Table of Contents
In financial crime compliance, few cases illustrate the cost of a weak AML framework as clearly as TD Bank. But the TD Bank AML transformation also shows what can happen when a major financial institution rebuilds its AML program at scale.
Between January 2018 and April 2024, U.S. authorities determined that approximately 92% of TD Bank’s total transaction volume went unmonitored, representing approximately US$18.3 trillion in transaction activity. Money-laundering networks subsequently moved more than US$670 million through TD accounts between 2019 and 2023. U.S. Department of Justice TD Bank Case
In October 2024, TD entered coordinated resolutions with the U.S. Department of Justice (DOJ), Financial Crimes Enforcement Network (FinCEN), Office of the Comptroller of the Currency (OCC), and Federal Reserve. The combined financial impact was approximately US$3.088 billion, accompanied by an independent compliance monitorship and a US$434 billion limitation on the average combined total assets of two U.S. banking subsidiaries. TD Bank: Resolution of AML Investigations
But the TD Bank story does not end with enforcement.
TD has since invested heavily in transaction monitoring, KYC, financial-crime data, artificial intelligence, machine learning, investigations, staffing, risk assessment and governance. The bank says it has completed the majority of its management remediation actions, although significant work remains through 2026 and 2027, including a suspicious activity report lookback expected to continue into 2027. TD Bank: Fiscal 2025 Results and AML Remediation Update
At the same time, TD’s broader financial performance has strengthened. In Q3 fiscal 2026, TD reported C$4.671 billion in adjusted net income, up 21% year over year, while U.S. Banking reported C$1.074 billion in net income, up 41% year over year on a reported basis. TD’s shares closed at approximately US$120.65 on September 25, 2026, while its U.S.-dollar market capitalization reached approximately US$198.6 billion, compared with approximately US$93.2 billion at the end of 2024. TD Bank: Q3 2026 Results TD Market Capitalization Data
These figures do not establish that AML remediation alone caused TD’s financial recovery. Earnings, interest rates, credit conditions, capital, acquisitions, investor expectations and broader market conditions also influence performance.
They do, however, demonstrate the scale of the transformation.
The TD Bank case therefore provides an important AML lesson: effective financial-crime controls are not simply a mechanism for avoiding regulatory penalties. They can protect customers, strengthen risk management and support sustainable banking growth.
TD Bank's AML Failure at a Glance
Measure | Finding |
|---|---|
Transaction volume that went unmonitored | 92% |
Transaction activity affected | ~US$18.3 trillion |
Money moved through three laundering networks | >$670 million |
Suspicious transactions not properly reported | ~US$1.5 billion |
DOJ resolution | >$1.8 billion |
FinCEN penalty | US$1.3 billion |
OCC civil money penalty | US$450 million |
Combined U.S. enforcement resolution | ~US$3.088 billion |
U.S. banking asset limitation | US$434 billion |
FY2026 AML remediation/control investment | ~US$500 million |
Additional resources | 700+ |
Additional senior officers | 40+ |
The DOJ found that TD failed to update its AML program to address known risks between 2014 and 2023. Most significantly, its transaction-monitoring program remained effectively static from 2014 through 2022 despite new products, services and emerging money-laundering risks. DOJ: TD Bank AML Enforcement Findings
The monitoring gaps affected domestic ACH transactions, most check activity, high-risk-country activity and newer products such as Zelle. TD also allowed more than US$5 billion in transactional activity to occur in accounts after the bank had decided to close them. DOJ: TD Bank AML Enforcement Findings
One clarification is essential: US$18.3 trillion represents transaction activity that went unmonitored, not US$18.3 trillion of illicit funds or money laundering.
How TD Bank's AML Controls Failed
1. Transaction monitoring became static while risk changed
According to the DOJ, TD did not add new transaction-monitoring scenarios or make material changes to existing scenarios from at least 2014 through late 2022.
The lesson is fundamental: a bank can have a functioning transaction-monitoring engine and still have an ineffective transaction-monitoring program.
The question is not simply, “Is the monitoring system running?” It is, “Is it covering the risks that exist today?”
TD now says it is conducting transaction-monitoring coverage assessments more frequently and aligning monitoring more dynamically with its evolving financial-crime risk profile. This represents a shift from static monitoring to risk-responsive monitoring. TD Bank: Q3 2026 Results
2. The 92% gap exposed a coverage problem
Between January 1, 2018, and April 12, 2024, approximately 92% of TD’s transaction volume went unmonitored, representing approximately US$18.3 trillion.
The DOJ identified gaps involving domestic ACH, most checks, certain transaction types, high-risk-country transactions, peer-to-peer transactions and newer products. DOJ: TD Bank Case
The distinction between system capability and control coverage is critical. Sophisticated technology cannot compensate for missing transaction data or excluded channels.
Effective monitoring requires:
Complete transaction coverage
Relevant customer information
Risk-based scenarios
Appropriate thresholds
Continuous scenario tuning
Investigation and feedback
3. Customer risk and transaction risk must connect
Transaction monitoring becomes more meaningful when assessed against customer profiles, expected behaviour and broader risk context.
The modern AML lifecycle is increasingly:
KYC → Customer Risk → Transaction Monitoring → Investigation → Reporting → Risk Reassessment
TD has deployed the first phase of a new KYC platform to certain business users, enabling a single KYC profile, while implementing additional phases. It has also adopted a data-driven financial-crime risk assessment methodology and enhanced customer-screening capabilities. TD Bank: 2025 Annual Report / Form 40-F
The objective is continuous customer risk management, not simply better onboarding.
4. Suspicious activity reporting became another vulnerability
FinCEN identified approximately US$1.5 billion in suspicious transactions that TD failed to report through suspicious activity reports (SARs). TD’s subsequent disclosures also describe continuing lookback reviews and remediation work. TD Bank: Fiscal 2025 Results and AML Remediation Update
The AML lifecycle can fail at multiple stages:
Transaction → Detection → Alert → Investigation → Escalation → SAR
Therefore, improving AML requires more than reducing false positives or purchasing a sophisticated monitoring platform. Detection-to-reporting workflows must function as an integrated system.
TD’s remediation includes investigative workflow improvements, case-management enhancements, data improvements and continuing lookback reviews. TD Bank: 2025 Annual Report / Form 40-F
5. The human element
The DOJ found that one laundering network was assisted by five TD employees, while the identified laundering networks moved more than US$670 million through TD accounts between 2019 and 2023. DOJ: TD Bank Case
In 2026, former TD assistant store manager Wilfredo Aquino was sentenced to 46 months in prison after facilitating a network that moved approximately US$474 million through TD accounts. DOJ: TD Bank Insider Case
AML controls must therefore address not only suspicious customers but also insider activity and control circumvention through training, escalation, surveillance, access controls, behavioural monitoring, management oversight and independent testing.
From AML Failure to Regulatory Reckoning
On October 10, 2024, TD entered coordinated resolutions with U.S. authorities.
The DOJ announced a resolution exceeding US$1.8 billion, while TD Bank, N.A. pleaded guilty to violations involving inadequate AML controls, inaccurate Currency Transaction Reports and money laundering. The overall resolution reached approximately US$3.088 billion. DOJ: TD Bank $1.8B Resolution TD Bank: Resolution of AML Investigations
TD also became subject to:
Independent compliance monitorship
Remediation requirements
Additional governance obligations
Regulatory oversight
A US$434 billion asset limitation
Restrictions around certain new U.S. products, services, markets and stores pending regulatory acceptance
The message was clear: AML weaknesses can become a constraint on an entire banking business. TD Bank: Resolution of AML Investigations
When AML Risk Became a Strategic Growth Risk
TD’s AML story also intersects with its proposed US$13.4 billion First Horizon acquisition, announced in February 2022.
The transaction was terminated in May 2023 after TD informed First Horizon that it did not have a timetable for obtaining the required regulatory approvals. TD paid First Horizon a US$200 million termination payment plus a US$25 million fee reimbursement. SEC: TD Bank and First Horizon Merger Termination
The deal should not be presented as having been cancelled because of the later October 2024 AML enforcement action; the timing does not support that direct causal claim.
It nevertheless illustrates a broader principle: regulatory risk can affect strategic growth before appearing as a traditional compliance expense.
The Turning Point: TD Rebuilds Its AML Architecture
TD’s remediation extends well beyond adding transaction-monitoring rules. The bank describes work spanning:
Root-cause assessments
Data preparation
System design
Policies and standards
Training
Processes
Testing
Control implementation
Technology
Staffing
Governance
The transformation is therefore not simply a software implementation. It is an AML operating-model transformation.
A New Transaction-Monitoring Platform
TD has deployed a new transaction-monitoring platform with enhanced scenario coverage and capabilities.
The new model is intended to support broader scenario coverage, responsive risk assessment, improved detection, investigative processes and advanced analytics. TD’s 2025 Annual Report describes improvements to transaction-monitoring capabilities, a new transaction-monitoring system, planned scenarios and the first phase of machine-learning analysis. TD Bank: 2025 Annual Report / Form 40-F
The philosophy is shifting from:
Rules → Alerts
to:
Risk assessment → Data → Behaviour → Detection → Investigation → Feedback → Risk reassessment
AI and Machine Learning in TD Bank's AML Transformation
TD has introduced specialized artificial intelligence and machine-learning capabilities as part of its AML remediation.
Its 2025 Annual Report describes the deployment of the first phase of machine-learning analysis within the new transaction-monitoring system, designed to improve the effectiveness and efficiency of investigative teams. TD Bank: 2025 Annual Report / Form 40-F
The significance is not simply that TD is using AI. Advanced analytics can help identify patterns that conventional static rules may not capture effectively.
A modern AML architecture can combine:
Rules-based detection + Behavioural analytics + Customer risk + Network relationships + External intelligence + Machine learning + Human investigation
AI does not remove investigators or governance. Its value lies in helping investigators prioritize complex risks.
Building a Financial-Crime Data Foundation
TD says it is deploying dedicated Financial Crime Risk Management (FCRM) data environments intended to create a single source of truth for advanced detection.
AML information can otherwise remain fragmented across KYC, core banking, payment, transaction-monitoring, sanctions, adverse-media, case-management and customer-risk systems.
A unified environment can connect:
Customer → Accounts → Transactions → Counterparties → Entities → Geographies → Risk Indicators → Investigations → Outcomes
This creates a stronger foundation for advanced analytics and network-based financial-crime detection.
KYC Is Moving From a Point-in-Time Process to a Continuous Risk Capability
TD’s new KYC platform enables a single customer profile, alongside a new data-driven financial-crime risk assessment methodology and enhanced customer screening. TD Bank: 2025 Annual Report / Form 40-F
Customer risk can change after ownership changes, geographic expansion, unusual transactions, high-risk counterparties or adverse media.
The objective is simple:
Know the customer not only when the relationship begins, but as the relationship changes.
Scaling People and Governance Behind TD's AML Controls
Technology cannot repair an AML program alone.
TD disclosed a U.S. AML leadership structure with more than 40 titled officers and more than 700 additional resources across investigative and change-management roles. TD Bank: AML Remediation and Leadership Update
The emerging model is:
Technology + Data + People + Processes + Governance
Approximately $500 Million a Year: The New Economics of AML
TD originally disclosed approximately US$500 million of expected annual expense for AML remediation and related governance and control activities, with this level expected through fiscal 2026. Subsequent disclosures continued to place expected FY2026 U.S. BSA/AML remediation and related investment at approximately US$500 million pre-tax. TD Bank: AML Remediation Investment Update TD Bank — Fiscal 2025 Results
This is not spending on one AML platform. It covers people, technology, KYC, transaction monitoring, data, investigations, training, governance, testing, lookbacks and control enhancements.
The lesson is significant:
AML is inexpensive when measured only as a software line item. AML becomes much more expensive when an institution has to rebuild an entire control environment.
From "Flat Cost" to Continuous Investment
The DOJ described TD’s historical “flat cost paradigm,” under which senior executives required the AML budget not to increase year over year even as profits and risk increased. DOJ: TD Bank AML Enforcement Findings
The contrast with the current model is substantial:
Before: Control expenditure treated as a cost to contain.
Emerging model: Financial-crime controls treated as a capability to build and sustain.
AML, Customer Protection and Trust
Stronger AML controls do not necessarily require maximum customer friction.
A risk-based approach can combine:
Customer risk assessment
Transaction monitoring
Payment screening
Customer screening
Adverse-media monitoring
Network analytics
AI-assisted investigation
Continuous KYC
Employee monitoring
Case management
The objective is intelligent friction: efficient processing for legitimate low-risk activity and stronger intervention when risk increases.
TD ranked #1 in customer satisfaction with mobile banking apps in the 2026 J.D. Power Canada study. It also reported 8.8 million active Canadian mobile clients and more than 2 billion mobile sessions during fiscal 2025. TD Bank: J.D. Power 2026 Mobile Banking Study
These figures do not prove that AML remediation restored customer trust. They demonstrate that a large bank can strengthen financial-crime controls while continuing to invest in digital customer experience.
The $434 Billion Asset Cap and Renewed U.S. Banking Momentum
The 2024 resolution imposed a US$434 billion limitation on the average combined total assets of TD’s two U.S. banking subsidiaries. TD Bank: Resolution of AML Investigations
TD subsequently restructured its U.S. balance sheet through sales and wind-downs of non-core and non-scalable loan portfolios and other actions.
This demonstrates that financial-crime compliance can influence the balance sheet, products, expansion, acquisitions and capital allocation.
At the same time, Q3 fiscal 2026 results showed:
C$4.671 billion adjusted net income, up 21% year over year
C$2.77 adjusted diluted EPS, up 26%
C$1.074 billion U.S. Banking net income, up 41%
10.2% U.S. Banking reported ROE
Approximately US$771 million U.S. Banking adjusted net income
These results cannot be attributed solely to AML remediation. Balance-sheet restructuring, provisions, margins and other factors also contributed.
They do show that regulatory remediation and business recovery can occur simultaneously.
TD Bank's Financial Recovery During AML Remediation
TD’s NYSE-listed shares closed at approximately US$120.65 on September 25, 2026. Its market capitalization reached approximately US$198.6 billion, compared with approximately US$93.2 billion at the end of 2024, an increase of approximately 113%. TD Market Capitalization Data
A rising share price does not prove AML remediation caused the recovery. However, the data establishes that TD’s market valuation recovered substantially while its AML transformation was underway.
The Transformation Is Not Finished
TD’s AML success story requires an important qualification: substantial work remains.
Current remediation includes further KYC deployments, machine-learning and specialized AI deployments, an enhanced currency transaction reporting platform, dedicated FCRM data environments, financial-crime risk assessment, specialized training and lookback reviews. TD Bank: Q3 2026 Results
The SAR lookback is expected to continue into 2027, while management remediation remains subject to internal-audit validation, independent monitor review and regulatory and DOJ approval. TD Bank: Fiscal 2025 Results and AML Remediation Update
TD is therefore best described as a transformation in progress, not a completed AML remediation program.
What Changed: TD Bank's AML Transformation
Capability | Historical weakness | Transformation |
|---|---|---|
Transaction monitoring | Static monitoring and coverage gaps | New platform and expanded scenarios |
KYC | Identified deficiencies | Centralized platform and single customer profile |
Data | Fragmented information | Dedicated FCRM environments |
Analytics | Limited adaptation | AI, ML and advanced analytics |
People | Insufficient resources | 700+ resources and 40+ officers |
Governance | Cost-focused investment | Oversight, monitorship and sustained investment |
The shift is from compliance as a cost centre toward financial crime management as a risk-management capability.
From Static Compliance to Adaptive AML
Static AML
Rules → Systems → Alerts → Investigations → Repeat
Adaptive AML
Continuous customer risk assessment → Transaction monitoring → Emerging typologies → Coverage reassessment → AI and analytics → Investigation → Feedback → Control adaptation
TD’s current remediation increasingly reflects this second model, with more frequent transaction-monitoring coverage assessments and greater alignment between monitoring and its evolving financial-crime risk profile. TD Bank: Q3 2026 Results
What Financial Institutions Can Learn From TD Bank's AML Transformation
1. AML controls must evolve with financial crime
Criminal typologies, products, payment channels and customer behaviour change. AML controls cannot remain static.
2. Monitoring coverage matters as much as sophistication
The most advanced analytics engine cannot detect risk that never reaches it. Coverage comes before complexity.
3. KYC and transaction monitoring should operate as one ecosystem
Customer risk should influence monitoring, while monitoring outcomes should influence customer risk.
4. AI works best with human expertise
Machine learning can identify patterns and prioritize risk; investigators provide context, judgment and escalation.
5. Data is the foundation of financial-crime detection
Fragmented customer, transaction, entity and external-risk data can hide connected behaviour.
6. People remain a critical AML control
Investigators, compliance officers, risk specialists, frontline employees, governance and independent testing remain essential. TD’s 700+ additional resources demonstrate the scale of human investment required. TD Bank — AML Remediation and Leadership Update
7. Customer protection should be risk-based
Mature AML creates low friction for low-risk activity and stronger intervention where risk increases.
8. AML is ultimately an enterprise risk
TD’s experience connects AML with regulatory relationships, capital, balance sheet, products, M&A, customer trust and shareholder value.
The Cost of Fixing AML Versus the Cost of Ignoring It
TD’s journey provides a clear contrast.
Before: flat-cost AML investment → static monitoring → unresolved deficiencies → 92% unmonitored transaction volume → US$18.3 trillion in unmonitored activity → >$670 million through laundering networks → ~US$1.5 billion in improperly reported suspicious transactions → US$3.088 billion resolution → US$434 billion asset limitation. DOJ: TD Bank AML Case TD Bank: Resolution of AML Investigations
Transformation: ~US$500 million annual investment → 700+ resources → 40+ officers → new KYC → new transaction monitoring → expanded scenarios → AI/ML → FCRM data → enhanced investigations → continuous risk assessment → regulatory validation. TD Bank: AML Remediation Investment Update TD Bank: 2025 Annual Report / Form 40-F
The key lesson is that the cost of AML should be measured against the risk it protects the institution from, not simply against the annual compliance budget.
A New Role for AML: From Compliance Burden to Customer Protection
The most important shift in the TD Bank AML transformation may be conceptual.
Effective AML can protect:
Customers from financial crime
Banks from criminal exploitation
Payment systems from abuse
Institutions from regulatory exposure
Legitimate customers from unnecessary friction
Financial markets from illicit finance
The objective is therefore not simply to generate more alerts. It is to build better protection:
Know the customer → Understand risk → Monitor behaviour → Detect anomalies → Investigate → Report where required → Learn from outcomes → Adapt controls
That is the foundation of an adaptive AML framework.
Get Your AML Transformation Now With Complete AML System
TD Bank’s AML commitment and transformation should be an example for businesses that are behind AML compliance or have gaps that need to be filled. With “The Complete AML System” institutions can get name screening, transaction monitoring, and entity risk assessment all in one platform. Along with this, it can be integrated with Fraud Fighter, our fraud monitoring solutions, to make “The Complete FRAML System“.
Conclusion: TD Bank's AML Transformation
TD Bank’s journey demonstrates both the cost of allowing financial-crime controls to fall behind evolving risk and the potential of transformation.
The bank has invested in transaction monitoring, KYC, data, AI, machine learning, investigations, people, training, risk assessment and governance, alongside approximately US$500 million in annual AML remediation and related control investment for fiscal 2026. TD Bank: Fiscal 2025 Results and AML Remediation Update
Its broader financial performance has also strengthened, with Q3 2026 adjusted earnings up 21% year over year and market capitalization reaching approximately US$198.6 billion by September 25, 2026. TD Bank: Q3 2026 Results TD Market Capitalization Data
None of these outcomes can be attributed solely to AML remediation. But together they demonstrate that AML remediation does not have to be the end of a bank’s growth story; it can become part of its rebuilding story.
The transformation remains underway, and regulatory validation is still ahead. Yet TD’s direction demonstrates what can happen when AML moves from being treated as a cost constraint to being treated as a core financial-crime risk management capability.
For AML professionals, the central lesson is straightforward:
The goal of an AML program is not simply to avoid the next fine. It is to build an adaptive protection system that identifies changing risks, protects customers, supports investigators, satisfies regulators and allows legitimate financial activity to continue with confidence.
TD Bank’s journey from 92% of transaction volume going unmonitored to an architecture built around continuous risk assessment, expanded monitoring, KYC transformation, AI, machine learning, financial-crime data and enhanced human oversight illustrates that transformation in measurable terms. U.S. Department of Justice: TD Bank Case
The most effective AML program is not the one with the most rules. It is the one that can keep learning, adapting and protecting as financial crime evolves.
