The Bank’s Records Were Wrong. Its Customers Paid.

Wells Fargo’s records said that approximately 190 mortgage borrowers were dead.

They were not. According to a federal enforcement order, the bank had erroneously classified them as deceased and consequently failed to assess their eligibility for a type of loan modification that did not require an application. The problem ran from July 2013 until September 2018. The order recorded approximately $2.4 million in remediation for those borrowers. CFPB consent order, December 2022, paragraph 26.

The finding occupies a small part of a much larger document. It is easy to pass over on the way to the penalties. Yet it describes an extraordinary transfer of authority: an incorrect entry in the bank’s records determined whether a living person would be considered for help with a mortgage.

There is no account in that paragraph of what each borrower knew, when each discovered the mistake, or how each household responded. Those details cannot be supplied by imagination. The institutional fact is enough to begin with. The bank held information about its customers that was wrong. Its process acted on that information. The customers lost consideration for relief they should have received.

The unauthorized-accounts scandal involved a different kind of false record. Employees opened products without customers’ consent, sometimes forged signatures, and altered contact information to help keep the activity from being discovered. In 2020, Wells Fargo admitted to a course of misconduct extending from 2002 through 2016. The admissions connected the conduct to unrealistic sales goals and management pressure. Justice Department, February 21, 2020.

The mortgage errors were not simply another version of that sales scheme. Nor were the improper account freezes and auto-loan failures documented in later proceedings all caused by employees chasing sales targets. The records identify different conduct, different mechanisms, and overlapping periods. What connects them is the power a bank exercises through information that customers usually cannot inspect or correct on their own.

That power eventually met substantial consequences. Wells Fargo agreed to multibillion-dollar resolutions, faced personal enforcement actions against former executives, and spent more than seven years under a Federal Reserve restriction on its growth. In June 2025, the Fed removed the asset cap. In March 2026, it terminated the underlying 2018 enforcement action after determining that the bank had met the required conditions. Those findings of improvement belong in the story alongside the findings of failure. Federal Reserve, June 3, 2025; Federal Reserve, March 5, 2026.

The question left by this history is concrete. When an institution controls a person’s money, records, and access to relief, what forces it to recognize that its own version of events is wrong?

The sale that existed only inside the bank

Cross-selling offered a plausible story about customer loyalty. A person satisfied with a checking account might also choose the same bank for savings, a credit card, or another service. More products per customer could suggest a useful relationship that grew over time.

Wells Fargo made that idea central to its business. The Justice Department’s account of the bank’s admissions describes an increased focus on sales volume beginning in 1998 and a strategy of selling additional products to existing customers. Public statements presented the approach as driven by customer needs. Inside the Community Bank, the admissions described a volume-based system whose demands could disregard whether a customer wanted or would use the product. Justice Department’s account of the admitted facts.

The distinction between a useful additional account and a fabricated sale was the customer’s authorization and purpose. A record of a new account could be entered in the system without either. Once entered, it could help an employee reach a target and make the bank appear to have deepened a relationship.

The misconduct described by federal authorities included opening checking and savings accounts using existing customers’ identities without permission. Employees also arranged unauthorized credit cards, debit cards, bill-pay services, and other products. Some created PINs for cards that customers had not requested. Some moved money from authorized accounts to fund the new ones. Justice Department, 2020 resolution.

Those transfers made the transaction look more complete inside the bank. They also moved real money. A customer’s original account could have fewer funds available than expected, with fees following from the shortage. The CFPB described that consequence when it announced its first major unauthorized-accounts action in September 2016. CFPB, September 8, 2016.

The customer had entrusted the bank with information and access needed to conduct legitimate business. That existing access made the unauthorized activity possible. The misconduct did not require persuading a stranger to hand over an identity. The identity was already in the bank’s possession, available to employees who were supposed to use it for the customer’s benefit.

The resulting injury extended beyond a fee. Wells Fargo later admitted that the practices damaged some customers’ credit ratings and misused sensitive personal information. An unauthorized credit account could become part of a financial history that other institutions might rely on. The person whose name appeared on the record had never made the choice that the record purported to document. Justice Department, admissions concerning customer harm.

Consent is what separates those circumstances from an ordinary sales dispute. A customer can regret a legitimate purchase. Here, some customers had not purchased the product at all. The bank’s own systems recorded an apparent relationship that the customer had never agreed to create.

Keeping the customer out of the conversation

Unauthorized accounts presented a practical problem for the employees creating them. Customers could notice unfamiliar products, ask why money had moved, or contradict the bank’s account of a sale. Contact information offered one means of interfering with that feedback.

The admitted conduct included altering customers’ true contact details to prevent them from learning about unauthorized accounts. Those changes could also prevent other Wells Fargo employees from reaching the customers for satisfaction surveys. The CFPB separately described phony email addresses used to enroll people in online banking without their knowledge. Justice Department, description of sales practices; CFPB, 2016 action.

The same act could therefore produce a false indication of success and weaken a process that might have challenged it. A new account entered the record. A customer who might have said that the account was unauthorized became harder to reach. A survey intended to measure satisfaction depended on information that the misconduct itself could corrupt.

That is a more serious control failure than an isolated discrepancy discovered and corrected promptly. The evidence describes conduct capable of interfering with the bank’s ability to learn whether its sales were genuine. A monitoring process built on compromised contact details would have difficulty obtaining the response it needed from the person best positioned to contradict the record.

The activity had an internal name: gaming. As used in the enforcement accounts, the term covered varied practices, including conduct that was unlawful and conduct involving unwanted or low-value products. It should not be read as a precise legal classification of every transaction. Its significance is that the behavior had become familiar enough to be discussed as a category inside the business. Justice Department, 2020 resolution.

Institutions often describe an inaccurate record as an error until evidence establishes intent. Here, the admissions included forged signatures and altered information intended to conceal unauthorized accounts. Those actions support a direct conclusion about deception. The later loan-servicing cases require their own analysis because many involved deficient systems and controls rather than the same admitted intent.

Keeping those distinctions intact strengthens the account. A forged signature is a forged signature. A faulty formula is a faulty formula. Both can harm a customer, but explaining one as the other obscures who made the relevant decisions and what would have stopped the harm.

In the sales case, the person with the clearest knowledge of consent was the customer. Some of the practices worked by reducing that person’s ability to enter the conversation at all.

The warnings reached people with authority

The bank’s later admissions defeat any description of the misconduct as a problem that remained entirely invisible to senior business leaders until September 2016.

According to the Justice Department’s summary of the agreed facts, top Community Bank managers knew about unlawful and unethical sales practices as early as 2002. They knew that demanding goals and management pressure contributed to the problem. An internal investigator described a “growing plague” in 2004. Another warned the next year that the problem was “spiraling out of control.” Justice Department, account of internal warnings.

Those dates change the meaning of the later response. The issue was not solely whether a large organization could detect misconduct among thousands of employees. People inside it had detected misconduct, described its growth, and connected it to the way the business demanded results.

The admissions also identify a failure in how the problem was explained upward. Community Bank leadership minimized it to the company’s management and board, emphasizing individual wrongdoing rather than the sales model. Senior leaders failed to take sufficient steps to prevent and reduce the practices despite what they knew. Justice Department, 2020 resolution.

That distinction affects the remedy. If a business treats recurring misconduct as a series of unrelated personnel violations, it can investigate employees, dismiss some of them, and leave the underlying demands intact. The next group of employees then encounters the same goals. The disciplinary process may remain busy while the reason for the repeated behavior remains unaddressed.

The record does not excuse employees who falsified signatures or misused customer information. It identifies an additional level of responsibility. People with authority over the business model received information that the model was contributing to misconduct. Their obligation could not be discharged merely by treating each discovered incident as evidence of one employee’s dishonesty.

Nor does the record establish identical knowledge among every director, executive, manager, and employee. The admissions distinguish Community Bank leadership from company management and the board. A serious account of institutional responsibility must preserve those differences while examining whether the people receiving filtered information challenged it adequately.

The Federal Reserve later addressed that second question. In 2018, it said the firm lacked an effective organization-wide risk-management framework and that serious compliance problems were not properly escalated to directors. It also told the directors that oversight during the relevant period had fallen short of supervisory expectations. Federal Reserve, February 2, 2018.

The combined record describes failures in detection, interpretation, escalation, and response. Detection occurred in important instances. It did not reliably produce the changes that customers needed.

What the public number concealed

The account totals also served an audience outside the branches.

In its 2020 action, the Securities and Exchange Commission found that Wells Fargo had promoted its cross-sell strategy to investors while the underlying measure included unused, unneeded, or unauthorized products. Between 2012 and 2016, the company encouraged reliance on that measure as an indication of the success of its core business. The SEC’s findings connected the misleading presentation to the bank’s claims about selling according to customer needs. SEC, February 21, 2020.

The number could look like evidence of trust. A customer using several products might be less likely to leave and more likely to generate future revenue. Yet an unauthorized account cannot establish loyalty, and an unused product cannot establish that a customer finds it valuable. Treating both as evidence of a deepening relationship gave the count an interpretation it could not reliably support.

The same underlying activity therefore affected two relationships. Customers were enrolled in products they had not authorized or did not need. Investors were presented with a measure that helped describe the business as successful. The regulatory responses addressed those harms through different authorities and different remedies.

Wells Fargo agreed to a $500 million SEC penalty within the broader $3 billion resolution announced in February 2020. The SEC said that its portion would be distributed to harmed investors. It was included in the $3 billion total, so adding the two figures together would overstate that resolution. SEC settlement announcement.

The distinction between investors and bank customers is equally important. Money designated for investors does not by itself establish that depositors received compensation for unauthorized accounts. A large settlement may contain separate legal claims and separate groups of recipients. Its headline amount cannot answer every question about who was made whole.

The cross-sell measure also illustrates a governance problem that reaches beyond the accuracy of one statistic. A company can become attached to the story a measure tells. If the measure has helped explain growth, challenge to its quality can become a challenge to the business’s public account of itself. The Wells Fargo admissions provide evidence of leaders preserving the sales model despite warnings about what it was producing.

An institution’s success measure needs independent evidence of the success it claims to measure. In this case, customer authorization and actual use were essential to the interpretation. Counting products without adequately testing those conditions allowed activity that injured customers to appear within a story about serving them well.

September 2016 was a beginning

On September 8, 2016, the CFPB announced a $100 million penalty against Wells Fargo. The bank also faced a $35 million OCC penalty and a $50 million payment to the City and County of Los Angeles. Those three penalties totaled $185 million. Consumer restitution was a separate obligation. CFPB, September 2016 announcement.

The agency described more than two million deposit and credit-card accounts that, according to the bank’s analysis, might not have been authorized. That qualification matters. A review identifying potentially unauthorized accounts is not the same as an individual determination that every flagged account was fraudulent. The agency nonetheless found widespread unlawful conduct, and the bank’s later admissions established the broader pattern.

The initial analysis included roughly 1.5 million deposit accounts and approximately 565,000 credit-card applications that might have lacked authorization. The count represented products and accounts, not necessarily distinct people. One customer could appear in more than one category. Turning the total into an exact number of unique victims would give it a precision the announcement did not supply.

The order required refunds of affected fees and an independent review of sales practices. The CFPB identified performance measures, sales goals, and training as matters that the consultant could examine. Those requirements recognized that the response had to reach the way the bank produced and evaluated sales. CFPB, terms of the 2016 action.

The penalties were substantial. The discovery also presented a problem the penalty amounts could not resolve: how to identify the complete affected population when the underlying records included false authorizations and concealed activity. The bank had to use records generated by a compromised process to determine whose experience needed correction.

That work could require distinguishing an unwanted but knowingly opened account from one created without permission, determining whether a fee followed, and assessing consequences beyond the account itself. A summary total could describe scale while concealing significant differences in individual experience.

The later federal resolutions did not make the 2016 action irrelevant. They showed that the public accounting continued. The first large enforcement announcement supplied one set of findings and remedies. It was not a complete measure of every harm or every responsibility that would emerge from the history.

The regulator put growth at risk

The Federal Reserve’s February 2018 action reached a different source of institutional pressure. It restricted Wells Fargo from growing beyond its total asset size at the end of 2017 until governance and risk controls improved sufficiently. The firm could continue its existing activities, including taking deposits and making loans, but expansion of its overall balance sheet was constrained. Federal Reserve’s 2018 announcement.

For a bank, an asset restriction reaches future choices. Loans and other assets occupy balance-sheet capacity. A ceiling requires the institution to consider what it can retain, what it can expand, and what it must reduce elsewhere. The consequence continues as long as the restriction remains, making remediation relevant to the business’s operating plans.

The Fed explicitly connected the action to widespread consumer abuses and compliance failures. Its description went beyond unauthorized accounts. It said the firm had pursued growth without adequate management of key risks and lacked a sufficiently effective framework for overseeing them across the organization.

The board was directly implicated. Each current director was required to sign the order. The Fed sent letters explaining that directors’ performance during the compliance breakdowns had not met supervisory expectations. It also singled out the performance of former chairman and chief executive John Stumpf and former lead independent director Stephen Sanger. Federal Reserve, oversight findings and director letters.

These were supervisory findings about responsibilities and performance. They should not be described as criminal convictions of the directors. Their importance lies in the regulator’s refusal to leave the analysis at the level of employees creating accounts. Oversight of the institution itself had become part of the enforcement response.

A fine can impose a large cost while leaving future operating choices largely unchanged. The asset cap made an important category of future growth dependent on demonstrated improvement. That design gave the board and senior management an ongoing reason to address deficiencies even after the immediate scandal ceased to dominate public attention.

The restriction did not compensate an individual customer automatically. It also did not require Wells Fargo to stop serving existing customers. Its purpose concerned the institution’s capacity to operate and grow with adequate controls. Restitution, personal sanctions, and structural restrictions were different parts of the response, each addressing something the others could not accomplish alone.

The cap remained until June 2025. Its duration is evidence that the remedy had a sustained effect on the bank’s formal freedom to expand. This article does not assign a dollar estimate to business lost under the cap. Such an estimate would require assumptions about what Wells Fargo would otherwise have done and how markets would have developed.

The documented point is strong enough without that estimate. For more than seven years, a major regulator made the bank’s ability to grow conditional on repairing governance and controls.

The admissions came with an agreement to defer prosecution

The February 2020 resolution brought explicit corporate admissions and a $3 billion payment covering coordinated Justice Department and SEC matters.

The criminal component used a deferred prosecution agreement with a three-year term. The Justice Department said prosecution would be deferred while Wells Fargo complied with specified conditions, including continued cooperation. The resolution also addressed civil claims under the Financial Institutions Reform, Recovery and Enforcement Act and the separate SEC proceeding. Justice Department, terms of the 2020 resolution.

That procedural description matters. The corporate resolution was not a criminal jury verdict finding every executive guilty. It was also more than a press statement expressing regret. The government described detailed admissions of unlawful practices, customer harm, management knowledge, and failures to respond.

The department explained why it had agreed to that form of resolution. It cited the bank’s cooperation, admissions, assistance with investigations, prior settlements, management and board changes, compliance improvements, and work to identify and compensate affected customers. Those considerations belong in any account of the agreement, even one that questions whether enforcement arrived quickly enough. Justice Department’s stated resolution factors.

The agreement’s existence cannot answer whether every victim received adequate compensation or whether every responsible person faced a proportionate consequence. It records the terms under which the government resolved specified corporate liabilities. Those are substantial terms, but they have a defined scope.

An institutional account must keep two periods separate. The admissions concerned conduct extending over many years before the agreement. The government’s reasons for granting the agreement included remedial steps taken afterward. Evidence of later cooperation does not erase earlier misconduct. Evidence of earlier misconduct does not establish that later cooperation was fictitious.

The distinction is especially relevant when judging how a large organization changes. Management turnover can remove decision-makers, yet the records, systems, and customer consequences they leave behind still require work. An admission can settle a dispute about what happened without completing every repair necessary because it happened.

The government itself linked the resolution to continued cooperation. The broader history would include proceedings involving individuals and additional findings about other consumer products. The $3 billion announcement closed specified matters while leaving other forms of accountability to their own processes.

The examination was obstructed

The later case against Carrie Tolstedt, who headed the Community Bank from approximately 2007 until September 2016, exposed a particular weakness in the relationship between the bank and its examiner: the regulator needed information held by the business it was examining.

In March 2023, the Justice Department announced a plea agreement concerning obstruction of an OCC examination. Its account of the agreement said Tolstedt had known about sales misconduct by no later than 2004 and later learned that employee terminations were increasing, that sales goals contributed to the conduct, and that termination figures likely understated the problem. Justice Department, March 15, 2023.

The central conduct concerned a memorandum prepared in May 2015 for the OCC’s examination. According to the plea agreement as described by prosecutors, Tolstedt failed to disclose statistics concerning employees terminated or resigning while under investigation for sales misconduct. She also withheld the fact that the bank proactively investigated only a very small share of employees whose activity raised potential misconduct concerns. Justice Department’s account of the obstruction.

Those omissions concerned how to interpret the bank’s own evidence. A termination count might appear to describe the scale of misconduct. If only a narrow part of suspicious activity had been investigated, the same count would also reflect the limits of the investigation. The regulator needed both the number and an accurate account of how the number had been produced.

This is one reason institutional oversight cannot depend solely on summaries selected by the institution. An examiner may receive accurate individual figures arranged in a presentation that leaves out facts necessary to understand them. Here, the criminal case addressed obstruction of the examination itself, a separate offense from each unauthorized account opened in a branch.

Tolstedt later received three years of probation, including six months of home confinement, along with a $100,000 fine and 120 hours of community service, according to the Wall Street Journal’s report of her sentencing. She did not receive a prison term. Wall Street Journal, sentencing report.

The OCC separately announced a prohibition order and a $17 million civil penalty by consent. It said that penalty had been paid to the Treasury. These were personal consequences rather than a fine assessed solely against the bank. The agency also noted prior settlements with other former senior executives. OCC, March 15, 2023.

The combination defeats a claim that there were no individual consequences. It leaves room to assess the nature and severity of those consequences. The obstruction sentence punished the offense in that case. The industry prohibition addressed future participation in banking. The civil penalty imposed a financial sanction. None should be described as compensation automatically delivered to every customer whose account was misused.

The record also defines the allegation that can fairly be made about Tolstedt. Her obstruction case does not establish that she personally opened every unauthorized account or that every later servicing failure was hers. It establishes a consequential act at the point where external oversight depended on a candid explanation of internal misconduct.

The next order reached the loan ledger

In December 2022, the CFPB announced a separate action covering auto loans, mortgages, and deposit accounts. It described more than $2 billion in consumer redress and a $1.7 billion civil penalty. The agency said the misconduct affected more than 16 million consumer accounts. CFPB, December 20, 2022.

The date should not be mistaken for the starting date of every practice. Much of the conduct began years earlier, and some categories had ended before the order. The document also recognized that corrective work had accelerated since 2020. It was a record of historical failures, ongoing remediation, and required future conduct, with different dates for different issues.

Wells Fargo consented to the order without admitting or denying its findings and legal conclusions, apart from jurisdictional matters. That posture differs from the express admissions described in the 2020 sales-practices resolution. The findings discussed here are the CFPB’s findings in a consent order. 2022 consent order, introductory provisions and paragraph 2.

The auto-loan section documented failures in technology, training, customer service, and compliance. The bank sometimes applied payments incorrectly, failed to post them on time, or did not ensure that automatic-payment amounts matched what was owed. The order identified roughly $565 million in remediation for payment-processing failures affecting almost six million borrower accounts. Those categories should not be added together indiscriminately with other totals because accounts and harms may overlap. Consent order, paragraphs 7 through 13.

One example involved borrowers asking to apply a payment to principal. Branch employees lacked access to information about past-due amounts that such a payment would leave uncovered. The bureau said nearly 210,000 accounts received a less beneficial application of payments than could have occurred. The issue connected a customer’s instruction to a failure in the information available to the employee receiving it.

Another concerned payment deferments. The bank sometimes entered the wrong effective date or omitted the deferment from the servicing record. According to the order, that problem produced $26.5 million in erroneous late fees across more than 688,000 borrower accounts during the described period. The customer could have an agreement with the bank while the operative record failed to reflect it correctly. Consent order, paragraphs 9 and 12.

These are the details that make a servicing failure intelligible. A borrower’s obligation is calculated through dates, balances, payment classifications, and contractual terms. A mistake in one field can affect the next action. If the system treats a payment as late, fees can follow. If a deferment is missing, the record may not reflect the agreement the borrower actually obtained.

The customer may possess evidence of payment or an agreement and still need the institution to reconcile it with its own system. The bank has the staff, software, and authority to change the operative record. The borrower has a dispute that must reach someone able to act before the consequences advance.

When the error reached the driveway

The auto-loan failures sometimes resulted in improper repossessions. The CFPB described vehicles taken despite a borrower having made a payment or entered an agreement intended to prevent repossession. It also identified failures involving legally required information and the handling of vehicles after repossession. Consent order, paragraphs 14 through 16.

The order’s reference to nearly 850,000 accounts with repossession-related harm must be read carefully. It does not mean that 850,000 vehicles were wrongfully seized. The category covers different harms, including procedural and post-repossession failures. Turning it into a count of wrongful repossessions would exaggerate what the source establishes.

One documented category involved at least 38,000 instances in which the bank failed to sell a repossessed vehicle within a commercially reasonable period. As the vehicle depreciated, the delay affected its value. The order identified more than $40 million in remediation associated with that harm. Consent order, paragraph 15.

For wrongful repossessions caused by servicing errors, the remedy went beyond reversing a fee. The order specified compensation for transportation expenses and other expenses, reimbursement of repossession costs, and additional adjustments where applicable. It addressed the difference between market value and sale proceeds, payments on deficiency balances, certain tax consequences, estimated legal costs, and loss of use. Consent order, paragraph 61.

Those categories reveal the sequence of consequences a single erroneous action can create. Taking a vehicle can generate immediate transportation costs. Selling it can create another financial loss. Collection of a remaining balance can carry the mistake further. The remediation plan had to follow the consequences through that sequence rather than stop at the original entry in the loan system.

The order does not supply an individual narrative for every borrower. It would be improper to invent a lost job, missed medical appointment, or eviction and attach it to an unnamed customer. The specified compensation nonetheless shows that the regulator recognized expenses and loss of use beyond the balance printed on a statement.

The same section also addressed Guaranteed Asset Protection, or GAP, refunds. Borrowers could finance the cost of a product intended to cancel certain remaining debt after a serious accident or theft. When a loan ended early, an unused portion could be refundable. The bureau found that Wells Fargo had not adequately ensured eligible refunds reached borrowers. Consent order, paragraphs 17 through 19.

Here again, completion of a transaction did not necessarily mean the accounting was correct. A borrower could pay off a loan and still be owed money tied to an add-on product. The order required a policy and practice designed to provide the unused portion promptly under its terms. The relevant question was whether the borrower actually received what the end of the loan entitled the borrower to receive.

A formula could decide who kept a home

The mortgage findings brought a different set of consequences into view.

According to the CFPB, from at least 2011 through April 2018, errors in formulas used to evaluate modification applications overstated attorneys’ fees. That overstatement could prevent an otherwise qualified borrower from being offered a modification. The bank became aware of the problem in late 2013 but initially concluded that it did not adversely affect access to modifications. Consent order, paragraphs 23 through 25.

The bank attempted a correction. In March 2018, it determined that the problem had not been fixed and that some borrowers were still being denied modification offers. The order described approximately $77.2 million in remediation for about 3,200 mortgage accounts that received incorrect loss-mitigation outcomes, including wrongful foreclosures.

That sequence is particularly revealing because it contains an attempted repair. A problem was identified, assessed, and addressed in some fashion. The later finding showed that the intervention had not accomplished what was needed. A record that an issue had been handled was insufficient evidence that affected customers were receiving correct decisions.

For a modification process, the output matters immediately. The calculation influences whether a borrower is offered a different arrangement for staying current on a mortgage. If the calculation is wrong, the customer may receive a decision presented with the authority of the bank’s servicing process even though the underlying eligibility assessment is defective.

The order separately described the approximately 190 borrowers wrongly recorded as deceased. They were not evaluated for no-application modifications on government-sponsored-enterprise loans because of that classification. This was a different error from the attorneys’ fee calculation. Combining the two into one software incident would misstate the findings. Consent order, paragraph 26.

The records do not establish that all 190 borrowers lost their homes or that every one of the approximately 3,200 accounts in the formula-related category ended in foreclosure. They establish incorrect outcomes and identify wrongful foreclosures among the harms. The distinction allows the seriousness of the finding to remain clear without enlarging the affected group beyond the evidence.

The bank was responsible for the machinery through which eligibility was assessed. A borrower could provide documents, meet an obligation, or qualify for consideration, yet still depend on internal data being accurate. Errors in that system could not be corrected simply by telling customers to be more financially responsible.

The interval between awareness in 2013 and the determination in 2018 that the formula problem remained is therefore central. It raises a precise question for institutional oversight: what evidence was used to conclude that the correction worked, and why did that evidence fail to reveal continued incorrect outcomes sooner?

The order documents the failed correction and the ensuing remediation. It does not disclose every internal decision along the way. Those missing details are subjects for follow-up reporting, rather than permission to invent a motive for each participant.

The bank could freeze more than the suspicious deposit

The deposit-account findings concerned another exercise of power: deciding when a customer could use money already held at the bank.

From at least 2011 through October 2016, the CFPB found, Wells Fargo typically responded to a suspected fraudulent deposit by freezing the customer’s entire deposit account and other accounts. An automated detection system identified accounts for employee review. The freeze could prevent access to all the funds, including money unrelated to the suspicious deposit. Consent order, paragraphs 31 through 34.

Affected customers lacked access to their money for an average of at least two weeks before the bank closed the accounts and returned the funds. The order identified more than one million affected deposit customers and more than $160 million in remediation. It also recorded a change in practice toward less restrictive measures where appropriate.

Fraud controls serve a legitimate purpose. A bank must be able to respond to suspicious activity, and the order expressly preserved the use of full restraints when reasonable and appropriate. Its criticism concerned excessive restriction where a narrower measure could protect against fraud without denying access to unrelated funds. Consent order, paragraph 51.

The distinction is consequential for an ordinary account holder. The bank can consider a review pending while a customer experiences an immediate inability to pay. The existence of a reason to examine one deposit does not, by itself, establish that every dollar in every related account must be unavailable.

The order required the use of an item-level hold or another lesser restraint when reasonable under the circumstances and sufficient to prevent further fraud. That requirement addressed the scope of the intervention. It asked the bank to consider what had to be restricted to manage the actual risk.

The remediation provision established at least $150, where applicable, for each affected consumer or unique joint-ownership group. That was a minimum in the specified plan, not a universal measure of every person’s loss and not evidence that every possible consequence could be repaired for that amount. Consent order, paragraph 59.

This part of the history reaches the publication’s central concern about institutional accountability with particular clarity. The institution identified the concern, controlled the evidence used to assess it, and imposed the restriction. The customer depended on a process inside the institution to restore access. The regulator’s intervention examined whether that use of control had been justified in its scope.

The finding should not be repurposed as proof that every bank freeze is unlawful or that Wells Fargo’s current restrictions operate in the same way. It documents a defined historical practice and the remedy directed at it. The broader reporting question is whether a person facing an adverse institutional decision has a practical route to a timely, informed review.

A fee waiver depended on whose reading counted

Some of the deposit-account harm arose from a quieter mismatch between what the bank told customers and what its systems counted.

The CFPB found that Wells Fargo offered monthly service-fee waivers under language referring to ten or more debit-card purchases or payments from the checking account during a statement cycle. In practice, the bank counted only debit-card transactions that posted within that cycle. Other payments did not count, and a purchase could post days after it was made. Consent order, paragraphs 38 through 42.

According to the order, more than four million account holders were wrongly denied waivers. The document identified more than $141 million in remediation. The usual monthly fees described in that section were $10 or $12. Small individual charges accumulated into a substantial total across the affected population.

The customer could read the bank’s terms, act according to a reasonable understanding of them, and still be charged because the operational rule was narrower. A disclosure offers little practical protection if the bank’s system applies a different test from the one reasonably communicated to the customer.

Another finding concerned overdraft fees on debit-card purchases and ATM withdrawals that had sufficient funds available when authorized but encountered a negative balance when settled. The CFPB concluded that these fees were contrary to customers’ reasonable expectations and not reasonably avoidable. The order required approximately $205 million in refunds for specified fees charged and not already reversed or refunded since January 1, 2021. Consent order, paragraphs 43 through 47 and 60.

The word “overdraft” can invite an immediate assumption that a customer simply spent money that was not available. The findings required a more careful account of authorization, settlement, and expectations. The sequence mattered. A label on a fee did not settle whether the charge was fair.

These cases illustrate why the existence of a rule is only the beginning of an inquiry. What did the rule say? What did the system actually do? Could the customer reasonably predict the result? The order evaluated the answers rather than accepting the bank’s internal classification as conclusive.

The penalties did different jobs

The sums in the Wells Fargo history are large enough to blur together. Keeping them separate is necessary to understand the consequences.

The 2016 announcement described $185 million in penalties across three authorities, with consumer refunds separately required. The 2020 resolution totaled $3 billion across coordinated criminal, civil, and securities matters, including the $500 million SEC component. The December 2022 CFPB action combined more than $2 billion in redress with a $1.7 billion civil penalty. These figures concern different proceedings and different forms of relief. They should not be casually added into one purported measure of customer losses. 2016 CFPB action; 2020 DOJ resolution; 2022 CFPB action.

The 2022 order is especially instructive because it describes remediation at different stages. Some money had already been provided; other compensation was being provided or remained required. An account stating that the entire redress amount first became payable on the announcement date would miss that history. An account stating that all compensation had been completed would also go beyond the document.

The civil penalty went to the CFPB’s Civil Penalty Fund. It was separate from the bank’s obligations to remediate affected consumers. The order barred treating the penalty as tax-deductible or obtaining reimbursement or indemnification for it. It also prohibited conditioning customer redress under the order on a waiver of rights. Consent order, paragraphs 57 and 62 through 66.

Those provisions addressed who would bear the cost and what a customer would have to surrender to receive compensation. A refund conditioned on giving up a right would present a different transaction from an unconditional corrective payment. The order expressly prevented that condition for its redress.

Money remains only one part of the accounting. The documents reviewed here do not establish that every affected customer was identified, received every payment due, or regarded the remedy as sufficient. They also do not support the claim that customers received nothing. The 2022 order records substantial remediation already undertaken.

The remaining questions require distribution and review evidence: who was included, how errors in eligibility were handled, what happened to uncashed or undeliverable payments, and how consequential losses were assessed. Those questions can be pursued without denying the significance of compensation already delivered or assuming that an announced total represents a finished job.

The evidence of change

Wells Fargo’s own response included organizational changes intended to bring customers’ interests more directly into decisions. In January 2021, it announced an Office of Consumer Practices within the Chief Operating Office. The bank said the group would advise on products, pricing, policies, and training and use complaints and other information to identify customer-related trends. Then-chief executive Charlie Scharf described its purpose as improving fairness and transparency. Wells Fargo’s January 12, 2021 announcement.

An organizational announcement establishes the stated design. Evidence that the design works requires more. The later Federal Reserve decisions provide a separate and more consequential source of evidence about the bank’s governance and risk-management improvements.

In June 2025, the Fed said it had reviewed the bank’s remediation, required third-party assessments, and conducted its own assessment. It concluded that Wells Fargo had met the conditions for removing the growth restriction. Other provisions of the 2018 action remained at that point. Federal Reserve, June 3, 2025.

In March 2026, the Fed terminated that enforcement action. It said the bank had demonstrated that improvements had made its governance and risk-management program effective and had completed two third-party reviews. The agency described remediation spanning nearly a decade. Federal Reserve, March 5, 2026.

Those determinations deserve clear weight. They are findings by the regulator that imposed the restriction, following review of the required work. A story that continued to describe the asset cap as active would be wrong. A story that ignored the termination would omit important evidence about the bank’s response.

The scope remains specific. Termination of the Fed’s 2018 action is not a statement that every historical customer claim has been resolved or that every order from every other authority has ended. Nor is it a guarantee that no future error will occur. It records satisfaction of the conditions attached to that enforcement action.

The public announcements summarize the basis for the decisions. They do not publish the full underlying assessments. This documentary review therefore cannot independently reproduce the Fed’s examination of the bank’s controls. That is a limit on what this article can establish, not evidence that the regulator’s conclusion was improper.

A useful next stage of reporting would ask what outcomes can be disclosed publicly: how complaints are escalated, how corrections are validated, how customer consent is tested, and how the institution checks that a remedy actually reaches those affected. Those measures would help customers understand what the formal conclusion of enforcement means for the decisions they encounter.

Who gets to correct the record

The Wells Fargo history contains substantial accountability. Corporate admissions, penalties, redress, a personal obstruction case, industry restrictions, and a prolonged limit on growth are documented outcomes. Calling the entire response nonexistent would be inaccurate.

The timing and the mechanics remain worth examining. Internal warnings about sales misconduct preceded the major public enforcement actions by years. A mortgage calculation problem remained unresolved after an attempted correction. An examination was obstructed through omissions about what the bank’s own data meant. In separate settings, information existed without reliably producing the response needed to protect customers.

Each failure involved a point where someone could have questioned the institution’s account. A customer could deny authorizing a product. An investigator could connect repeated misconduct to sales pressure. An examiner could demand the omitted context behind a termination statistic. A servicing review could test whether an attempted software correction changed actual outcomes.

The effectiveness of those challenges depended on access and authority. It mattered whether the information reached people able to change the system, whether their findings were taken seriously, and whether someone checked the result afterward. The historical record gives concrete examples of what happens when those steps fail.

The approximately 190 borrowers marked as deceased provide a particularly stark example of the customer’s position. The CFPB’s finding does not tell us everything that happened to them. It tells us that an erroneous classification inside a bank deprived living people of an assessment they should have received. An institutional record had acquired consequences beyond its accuracy.

The purpose of oversight is to interrupt that sequence before the consequences become another remediation program years later. A customer should be able to correct an unauthorized account, a misapplied payment, or a false classification while the correction can still prevent harm.

The Federal Reserve has now concluded that Wells Fargo met the conditions of its 2018 action. The continuing public test is how reliably a customer’s evidence can change the bank’s decision when the bank is wrong.

Reporting note: This article reconstructs selected public enforcement records and analyzes their implications. It includes the Federal Reserve’s June 2025 removal of the asset cap and March 2026 termination of the 2018 action. No new interviews or requests for comment were conducted for this article. The companion Record distinguishes admissions, regulatory findings, reported sentencing, and remedies.

Explore the Record: Wells Fargo: The Record