Interagency lending guidance sets a new credit-risk standard — Weekly Digest, Jul 20, 2026
|
#19
Edition
|
July 20
Week in Review
|
+1.6
Sentiment Score
|
65
Regulatory Developments
|
Lex’s Take
Examiners can now adversely classify a current, performing loan solely on the basis of borrower work authorization, which means a portfolio segment that shows zero delinquency can still drive allowance builds and compress capital. Banks that have not separately identified and documented the credit rationale — not the status rationale — for this segment within the next 60 to 90 days are handing examiners a pre-written Matter Requiring Attention.
Week's Lead Stories
| ▸ | Interagency lending guidance sets a new credit-risk standard: On July 13 the OCC, FDIC, and NCUA jointly directed supervised institutions to treat lending to individuals not legally authorized to work in the United States as an elevated credit-risk category, citing income-continuity uncertainty (OCC Bulletin 2026-31, paired FDIC Financial Institution Letter). Issued under Executive Order 14406 and effective on issuance, the guidance does not prohibit such lending — it establishes an examination expectation that examiners will test against underwriting files, income-verification procedures, and portfolio monitoring. Tied to an executive order, it is a supervisory priority likely to persist across cycles. |
| ▸ | The dual-compliance bind it creates: Banks must now apply heightened scrutiny to this segment while staying inside the Equal Credit Opportunity Act (Regulation B) and Truth in Lending Act (Regulation Z), both of which bar discrimination on national origin. The guidance cross-references the CFPB's June 8 statement on ability-to-repay and immigration status — meaning underwriting rationale must document a credit judgment, not a status judgment. Institutions with consumer or small-business concentrations in this segment face Matter Requiring Attention risk if controls are thin; a portfolio review inside 60 to 90 days is the practical window. |
| ▸ | The GENIUS Act reaches its operational threshold: The federal stablecoin regime assembled over the past year hit its July 18 implementation deadline, and on July 17 the FDIC moved to give it teeth — proposing weekly and quarterly reporting forms for the permitted payment stablecoin issuers (PPSIs) it supervises. A weekly cadence is a frequency the agency otherwise reserves for its most closely watched functions. Applied to stablecoin reserves and issuance, it signals regulators intend near-real-time visibility into the money backing these instruments. |
| ▸ | A common supervisory perimeter takes shape: The FDIC's forms follow its April 10 proposed rule and slot alongside parallel work from the OCC and NCUA, whose own issuance and AML standards remain in comment. The three agencies are building a shared federal perimeter around dollar-token issuance rather than leaving it to state money-transmission regimes. The reporting package is set for Federal Register publication July 20; institutions weighing issuance should price the real-time reporting build, not only the charter question, and file feasibility comments early. |
| ▸ | Examination-data handling gets a coordinated tightening: On July 16 the OCC, Federal Reserve, and FDIC jointly directed examiners to review highly sensitive bank materials on-site rather than copying them onto agency systems, and committed the agencies to notify a bank within 72 hours of discovering any material breach of confidential supervisory information. Effective on issuance, the standard reaches every national bank, state member and nonmember bank, and federal savings association. |
| ▸ | Why the timing is pointed: The guidance landed the same week the Fed's own inspector general reported that Board officials mishandled sensitive information — and days after former Fed adviser John Rogers was sentenced to 38 months for lying about sharing restricted Fed information with Chinese contacts. The 72-hour clock runs from the agencies to the bank, so institutions should stand up a matching intake and escalation path and confirm they can provide secure on-site review space before the next cycle. |
“
The guidance advises that non–work authorized borrowers may present elevated credit risk because their ability to generate income, employment continuity, and financial stability may be more uncertain. — OCC — Bank Supervision: Interagency Guidance on Lending to Individuals Not…
| ▸ | Bowman and Gould set a shared material-risk doctrine: In a July 13 speech, Fed Vice Chair for Supervision Michelle Bowman set four principles for modernizing financial regulation — prioritize material financial risk over the volume of examination findings, tailor requirements to an institution's risk profile, make supervisory processes more transparent, and build frameworks that accommodate responsible innovation. She tied the doctrine to a March 2026 Basel III proposal whose comment period has closed and to Supervisory Operating Principles the Fed has now published for the first time. Marking his first year in office on July 15, Comptroller Jonathan Gould articulated the same substance-over-form posture within 48 hours, pledging fewer administrative findings and faster board-level remediation of what remains. The pending Basel III framework would simplify risk-based capital into a single stack, recalibrate G-SIB surcharges, reduce stress-testing overlaps, and index systemic surcharges to nominal economic growth; a final rule is expected late 2026 or early 2027. Capital and compliance teams should map current examination findings against the shared framework and model against simplified Basel III requirements now. |
| ▸ | Trump-linked fintech tied to "no-KYC" cards: Fintech Business Weekly's Jason Mikula reported that MSwipe (also trading as Stradacarte), a card-issuing platform owned by ALT5 Sigma — which reportedly received a $1.5 billion investment from the Trump-affiliated World Liberty Financial — has offered "no-KYC" prepaid cards, some allegedly linked to a crypto program marketed for Iran sanctions evasion. According to the report, MSwipe operated through roughly 14 bank and program-manager partners, including Sutton Bank, Marqeta, Wex Bank, ConnexPay, and Corpay, named here only by their processing roles. No agency action has been announced. Banks that sponsor or process for prepaid-card program managers should confirm whether any relationship touches these entities and review KYC controls at the program level. |
| ▸ | OCC July enforcement targets the conversion gate — and named individuals: United Texas Bank of Dallas received a cease-and-desist order for Bank Secrecy Act and anti-money-laundering deficiencies, coordinated with the Dallas Fed and the Texas Department of Banking during its conversion to national bank status (Corporate Decision 1375). The signal for any bank changing charters: AML adequacy is tested hardest at the transition. Separately — and distinct from the institutional action — former JPMorgan Chase operations associate Ezekiel Dorsey received a prohibition order after stealing roughly $120,000 while servicing ATMs, and the Federal Reserve barred the former chief lending officer of Heritage State Bank over inflated appraisals. |
| ▸ | The Fed breaks from the AML pack: The Federal Reserve released its own proposed AML/CFT program rule, following April 2026 proposals from FinCEN, the OCC, FDIC, and NCUA. Notably, the Fed's version does not require consultation with FinCEN before initiating significant supervisory actions — a divergence that creates coordination risk for Fed-supervised institutions and a distinct comment-letter target. Gap analyses should start now against a rule that could take effect 12 to 24 months out. |
| ▸ | OFAC widens the Iran and ransomware perimeter: Treasury ran multiple designation waves this week — more than 50 parties tied to Mohammad Hossein Shamkhani's shipping network (bringing the three-wave total past 200), two individuals and one entity enabling ransomware, seven parties supplying IRGC weapons networks, and over $130 million in wallets tied to the Central Bank of Iran. A reminder on mechanics: blocking obligations attach immediately upon designation; the 10-business-day window governs only the filing of blocking reports, not the freeze itself. Correspondent, trade-finance, and digital-asset monitoring teams should reconcile counterparties. |
| ▸ | CECL handbook resets the exam yardstick: The OCC issued version 2.0 of its "Allowances for Credit Losses" Comptroller's Handbook booklet, effective July 16, superseding the 2021 edition and legacy ALLL guidance and folding in the 2023 interagency policy statement. Examiners will test allowance methodology, governance, and forward-looking scenario documentation against the updated framework next cycle. |
| ▸ | SEC flips the delivery default: The SEC proposed Regulation E-Delivery, which would make electronic delivery the default for prospectuses, fund reports, proxy statements, trade confirmations, Form CRS, and Form ADV Part 2 — reversing the affirmative-consent regime while preserving opt-out. Comments run to roughly September 14; wealth and broker-dealer operations should begin a gap analysis of consent-tracking systems now. |
| ▸ | CFTC finalizes uncleared-swaps margin: The CFTC approved a final rule amending margin requirements for uncleared swaps applying to swap dealers and major swap participants not subject to prudential-regulator margin rules, framed as harmonizing with BCBS-IOSCO standards. Bank-affiliated dealers may fall under the prudential exemption; confirm which regime governs before adjusting collateral processes. |
| ▸ | Fed nonbank-affiliate capital research flags holding-company risk: New Federal Reserve research documents that nonbank subsidiaries — broker-dealers, finance companies, insurers, asset managers — now account for roughly a quarter of US nonbank financial intermediation, operate under direct parent control in 90% of cases, and function as equity reservoirs with a median 6.5x multiplier that lets holding companies reallocate capital across the group. A companion finding argues Basel III compliance produced an unintended consequence — banks strengthened their own capital largely by extracting equity from nonbank affiliates, leaving those affiliates thinner and more leveraged; under a modeled 5% loss on nonbank assets, the average bank holding company would deploy 18% of excess capital to recapitalize affiliates, with tail institutions exhausting their buffers. Bank holding companies should expect supervisory questions on intra-firm capital transfers and document the rationale for current structures. |
| ▸ | CFPB independence watch — acting director presses to shrink the Bureau: Acting Director Russell Vought testified before both the House Financial Services Committee and the Senate Banking Committee this week that the CFPB "should not exist in its current form," urging reduced funding and authority. Separately, the CFPB and the National Treasury Employees Union jointly obtained a stay of litigation over the Bureau's reduction-in-force, giving nominee Brian Johnson 60 days to review the staff-cut plan if the Senate confirms him — tying the Bureau's structural downsizing to a confirmation timeline. Executive-branch pressure to hollow out an independent consumer regulator from within remains a live structural question for supervised institutions awaiting clarity on enforcement and open-banking priorities. |
| ▸ | DOJ sentences two former TD Bank employees: The Justice Department sentenced two former TD Bank employees — one to 46 months for moving millions through bank accounts for a laundering network, a second to 24 months for wire-fraud conspiracy and false bank entries. The action underscores that transaction-monitoring and operations staff face personal criminal liability for facilitation, sharpening the case for insider-threat controls and access audits. |
Market & Macro Signals
| ▸ | Inflation cooled, then cooled again: June CPI fell to 3.5% against expectations of 3.8%, core eased to 2.6%, and the month-over-month figure dropped 0.4% — the sharpest monthly decline since April 2020. Odds of a July 29 hike, briefly revived by Governor Christopher Waller days earlier, crashed to roughly 8%, and June PPI's subsequent drop pushed them to about 4%. Holds through 2026 returned to the base case. |
| ▸ | The Fed refuses to declare victory: In his first testimony as Chair, Kevin Warsh voiced "no tolerance" for elevated inflation, held the funds rate at 3.5–3.75%, and launched five task forces reviewing communications, the balance sheet, data methods, employment, and inflation frameworks — the last signaling possible revision of Phillips Curve and NAIRU assumptions that feed capital-planning rate paths. |
| ▸ | A hawkish chorus persists beneath the data: Governor Lisa Cook argued inflation risks "now outweigh employment risks," and Dallas's Lorie Logan, Kansas City's Jeff Schmid, and Cleveland's Beth Hammack pressed for modestly higher rates against a sticky-inflation, elevated-energy backdrop. ALM teams should keep a lighter-weighted upside-rate scenario in the deck rather than retire it. |
| ▸ | The oil shock behind the rate debate: As US strikes on Iran continued, US crude closed the week up more than 20% over 15 sessions, with Brent approaching $90 and the 30-year fixed mortgage rate rising to 6.55%, a one-year high. Banks with concentrated energy-sector credit benefit on the asset side even as the rate path complicates deposit costs; capital-markets desks gain from the volatility. |
| ▸ | AI concentration emerges as a stress theme: IBM fell roughly 25% — its steepest one-day drop since 1968 — on weak software results, landing alongside a Bank for International Settlements paper warning the AI investment boom risks a dotcom-scale bust and a separate BIS flag that Business Development Companies hold roughly $115 billion in software lending unpriced for generative-AI disruption. Banks with software-sector or AI-lending concentrations should treat a revenue-reversal stress test as proactive work. |
Industry Watch
| ▸ | The stablecoin battle shifts from charter to yield: Visa launched a platform letting banks and fintechs mint and manage stablecoins, debuting with Open USD — the Coinbase- and BlackRock-backed yield-sharing token positioned against Circle's USDC. Analysts cut Circle to a Street-low target and JPMorgan trimmed its Coinbase view; Robinhood's chain adopted the yield-sharing USDG. The competitive variable is now issuer economics, not the regulatory pathway — a dynamic the GENIUS regime will sharpen. Separately, nearly 40 firms including BlackRock, JPMorgan, and the NYSE live-traded tokenized stocks and Treasuries through DTCC ahead of an October launch. |
| ▸ | CLARITY Act yield-loophole fight intensifies: Some 78 banking trade groups pressed the Senate to close yield loopholes in the Digital Asset Market Clarity Act, arguing yield-bearing tokens function as uninsured deposit substitutes. Senator Thom Tillis floated a last-minute amendment on stablecoin yield, and the House held a hearing on the bill in New York City on Friday. The Bank Policy Institute has publicly flagged three fixes it wants before the bill advances, arguing the current text risks becoming a money-laundering roadmap. The deposit-displacement concern is the same mechanism Japan's SBI previewed with its 3% yield lending service for its JPYSC yen stablecoin — a live illustration of how yield-bearing tokens compete for retail balances. |
| ▸ | Klarna seeks inside US prudential supervision: The buy-now-pay-later firm applied for a US bank charter, reportedly in Utah, despite already holding a European banking license — a move toward cheaper, stickier deposit funding that extends the fintech-into-chartered-banking trend Circle's national trust approval crystallized. |
| ▸ | Payments and bank M&A stay active: PayPal's board rebuffed the roughly $53 billion take-private bid from Stripe and Advent as inadequate, leaving the largest payments deal in recent memory unresolved. In depository M&A, First Hawaiian agreed to acquire California's TriCo Bancshares in a roughly $2 billion deal, North Carolina's First Bank agreed to buy Carolina Bank & Trust for $166 million, and core-banking vendor CSI acquired treasury-payments fintech Qolo. Citizens Financial will close about 100 in-store branches and open 50 standalone advice-focused locations, targeting $20–30 billion in lower-cost deposits. |
| ▸ | Charter arbitrage becomes contested ground: Twenty state attorneys general urged the OCC, Fed, and FDIC to reject bank acquisitions by high-cost lenders Enova and OppFi, alleging the deals evade state rate caps — the clearest signal yet that state enforcers will contest charter-based rate exportation. Separately, Wyoming's Custodia petitioned the Supreme Court over the Fed's denial of a master account, a case worth watching as novel charters seek settlement rails. |
| ▸ | A small, clean failure marks farm-belt stress: Kansas regulators closed Small Business Bank of Lenexa on July 17, with The Farmers State Bank of Oakley assuming its roughly $69 million in deposits at an estimated $5.7 million cost to the Deposit Insurance Fund. Peer community banks with agricultural and small-business concentrations should read it as a marker of credit stress and review classified-asset trends. |
Cross-Agency Patterns
| ▸ | Material-risk supervision is now a shared federal doctrine: Fed Vice Chair for Supervision Michelle Bowman's July 13 principles and Comptroller Jonathan Gould's July 15 "one year" reset articulated the same substance-over-form posture within 48 hours — fewer administrative findings, sharper focus on genuine risk, and faster board-level remediation of what remains. The July 16 joint statement on examination data shows that convergence extending even to how examiners handle a bank's confidential files. Compliance teams have a stable yardstick to sort material open matters from administrative ones — but big-bank boards should expect tighter resolution clocks, not looser ones. |
| ▸ | Individual accountability is broadening across regulators: The OCC's Dorsey prohibition, the Fed's bar of the Heritage State Bank lending officer, and DOJ's sentencing of two former TD Bank employees — one to 46 months, one to 24 months, as detailed in Regulatory Developments — point the same direction: examiners and prosecutors are pursuing named individuals for operational and lending-control failures, not only institutions. The case for insider-threat controls and access audits sharpens accordingly. |
| ▸ | AI supervision and supervision-by-AI advance together: Bowman flagged fair-lending exposure in credit-decision AI, Gould committed to AI-assisted examinations, and the FSOC readout named AI governance a monitoring priority — while the BIS bubble analysis and Barr's inequality warning frame the macro risk. Scaled, risk-based AI examination is crystallizing as a 2026–2027 theme. |
Enforcement Barometer
Trailing 12 months: 261 actions · computed from the LexRegPulse enforcement database — no model-generated statistics
Enforcement Heat · 90 Days · COOLING
net -17 · 5 new restrictive orders vs 22 terminations of existing orders
|
Heat by Domain (90d)
| Insider/Integrity |
▇▇▇▇▇▇▇▇▇ |
24 |
| Safety & Soundness |
▇▇▇▇▇ |
13 |
| AML/BSA |
▇ |
2 |
| Capital |
▇ |
1 |
| Flood |
▇ |
1 |
|
The Tape (12m)
Terminations 103 vs new restrictive orders 27
54% of actions target individuals, not institutions
Penalties: $500K total · largest $125K
|
What to Watch
| ▸ | FDIC stablecoin reporting forms — publication July 20: The information-collection notice supporting the GENIUS Act PPSI framework reaches the Federal Register, opening its comment window on the weekly reserve-reporting cadence. Digital-asset teams should file feasibility concerns early. |
| ▸ | Firearms MCC ban heads to the Senate: The House passed the Protecting Privacy in Purchases Act, which would bar payment networks and banks from using the merchant category code that identifies firearms retailers — removing a data point some institutions use in BSA/AML monitoring for high-velocity gun and ammunition purchases. Government-affairs and financial-crimes teams should assess current reliance on the code before Senate action. |
| ▸ | Failing Bank Acquisition Fairness Act heads to the Senate: The House passed the Failing Bank Acquisition Fairness Act on July 14, aimed at the procedures governing FDIC-assisted acquisitions. M&A and legal teams at potential acquirers should review the text for changes to bidding and resolution mechanics before the Senate takes it up. |
| ▸ | Minnesota crypto-kiosk ban — effective August 1: A state ban on cryptocurrency kiosks takes effect August 1, alongside new rules for banks and credit unions offering crypto custody. Minnesota institutions with kiosk or crypto-ATM partnerships should audit those arrangements now. |
| ▸ | OCC stablecoin AML comments close — July 24: The comment window on the OCC's Permitted Payment Stablecoin Issuer AML/CFT and sanctions standards closes, the counterpart to the FDIC's own PPSI standards open through August 4. |
| ▸ | A July 27 cluster of Fed and FinCEN deadlines: Comments close on FinCEN's Huione Group primary money-laundering determination and on the Fed's Regulation A and Regulation D proposals; the NCUA's prohibition on the use of reputation risk takes effect the same day. |
| ▸ | Reg B effective July 21; FinCEN oversight hearing July 21: The CFPB's Equal Credit Opportunity Act amendments take effect, and the House Financial Services subcommittee scrutinizes FinCEN — a likely precursor to shifts in SAR/CTR, beneficial-ownership, and crypto-AML examination priorities. |
| ▸ | FSB AI consultation July 22; CFPB mortgage-credit RFI Aug 10: The Financial Stability Board's responsible-AI "Sound Practices" consultation closes, informing future interagency expectations, and the CFPB's Request for Information on promoting access to mortgage credit remains open. |
Sources Behind the Lead Stories
Primary sources from this week that relate to each lead story above, by topic overlap.
Re: Examination-data handling gets a coordinated tightening
Re: The GENIUS Act reaches its operational threshold
Additional primary sources this week
Signed
Lex
Primary-source research · AI-drafted · human-reviewed
|
Sentiment Score
The FSI Banking Environment Favorability Score tracks regulatory climate across three signals — administrative posture, regulatory tone, and market sentiment. Updated every morning.
|
|
How we calculate it →
|
|
|
Latest from Lex
Weekly deep-dives on regulatory trends — primary sources, no noise.
|
|
Read →
|
|