CFTC orders UBS Financial Services to pay $8M for AML failures

The Commodity Futures Trading Commission slapped UBS AG and its subsidiaries with a $5 million civil monetary penalty on September 4, 2025, for what amounts to nearly a decade of failing to properly watch its own trades. UBS Financial Services Inc. and UBS Securities LLC were named alongside the parent company in an enforcement action covering violations stretching from at least 2015 through 2024.

What went wrong at UBS

The core problem was straightforward, even if the plumbing was complex. UBS relied on a third-party surveillance tool to monitor its trading activity across foreign exchange, precious metals, and credit products. That tool had significant deficiencies, including automatic data deletion after just 180 days and alert logic problems that meant suspicious activity could slip through undetected.

The surveillance gaps weren’t limited to the faulty third-party tool. Additional blind spots affected client trades on ICE venues. UBS self-disclosed these additional gaps in February 2025, noting they represented less than 1% of the firm’s total flow on ICE platforms from 2018 to 2024.

UBS launched what it called a Market Conduct Remediation Program in May 2023 and began transitioning to new surveillance solutions. Self-reporting the ICE-related gaps in early 2025 likely helped the firm avoid an even steeper penalty.

The broader enforcement sweep

UBS wasn’t the only firm writing checks that day. The CFTC’s September 4 enforcement actions included several firms settling for a combined total of approximately $8.3 million.

The order, filed under CFTC Docket No. 25-05, specifically addressed supervision failures rather than alleging any underlying trading misconduct. The CFTC isn’t saying UBS committed market manipulation or fraud. It’s saying UBS didn’t have adequate systems to detect whether manipulation or fraud was happening.

Why crypto investors should care

The CFTC is the same agency that claims jurisdiction over crypto derivatives, has brought enforcement actions against multiple digital asset platforms, and is actively shaping the regulatory framework for crypto futures and options. The surveillance expectations established in traditional finance enforcement actions serve as a blueprint for what it will expect of crypto-native firms.

For crypto exchanges and platforms aspiring to operate within regulatory guardrails, this case is essentially a study guide. The CFTC is telling the market exactly what it expects: robust automated surveillance, proper data retention policies, proactive self-reporting when gaps are discovered, and meaningful remediation programs. UBS received a $5 million penalty with the benefit of self-reporting and cooperation.

The nine-year duration of UBS’s surveillance failures, spanning from at least 2015 through 2024, is perhaps the most instructive detail. Problems that persist for nearly a decade tend to compound in ways that make remediation expensive and penalties steep.

Disclosure: This article was edited by Editorial Team. For more information on how we create and review content, see our Editorial Policy.