|
TODAY'S BRIEFING The federal banking regulators moved together on anti-money-laundering rules for the first time in years. On July 7 the Federal Reserve, coordinated with the OCC, FDIC, CFPB, and FinCEN, requested comment on a proposal that would reorient the Bank Secrecy Act program requirement from a documentation exercise toward a risk-based framework — one that forces banks to allocate compliance resources in proportion to actual customer and activity risk and to fold FinCEN's published national priorities directly into their risk assessments. For compliance chiefs who have spent a decade building programs judged on whether the boxes existed, the test now becomes whether the program actually works. The proposal lands amid a wider supervisory pivot toward substance over form: examiners are being pointed at effectiveness in AML, at governance in artificial intelligence, and at cross-sector contagion in resolution planning. The connective tissue is a regulatory posture that rewards demonstrated results, not paperwork. | ▸ | Five-agency AML overhaul: The interagency proposal ties BSA program design to FinCEN's national AML/CFT priorities and requires banks to show that risk assessments genuinely drive staffing, technology, and monitoring decisions — not merely sit in a binder. Regulators will shift from asking whether a program exists to whether significant failures exist within it. |
| ▸ | The comment clock: The 60-day window runs to roughly September 6. The Bank Policy Institute has already engaged, signaling that trade groups view this as a defining rewrite of examination expectations rather than a technical refresh. |
| ▸ | The operational lift: Institutions should expect examiners to probe whether resource allocation tracks documented risk. Programs that over-invest in low-risk lines and under-invest in high-risk ones — the inverse of what the proposal demands — become the new finding. |
· · · REGULATORY DEVELOPMENTS AI governance moved from aspiration to supervisory standard this week, while the Financial Stability Board widened the lens on how bank failures could ripple across insurance and market infrastructure, and Fed research recast how examiners think about failure itself. | ▸ | Bowman on AI governance: Fed Vice Chair for Supervision Michelle Bowman, in July 7 opening remarks, endorsed the FSB's consultation report on responsible AI adoption — a framework built on proportionality, where lower-risk uses draw a lighter touch and material applications in credit, fraud, and sanctions screening require robust controls. The report becomes a US G-20 deliverable later in 2026 and will inform 2027-2028 exam cycles. It builds on April's SR 26-2, which replaced fifteen-year-old model-risk guidance and pulled machine-learning models producing quantitative estimates explicitly under validation and monitoring expectations. |
| ▸ | FSB widens resolution to cross-sector risk: At the FSB's 2026 ReSolve event, the Standing Committee chair pressed a shift from sector-specific crisis preparedness toward integrated "joint readiness" — explicitly asking whether a bank resolution could push an insurance counterparty into insolvency, or whether central counterparty distress could cascade into banking stress. Invoking AIG as the cautionary case, the chair argued credibility is built before a crisis, not during one. For CROs at globally active banks, the signal is that resolvability assessments will increasingly demand mapped exposures to insurers and CCPs, collateral-call cascade testing, and cross-border coordination evidence. |
| ▸ | ECB raises the AI cyber bar: The European Central Bank has directed supervised banks to submit action plans addressing AI-enabled cyber threats, citing emerging models with "potentially profound implications" for IT resilience. US institutions with European operations face the deliverable directly; for everyone else, it previews the direction domestic examiners are likely to take. |
| ▸ | SEC's retail fraud unit: The SEC established a Retail Fraud Working Group within its Division of Enforcement on July 7, consolidating resources against offering frauds, pump-and-dump schemes, and adviser conflicts, with an explicit commitment to "proactive case generation" using data and technology. Institutions with broker-dealer or advisory subsidiaries should expect heightened scrutiny of sales-practice supervision and suitability controls. |
| ▸ | Rethinking bank-run risk: New Fed research analyzing more than 3,000 historical bank runs concludes that poor fundamentals — not panic — drive both runs and failures: banks in the weakest decile face a 63% failure probability once a run begins, while strong banks essentially never fail. The signal for supervision is a renewed emphasis on capital, profitability, and deposit-funding mix as the primary defense, not liquidity mechanics alone. |
| ▸ | G-SIB capital heterogeneity: A Basel Committee analysis of 29 global systemically important banks from 2014 to 2025 documented material differences in how jurisdictions apply buffers, supervisory add-ons, and risk-weighted-asset methodologies — feeding the competitive debate over regulatory arbitrage. Separately, the Bank of England confirmed plans to ease a key capital rule via leverage-ratio tweaks, a reminder that the modernization wave now runs across major jurisdictions at once. |
Enforcement was individual, not institutional: the DOJ secured a 78-month federal sentence on July 7 for a California man who defrauded seven banks of roughly $39 million over nearly a decade, and the CFTC filed a civil fraud complaint against North Carolina commodity pool operator Trevor Vernon and Argent Capital Management. Both will surface in exam discussions of fraud detection and third-party due diligence. · · · INDUSTRY SIGNALS | ▸ | Stablecoin rails keep scaling — and the framing is shifting. Circle's USDC now runs roughly 70% of stablecoin transaction volume, and the UK's FCA halved its proposed stablecoin capital charge in final crypto rules — a competitive signal for US issuers weighing where to domicile as the GENIUS Act framework fills in. The conceptual debate is maturing alongside the volume: Simon Taylor amplified a thesis this week challenging the easy assumption that stablecoins simply replicate the Eurodollar market and extend the offshore dollar system. The distinction matters for banks modeling deposit displacement — if stablecoin balances behave as a genuinely new dollar layer rather than a rerun of offshore dollars, the funding and liquidity implications differ from the analogy most treasury desks are working from. |
| ▸ | Bank M&A and payments consolidation. JPMorgan and Bank of America have held talks with Fiserv over a possible acquisition of its debit payments network, per the Wall Street Journal — a move that would let large banks route around debit interchange caps. Axos Financial agreed to acquire cash-management fintech Arc Technologies; a Massachusetts lender will buy a New Hampshire bank for $160 million, adding $743 million in assets; and Bank7 is pursuing a contested 71% stake in Century Bank now entangled in litigation over defaulted collateral. |
| ▸ | Charter pipeline stays active. Sony Bank won OCC approval for a US trust unit, extending the pattern of large regulated institutions seeking federally supervised structures. Revolut's national-bank application, filed in March with the OCC and FDIC, continues to draw attention as the London fintech tests a path that has defeated prior European challengers. |
| ▸ | Energy and rates backdrop. Brent crude pushed above $76 a barrel after the US revoked Iran's newly issued oil-export license following strikes on commercial vessels in the Strait of Hormuz, and the Nasdaq 100 fell more than 1% as chip stocks pulled back. Energy-sector lenders and commodity desks should track the spillover; the revoked license also re-tightens the sanctions perimeter for banks with Iran-adjacent trade-finance exposure. Market-implied odds of a 2026 Fed cut sit near 21% ahead of today's FOMC minutes. |
· · · WHAT'S COMING | ▸ | Federal Reserve change-in-control notice expected in the Federal Register July 8: filings on acquisitions of bank and bank holding company shares — the routine pipeline flagging near-term control transactions. |
| ▸ | CRD VI milestone effective July 11 — 3 days out: Non-EU banks serving European customers face a new framework for core banking services, implemented unevenly across member states. Institutions with EU-facing business lines should confirm their licensing structures ahead of the deadline. |
| ▸ | DFPI deadlines: California escrow annual reports fall due July 14 and the venture-capital fair-investment-practices comment period closes July 17, with 2026-27 assessment invoices distributed through July 15. |
· · · WHAT IT MEANS | ▸ | AML programs face an effectiveness test: The interagency proposal shifts examination focus from whether a BSA program exists to whether resource allocation tracks documented risk and FinCEN priorities. Banks should map current staffing and monitoring spend against their own risk assessments before the September 6 comment window closes — misalignment is the new finding. |
| ▸ | AI governance is now an exam item, not a pilot: Between Bowman's endorsement of the FSB framework, SR 26-2, and the ECB's cyber directive, materiality assessments of AI use cases become a supervisory expectation for 2027-2028 cycles. Institutions with material AI in credit or fraud decisions should inventory those applications now. |
| ▸ | Resolution planning reaches across sectors: The FSB's joint-readiness framing means globally active banks should expect examiner questions on insurance-counterparty and CCP exposures, not just bank-to-bank contagion. Worth monitoring as resolvability assessments evolve. |
|