On February 18, 2021, the U.S. Department of the Treasury, Office of Foreign Assets Control (OFAC) announced a $507,375 settlement with BitPay, Inc. (BitPay), a payment processor for merchants accepting digital currency as payment for goods and services, for 2,102 apparent violations of multiple sanctions programs between 2013 and 2018.[1] The settlement highlights that financial service providers facilitating digital currency transactions must not only establish sanctions compliance programs to screen their own customers but…

On March 3, 2021, the U.S. Securities and Exchange Commission (“SEC”) Division of Examinations (the “Division”)—formerly the Office of Compliance Inspections and Examinations—released its 2021 Examination Priorities (“2021 Priorities”).  The 2021 Priorities generally retain perennial risk areas as the Division’s core focus, but do include several new and emerging risk areas reflecting broader policy shifts under new SEC leadership. The 2021 Priorities include:  retail investors; information security and operational resilience; financial technology (“Fintech”), including digital…

In December 2020, the FDIC approved a Final Rule to reframe the definition and exceptions for “brokered deposits”. Historically, the FDIC has broadly defined virtually any third party connecting a depositor with a bank as a “deposit broker” and the resulting deposits as “brokered deposits”. The Final Rule responds to long-standing industry criticisms seeking to narrow these terms. The Final Rule aims to permit substantially more deposits to be excluded from treatment as “brokered deposits”…

On January 4, 2020, the Office of the Comptroller of the Currency (“OCC”) published an interpretive letter (the “Letter”) clarifying that national banks and federal savings associations (“banks”) may engage in and facilitate payment activities through new technological means, including serving as a node in a distributed ledger system such as those utilized by some stablecoins, facilitating customer conversion of fiat currency to or from digital currencies, and issuing stablecoins. The Letter reasons that payment…

On September 15, 2020, the Securities and Exchange Commission issued a cease‑and‑desist order against Unikrn, Inc. concerning its 2017 initial coin offering  of UnikoinGold .  The SEC found that the Unikrn ICO violated the prohibition in Section 5 of the Securities Act of 1933 against the unregistered public offer or sale of securities.  The SEC imposed several remedies, including requiring Unikrn to permanently disable the UnikoinGold token and a civil money penalty of $6.1 million.…

On August 21, the Financial Crimes Enforcement Network, together with the federal banking agencies, released a statement to clarify banks’ customer due diligence obligations for politically exposed persons. The Statement affirms that (i) there is no regulatory requirement, and no supervisory expectation, for banks’ Bank Secrecy Act / anti-money laundering programs to include “unique, additional due diligence steps” for customers who are PEPs and (ii) there is no regulatory requirement for banks to screen customers and…

In a landmark enforcement action related to a bank data breach, the Office of the Comptroller of the Currency (“OCC”) assessed an $80 million civil monetary penalty and entered into a cease and desist order with the bank subsidiaries of Capital One on August 6, 2020.  The actions follow a 2019 cyber-attack against Capital One.  The Federal Reserve Board also entered into a cease and desist order with the banks’ parent holding company.  The OCC…