When banks fail to stop money laundering, fraud or sanctions evasion, the coverage usually centres on penalties, technology gaps and broken processes. What rarely gets attention is the organisational culture that allowed those failures to happen.
According to Argus Pro, that culture is one where staff feared speaking up, leaders dismissed concerns and profit routinely beat protection.
The pattern repeats across major scandals of the past two decades. Policies existed and whistleblowing procedures sat in staff handbooks, yet warnings were raised and then quietly buried.
Between 2006 and 2010, HSBC Bank USA processed at least $881m in drug trafficking proceeds, including Sinaloa Cartel funds. It later paid $1.92bn under a deferred prosecution agreement with the US Department of Justice. The legal judgement called it a case of ‘stunning failures of oversight.’ Court documents show an AML employee warned of a ‘staffing crisis’ in April 2008, but requests for resources were repeatedly refused until staff stopped asking.
Danske Bank’s Estonian branch handled an estimated €200bn in suspicious transactions between 2007 and 2015. A whistleblower reportedly raised concerns from 2013 and was ignored. US authorities fined the bank over $2bn in 2022.
At Wirecard, whose 2020 collapse involved €1.9bn that likely never existed, leadership attacked sceptical Financial Times journalists rather than investigate their claims. Closer to home, NatWest became the first UK bank convicted under the Money Laundering Regulations 2007, paying £264.8m after roughly £365m was laundered through gold dealer Fowler Oldfield.
Psychological safety, a term coined by Harvard Business School professor Amy Edmondson, describes the belief that raising concerns will not bring punishment or humiliation. Google’s Project Aristotle found it was the strongest factor in team effectiveness. In compliance, it determines whether an analyst challenges a suspicious transaction or a junior employee files a Suspicious Activity Report despite a doubtful manager.
Inclusion matters too. Homogeneous teams share assumptions about what normal business looks like and develop blind spots. A 2018 IMF study linked gender diversity on bank supervisory boards to greater stability. Yet compliance teams are often disproportionately staffed by underrepresented groups, while senior and revenue roles remain less diverse. The people most likely to spot problems may be the least likely to be heard.
Regulators are paying attention. The FCA treats toxic culture as both a conduct and a financial crime risk, while the Consumer Duty and SM&CR place cultural accountability firmly on senior leaders.
The economics are stark. Cultural interventions cost a fraction of a single major fine. Firms should measure psychological safety as a compliance metric, give compliance genuine controlling authority, build real speak-up cultures, diversify compliance leadership pathways and train managers to receive concerns well. Culture is not a soft issue. It may be a firm’s hardest control.
Read the full Argus Pro post here.
Copyright © 2026 FinTech Global
