Swedbank Agrees to $50 Million Penalty After New York Investigation Finds Failures to Fully Disclose Panama Papers Connections

Swedbank and its New York branch have agreed to pay a $50 million penalty to settle an investigation that found the institution failed to provide regulators with critical information about relationships linked to the Panama Papers leak. The inquiry determined that the bank did not carry out adequate due diligence on shell companies associated with customers identified in the leak and repeatedly failed to fully comply with official requests for information concerning its ties to high-risk offshore entities and foreign legal service providers. Announcing the enforcement action, Acting Superintendent Kaitlin Asrow said, “the department holds licensed entities to strict standards of transparency and regulatory cooperation to maintain financial system integrity.” The case serves as a significant reminder of the consequences financial institutions face when they conceal activities involving Baltic subsidiaries and cross-border money laundering risks from state authorities.

The strength and stability of the international financial system rely on complete transparency, particularly when regulators are investigating offshore structures and high-risk jurisdictions that come under scrutiny following major data leaks. After the 2016 Panama Papers exposed extensive offshore financial networks, the New York State Department of Financial Services initiated an investigation into the relationships between institutions it licenses and the law firm Mossack Fonseca. According to regulators, Swedbank failed to cooperate as required during that inquiry. Rather than providing a complete picture of its exposure, the bank limited its responses to activities conducted through its New York branch while omitting information concerning the broader organization, despite requests covering the institution as a whole. Regulators concluded that these omissions prevented investigators from understanding the full extent of the bank’s exposure and illustrated how international operations can be used to obscure illicit financial risks from supervisory authorities.

The investigation found that Swedbank failed to disclose information relating to its Baltic subsidiaries in Latvia, Lithuania, and Estonia, despite legal obligations under New York banking laws requiring full cooperation and complete disclosure during regulatory examinations. Authorities determined that these subsidiaries maintained significant relationships with customers who used Mossack Fonseca as a registered agent, exposing the bank to substantial anti-money laundering risks that warranted heightened scrutiny. Regulators stressed that they depend on complete, accurate, and timely information to evaluate whether licensed institutions maintain effective safeguards against illicit financial activity. Any effort to narrow or limit the scope of a regulatory inquiry, they noted, undermines the stability and integrity of the broader financial system.

State officials concluded that the failure to disclose these relationships represented far more than an administrative mistake. Instead, they viewed it as evidence of serious weaknesses within the institution’s compliance culture. Financial institutions licensed to operate in New York are expected to actively cooperate with regulatory investigations, and deliberately withholding information concerning international clients or parallel foreign regulatory inquiries constitutes a significant breach of those responsibilities. By concealing connections to offshore service providers and high-risk shell companies, the bank impaired regulators’ ability to identify and address financial crime risks, ultimately resulting in substantial financial penalties and lasting reputational harm.

Investigators also found that over a two-year period the department submitted multiple formal requests seeking comprehensive information about the bank’s connections to individuals and entities identified in the Panama Papers. Rather than performing an institution-wide review, Swedbank excluded information from its Baltic operations while creating the impression that those business units were being examined. Regulators concluded that this exclusion concealed numerous customer relationships within the Baltic region involving offshore structures administered by Mossack Fonseca. The investigation further determined that the bank withheld details regarding ongoing inquiries by European regulators who were already examining similar high-risk activities involving its subsidiary network.

According to the department’s findings, the case illustrates a broader issue in which foreign parent institutions attempt to isolate their domestic operations from regulatory scrutiny directed at overseas affiliates, despite functioning as integrated financial organizations. Investigators determined that employees understood the Baltic subsidiary information should have been included in responses submitted to New York regulators, yet a corporate decision was made to withhold the material to avoid exposing significant compliance deficiencies. Authorities further found that by failing to disclose adverse findings already identified by European regulators, the bank prevented New York supervisors from accurately assessing the risks facing its local branch, whose operations depended on the financial stability and compliance standards of the parent institution.

Regulators concluded that concealing these relationships allowed individuals identified in the Panama Papers to continue accessing banking services without receiving the level of enhanced due diligence or regulatory reporting that their risk profiles required. They emphasized that financial institutions cannot separate compliance responsibilities by shielding high-risk regional operations from regulators in jurisdictions where they are licensed to conduct business. The department stated that withholding information about enforcement actions or regulatory findings by foreign authorities constitutes a serious breach of trust and legal obligations, weakening international cooperation designed to combat illicit finance.

As part of moving forward, regulators indicated that Swedbank must undertake sweeping improvements to its compliance framework, regulatory reporting systems, and corporate governance. Although the investigation focused on conduct dating back nearly a decade, officials said the resolution closes a lengthy and damaging chapter that revealed both inadequate oversight and deliberate failures to comply with regulatory expectations. Going forward, the institution is expected to establish transparent reporting channels that ensure information originating from its Baltic subsidiaries is readily available to regulators around the world. Corporate leadership must also create an environment in which compliance personnel can report risks and respond to regulatory inquiries without interference, suppression, or internal obstruction.

Authorities further stressed that effective global anti-money laundering programs require seamless information sharing across all regions of an international banking organization so that no subsidiary can conceal high-risk customers or activities from central compliance functions. Regulators expect the bank to implement centralized systems that allow compliance personnel in New York to access beneficial ownership information and customer risk profiles maintained by operations in Latvia, Lithuania, and Estonia. Such an integrated framework is considered essential for identifying cross-border money laundering schemes while ensuring regulatory disclosures accurately reflect the institution’s overall risk exposure.

The settlement reinforces the principle that regulatory cooperation is mandatory and that financial institutions must respond to every government inquiry with complete transparency, even when doing so reveals historical compliance failures. Regulators emphasized that restoring confidence will require a sustained commitment to openness, independent reviews of data production and reporting practices, and the abandonment of any corporate strategy that places reputational concerns ahead of legal and regulatory obligations. Only through a comprehensive transformation of its compliance culture, authorities concluded, can the institution rebuild trust with regulators and strengthen its standing within the international financial system.

By fLEXI tEAM