The First 72 Hours: Susan Keating and the Leadership Response that Saved Allfirst Financial
Susan Keating never imagined being involved in, and surviving, the biggest fraud in U.S. banking history. In 2002, Susan was the CEO of Allfirst Financial, the 43rd largest bank in the U.S., and a crown jewel of Allied Irish Banks. Allfirst was a fairly conservatively run financial institution. “Risk” at Allfirst was something politely declined over coffee. Its regulators once stated to the board that the bank was too risk-averse.
During this particular February, Susan would find herself at the center of an outrageous and scarcely credible “rogue trader” scandal. A Treasury employee had vanished. The regulators were circling. The headlines would be on CNN. And the risk-averse bank? It was about to become a cautionary tale.
Susan was on her way to a high-value client meeting. Ahead was a day of steady, regulated business-as-usual. She remembers:
“So I'm at the elevator still in our bank building, getting ready to go down, and my executive assistant came running up to me and said, ‘Susan…you've got to come back to the office. I just got a call, and our in-house counsel and treasury executive want to meet with you immediately.’”
In this edition of Straight Talk, Susan Keating joins me to talk through how a $691 million fraud went undetected, what she did in the first 72 hours, and what it takes to lead through the kind of crisis that rewrites everything.
The thing about risk
One thing about risk in banks is that it seeps in, disguised as routine, normalized by culture, buried in bureaucratic departments, or worse, protected by them.
The trader at the center of the scandal had built a fortress of trust. A family man. On the school board. He belonged to a tight-knit group that didn’t welcome outsiders. That cultural cohesion created a dangerous opacity. In the silo, bullying took root. Intimidation became normal. Anyone who asked too many questions risked being frozen out or shouted down.
And this wasn’t just a personnel issue. Structurally, the trading book was considered minor, barely a blip compared to the bank’s vast commercial banking footprint.
“We were constantly being audited by federal, state, and parent company auditors, and nobody found anything. This guy was masterful,” Susan recalled. And, after all, this was a bank known for its prudence.
Unfortunately, that track record bred complacency.
When small failures compound
That catastrophic day at Allfirst wasn’t simply the work of one criminal. It was the result of cumulative, compounding failures in operations, culture, and leadership.
The trader fabricated trades, manipulated spreadsheets, and bypassed internal controls with ease. Basic safeguards failed. Trade confirmations were never verified with counterparties. Risk models relied on non-independently validated inputs. Internal audit raised issues like breached trading limits, but these were not addressed - in other words, the bank had a “3rd line of defense” but didn’t act on its recommendations.
Hidden truths behind trusted numbers
Oversight failed, too. It appeared that the executive directly responsible for supervising the trader spent more time on the golf course than in the office. Susan advocated for change: “I did a performance review that said if [the Head of Treasury] didn’t change, I wanted him removed... Instead of putting him on a performance plan, they sent him back to Ireland for what they called ‘charm school.’” He was then returned to his role. It was a decision that would have lasting consequences.
A network of fragmented controls and misplaced trust from the parent company allowed risk to fester, undetected.
Crisis Command: Keating’s leadership playbook
At the epicenter of it all, Susan was tasked by the AIB board with restoring order. Her response is a masterclass in how to stabilize a bank faced with an existential threat whilst navigating complex regulatory, cultural, and operational challenges.
Within 48 hours, Susan and her team, with support from the parent company, had identified the extent of the fraud, convened the board, disclosed the truth, activated crisis protocols, and, with the commitment of a capital injection from AIB, prevented a liquidity panic. She recalls:
“By the end of day one… we had not only our audit team, but also auditors from AIB on the ground. So by Day 2, we knew the extent of the losses.”
The AIB Board engaged Eugene Ludwig, former U.S. Comptroller of the Currency, to lead an independent investigation. Ludwig’s Promontory Financial Group conducted a 72-hour forensic audit, validating the extent of the loss and establishing credibility with the Federal Reserve, OCC, and Irish Central Bank. He was blunt about the situation:
“Eugene walked into my office, shut the door, and said: ‘Susan, you’ve been mugged.’”
Susan prioritized transparency over obfuscation, implementing twice-daily briefings and preemptive customer contact. Her team distributed scripted talking points to branch managers, emphasizing deposit safety and continuity of service. She says this strategy averted employee defection and retail panic:
“We met twice a day - beginning and end - with all the top executives. Fully transparent: Here’s the latest. What are you hearing? Because this was the largest fraud in U.S. banking history, and it was going to shape everyone’s lives and their futures in financial services forever.”
Clarity builds trust
Post-stabilization, Susan led reforms targeting Allfirst’s governance gaps:
Trading Desk Overhaul: She disbanded the existing treasury unit, replacing it with a hybrid model where AIB assumed direct oversight of market risk while Allfirst retained operational control. Mandatory vacation policies and dual-authorization requirements for large trades were instituted to prevent concentration risk.
Enhanced Controls: Allfirst integrated real-time trade confirmation systems and segregated front/middle/back-office functions. Internal audit frequency increased from quarterly to weekly, with findings reported directly to Susan’s office.
Cultural Accountability: Susan terminated six executives implicated in oversight failures, including the trader’s direct supervisor, and implemented 360-degree feedback mechanisms to raise ethical concerns anonymously.
Turning experience into reform
It isn’t an exaggeration to say that Susan and her exec team saved Allfirst Bank. It didn’t require a taxpayer bailout, and it wasn’t wound up. AIB’s 2003 sale of Allfirst to M&T Bank for $3.1 billion did reflect reputational damage, but also a strategic realignment. While publicly framed as a consequence of the scandal, merger discussions had commenced pre-crisis due to AIB’s overexposure to the U.S. regional banking market. Reflecting on the outcome, she says:
“When we merged with M&T... considering what it had just been through, we were handing over something that was actually in the best shape it could be.”
Susan moved from executive leadership to consumer advocacy. As CEO of the National Foundation for Credit Counseling, she testified before Congress and influenced key Dodd-Frank reforms:
“I ended up being someone that would go testify to Congress on examples of what was happening to people in our communities... So I became a leading consumer advocate.”
Her testimony highlighted predatory lending practices, leading to the Ability-to-Repay rule (CFPB Regulation Z). Susan also advocated for clawback provisions in Section 954, enabling recovery of incentive pay from executives overseeing material losses. Drawing parallels between Allfirst’s oversight failures and the 2008 crisis, she pushed for CCAR-style scenario analyses at non-systemically important banks. Susan ranks among those whose actions have made a positive impact on the global banking industry.
Leadership shaped by accountability
Five principles for crisis-ready leadership
I think Susan’s story provides many enduring lessons for financial leaders:
Transparency is non-negotiable. The cover-up is almost always worse than the event. Susan’s decision to communicate candidly, even when details were incomplete, preserved employee trust and customer confidence. As she says: “We needed to state the facts. We didn’t want to speculate or embellish anything. The fact that we were actively communicating, that we were transparent... that’s what kept people from leaving, from panicking.” It’s refreshing to hear a bank senior executive speak in plain English and not like a politician or management consultant!
Document relentlessly. When you can point to a written record (“here’s what I said and why I said it”), you anchor yourself against hindsight bias and finger-pointing.
Lean on independent expertise. Bringing in a credible third‐party investigator yields trust that internal teams cannot always muster, especially when regulators are watching.
Culture trumps controls. A siloed, bullying environment is fertile ground for fraud. It also renders even the most sophisticated “best-practice” risk management framework irrelevant (think, in a different context, of Credit Suisse). Embedding a genuine “risk culture” from the boardroom to the front line is essential to detect anomalies before they compound.
Purpose outlasts position. Susan’s shift from CEO to consumer advocate harnessed her hard-won banking credentials to champion the very people most vulnerable when large institutions fail.
Susan’s legacy is not just crisis recovery. Her response to Allfirst’s collapse illustrates that while risk frameworks can fail, integrity, culture, and decisive action remain the foundations of resilient institutions.
