J.P. Morgan pays $5.3 Million to settle charges it violated U.S. Sanctions

J.P. Morgan Chase will pay $5.3 million to settle charges that it violated various U.S. sanctions programs. The charges were connected to its failures in screening processes says the U.S. Treasury Department .This concerns 87 net-settlement transactions between January 2008 and February 2012 which amount to more than $1 billion.

This resolves potential civil liability for 87 apparent violations of the Cuban Assets Control Regulations, 31 C.F.R. Part 515 (CACR); the Iranian Transactions and Sanctions Regulations, 31 C.F.R. Part 560 (ITSR); and the Weapons of Mass Destruction Proliferators Sanctions Regulations, 31 C.F.R. Part 544 (WMDPSR).

Information concerning the civil penalties process is discussed in OFAC regulations governing the various sanctions programs and in 31 CFR part 501. On November 9, 2009, OFAC published as Appendix A to part 501 Economic Sanctions Enforcement Guidelines. See 74 Fed. Reg. 57,593 (Nov. 9, 2009). The Economic Sanctions Enforcement Guidelines, as well as recent final civil penalties and enforcement information, can be found on OFAC’s Web site at http://www.treasury.gov/ofac/enforcement. ENTITIES – 31 CFR 501.805(d)(1)(i) JPMorgan Chase Bank, N.A. Settles Potential Civil Liability for Apparent Violations of Multiple Sanctions Programs: JPMorgan Chase Bank, N.A. (JPMC) has agreed to remit $5,263,171 to settle its potential civil liability for apparent violations involving the processing of 87 net settlement payments with a total value of $1,022,408,149, of which approximately $1,500,000 (0.14%) appears to have been attributable to interests of sanctions-targeted parties, and which therefore appear to have violated one or more of the following sanctions programs administered by OFAC: the Cuban Assets Control Regulations, 31 C.F.R. Part 515 (CACR); the bank was apparently aware that it processed net settlement transactions on behalf of the two member organizations on a weekly basis, and, given the bank’s involvement in reconciling the organizations’ billings against each other, JPMC staff members had actual knowledge of the individual members, including OFAC-sanctioned entities, involved in each transaction;

JPMC’s activity conveyed economic benefit to several entities subject to OFAC sanctions and harmed the integrity of a number of OFAC sanctions programs, and JPMC is a large and commercially sophisticated financial institution. OFAC considered the following to be mitigating factors

  • no JPMC managers or supervisors appear to have been aware of the conduct or transactions that led to the apparent violations;
  • the total harm caused to OFAC sanctions programs was significantly less than the total value of the transactions because the transactions represented net settlements between numerous parties, of which the sanctioned entities were only a few;
  • JPMC cooperated with OFAC’s investigation of the apparent violations, including by entering into a retroactive tolling agreement (and multiple extensions thereof) to toll the statute of limitations;
  • JPMC has taken the following steps as part of a risk-based sanctions compliance program to prevent similar apparent violations in the future:
  • Between February 2012 and the termination of JPMC’s relationship with its U.S. entity client, JPMC screened all net settlement participants in order to prevent sanctioned entities from utilizing the net settlement process;
    • JPMC has increased its compliance staff;
    • JPMC has implemented new sanctions-screening software; and 3
    • JPMC has enhanced employee training and has previously used these apparent violations as a case study for training purposes.

This enforcement action highlights the risks associated with a U.S. person failing to take adequate steps to ensure that transactions that it processes are compliant with U.S. economic sanctions laws — particularly in instances in which a U.S. person has actual knowledge or reason to know, prior to the transaction being effected, of an SDN’s past, present, or future interest in such a transaction. Separately, JPMorgan Chase & Co. Receives a Finding of Violation Regarding Violations of the Foreign Narcotics Kingpin and Syrian Sanctions Regulations: The U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) has issued a Finding of Violation to JPMorgan Chase & Co. (“JPMC”) for violations of the Foreign Narcotics Kingpin Sanctions Regulations, 31 C.F.R. part 598 (FNKSR), and the Syrian Sanctions Regulations, 31 C.F.R. part 542 (SSR).

Between August 4, 2011 and April 29, 2014, JPMC processed 85 transactions totaling $46,127.04 and maintained eight accounts on behalf of six customers who were contemporaneously identified on the List of Specially Designated Nationals and Blocked Persons (“SDN List”). From approximately 2007 to October 2013, JPMC used a vendor screening system that failed to identify these six customers as potential matches to the SDN List. The system’s screening logic capabilities failed to identify customer names with hyphens, initials, or additional middle or last names as potential matches to similar or identical names on the SDN List. Despite strong similarities between the accountholder’s names, addresses, and dates of birth in JPMC account documentation and on the SDN List, JPMC maintained accounts for, and/or processed transactions on behalf of, these six customers. JPMC identified weaknesses in the screening tool’s capabilities as early as September 2010 and implemented a series of enhancements during the period 2010 to 2012. In 2013, JPMC transitioned to a new screening system. In November 2013, JPMC re-screened 188 million clients’ records through the new system, identified the transactions and accounts described above, and reported the violations to OFAC. The determination to issue a Finding of Violation to JPMC reflects OFAC’s consideration of the following facts and circumstances, pursuant to the General Factors under OFAC’s Economic Sanctions Enforcement Guidelines, 31 C.F.R. part 501, app. A. A Finding of Violation is appropriate given that JPMC facilitated and/or processed 85 transactions totaling $46,127.04, and maintained eight accounts on behalf of six customers on the SDN List; JPMC engaged in a pattern of conduct over a two-year period where the apparent violations stemmed from the same screening issue; although JPMC identified this screening issue and implemented multiple screening enhancements, it took over three years to fully address a known deficiency in the vendor-provided screening system; JPMC did not appear to have implemented adequate compensating controls to address the risk these screening deficiencies posed to the bank’s operation of existing accounts or opening of new accounts; and JPMC is a large, sophisticated financial institution. OFAC also considered that no JPMC personnel, including managers or supervisors, appear to have had actual knowledge of the conduct that led to the violations; JPMC has not received a penalty notice or Finding of Violation from OFAC relating to substantially similar violations in the five years preceding the date of the conduct giving rise to the violations; and JPMC cooperated with OFAC’s investigation, including by providing the initial disclosure of these violations, and executing a statute of limitations tolling agreement and an extension to the agreement. 3 This enforcement action highlights the importance of financial institutions remediating known compliance program deficiencies in an expedient manner, and when that is not possible, the importance of implementing compensating controls to mitigate risk until a comprehensive solution can be deployed. For more information

Separately, OFAC has issued a Finding of Violation to JPMC regarding violations of the Foreign Narcotics Kingpin Sanctions Regulations, 31 C.F.R. part 598 (FNKSR), and the Syrian Sanctions Regulations, 31 C.F.R. part 542.  Specifically, OFAC determined that between August 4, 2011 and April 29, 2014, JPMC processed 85 transactions totaling $46,127.04 and maintained eight accounts on behalf of six customers who were contemporaneously identified on the SDN List.  OFAC determined that JPMC voluntarily disclosed the violations, and that the violations constitute a non-egregious case.

Before 2012, JPMorgan didn’t appear to have had a process to evaluate members independently of the foreign entity despite receiving red-flag notifications on at least three occasions.