
In 2012, a Senate subcommittee published a 340-page report on HSBC.
It documented how the bank had processed hundreds of billions of dollars for the Sinaloa Cartel, the Norte del Valle Cartel, and other Mexican and Colombian drug trafficking organizations. It documented how HSBC's Mexican subsidiary had accepted cash deposits in amounts that physically could not fit through the teller windows without special boxes. It documented how compliance officers had raised flags internally, and how those flags had been systematically overridden by management.
The Department of Justice opened a criminal investigation.
Then it stopped.
No criminal charges were filed against the bank. No senior executive was prosecuted. No banking license was revoked. HSBC paid $1.9 billion, roughly five weeks of profit at the time, signed a deferred prosecution agreement, and continued operating.
The Sinaloa Cartel continued operating too.
Here is the full file.
The bank that was too big to prosecute
HSBC is the largest bank in Europe by assets. It operates in 64 countries. It processes transactions for governments, corporations, and individuals across every major financial market on earth.
It is also the bank that, according to its own deferred prosecution agreement with the US Department of Justice, knowingly and willfully moved money for organizations responsible for tens of thousands of deaths.
The mechanism was not sophisticated. HSBC's Mexican subsidiary, HBMX, maintained accounts for money exchange houses known to be fronts for cartel operations. Cash would arrive at branches in quantities that exceeded any plausible legitimate business purpose. Tellers processed it. Compliance teams were told to process it faster.
Between 2006 and 2010, HBMX transferred approximately $7 billion into HSBC's US dollar accounts. The bank's own anti-money laundering systems flagged the transactions. The flags were removed.
In one documented case, cartel operatives used specially designed boxes to deposit cash through teller windows because the volume was too large to count manually. The boxes were sized to fit exactly through the openings. Staff knew what the boxes were for. The deposits were processed.
Who knew and did nothing
The Office of the Comptroller of the Currency had been warning HSBC about its anti-money laundering failures since 2003. Nine years of warnings. Nine years of remediation promises. Nine years of continued operation.
The Senate subcommittee investigation, led by Senator Carl Levin, found that HSBC had also processed transactions for banks with documented ties to terrorist financing, including institutions in Saudi Arabia and Bangladesh with known connections to al-Qaeda affiliated organizations.
The report named senior executives. It documented internal communications showing awareness at management level. It recommended criminal prosecution.
The Department of Justice concluded that prosecuting HSBC would create systemic risk to the global financial system. The bank was too interconnected. Too large. A criminal conviction could trigger a loss of banking licenses that would destabilize markets.
This reasoning was stated explicitly in internal DOJ memos that were later made public.
The official position of the United States government was that HSBC was too important to hold accountable for laundering money for drug cartels.
The settlement
$1.9 billion. No criminal charges. No individual prosecutions of senior management. A five-year deferred prosecution agreement under which HSBC agreed to improve its compliance systems.
The fine represented approximately five weeks of the bank's pre-tax profit.
The cartel money that had been processed represented, by conservative estimates, several years of operating income for organizations that were simultaneously executing some of the most violent episodes in Mexican history.
Senator Levin called the settlement a "get out of jail free card." He was not wrong. HSBC's share price barely moved on the day of the announcement. Analysts described the fine as manageable.
The bank reported record profits the following year.
📌 THIS WEEK
HSBC is not an exception. It is a pattern.
The same mechanism that allowed HSBC to process cartel money for a decade, too big to prosecute, too connected to hold accountable, too profitable to disrupt, operates across the entire financial system.
DML readers know this. The question is what you do with it.
The Forbidden Portfolio is the other side of that knowledge. 100 assets that exist outside the system that protects banks like HSBC. Companies the institutional framework cannot own, cannot recommend, and cannot price correctly as a result.
Coal miners in Mongolia. Gold operations in Zimbabwe. Weapons manufacturers whose order books tripled since 2022. Uranium producers in a market where demand grows faster than supply can be built.
All public. All audited. All cheap because the funds that move markets are not allowed to touch them.

37 pages. 100 tickers. 9 sectors. Research document, not investment advice.
What this means for your money
The HSBC settlement established three things that most financial education will not tell you.
The compliance system is not designed to stop financial crime. It is designed to create plausible deniability for the institutions that commit it. Nine years of OCC warnings did not stop HSBC. They created a paper trail that was later used to negotiate a fine. The warnings were not a mechanism for prevention. They were documentation for settlement.
Criminal liability for financial institutions does not exist at scale. The DOJ made explicit what had been implicit for decades: if a bank is large enough and connected enough, the consequences of prosecuting it are deemed worse than the consequences of not prosecuting it. This is not a bug in the system. It is the operating principle.
The $1.9 billion came from somewhere. Fines are operational costs. Operational costs are priced into products and services. When financial crime is resolved through institutional penalties rather than criminal prosecution, the cost is distributed to customers and shareholders. The individuals responsible kept their compensation. The institution kept its licenses. The math worked in everyone's favor except the people the cartel killed.
HSBC is still operating. Its compliance systems have been upgraded. Its correspondent banking relationships remain intact. The same network that processed cartel deposits in 2008 processes your international wire transfers in 2026.
That is not a conspiracy theory. That is the deferred prosecution agreement.
One number to leave you with
$881,000,000,000. The estimated value of cartel funds processed through HSBC accounts between 2006 and 2010.
$1,900,000,000. The total fine paid.
The fine represents 0.21% of the funds processed.
If you laundered money for a drug cartel and the judge ordered you to return 0.21% of what you moved, you would consider it a successful operation.
HSBC did too.
The Dark Money Letter is published every Wednesday. → thedarkmoneyletter.com
Sources
US Senate Permanent Subcommittee on Investigations, "U.S. Vulnerabilities to Money Laundering, Drugs, and Terrorist Financing: HSBC Case History," July 2012
US Department of Justice, Deferred Prosecution Agreement with HSBC Holdings, December 2012
Financial Conduct Authority, Final Notice: HSBC Bank plc, 2012
Bloomberg: "How HSBC Hooked Up with Drug Traffickers and Terrorists" — bloomberg.com
The Guardian: "HSBC allowed drug money laundering, Senate report finds" — theguardian.com