Six years after the FinCEN Files leak, the question that still hangs over HSBC is not what happened — it is what changed. The answer, from the evidence available, is complicated and far from settled.
The leaked documents were massive. Over 2,100 suspicious activity reports, covering more than 200,000 transactions between 1999 and 2017. The total value involved: over US$2 trillion. HSBC was one of the institutions named. The core accusation, reported by BuzzFeed News and the ICIJ in September 2020, was that banks filed these reports with FinCEN, and then both the banks and the U.S. Treasury agency did little to stop the money laundering those reports flagged.
HSBC itself did not receive a headline fine from the scandal. That does not mean the bank escaped consequence. Regulators in the U.S. and the UK reopened their scrutiny. The bank has since spent heavily on compliance systems. It has publicly stated it has taken significant steps to prevent money laundering and other financial crimes.
Critics are not convinced. They argue the bank’s culture and its daily practices have not shifted enough to prevent a repeat. The BBC summarized the global reaction bluntly: the documents showed how “the world’s biggest banks have allowed criminals to move dirty money around the world.” That sentence did not age into irrelevance. It remains the central charge.
Here is what the fallout actually looks like. For regulators, the leak forced a reckoning with a system that was supposed to catch this stuff. FinCEN had the intelligence. The banks had the intelligence. Yet the activity continued. The U.S. government faced criticism from journalists worldwide for its own inaction. The question became: if the system is generating reports but not stopping crime, what is the system for?
For HSBC, the cost is not just financial. It is reputational and operational. The bank now operates under a cloud that other banks do not. Every new compliance announcement is met with skepticism. Every regulatory filing gets extra attention. The bank argues it has learned. But the FinCEN Files showed a pattern of behavior that spanned nearly two decades. Changing that takes more than a press release.
The broader financial industry felt the shock too. The leak demonstrated that money laundering is not a side issue for global banks. It is a core function of how they move money. The SARs were filed by institutions in over 170 countries. This is not a problem isolated to one firm or one jurisdiction. It is structural.
What to watch next is simple. Regulators in the U.S. and UK have not closed their books on HSBC. The bank’s compliance spending will be tested. Critics will watch for the next leak, the next scandal, the next sign that the culture has not changed. The FinCEN Files did not end money laundering. They just made it impossible to pretend it was not happening.
