FINRA Penalises Moors & Cabot $125,000 Over AML Monitoring Failures

US brokerage firm Moors & Cabot has been censured and fined $125,000 by the Financial Industry Regulatory Authority after regulators identified significant weaknesses in the firm's anti-money laundering programme, including shortcomings in transaction monitoring and the handling of alerts involving customer money movements.

The regulatory action concerns conduct that took place over several years and highlights the importance of ensuring that AML surveillance systems are capable of identifying suspicious activity across the full range of transactions conducted through a brokerage business.

According to the regulatory findings, Moors & Cabot failed between January 2020 and May 2024 to maintain and implement an AML programme reasonably designed to detect and trigger the reporting of suspicious transactions. The deficiencies also affected the firm's ability to conduct appropriate ongoing monitoring of customer activity.

A central issue was the firm's approach to monitoring movements of customer funds. Its surveillance framework did not adequately address the risks associated with certain types of money movement and was not sufficiently tailored to the firm's business activities.

The deficiencies meant that the firm's monitoring controls were not capable of consistently identifying potentially suspicious patterns that should have been investigated further.

The firm's surveillance framework also had gaps in the types of transactions capable of generating alerts. In particular, the monitoring system was not sufficiently designed to identify certain potentially suspicious activity beyond outgoing wire transfers, including activity that could indicate structuring or other unusual movements of funds.

This limitation is particularly important in the context of broker-dealer AML compliance. Customer accounts can be used for a variety of financial movements, and suspicious activity may not necessarily involve a conventional wire transfer. A robust programme therefore needs to consider the broader transaction profile of a customer and identify activity that appears inconsistent with the customer's known circumstances or expected account use.

FINRA also identified weaknesses in the firm's handling of alerts once they had been generated. Some alerts remained outstanding for more than a month before being reviewed, creating the possibility that potentially suspicious activity would not be assessed in a timely manner.

The quality of the reviews was another concern. In a number of cases, alerts were closed extremely quickly without evidence of a sufficiently meaningful investigation.

This creates a significant distinction between having an automated monitoring system and operating an effective AML programme. Generating alerts is only the first step. Compliance personnel must then assess the underlying transactions, consider the customer's profile and determine whether additional investigation or reporting is necessary.

Where alerts are routinely closed without adequate analysis, the existence of the monitoring system may provide little practical protection against money laundering.

The regulatory action therefore illustrates the importance of both technological controls and human oversight. Automated systems need to be appropriately calibrated to the risks faced by the business, while compliance teams must have sufficient resources, expertise and procedures to investigate alerts properly.

Moors & Cabot's case also demonstrates why transaction monitoring needs to evolve alongside the firm's business activities. A monitoring system that focuses on only a narrow selection of transaction types may fail to identify suspicious behaviour occurring through other channels.

Broker-dealers can face particularly complex money-movement risks because customer accounts may be used to receive and transfer funds, purchase and sell securities, move assets between accounts and conduct other financial transactions. Effective AML surveillance must therefore consider the complete customer relationship rather than treating individual transactions in isolation.

The firm's regulatory problems were not limited to AML controls. FINRA also found that Moors & Cabot failed to provide Form CRS to 3,264 retail investors between June 2020 and March 2023.

Form CRS is intended to provide retail investors with information concerning the services offered by a firm, fees and costs, conflicts of interest and other relevant considerations when dealing with an investment professional.

The firm also did not maintain a supervisory system reasonably designed to ensure that the required disclosures were delivered to affected customers.

The two sets of deficiencies resulted in separate regulatory findings, with the AML shortcomings relating to FINRA's requirements for an effective anti-money laundering programme and the disclosure failures involving securities-law and supervisory obligations.

The case nevertheless illustrates a broader regulatory expectation: financial firms must maintain effective systems capable of translating written compliance requirements into actual operational controls.

For AML purposes, that means firms need to establish procedures that identify suspicious activity, generate appropriate alerts, ensure timely reviews and provide a clear basis for escalation and reporting.

It is not sufficient for a firm's written AML programme to contain broad commitments to monitoring if the underlying technology does not detect the relevant activity or if alerts are not investigated adequately.

The regulatory action is also significant because the deficiencies persisted over a substantial period. The relevant AML shortcomings extended from 2020 through May 2024, meaning that the weaknesses were not confined to a short-lived technical problem.

Long-running deficiencies can create increased exposure because they allow potentially suspicious activity to pass through a firm's controls without appropriate review over an extended period.

The case reinforces the importance of regular independent testing of AML programmes. Testing should examine whether controls operate effectively in practice rather than merely confirming that policies and procedures exist.

A meaningful review may involve examining actual transactions, assessing alert-generation logic, testing escalation procedures and reviewing whether investigators document sufficient reasoning when alerts are closed.

This is particularly important where a firm's own testing or compliance reviews identify weaknesses. Findings should result in clearly documented remediation, assigned responsibility and appropriate follow-up to establish whether corrective measures have actually resolved the problem.

For financial institutions, the case also highlights the importance of ensuring that AML systems are appropriately aligned with the firm's risk assessment.

Transaction monitoring scenarios should reflect the products and services offered, customer base, geographic exposure and types of financial activity conducted through the institution. Controls designed around a limited set of traditional transaction types may fail to identify emerging or less conventional forms of suspicious activity.

The ability to identify structuring is another important component of effective monitoring. Criminals may attempt to divide transactions into smaller amounts or use multiple movements of funds to avoid detection. Monitoring systems therefore need to consider patterns over time rather than evaluating transactions exclusively on an individual basis.

The same principle applies to money movements that appear unusual when compared with a customer's expected activity. A transaction may not be suspicious on its own, but a series of transactions can create a significantly different risk picture when assessed collectively.

This makes ongoing monitoring an essential part of AML compliance.

Customer due diligence does not end when an account is opened. Firms need to maintain an understanding of customer activity throughout the relationship and update their risk assessments when circumstances change or unusual behaviour emerges.

The Moors & Cabot case provides a practical example of the consequences when monitoring systems do not adequately support that continuing assessment.

The firm's response has included changes to its AML procedures and surveillance capabilities. Additional monitoring alerts have been introduced, while the firm has also implemented a new system intended to improve the tracking of Form CRS delivery.

These remedial measures reflect the type of response expected when weaknesses are identified in compliance infrastructure. Adding surveillance scenarios can improve detection, but firms must also ensure that the resulting alerts can be reviewed promptly and consistently.

The quality of alert investigations is particularly important. A compliance analyst should be able to establish why an alert was generated, examine relevant customer and transaction information, document the investigation and determine whether the matter should be escalated.

A rapid closure without meaningful analysis can undermine the effectiveness of the entire monitoring framework.

The regulatory action also serves as a reminder that compliance resources need to be proportionate to the firm's risk exposure. If monitoring generates a large number of alerts, firms must ensure that they have adequate personnel and systems to review them within an appropriate timeframe.

Unresolved alerts accumulating over weeks can indicate that a firm has either insufficient resources, poorly calibrated monitoring thresholds or inadequate escalation procedures.

For broker-dealers, this can create significant regulatory exposure because the obligation to maintain an AML programme is not satisfied simply by outsourcing parts of the monitoring process or relying on automated technology.

Senior management and compliance personnel remain responsible for ensuring that the overall framework operates effectively.

Moors & Cabot has been a FINRA member for decades and operates through a network of branch offices with registered representatives providing wealth management, financial planning and investment advisory services. The case therefore demonstrates that even established financial firms with longstanding regulatory histories can face enforcement action when compliance controls do not keep pace with their operational risks.

The enforcement action also comes against a wider backdrop of increasing scrutiny of AML controls across the US financial sector. Regulators have continued to focus on transaction monitoring, suspicious activity reporting, customer due diligence and the ability of firms to detect potentially illicit movements of funds.

Broker-dealers can be particularly vulnerable to financial-crime risks because securities accounts may be used to move, convert or layer funds and assets. Regulators therefore expect firms to maintain monitoring systems capable of identifying suspicious financial behaviour rather than focusing exclusively on traditional banking transactions.

The Moors & Cabot case reinforces that expectation.

For compliance departments, one of the main lessons is that AML monitoring needs to be comprehensive, risk-based and demonstrably effective. Firms should regularly assess whether their transaction-monitoring scenarios cover all relevant channels, whether thresholds remain appropriate, whether alerts are reviewed promptly and whether investigators have sufficient information to reach defensible conclusions.

Firms should also ensure that closed alerts leave an adequate audit trail. Documentation should demonstrate what information was considered, why the activity was or was not considered suspicious and whether further action was required.

Without such documentation, it can be difficult for a firm to demonstrate to regulators that its AML programme is functioning effectively.

The action against Moors & Cabot ultimately illustrates the difference between having AML policies and having an AML system that works in practice. A compliance framework must be capable of detecting relevant activity, escalating meaningful alerts and supporting timely and well-documented investigations.

The $125,000 penalty and censure provide a clear regulatory reminder that weaknesses in transaction monitoring can result in enforcement even where a firm has formal AML procedures in place.

For broker-dealers and other financial institutions, the broader message is that AML programmes must continually evolve with the risks associated with their businesses. Monitoring should cover the full range of customer money movements, alerts should be investigated without unnecessary delay and compliance teams must be equipped to distinguish genuine risk from routine activity.

Effective AML compliance ultimately depends not on the existence of policies alone, but on whether those policies are translated into functioning systems, timely investigations and meaningful action when suspicious activity is identified. By fLEXI tEAM