Average AML Staffing Cost per Mid-Market Bank: 2024 Statistics, Trends, and Analysis

Methodology

This page draws on four primary sources. LexisNexis Risk Solutions' True Cost of Financial Crime Compliance: United States and Canada (2024), conducted by Forrester Consulting across 1,181 compliance professionals in four global regions, is the most widely cited recurring compliance cost study and the source for the headline total. The Federal Reserve Bank of St. Louis published a study in 2016 measuring BSA/AML compliance costs as a percentage of non-interest expenses by bank size tier; it predates the 2020 Anti-Money Laundering Act reforms but remains the standard per-institution academic benchmark. Fraxtional's 2026 analysis of mid-size bank AML programs provides the most specific current breakdown by budget tier and cost category, including the staffing share of total AML spend. The Bank Policy Institute's 2023 compliance burden survey of large U.S. institutions (above $100 billion in assets) covers ten years of trend data on compliance headcount and IT spending, from 2013 to 2023.

"Mid-market bank" on this page means a U.S. financial institution with $1 billion to $10 billion in total assets, consistent with Federal Reserve classifications. All figures are in U.S. dollars. Where data covers only large institutions, this page notes that limitation.

One significant gap remains: FinCEN and the FDIC launched a joint survey of AML/CFT compliance costs in 2025, with public results not yet available as of mid-2026. When published, it will be the most authoritative per-institution dataset available.

Full data table

Sources: LexisNexis Risk Solutions True Cost of Compliance studies (2024); Fenergo Financial Crime Industry Trends 2025; Federal Reserve Bank of St. Louis (2016); Fraxtional.co (2026); Bank Policy Institute (2023); Glassdoor (2026).

Key findings

U.S. and Canadian institutions spent $61 billion on financial crime compliance in 2024, up from $56.7 billion in 2022. That's a 7.6% increase in two years (LexisNexis Risk Solutions / Forrester, n=1,181). At the same time, global AML fines reached $4.6 billion in 2024, with transaction monitoring failures alone accounting for $3.3 billion of that total (Fenergo). Regulators are extracting more in penalties while institutions spend more on compliance. The gap between those two numbers isn't narrowing.

For mid-market banks, AML compliance consumes 2.9% of non-interest expenses. That's the Federal Reserve Bank of St. Louis benchmark for institutions above $1 billion in assets. A bank running $30 million in annual non-interest expenses spends roughly $870,000 per year on AML. A $10 billion bank with $150 million in non-interest expenses pays around $4.35 million. Staffing is 50-60% of that budget, per Fraxtional's 2026 analysis. That puts the staffing cost range for a mid-market bank at roughly $435,000 to $2.6 million per year, before benefits and overhead.

The core AML team at a mid-market bank costs over $500,000 in base salary. A BSA officer averages $126,215 per year; AML analysts average $96,870 (Glassdoor, 2026). A team of one officer and three analysts carries base salary of roughly $417,000. Total employment cost typically runs 1.3x to 1.5x base salary once benefits, training, and management overhead are included.

False positive alert management consumes a disproportionate share of analyst hours. Legacy rule-based transaction monitoring generates false positive rates of 90-98% (Unit21). Each alert costs $25-$50 to investigate. Industry-wide, false positive investigations cost an estimated $3 billion per year (Talli.ai, 2025). For a five-person AML team, the practical result is that most analyst hours go toward confirming that something is not suspicious.

Non-compliance costs nearly three times what compliance costs. The Ponemon Institute found organizations spend an average of $5.47 million per year to maintain a compliance program, while the cost of non-compliance averages $14.82 million. Enforcement actions, remediation, and operational disruption compound quickly after a program failure. For mid-market banks, where compliance teams are small and recovery resources are limited, the asymmetry is even more pronounced.

Year-over-year trends

The trajectory of every metric in this space points the same direction.

2016 baseline. The Federal Reserve Bank of St. Louis established the core per-institution benchmark: 2.9% of non-interest expenses for banks above $1 billion in assets, and 8.7% for community banks below $100 million in assets. The study treated these figures as evidence of high regulatory burden. They've since become the floor.

2022-2024 acceleration. U.S. and Canadian financial crime compliance costs rose from $56.7 billion to $61 billion in two years, a 7.6% increase. The LexisNexis data reflects expanded FinCEN reporting requirements, increased OFAC scrutiny, and the operational demands of the 2020 Anti-Money Laundering Act, all of which hit institutions regardless of size.

2013-2023 structural shift. Bank Policy Institute data across a ten-year span shows compliance employee hours grew 61% while total employee hours grew only 20%. IT spending on compliance rose from 9.6% to 13.4% of total IT budgets in the same period. Board time devoted to regulatory compliance went from roughly 27% in 2016 to 43% by 2023. These are structural reallocations of bank labor and attention, not cyclical responses to a single enforcement cycle.

2024 enforcement climate. Global AML fines hit $4.6 billion. TD Bank's 2024 settlement came to $1.3 billion, the largest AML penalty imposed on a U.S. retail bank. Transaction monitoring violations accounted for $3.3 billion of total global fines (Fenergo). Regulators have made clear they treat systemic AML program failures as cultural breakdowns, and penalties reflect that view.

Near-term direction. The FinCEN/FDIC joint cost survey will, when published, provide the most granular per-institution data yet. Expanded beneficial ownership reporting under the Corporate Transparency Act continues to add operational volume. No current regulatory signal suggests compliance cost pressure will ease for mid-market banks.

What this means for compliance teams

A mid-market bank spending $870,000 to $4.35 million annually on AML compliance needs that investment to actually work. Right now, a substantial fraction of it doesn't.

The false positive problem is the most direct lever to pull. A team processing thousands of alerts per month, at a 95% false positive rate, spends most of its time on noise. Transaction Monitoring automation that reduces alert volume through better model calibration frees analysts to spend time on cases that warrant real judgment.

Customer Due Diligence is where hidden costs pile up quietly. Periodic review backlogs, manual data gathering, and inconsistent risk-scoring across relationship managers all translate directly into compliance staff hours. Banks that automate routine CDD refresh cycles typically handle higher customer volumes without adding headcount.

FATF Rec 1 requires proportionate resource allocation: higher-risk relationships get deeper scrutiny, lower-risk ones get lighter treatment. Many mid-market banks still apply uniform monitoring intensity regardless of customer risk profile. The result is overspending on low-risk customers and underinvesting in the relationships that actually warrant Enhanced Due Diligence.

The Westpac 2020 enforcement action and TD Bank's 2024 settlement both involved AML programs that couldn't scale with institutional growth. Westpac's failure to monitor 23 million transactions resulted in a AUD 1.3 billion fine. Mid-market banks facing organic growth face the same scaling risk: the compliance program that works at $2 billion in assets may not work at $7 billion without investment in automation. Regulatory Compliance Automation is how banks keep the program from falling behind.

The Ponemon ratio ($5.47M to comply, $14.82M not to) makes the budget case clearly. The question for most mid-market compliance teams isn't whether to invest in better tools. It's which manual processes to automate first.

Sources

• LexisNexis Risk Solutions, True Cost of Financial Crime Compliance: United States and Canada, 2024
• LexisNexis Risk Solutions, True Cost of Financial Crime Compliance: Global Study, 2023
• LexisNexis Risk Solutions, True Cost of Financial Crime Compliance: EMEA, 2024
• Federal Reserve Bank of St. Louis, The Cost of Bank Regulatory Burden, Central Banker, Summer 2016
• Fenergo, Financial Crime Industry Trends 2025
• Fenergo, AML Enforcement Action in 2024
• Bank Policy Institute, AML/CFT Compliance Burden Survey comment, 2023
• Fraxtional.co, AML Compliance System Costs for Mid-Size Banks, 2026
• Glassdoor, AML Compliance Analyst Salaries, 2026
• FinCEN, Survey of the Costs of AML/CFT Compliance, 2025
• Mayer Brown, FinCEN Issues Request for Information on AML Compliance Costs, 2025