The bank had “serious and persistent gaps” in anti-money laundering controls, the watchdog finds.