connection may already exist.
Home-state compliance alone may no longer be enough where US financial infrastructure remains part of the business model.
Some financial institutions are already restructuring compliance programmes around that reality. Others may not react until counterparties begin pulling away, subpoenas arrive, transactions are restricted or access to the dollar system starts disappearing.