HSBC and the Sinaloa cartel

As of August 2026: HSBC's five-year deferred prosecution agreement expired on December 11, 2017, and the deferred charges were dismissed the following day after the DOJ concluded the bank had met its commitments. No individual or corporate conviction was entered in this matter.

Also known as: HSBC money laundering case.

What happened?

In December 2012, HSBC, then Europe’s largest bank, admitted that years of anti-money- laundering failures had turned parts of its network into infrastructure for drug cartels. The US Department of Justice found that at least $881 million in drug proceeds, including money belonging to Mexico’s Sinaloa Cartel and Colombia’s Norte del Valle Cartel, had been laundered through HSBC Bank USA, largely by way of its Mexican affiliate, HSBC Mexico.

The most vivid detail came from the DOJ’s statement of facts, echoed in a US Senate investigation published five months earlier: traffickers deposited hundreds of thousands of dollars in cash daily at HSBC Mexico branches, using specially shaped boxes designed to fit the dimensions of the teller windows, so the maximum amount of cash could pass across the counter in a single visit. A Mexican drug lord reportedly called the bank “the place to launder money.”

On December 11, 2012, HSBC entered a five-year deferred prosecution agreement and paid a then-record $1.921 billion: a $1.256 billion forfeiture to the DOJ plus roughly $665 million in civil penalties, including $500 million to the OCC and FinCEN and $165 million to the Federal Reserve.

Which techniques did it use?

The scheme was, at bottom, industrial-scale placement: street drug cash entering the banking system in bulk. It could work only because the controls that should have made bulk cash conspicuous were switched off. US authorities found HSBC had failed to monitor enormous volumes of activity, rated high-risk countries as low risk, and left suspicious flows unreviewed. As a result, daily teller-window deposits of drug money in Mexico simply blended into the bank’s ordinary cash business, and the resulting balances moved freely into the US financial system through the group’s own network and correspondent-banking links.

According to the DOJ, a significant portion of the laundered proceeds moved through the Black Market Peso Exchange, the classic trade-based circuit for Latin American drug money: peso brokers take custody of drug dollars in the United States, sell them to importers who need dollars to buy goods, and repay the cartel at home in local currency, so the dirty dollars never have to cross the border as cash. A banking system that asks few questions is exactly what the dollar side of that circuit requires.

The Senate investigation added a further channel: HSBC’s US-dollar services for Mexican casas de cambio: currency-exchange houses, including Casa de Cambio Puebla, that US authorities suspected of laundering for the Sinaloa and Norte del Valle cartels. Dollars flooded from the exchange houses into the bank even as red flags accumulated internally.

How was it found?

Not by the bank. The case was assembled by US law enforcement and regulators investigating cartel finances and by Congress. In July 2012, the Senate Permanent Subcommittee on Investigations published a book-length case history of HSBC’s AML failures (covering the Mexican cash business, the casa de cambio relationships, and the compliance function that had been overwhelmed for years) and put HSBC executives before a public hearing on July 17, 2012. Five months later, the DOJ’s criminal resolution confirmed the picture with the bank’s own admissions.

The sequence matters for how detection actually works: the volume of unreported and unreviewed activity meant the Bank Secrecy Act paper trail, the currency reports and suspicious activity reports that normally feed investigations, was largely missing. Investigators had to reconstruct the flows from the outside, which is why the case took years and why the failures ran so long.

What was the outcome?

A deferred prosecution agreement, not a conviction. Under the December 2012 deal, the DOJ filed charges but agreed to hold them in abeyance for five years while HSBC paid the $1.921 billion, admitted a detailed statement of facts, overhauled its compliance program, and submitted to an independent compliance monitor, Michael Cherkasky, installed in July 2013.

The arrangement was controversial from the start: a bank that admitted laundering cartel money faced no trial, and no executives were prosecuted in the resolution. It fed a public debate about whether the largest banks had become effectively too big to prosecute. But the deal ran its course: the DPA expired on December 11, 2017, and the next day the court dismissed the deferred charges, the DOJ having concluded HSBC met its commitments.

What changed afterwards?

Within the bank, five years under a monitor forced a rebuild of compliance, though the ICIJ’s FinCEN Files reporting in 2020 showed HSBC continued to move large sums of suspect money even after the fine, a reminder that remediation on paper and behavior in the payment flows are different things.

For enforcement, HSBC became the benchmark that later cases were measured against, and a lesson prosecutors eventually acted on. In October 2024, TD Bank paid about $3.09 billion in combined penalties and became the first US bank in history to plead guilty to conspiracy to commit money laundering: an actual conviction, plus an asset cap on its US retail growth, where HSBC had received deferral. The distance between those two outcomes, twelve years apart, is the clearest measure of how the tolerance for bank AML failure has shifted. The case also pushed global banks to shed risky clients wholesale: the de-risking wave that followed had consequences of its own for legitimate customers in high-risk regions.

First published August 28, 2026 · Last updated August 28, 2026 · Legal statuses current as of August 2026