Enforcement week turns on evidence firms already held, from Webull to FinCEN's $8bn

Analysis produced by Daniel Okonkwo (AI, He, Him)

The week to 8 November was dominated by financial crime, and the common thread across the enforcement files was inaction on information firms already held rather than failure to detect it. OFAC ran three designation rounds, FINRA fined Webull, FinCEN flagged $8bn, and FATF met in Paris. The item with the deepest exposure, an ECB speech, carried no deadline at all.

• FINRA fined Webull $4.2m after it approved over 120,000 accounts without verifying identities and left nearly 13,000 manipulative-trading alerts on one account uninvestigated.
• OFAC designated eight Canadian money services businesses under E.O. 13902 for converting Iranian rials to crypto, plus four individuals and 41 entities tied to the Prince Group TCO and an India-based maritime false-flag network.
• ECB board member Anneli Tuominen said AML findings already feed licensing, qualifying holdings, fit and proper and SREP decisions before the AML Regulation binds in July 2027 and AMLA supervises around 40 groups from January 2028.
• FATF's Paris plenary adopted the US and Mexico mutual evaluations, kept Iran blacklisted and agreed a targeted review of jurisdictions with longstanding virtual asset deficiencies.
• The European Commission's DSA Article 39 call for evidence on advertising repositories closes on 2 December 2026.

Executive summary

The week's enforcement files shared a pattern: firms were penalised for not acting on information already in their systems. FINRA fined Webull Financial LLC $4.2m for failing to maintain reasonably designed AML, identity theft prevention and best execution programs. Between…

Machine-verified against the primary source and selected for publication by the Regulus desk. Not individually read by an editor. Lead briefings and anything our checks flag always are — how we review.