Regulators identified “significant deficiencies” in how the American Express' enterprise-wide anti-money laundering program was implemented, in particular at the firm’s subsidiary national bank.