FIN 341 Module 7 Final Project Example

Incident Analysis and Recommendations: Lessons From TD Bank for a Regional Bank

[Student Name]

Southern New Hampshire University

FIN 341: Financial Regulations and Ethics

Final Project

[Instructor Name]

[Date]

The organization, setting and figures below are a composite written as a model document. No real employer, client, colleague or patient is described.

Incident Analysis and Recommendations: Lessons From TD Bank for a Regional Bank

Executive Summary

TD Bank's 2024 guilty plea to Bank Secrecy Act and money laundering charges was the result of a governance decision repeated over a decade: leaders held anti-money laundering spending flat while the bank grew, and every downstream control weakened as a result. The board of the Hartford bank asked whether the same conditions exist in its own program. Our review of TD's case points to three priorities for the client: tie compliance resources to growth with a board-approved formula, close any gap between total transaction volume and the volume that monitoring actually covers, and remove single points of failure in branch cash controls. Nine recommendations in priority order, with owners, costs and measures, follow in this report.

The Incident in Brief

TD Bank, N.A., the U.S. retail arm of Canada's Toronto-Dominion Bank, built its growth on convenience. In October 2024 it and its U.S. holding company pleaded guilty to federal charges after failing for years to maintain an adequate anti-money laundering program. The Justice Department reported that about $18.3 trillion of transactions went unmonitored over six years, that three networks moved more than $670 million through the bank, and that one customer deposited more than $470 million in cash while giving employees gift cards (U.S. Department of Justice, 2024). Penalties across four U.S. authorities totaled about $3.09 billion, with independent monitors and a cap on the size of TD's U.S. banks.

Legal and Regulatory Analysis

The violations fall under three bodies of law. The Bank Secrecy Act required TD to maintain an effective program, file accurate reports on large cash transactions and report suspicious activity; it failed on all three. Federal money laundering statutes made it a crime to conduct transactions with criminal proceeds, which the bank conspired to do through employees who knowingly assisted a network. Banking law gave the Comptroller of the Currency authority to restrict the bank's growth for unsafe practices. For the Hartford client, the same Bank Secrecy Act duties apply in full; its exams come from the FDIC and the Connecticut Department of Banking rather than the OCC, but FinCEN and federal prosecutors have identical reach.

Ethical Analysis

The ethical failures ran from the boardroom to the branch. Leaders treated a duty the bank had accepted in exchange for its charter as a cost to be minimized; managers let alerts and audit findings wait; some front-line employees took bribes. The budget decision is the most consequential because it made the later failures likely. Under any of the major frameworks it fails: it produced far more harm than savings, it disregarded a clear obligation and it reflected neither prudence nor integrity. Harm reached people who never banked at TD, including communities affected by the drug trade the money came from.

System Flaws

Six weaknesses in the bank's machinery let those choices compound year after year: governance that received warnings without changing resources, a risk assessment that did not grow with the bank, monitoring that excluded entire payment types, understaffed investigations, branch controls that relied on a single employee and audit findings left open. Ellul and Yerramilli (2013) found that banks with stronger and more independent risk functions took less risk, which supports addressing governance and independence first.

Recommendations

Prioritized recommendations for the Hartford bank

Why This Order

The first recommendation comes first because it addresses the root cause: no other fix lasts if the program is starved of resources again in two years. Recommendations two through five fix the specific controls that failed at TD and that the client can test immediately. Six through eight close the routes by which individual misconduct spread and stayed hidden. The ninth is last not because culture matters least but because it is measured over years. The total added cost, about $6.6 million in the first year and about $5.5 million after, is less than 2 percent of the bank's annual noninterest expense and a small fraction of what a single enforcement action would cost. In a large executive survey, most respondents believed a better culture would make their company more valuable (Graham et al., 2022), but that culture changes only when leaders' decisions consistently match stated values; the budget formula is the clearest such decision the board can make.

Implementation Plan

In the first three months, the bank should adopt the finding deadlines, the gifts rule, the hotline and out-of-branch cash review, which are inexpensive and fast. Between months three and nine, the independent risk assessment should be completed and used to fix monitoring coverage and staffing levels. By month twelve, the budget formula should be in the approved budget, the culture survey should have produced a baseline and the board should receive its first full-year review. A respected study of corporate ethics programs found that employees judge such programs by whether leaders follow through, not by what is written (Treviño et al., 1999), so the board should publicize completion of each phase internally.

Monitoring

The board risk committee should receive a one-page dashboard every quarter showing compliance budget growth against volume growth, the share of transaction volume covered by monitoring, alert aging, the number and age of open findings, hotline reports and their outcomes, and attestation rates. Any measure that moves in the wrong direction for two quarters should trigger a written explanation from its owner.

Conclusion

TD Bank did not fail because it lacked rules or because a few employees went wrong. It failed because leaders repeatedly chose cost and convenience over a duty they understood, and its systems carried that choice into every corner of the bank. The Hartford bank is smaller and has not had a serious finding, which is exactly the moment when these recommendations are cheapest to adopt.

References

Ellul, A., & Yerramilli, V. (2013). Stronger risk controls, lower risk: Evidence from U.S. bank holding companies. The Journal of Finance, 68(5), 1757-1803. https://doi.org/10.1111/jofi.12057

Graham, J. R., Grennan, J., Harvey, C. R., & Rajgopal, S. (2022). Corporate culture: Evidence from the field. Journal of Financial Economics, 146(2), 552-593. https://doi.org/10.1016/j.jfineco.2022.07.008

Treviño, L. K., Weaver, G. R., Gibson, D. G., & Toffler, B. L. (1999). Managing ethics and legal compliance: What works and what hurts. California Management Review, 41(2), 131-151. https://doi.org/10.2307/41165990

U.S. Department of Justice. (2024, October 10). TD Bank pleads guilty to Bank Secrecy Act and money laundering conspiracy violations in $1.8B resolution [Press release]. https://www.justice.gov/archives/opa/pr/td-bank-pleads-guilty-bank-secrecy-act-and-money-laundering-conspiracy-violations-18b