OCC consent order — Community Federal Savings Bank — Daily Brief, May 22, 2026

Kevin Warsh was sworn in as Federal Reserve Chair this morning, inheriting a committee whose own minutes show a majority favoring rate hikes if inflation persists — and a macro backdrop now shifting on Iran peace deal signals that drove oil below $96. Separately, the OCC's May 2026 enforcement release confirms a consent order against a fintech partner bank for BSA/AML failures, and the FDIC has flagged next week's quarterly bank condition report.

---

Three distinct regulatory actions this week close with Friday's OCC enforcement release and a fresh OFAC designation, while the Fed's structural transition sets the supervisory tone for the months ahead. The pattern across agencies: qualitative risk management and third-party controls remain the examination pressure points.

OCC May 2026 enforcement — fintech partner bank AML: The OCC issued a consent order against Community Federal Savings Bank (Woodhaven, NY) for deficiencies in its BSA/AML compliance program, including failures in suspicious activity reporting and USA PATRIOT Act information-sharing obligations. Jason Mikula flagged this outcome as foreseeable — the bank has partnered with higher-risk programs including Airwallex, Wise, Nomad, Chipper Cash, and Revolut. The action reinforces the OCC's sustained posture that rapid growth in payment-processing business lines requires commensurate AML infrastructure, not catch-up remediation. Banks with fintech partnerships that have scaled transaction volumes materially should treat this as a template examination finding.

OFAC — Hizballah-aligned Lebanese officials: Treasury designated nine individuals embedded in Lebanon's parliament, military, and security sectors under Executive Order 13224 on May 21, adding to the concurrent Iran and Sinaloa Cartel designation activity from earlier this week. Designated individuals include four parliamentary members, one Iranian diplomat, and two Amal Movement security officials. All US persons are prohibited from transacting with designated parties; entities 50%+ owned by blocked persons are derivative blocked persons. SDN screening updates and 90-day transaction lookback reviews apply immediately. Secretary Bessent's public statement signals Treasury's Lebanon sanctions posture is active and expanding.

New York RAISE Act — frontier AI: Davis Polk flags that New York has enacted the RAISE (Responsible AI Safety and Education) Act, effective January 1, 2027, requiring frontier AI model developers to file regulatory disclosures, publish risk management documentation, and report safety incidents to state authorities. This parallels California's framework and is directly relevant to banks developing or fine-tuning large language models for credit, fraud, or customer-facing applications. The compliance window is approximately seven months; institutions that have not assessed whether their AI development activities meet the "frontier model" threshold should begin that analysis now.

FDIC May 2026 enforcement: The FDIC released its monthly enforcement compilation today. Specific consent orders and penalty amounts will be assessed as the full release is reviewed — watch for actions reflecting Chairman Hill's documented examination priorities around capital adequacy, credit quality, and liquidity composition, particularly brokered and uninsured deposit concentrations.

SEC-NFA coordination MOU: The SEC and National Futures Association signed a memorandum of understanding to further harmonize regulatory coordination. For banks with broker-dealer and futures commission merchant subsidiaries operating across both frameworks, the MOU signals reduced friction but also increased information-sharing between the two regulators.

---

Warsh's swearing-in this morning is the week's defining institutional event, but the legislative environment heading into the weekend carries its own banking implications.

Senate reconciliation stall: Punchbowl News reports Senate Republicans have hit an internal limit on the reconciliation package, with the path forward unresolved. The CLARITY Act's stablecoin yield restriction fight remains embedded in the broader legislative calendar — a stall in reconciliation does not directly block the CLARITY Act, but it consumes Senate floor bandwidth. The yield restriction question determining whether bank-chartered stablecoin issuers face a structural product disadvantage relative to non-bank payment account holders remains open.

BSA modernization hearing: The Bank Policy Institute's John Court testified before the House Financial Services Committee's subcommittee on modernizing the Bank Secrecy Act. BPI's four-point framework from the hearing signals the industry's legislative ask: risk-based reporting thresholds, reduced duplicative filing obligations, technology-neutral compliance standards, and enhanced public-private information sharing. Congressional engagement on BSA modernization is building — the hearing record will shape any legislative vehicle moving in the next session.

Warsh transition — rate path implications: Nomura's call for no Fed rate cuts in 2026 adds institutional weight to the hike-as-base-case scenario the May 20 FOMC minutes established. The Atlanta Fed's GDPNow model nowcast for Q2 2026 stands at 4.3% real growth — a figure that, combined with sticky inflation, gives Warsh's committee little macroeconomic cover for easing. ALM frameworks calibrated only against hold-or-cut scenarios carry unaddressed exposure that has been accumulating all week.

---

Iran peace deal — oil and rate implications: Reports of a Pakistan-brokered US-Iran final agreement drove oil below $96/barrel on Friday, with the Kobeissi Letter reporting expected terms including a comprehensive ceasefire, mutual restraint on infrastructure targeting, and freedom of navigation in the Persian Gulf and Strait of Hormuz. If the agreement holds, it removes the most persistent supply-side inflation driver underpinning the FOMC's documented hike posture. The scenario distribution for ALM teams widened in both directions this week: the minutes confirmed majority hike support under inflation persistence, while the geopolitical precondition for that threshold may now be easing. Fertilizer prices (up 44% since the Iran War began) and freight costs remain elevated even in a ceasefire scenario — inflation relief would be gradual, not immediate.

Foreign Treasury holdings — March data: Foreign holdings of US Treasuries fell $139 billion in March to $9.35 trillion, the largest monthly decline since September 2022. Japan, the largest foreign holder, reduced its stockpile by $48 billion to $1.19 trillion; Turkey liquidated nearly all its US Treasury holdings after the Iran War began. The March data predates any Iran resolution — if a deal materializes, the geopolitical risk premium embedded in March's selloff may partially reverse. Banks managing duration exposure against foreign demand dynamics should update their assumptions.

JPMorgan — $4 billion PE loan offload: JPMorgan is in discussions to transfer risk exposure on approximately $4 billion in private equity-linked loans, per the FT, as PE firms grapple with a prolonged exit slowdown. The transaction reflects broad-based stress in PE-backed credit: extended hold periods, compressed distributions, and rising PIK interest burdens are concentrating risk on bank balance sheets that underwrote leveraged buyouts at peak-cycle terms. Banks with material leveraged lending books should assess vintage concentration in 2021-2022 originations.

Discover settlement — account misclassification: An Illinois federal court gave final approval to Discover Financial Services' settlement of $540 million to $1.2 billion resolving class action claims over credit card account misclassification. The settlement range reflects contingent claims still being resolved. For banks with complex consumer credit account taxonomies, the settlement establishes a concrete litigation exposure benchmark — the misclassification theory is not Discover-specific.

Stablecoin infrastructure — payment operator dynamics: The week's stablecoin conference activity (StableCon EMEA) and Visa's stablecoin settlement testing both point to the same structural question the CLARITY Act has not yet resolved: where do payment service providers sit in the stablecoin settlement stack, and which compliance obligations attach at each layer. The "stablecoin sandwich" framing — where PSPs intermediating between issuers and end users carry disproportionate compliance burden — is becoming the practical compliance design question for banks building stablecoin-adjacent payment products.

---

Federal Register advance filings expected today (May 22):

Near-term (within 7 days):

---

Warsh's first day inherits a committee already leaning toward tightening. The FOMC minutes, the Nomura no-cut call, and the 4.3% GDPNow nowcast are not individually dispositive — but together they define the rate environment Warsh will navigate in his first press conference. The Iran deal signal is the first meaningful counterweight. Banks that have not stress-tested against a 2026 hike scenario should do so before the next FOMC meeting.

The Community Federal consent order is this week's most actionable enforcement signal for banks with fintech partnerships. The OCC's theory — that fast-growing payment-processing volume requires commensurate AML infrastructure, not sequential remediation — is consistent across the last 18 months of BaaS-related enforcement. Institutions with fintech partners that have scaled significantly in the last two years should benchmark AML controls against current transaction volumes, not original program size.

The New York RAISE Act and NY DFS cybersecurity guidance on frontier AI together establish a state-level AI governance floor that applies regardless of federal framework resolution. Banks with New York charters or significant New York operations developing AI models now have a January 1, 2027 disclosure and incident-reporting deadline that runs independently of any federal AI rulemaking timeline. Seven months is enough time to assess applicability and build the disclosure infrastructure — but not if the assessment starts in Q4.