Axa Banque · Governance finding · severity 3 of 5
On 15 February 2023 the sanctions committee of France's banking supervisor, the ACPR, reprimanded Axa Banque, the online bank of Axa France, and fined it €1 million for anti-money-laundering failings. Per the committee, the bank's automated transaction-monitoring system rested on an unsuitable and incomplete set of scenarios: thresholds ignored customers' income and wealth, so the 64% of clients classed as low risk faced the same limits whatever their means, and a domestic-transfer scenario was set at €200,000 a week for them while the median monthly income was €1,980. There were no scenarios for pass-through accounts, collector accounts or atypical gambling winnings. The committee also upheld 21 missed suspicious-activity reports. The system was scenario-based and not described as AI.
Record last reviewed Oct 21, 2026 · Markdown
Date
Feb 15, 2023 · disclosed Feb 27, 2023
Institution
Axa Banque
Country
France
AI system
Scenario-based automated anti-money-laundering transaction monitoring with fixed thresholds by customer risk score; not described as AI
AI?
Automated system not described as AI
The system was automated, but neither the institution nor a regulator described it as AI; it is listed because it is routinely discussed as an AI failure.
Category
Status
Regulator finding
Severity
3 of 5
Impact
€1 million fine and a reprimand · No customer loss reported; the decision does not quantify the transactions the scenarios missed. · The regulator found that the monitoring gaps strongly reduced the bank's ability to detect and handle atypical transactions; it upheld four missed enhanced reviews and 21 missed suspicious-activity reports.
What happened?
Axa Banque, an online bank wholly owned by Axa France whose customers were mostly brought in by Axa insurance agents, had about 600,000 customers when the ACPR inspected it from 1 December 2020 to 15 April 2021. The ACPR's supervisory college opened disciplinary proceedings on 11 February 2022, and the sanctions committee heard the case in a non-public session on 31 January 2023.[1]
Under the monitoring complaint (grief 4), the committee found the system did not take account of customers' income, wealth or expected account activity, and the risk level used to tier the scenarios did not include that information either. Thresholds were out of line with a clientele almost half made up of employees and retirees, with an average monthly income of €2,700 and a median of €1,980: the domestic-transfer scenario SC03 was set at €200,000 a week for low-risk clients, card withdrawals (SC09) at €8,000 a month, and international transfers (SC04) at €15,000 a week, and the bank planned to raise several of them. Per the decision, these thresholds failed to catch transactions in four files that should have led to an enhanced review or a suspicious-activity report.[1]
The system was also incomplete: it had no scenario to detect pass-through accounts (money received and sent on in equivalent amounts within very short periods), collector accounts, or atypical gambling winnings, and the inspectors identified files in each category that should have produced reports to Tracfin. The committee concluded that "son dispositif de suivi et d'analyse des opérations de la clientèle reposait sur un ensemble de scénarios inadapté et incomplet" ("its system for monitoring and analysing customers' transactions rested on an unsuitable and incomplete set of scenarios"; our translation), and that the very limited use of income and wealth "réduisait fortement l'efficacité de son dispositif de détection" ("strongly reduced the effectiveness of its detection system").[1][2]
The committee also upheld know-your-customer failings, isolated lapses in enhanced due diligence, four missed enhanced reviews and 21 missed suspicious-activity reports. It took into account a remediation plan begun before the inspection, on which Axa Banque spent €13.2 million in 2017–2021, including a new monitoring tool that builds income and wealth into the scenarios, but said the bank, part of a large group, had been too slow to grasp its obligations.[1][2]
When did it happen?
- Dec 1, 2020
The ACPR begins an on-site inspection of Axa Banque, which runs to 15 April 2021.[1]
- Feb 11, 2022
The ACPR supervisory college decides to open disciplinary proceedings.[1]
- Jan 31, 2023
Hearing before the sanctions committee; the college's representative seeks a reprimand and a €2 million fine.[1]
- Feb 15, 2023
The sanctions committee issues a reprimand and a €1 million fine.[1][2]
- Feb 27, 2023
The ACPR publishes a press release and the decision.[2]
What was the impact?
- Financial: €1 million fine and a reprimand[1][2]
- Customers: No customer loss reported; the decision does not quantify the transactions the scenarios missed.[1][2]
- Other: The regulator found that the monitoring gaps strongly reduced the bank's ability to detect and handle atypical transactions; it upheld four missed enhanced reviews and 21 missed suspicious-activity reports.[1][2]
Severity 3 of 5: A regulatory finding with a reprimand and a €1 million fine: the regulator found the bank's automated monitoring scenarios unsuitable and incomplete, which strongly reduced its ability to detect atypical transactions; no customer loss was reported.
How did Axa Banque respond?
Before the committee Axa Banque argued that its monitoring rested on an overall approach combining human and technical means, and that its remediation, attested by an independent firm, addressed most of the shortcomings; it contested several complaints, a number of which the committee narrowed or dismissed. We found no separate public statement by Axa Banque as of 2026-10-21 (searched the ACPR site, French and trade press, and Axa's newsroom).[1]
What was the outcome, and did regulators act?
The committee imposed a reprimand and a €1 million fine, half the €2 million sought, and ordered the decision published in the ACPR register under the bank's name for five years. It noted that Axa Banque's new monitoring tool now builds customers' income and wealth into its scenarios. The decision could be appealed within two months; as of 2026-10-21 we found no published appeal ruling.[1][2]
Why did the ACPR fine Axa Banque?
In February 2023 the ACPR's sanctions committee found that Axa Banque's know-your-customer system still had failings and that its automated transaction monitoring rested on an unsuitable and incomplete set of scenarios. It also upheld four missed enhanced reviews and 21 missed suspicious-activity reports, and imposed a reprimand and a €1 million fine.
Was Axa Banque's monitoring system AI?
No. The decision describes a scenario-based automated system with fixed thresholds set by customer risk score, such as a €200,000 weekly domestic-transfer trigger for low-risk clients. Neither the regulator nor the bank described it as AI or machine learning; the problem was thresholds that ignored customers' income and wealth.
What did Axa Banque change?
According to the decision, Axa Banque spent €13.2 million on an anti-money-laundering remediation plan in 2017–2021, rebuilt its customer database and adopted a new monitoring tool that builds customers' income and wealth into its scenarios. An independent firm attested that the plan fixed a very large share of the shortcomings.
Was any customer money lost?
No loss was reported. The case concerned the bank's ability to detect possible money laundering, not customer losses. The decision illustrates the gaps with files, such as atypical gambling winnings and pass-through accounts, that should have been reported to Tracfin, France's financial intelligence unit.
When AI goes wrong at a bank, the next morning's brief says so.
when one of these regulators moves, the next morning's brief says so · six sourced stories · 7 am PT · free
plus every regulation, bank and agent page update, the morning after · leave any morning