Wise bank charter denied: the OCC blocks a payments giant over AML failures

The OCC denied Wise a national trust bank charter on 21 July 2026, ruling it could not confirm an effective anti money laundering programme while unresolved compliance failures persist. The Wise bank charter application was blocked because a 2025 multistate order over late suspicious activity reports and transaction monitoring data integrity remained live.

• The Office of the Comptroller of the Currency denied Wise US Holdings a national trust bank charter for the proposed Wise National Trust in Austin, Texas.
• The regulator cited a July 2025 multistate consent order in which Wise US agreed to pay 4.2 million dollars over Bank Secrecy Act and AML programme deficiencies.
• Documented failures included late suspicious activity reports, transaction monitoring data integrity issues, and no independent programme review at an appropriate frequency.
• The OCC said bank rules impose a higher AML bar than the money services business regime Wise already struggled to meet.
• The decision shows examiners now treat an open remediation record, not just a headline fine, as a bar to expansion.

What did the OCC actually decide?

The OCC denied Wise US Holdings the right to open Wise National Trust, a proposed national trust bank in Austin, Texas, in Corporate Decision #1381 dated 21 July 2026. The Wise bank charter would have offered multi currency accounts, payments processing, and fiduciary services, with a potential Federal Reserve master account to help Wise scale in the United States.

The regulator was blunt about why. In Corporate Decision #1381 it wrote that it "cannot conclude the proposed national trust bank will have an effective AML/CFT compliance program" until Wise resolves existing deficiencies. The application, it found, did not demonstrate that the new entity would operate in compliance with law, that its organisers understood national banking rules, or that its board could manage the money laundering risk the business would carry. Because the OCC denied the charter, the linked requests for fiduciary powers and residency waivers became moot.

How does the denial connect to the 2025 multistate order?

The denial rests on an enforcement record that predates the application. Less than a month after Wise filed to charter the bank, it became subject to a public multistate consent order over its AML programme. The two events are one story: the Wise bank charter bid ran while its money transmitter compliance was still under a remediation order, and that overlap decided the outcome.

A coordinated examination by nine state regulators, run through the Conference of State Bank Supervisors, reviewed Wise US for the period July 2022 to September 2023. The resulting report, issued in August 2024, cited failures to file suspicious activity reports on time, transaction monitoring data integrity issues, and a missing independent review of the AML programme. Six states signed the July 2025 order and Wise agreed to pay 4.2 million dollars, split equally between them, without admitting wrongdoing.

What does this change for your AML obligations?

The decision maps to duties that every regulated onboarding programme already carries, and it raises the bar for firms that want to move up the licensing ladder. The Wise bank charter denial is a reminder that examiners test execution, not intent.

Suspicious activity reporting is the first. Under the Bank Secrecy Act a report is due within 30 calendar days of detecting reportable activity, and the multistate order singled out late filing. Transaction monitoring data integrity is the second: if the data feeding your alerts is incomplete or wrong, every downstream SAR decision inherits that flaw, which is why the states ordered a lookback on previously closed accounts.

Independent testing is the third. The AML programme must be reviewed by an independent party at a frequency that matches the firm's risk, and Wise was found short here too. Customer due diligence and record keeping round out the list, alongside the specific reforms Wise accepted: stronger risk based due diligence, better data integrity systems, and quarterly progress reports to regulators for two years.

The sharper point is the jump from one regime to another. Money services businesses and banks both carry AML duties, but the bank standard is higher and supervised more intensively. The OCC said plainly that a firm with a record of missing the lighter money services business requirements had not shown it could meet the heavier ones. Any fintech planning a bank or trust charter should read its current examination findings as the entry exam for the next licence.

What is still uncertain about Wise's path to a charter?

Several questions stay open, and they matter for any firm watching this precedent. The OCC left the door ajar rather than shut: it said it would expect a future application to address the reasons for denial, so a fresh Wise bank charter bid is possible once remediation is complete and independently verified. The timing is the risk. Remediation of the 2025 order runs on quarterly reporting through 2027, so a credible re application may be more than a year away.

Cost and engineering burden are the next uncertainty. Fixing transaction monitoring data integrity is not a policy tweak; it means reconciling customer and transaction records across systems, which is slow and expensive at billions of dollars in annual flow. There is also a strategic fork. Reporting around the decision suggests Wise may pursue a different route to US bank like status, which would trade one supervisory regime for another rather than remove the underlying AML expectations. Finally, the enterprise wide framing cuts both ways: because the OCC judged the group's compliance, not just the trust bank, weakness anywhere in Wise's global structure could weigh on any future filing.

Why does transaction monitoring data integrity keep failing?

Data integrity failures recur because monitoring systems are only as good as the records they read, and those records are scattered across onboarding, payments, and account systems that rarely reconcile cleanly. When a customer field is stale or a transaction is mis tagged, alerts misfire and genuine suspicious activity slips through, which is exactly what a lookback is designed to catch.

This is a structural problem, not a one firm lapse. The same failure mode drove the DNB transaction monitoring fine against CCV, where thousands of merchants went unmonitored, and it sat behind the Merrill suspicious activity report penalty, a monitoring calibration failure. The lesson is consistent: verify identity data cleanly at the source and keep it consistent, or the downstream controls inherit the mess. Zyphe's approach to transaction monitoring and verified identity is built to reduce exactly this drift.

How should compliance teams respond?

Start with the record you already have. Regulators now treat an open remediation trail as a barrier to growth, as the Wise bank charter denial shows, so read your last examination or audit findings as a live risk, not a closed file. Confirm your suspicious activity reports clear the 30 day deadline and that the underlying data is complete. Run a data integrity check across the systems feeding transaction monitoring, and schedule independent testing at a cadence that matches your risk, not your convenience. If a bank or trust charter is on your roadmap, close current findings first; they are the entry exam.

The deeper fix is to hold less fragile data and verify it once, cleanly. Zyphe reads the identity document chip to ICAO 9303 and eIDAS standards with two step liveness and no image upload, then shards personal data across a decentralised network so no single store becomes a honeypot, producing a reusable KYC passport and an exportable audit trail. That gives examiners the clean, verifiable evidence a charter review demands. See how it works or book a demo.

The bottom line

A well known payments brand was blocked from becoming a US bank because its anti money laundering execution had not caught up with its ambition. For teams running KYC and AML, the message is that supervisors now read an open remediation record as a forward looking risk, not a settled matter. Clean identity data captured once, monitoring you can evidence, and independent testing on a real cadence are no longer hygiene; they are the price of expansion. Fix the record before you reach for the next licence.

Cited sources

• OCC Corporate Decision #1381, denial of the Wise National Trust charter (21 July 2026)
• Texas Department of Banking Consent Order No. 2025-013, Wise US, Inc.
• California DFPI multistate consent order, Wise US, Inc. (July 2025)