The Federal Reserve Board, the central banking system of the United States, publicly announced on April 9, 2026, the termination of several significant enforcement actions against three prominent global financial institutions: Crédit Agricole S.A. and its corporate and investment banking arm, Mega International Commercial Bank Co., Ltd, and The Goldman Sachs Group, Inc. These terminations, effective as of March 25, 2026, signal the successful remediation by these banks of long-standing compliance and risk management deficiencies that had been subject to rigorous regulatory oversight for nearly a decade. The conclusion of these orders underscores the Federal Reserve’s commitment to ensuring the safety, soundness, and integrity of the U.S. financial system, and highlights the substantial, often multi-year, efforts required by institutions to meet stringent regulatory expectations.

Details of the Terminated Enforcement Actions

The terminated actions involved Cease and Desist Orders, a powerful tool used by the Federal Reserve to compel financial institutions to address critical shortcomings in their operations. These orders are typically issued when a bank is found to be engaged in unsafe or unsound practices, or to have violated laws or regulations. Their termination indicates that the regulated entity has demonstrated to the satisfaction of the Federal Reserve that it has corrected the identified deficiencies and established robust systems to prevent their recurrence.

Crédit Agricole S.A. and Crédit Agricole Corporate and Investment Bank

The enforcement action against Crédit Agricole S.A., based in Paris, France, and its subsidiary, Crédit Agricole Corporate and Investment Bank (Crédit Agricole CIB), also based in Paris, stemmed from a Cease and Desist Order dated October 19, 2015. While the specific details of the original order are extensive, such actions against foreign banks operating in the U.S. during that period frequently targeted deficiencies in their Bank Secrecy Act (BSA) and Anti-Money Laundering (AML) compliance programs, as well as their adherence to U.S. sanctions regulations administered by the Office of Foreign Assets Control (OFAC).

The 2015 order likely mandated comprehensive enhancements to Crédit Agricole’s internal controls, risk management frameworks, and compliance staffing across its U.S. operations. This would have included requirements for improved transaction monitoring systems, suspicious activity reporting (SAR) processes, customer due diligence, and overall governance related to financial crime prevention. The eight-year period from the issuance of the order to its termination reflects the complexity and scale of the necessary remediation, often involving significant investment in technology, personnel, and training, alongside independent third-party reviews to validate the effectiveness of new controls.

Mega International Commercial Bank Co., Ltd.

The Cease and Desist Order against Mega International Commercial Bank Co., Ltd., headquartered in Taipei, Taiwan, and specifically targeting its New York, Chicago, and Silicon Valley Branches, was dated January 17, 2018. This action followed significant scrutiny of the bank’s AML compliance programs. Notably, in August 2016, the New York State Department of Financial Services (NYDFS) had already levied a substantial penalty against Mega Bank for grave deficiencies in its AML compliance program, particularly at its New York branch, citing insufficient attention to risk exposure and a failure to report suspicious transactions adequately.

The Federal Reserve’s subsequent action in 2018 built upon these concerns, broadening the scope to include multiple U.S. branches and emphasizing systemic failures in BSA/AML compliance and oversight. The order would have required Mega Bank to overhaul its global and U.S. branch-level compliance infrastructure, implement robust transaction monitoring and filtering systems, enhance staff training, and ensure effective communication and oversight from its head office over its U.S. operations. The termination of this order in 2026, after approximately eight years, signifies that Mega Bank has successfully demonstrated a sustained commitment to rectifying these systemic issues and embedding a strong culture of compliance within its U.S. footprint.

The Goldman Sachs Group, Inc.

For The Goldman Sachs Group, Inc., a prominent New York-based global investment bank and financial services company, the terminated action stemmed from a Cease and Desist Order dated May 1, 2018. While specific details of the order against Goldman Sachs are not publicly elaborated in the announcement, regulatory actions against large, complex U.S. financial institutions during this period often related to broader risk management failures, internal control deficiencies, or specific breaches of regulatory requirements such as those under the Volcker Rule, consumer protection laws, or operational resilience standards.

Such orders typically compel institutions like Goldman Sachs to strengthen their enterprise-wide risk governance frameworks, enhance internal audit functions, improve data management capabilities for risk aggregation, and ensure effective oversight by the board of directors and senior management. The nearly eight-year duration of this order suggests that the required remediation involved a fundamental reassessment and overhaul of significant aspects of the firm’s operational and compliance infrastructure, designed to prevent future unsafe or unsound practices and ensure adherence to all applicable laws and regulations.

The Federal Reserve’s Supervisory Mandate and Enforcement Powers

The Federal Reserve plays a critical role in maintaining the stability and integrity of the U.S. financial system through its comprehensive supervisory program. This mandate extends to bank holding companies, state-chartered member banks, foreign banking organizations operating in the U.S., and other financial entities. A cornerstone of this supervisory framework is the ability to issue enforcement actions, such as Cease and Desist Orders, written agreements, and civil money penalties.

Cease and Desist Orders are legally binding directives that require an institution to take specific actions to correct deficiencies. These actions can range from enhancing internal controls, improving risk management systems, strengthening corporate governance, or even prohibiting certain activities. The process for terminating such an order is rigorous. It typically involves the institution demonstrating sustained compliance with all provisions of the order over an extended period, often supported by independent reviews and ongoing monitoring by Federal Reserve examiners. The termination signifies that the Federal Reserve is satisfied that the institution has implemented effective and sustainable remediation measures.

A Decade of Heightened Scrutiny: Contextualizing the Orders

The period between 2015 and 2018, when these enforcement actions were initially issued, represented a significant era of heightened regulatory scrutiny in the global financial sector. In the aftermath of the 2008 financial crisis, regulators worldwide, including the Federal Reserve, intensified their focus on strengthening financial institutions’ resilience, risk management, and compliance frameworks.

A particular emphasis was placed on combating financial crime, including money laundering and terrorist financing. Numerous global banks faced substantial fines and enforcement actions for failures in their BSA/AML and sanctions compliance programs. This regulatory push was partly driven by the recognition that weaknesses in these areas could not only facilitate illicit activities but also pose systemic risks to the financial system and erode public trust. Foreign banks with U.S. operations, like Crédit Agricole and Mega Bank, were under intense pressure to demonstrate that their U.S. branches adhered to the same stringent standards as domestic institutions.

For large domestic institutions like Goldman Sachs, the post-crisis era also brought increased focus on enterprise-wide risk management, capital adequacy, liquidity, and operational resilience. Regulations such as the Dodd-Frank Act introduced new requirements, and the Federal Reserve expanded its supervisory toolkit to address potential systemic risks posed by these "too big to fail" institutions. Enforcement actions during this time often reflected a broad regulatory mandate to ensure that financial giants possessed robust internal controls capable of managing their complex global operations effectively.

Chronology of Enforcement and Compliance

The timeline of these events illustrates the long-term commitment required by financial institutions to satisfy regulatory demands:

• October 19, 2015: Federal Reserve issues a Cease and Desist Order against Crédit Agricole S.A. and Crédit Agricole Corporate and Investment Bank, addressing compliance deficiencies.
• August 2016: New York State Department of Financial Services (NYDFS) imposes a significant fine on Mega International Commercial Bank Co., Ltd. for severe AML compliance failures at its New York branch. This event significantly elevated regulatory attention on Mega Bank’s global AML practices.
• January 17, 2018: The Federal Reserve issues its own Cease and Desist Order against Mega International Commercial Bank Co., Ltd., extending the scope of required remediation to multiple U.S. branches and emphasizing broader systemic compliance failures.
• May 1, 2018: A Cease and Desist Order is issued against The Goldman Sachs Group, Inc., targeting specific risk management or operational deficiencies.
• March 25, 2026: After years of dedicated effort, monitoring, and validation, the Federal Reserve officially terminates all three aforementioned Cease and Desist Orders, signifying the institutions’ demonstrated compliance.
• April 9, 2026: The Federal Reserve Board publicly announces the terminations, providing transparency regarding its supervisory actions.

The span of approximately eight to ten years from the initial issuance of these orders to their termination underscores the extensive nature of the required remediation. Such efforts typically involve significant investments in personnel, technology, process re-engineering, and cultural transformation within the organizations.

Implications of Termination for the Institutions

The termination of these enforcement actions carries significant implications for Crédit Agricole, Mega International Commercial Bank, and Goldman Sachs. Primarily, it signifies a reduction in the intense regulatory burden and oversight that accompanies such orders. While regulatory supervision remains ongoing for all financial institutions, the specific, prescriptive requirements of the Cease and Desist Orders are lifted.

For all three institutions, this likely translates into:

• Reduced Compliance Costs: The intensive resources dedicated to addressing the specific requirements of the orders, including external consultants, independent monitors, and enhanced internal teams, can now be reallocated.
• Improved Reputation and Market Confidence: The public termination of an enforcement action sends a positive signal to investors, counterparties, and customers, indicating that the institution has successfully addressed its past deficiencies and operates with robust controls.
• Operational Flexibility: With the direct constraints of the orders removed, the banks may have greater flexibility in pursuing strategic initiatives, expanding operations, or innovating without the added layer of regulatory scrutiny tied to the specific enforcement action.
• Validation of Internal Efforts: The termination serves as an official acknowledgment by the Federal Reserve of the substantial efforts and investments made by these institutions to strengthen their compliance and risk management frameworks.

It is crucial to note that the termination of an enforcement action does not absolve a bank of past misconduct that might have led to the order, nor does it mean that regulatory scrutiny ceases entirely. Rather, it indicates that the specific issues targeted by the order have been remediated, and the institution is deemed to be operating in a safe and sound manner, adhering to applicable laws and regulations.

Broader Industry and Regulatory Impact

The Federal Reserve’s announcement of these terminations carries broader implications for the financial industry and the regulatory landscape:

• Reinforcement of Regulatory Effectiveness: The successful termination of these long-standing orders demonstrates the effectiveness of the Federal Reserve’s enforcement tools. It shows that these actions serve their intended purpose: compelling institutions to implement necessary changes and ultimately fostering a stronger, more resilient financial system.
• Message to the Industry: The terminations reinforce the message that regulators expect sustained commitment and significant investment in compliance and risk management. While the path to termination can be long and arduous, it is achievable for institutions that demonstrate a genuine and comprehensive commitment to remediation.
• Evolution of Compliance Standards: The journey undertaken by these banks over nearly a decade has undoubtedly contributed to the evolution of best practices in AML, sanctions compliance, and enterprise-wide risk management. The lessons learned, both by the institutions and the regulators, continue to inform industry standards and supervisory expectations.
• Continued Vigilance: Even as specific orders are lifted, the regulatory environment remains dynamic. Emerging risks, such as cybersecurity threats, climate-related financial risks, and the complexities of digital assets, ensure that financial institutions will continue to face evolving compliance challenges and ongoing regulatory oversight.

In conclusion, the Federal Reserve Board’s announcement marks a significant milestone for Crédit Agricole S.A. and Crédit Agricole Corporate and Investment Bank, Mega International Commercial Bank Co., Ltd, and The Goldman Sachs Group, Inc. The termination of these long-standing enforcement actions underscores the rigorous nature of regulatory oversight and the profound commitment required by global financial institutions to uphold the highest standards of compliance and risk management. It signals not an end to vigilance, but rather a successful demonstration of institutional capacity to operate safely and soundly within a complex and ever-evolving global financial landscape.