Several global banks moved large sums of allegedly illicit funds over a period of nearly two decades, despite red flags about the origins of the money, BuzzFeed and other media reported on Sunday, citing confidential documents submitted by banks to the US government.

The media reports were based on leaked suspicious activity reports (SARs) filed by banks and other financial firms with the US Department of Treasury’s Financial Crimes Enforcement Network (FinCen).

The SARs, which the reports said numbered more than 2,100, were obtained by BuzzFeed News and shared with the International Consortium of Investigative Journalists (ICIJ) and other media organizations.

In all, the ICIJ reported that the files contained information about more than $2 trillion worth of transactions between 1999 and 2017, which were flagged by internal compliance departments of financial institutions as suspicious. The SARs are in themselves not necessarily proof of wrongdoing, and the ICIJ reported the leaked documents were a tiny fraction of the reports filed with FinCEN.

Five global banks appeared most often in the documents — HSBC Holdings Plc, JPMorgan Chase & Co, Deutsche Bank AG, Standard Chartered Plc and Bank of New York Mellon Corp, the ICIJ reported. The SARs provide key intelligence in global efforts to stop money laundering and other crimes. The media reports on Sunday painted a picture of a system that is both under-resourced and overwhelmed, allowing vast amounts of illicit funds to move through the banking system.

A bank has a maximum of 60 days to file SARs after the date of initial detection of a reportable transaction, according to the Treasury Department’s Office of the Comptroller of the Currency. The ICIJ report said in some cases the banks failed to report suspect transactions until years after they had processed them.

The SARs also showed that banks often moved funds for companies that were registered in offshore havens, such as the British Virgin Islands, and did not know the ultimate owner of the account, the report said. Staff at major banks often used Google searches to learn who was behind large transactions, it said.

Among the types of transactions highlighted by the report: funds processed by JPMorgan for potentially corrupt individuals and companies in Venezuela, Ukraine and Malaysia; money from a Ponzi scheme moving through HSBC; and money linked to a Ukrainian billionaire processed by Deutsche Bank.

“I hope these findings spur urgent action from policymakers to enact needed reforms,” said Tim Adams, chief executive of the trade group Institute of International Finance, in a statement. “As noted in today’s reports, the impacts of financial crime are felt beyond just the financial sector – it poses grave threats to society as a whole.”

In a statement to Reuters, HSBC said “all of the information provided by the ICIJ is historical.” The bank said as of 2012, “HSBC embarked on a multi-year journey to overhaul its ability to combat financial crime across more than 60 jurisdictions.”

Standard Chartered said in a statement to Reuters, “We take our responsibility to fight financial crime extremely seriously and have invested substantially in our compliance programmes.”

BNY Mellon told Reuters it could not comment on specific SARs. “We fully comply with all applicable laws and regulations, and assist authorities in the important work they do,” the bank said.

JPMorgan said it has “thousands of people and hundreds of millions of dollars dedicated to this important work.” “We have played a leadership role in anti-money laundering reform,” the bank said in a statement.

In a statement on Sunday, Deutsche Bank said the ICIJ had “reported on a number of historic issues.” “We have devoted significant resources to strengthening our controls and we are very focused on meeting our responsibilities and obligations,” the bank said.

FinCen said in a statement on its website on Sept. 1 that it was aware that various media outlets intended to publish a series of articles based on unlawfully disclosed SARs, as well as other documents, and said that the “unauthorized disclosure of SARs is a crime that can impact the national security of the United States.”

Representatives for the US Treasury declined comment beyond the FinCen statement.