Banks Flagged $2,500,000,000 in Payroll Tax Fraud Last Year. Treasury Says Illegal Hiring Schemes Built It.

Speaking to Texas bankers in Houston on June 12, 2026, Treasury Secretary Scott Bessent (R) disclosed that in 2025 alone, financial institutions filed Suspicious Activity Reports totaling more than $2,500,000,000 linked to payroll tax fraud schemes — and that the schemes are driven by the illegal employment of non-work-authorized individuals through shell companies and labor broker networks.

The remarks accompanied a June 5, 2026 joint advisory (FIN-2026-A002) issued by the Treasury Department’s Financial Crimes Enforcement Network (FinCEN) in coordination with the IRS, the FDIC, the Office of the Comptroller of the Currency, and the National Credit Union Administration. The advisory is the most detailed federal guidance yet on how these schemes funnel untaxed wages into the U.S. financial system, and it lays out 18 specific red flags banks must watch for.

The mechanism is not complicated, and the industries are familiar — construction, agriculture, hospitality, domestic service. What the advisory documents for the first time at this scale is the organized, multi-layer financial infrastructure that has grown up around it: fake companies, identity-stolen Social Security numbers, off-the-books cash payrolls, and money-laundering operations that rival what federal prosecutors routinely charge as cartel finance.

• $2,500,000,000 — in Suspicious Activity Reports filed by banks in 2025 alone, linked to payroll tax fraud schemes · Source: Treasury / FinCEN FIN-2026-A002
• 18 — red-flag indicators that FinCEN directs banks to monitor — from ITIN usage in lieu of SSNs to recurring sub-$1,000 payroll checks · Source: FinCEN advisory, June 5, 2026
• $146,077,535 — in payroll checks funneled through a single Orlando-based shell-company ring (three El Salvadoran nationals, sentenced 2025–2026), costing the IRS $36.9M in unpaid taxes · Source: DOJ Middle District of Florida
• June 5, 2026 — date of FinCEN advisory FIN-2026-A002 — issued jointly with IRS, FDIC, OCC, and NCUA under Executive Order 14406, 'Restoring Integrity to America's Financial System' · Source: Treasury

The remarks came at a June 12 event with the Texas Bankers Association in Houston — one day after the broader story broke in Breitbart and several right-of-center outlets.Bessent framed the $2,500,000,000 figure not as a total loss number but as the volume of suspicious activity flagged by banks in a single year — the raw input into federal investigations, not the adjudicated total of confirmed fraud. The distinction matters and Bessent did not blur it: these are Suspicious Activity Reports, the formal mechanism Congress designed for banks to alert FinCEN to transactions that look like crimes even when they cannot yet prove them.

His core point was sharper: the schemes to pay unlawful workers depend on access to U.S. banks, and the government is now using anti-money-laundering law — not immigration enforcement specifically — to choke off that access. “The advisory does not ask banks to become immigration officers,” Bessent said, per reporting. What it does ask banks to do is apply standard anti-fraud practices to a set of transaction patterns that, the evidence now shows, correlate strongly with payroll tax evasion and illegal employment.

Keep Reading

Economy · Immigration & Spending

In Nearly Every State, Immigrant Households Use Welfare at Substantially Higher Rates

Read →

The FinCEN advisory (FIN-2026-A002) describes a layered architecture. It starts with a complicit employer — a contractor in construction, agriculture, hospitality, or domestic service — who wants to hire undocumented workers at below-market wages and avoid withholding taxes. That employer contracts with a labor broker, who is himself often unlawfully present or working through nominees. The broker sets up a shell company— often named generically, like “ABC Construction,” sometimes using the broker’s initials — and opens a bank account using a foreign identity document or an Individual Taxpayer Identification Number (ITIN) rather than a Social Security number.

The employer sends checks to the shell company purportedly for legitimate services. The broker cashes those checks — or routes them through peer-to-peer platforms and cash couriers — and distributes wages to the workers without any federal withholding: no Social Security, no Medicare, no income tax. The shell company functions as an unregistered money services business. The IRS sees nothing. The workers, who often provided stolen Social Security numbers to pass employment-eligibility checks, now have fraudulent wage records attached to real Americans’ Social Security files.

“This Administration will not allow illegal aliens to abuse financial institutions to steal billions from American taxpayers.”

Treasury Secretary Scott Bessent (R) · Texas Bankers event, Houston · June 12, 2026

FinCEN gave banks a concrete checklist. Among the 18 red-flag indicators in FIN-2026-A002:

Keep Reading

Economy · Energy

Albany Found a Villain for Your Electric Bill. It Picked the Wrong One.

Read →

The Orlando construction case is the most detailed prosecuted example in the public record. Three El Salvadoran nationals — Eduardo Anibal Escobar, Carlos Alberto Rodriguez, and Adelmy Tejada— operated shell companies that processed $146,077,535 in construction payroll checks from approximately January 2015 through August 2024. Their fee was 6 to 8 percent; the rest went to workers in cash, with zero federal withholding.

The scheme simultaneously facilitated the employment of workers not legally authorized to work in the United States. The court ordered $36,957,616 in restitution to the IRS for unpaid payroll taxes, plus nearly $398,000to workers’ compensation insurers who paid claims on injuries to workers the employers were pretending did not exist. Escobar drew 4 years and 9 months; Rodriguez 3 years and 4 months; Tejada 18 months plus 6 months home detention. All three pleaded guilty in April 2025.

The advisory flags a collateral harm that rarely surfaces in coverage of payroll fraud: the scheme requires identity theft to work. Workers who are not authorized to work in the United States must pass I-9 employment eligibility verification, which requires a Social Security number. The FinCEN advisory documents that they obtain those numbers by stealing them from U.S. citizens and lawful permanent residents.

The victim’s Social Security record then accumulates wages they never earned, paid by an employer they never worked for, in a state they may never have visited. That corrupted record can follow the victim for decades: incorrect Social Security benefit calculations, IRS audit triggers when reported wages don’t match filed returns, and credit complications from accounts opened in their name. And as KPRC’s reporting documents, if payroll taxes are never actually remitted to the Social Security Administration, workers (unauthorized or otherwise) who depend on those earnings for their retirement benefit calculations may find those benefits diminished or missing.

The $2,500,000,000 figure is not the total of confirmed fraud — it is the floor of what banks flagged as suspicious in a single year. The confirmed fraud in prosecuted cases is smaller but traceable: in the Middle District of Florida case alone, the three defendants processed roughly $146,077,535 in off-the-books construction payroll and were ordered to repay $36,957,616 to the IRS for unpaid payroll taxes over roughly nine years. That is not a rounding error in the federal budget; it is the loss from a single prosecuted ring in one federal district — a fraction of what the FinCEN advisory says is moving through the system.

The enforcement architecture that Bessent is assembling is designed to catch the next scheme before it runs nine years. The joint advisory from FinCEN, the IRS, the FDIC, the OCC, and the NCUA is a signal that the federal government is treating this as a systemic risk — not isolated criminal activity — and that banks are now expected to be the first line of detection, not the last line of cleanup. We will update this page as Treasury and DOJ release additional enforcement actions tied to the $2,500,000,000 in flagged activity.

More From Civic Intelligence

Economy · Federal Spending · Entitlements · Social Security

Fiscal Doomsday: $193.6 Trillion in Unfunded Medicare and Social Security Promises

The FY2025 Financial Report of the U.S. Government (released March 19, 2026, signed by Treasury…

Economy · Jobs · Labor Market · BLS

The Numbers We Argue About: What BLS Jobs Data Really Shows

A data-first look at the U.S. labor market through Bureau of Labor Statistics primary data — and the…

Last updated June 13, 2026