Wells Fargo’s Unauthorized Accounts: When Sales Targets Overrode Customer Consent

01 · THE REGULATORY FINDINGS

Accounts Opened Without Consent

The CFPB’s September 8, 2016 consent order identified four practices: opening deposit accounts and transferring funds from customers’ existing accounts without authorization; submitting credit-card applications using customer information without consent; enrolling customers in online-banking services they had not requested; and ordering or activating debit cards without their knowledge.

In testimony to the U.S. Senate on September 20, 2016, CFPB Director Richard Cordray cited the bank’s own analysis: approximately 1,534,280 deposit accounts and 565,443 credit-card applications might not have been authorized. These were figures described as potentially unauthorized—not a claim that every account in those totals had been independently proven fraudulent.

02 · INCENTIVES AND INTERNAL CONTROLS

The Role of Sales Targets

Regulators linked the conduct to sales goals and incentive-compensation arrangements. The CFPB described employees using customer information to create accounts or services without permission in order to meet targets and obtain financial rewards. Some accounts were funded by moving money from customers’ existing accounts, and some customers incurred fees or other charges.

The OCC’s contemporaneous action also addressed the bank’s failure to develop and implement an effective enterprise-wide risk-management and oversight programme capable of detecting and preventing unsafe or unsound sales practices. This placed institutional controls—not only individual employee conduct—within the scope of regulatory scrutiny.

03 · THE ENFORCEMENT RESPONSE

Penalties, Restitution, and Corrective Measures

The September 2016 CFPB action imposed a $100 million civil penalty and required restitution to affected consumers. The OCC separately assessed a $35 million penalty and ordered customer restitution and corrective measures. The Los Angeles City Attorney announced an additional $50 million penalty. The agencies coordinated their actions, and the OCC stated that restitution under its order would also satisfy identical restitution obligations imposed by the CFPB and the City Attorney.

The CFPB consent order was entered by consent. Wells Fargo agreed to its issuance without admitting or denying the findings of fact or conclusions of law, apart from facts necessary to establish the Bureau’s jurisdiction. That procedural feature is important when describing the legal record: the order records the regulator’s findings and the bank’s agreement to the remedy, but it is not a contested trial verdict.

04 · CLOSURE AND ITS LIMITS

What Did the Expiration of the Order Establish?

Wells Fargo reported that the CFPB’s 2016 retail-sales-practices consent order expired at the end of September 8, 2021. The expiration marked the end of that particular order; it should not be treated as proof that every consequence of the scandal had been resolved or that all other regulatory matters involving the bank had ended. Later enforcement actions addressed separate conduct and different product lines.

For an accurate case record, three propositions must remain distinct: the regulator’s findings in 2016, the remedial obligations imposed through the consent orders, and the later expiration of a specific order. None should be substituted for another.

Primary References

• CFPB, Consent Order, In re Wells Fargo Bank, N.A., 2016-CFPB-0015 (8 September 2016)
• Office of the Comptroller of the Currency, Enforcement Action (8 September 2016)
• CFPB Director Richard Cordray, Written Testimony to the U.S. Senate (20 September 2016)
• Wells Fargo, Statement Confirming Expiration of the 2016 CFPB Order (9 September 2021)

This case study distinguishes agency findings, consent-based resolution, and the bank’s own statements about the order’s expiration.