The OCC's charter boundary made public — Weekly Digest, Jul 26, 2026

Week’s Lead Stories

▸

The OCC's charter boundary made public: On July 23 the Office of the Comptroller of the Currency did something it rarely does — it denied a national trust bank application on the record, rejecting Wise US Inc.'s bid over material deficiencies in its anti-money-laundering (AML) and Bank Secrecy Act (BSA) infrastructure. Wise shares fell and the company signaled it will refile. The choice of a public "no" over a quiet withdrawal is the message: for money-transfer and cross-border applicants, compliance maturity is now a stated, examinable standard, not a back-channel negotiation.

▸

Same week, the door still opens: The Wise denial landed alongside conditional OCC approval for Upstart Holdings to establish Upstart Bank, a nationwide lender. Read together, the two decisions define the boundary precisely — technology and scale do not offset compliance immaturity, but a clean AML/BSA narrative clears the gate. Institutions weighing charter applications, material-change notices, or fintech acquisitions should treat transaction monitoring, customer due diligence, and sanctions screening as the first thing examiners will test.

▸

The FDIC prices the stablecoin build — and FinCEN turns SAR machinery on benefits fraud: In a July 20 Federal Register notice, the FDIC detailed three reporting forms for permitted payment stablecoin issuers (PPSIs) under the GENIUS Act and set a September 18 comment deadline. The operative trigger is a dual threshold — any issuer with $1 billion or more in outstanding issuance or $100 million or more in average daily transaction volume files Form PS-01 weekly, a cadence the agency reserves for its most closely watched functions. Form PS-02 collects quarterly reserve and financial-condition data from every issuer. The FDIC's intended XML, JSON, and CSV/XBRL submission formats imply infrastructure that surfaces reserve composition and redemption flows in near real time — reporting-infrastructure cost now belongs in the issuance business case alongside the charter question. Separately, in a July 24 alert, FinCEN directed every US financial institution to detect and report schemes draining federal student aid — "ghost students" built from synthetic identities and complicit "straw students" renting out their own — instructing institutions to sharpen monitoring of ACH transfers carrying "refund" language to new or high-velocity accounts and to file suspicious activity reports under the standard BSA framework. The alert carries no compliance date, but FinCEN frames it as an examination focus for 2026-2027 cycles, and the cross-agency Payment Fraud and Scams Working Group Bessent convened the same week signals that benefits-fraud detection is now a durable supervisory expectation.

▸

FinCEN BSA modernization heads for a rebuild: FinCEN Director Andrea Gacki testified before the House Financial Services national-security subcommittee on July 21, framing modernization of the Bank Secrecy Act as the agency's central project. Members of both parties pressed her to lift the long-static $10,000 currency-transaction and suspicious-activity reporting thresholds, with the Bank Policy Institute's written statement pushing the same case. FinCEN separately signaled it is "close to the finish line" on a revised beneficial-ownership rule, and Gacki held the line on the residential real estate reporting rule — signaling expansion, not retreat. Bipartisan congressional pressure on dollar thresholds is the leading indicator that a formal proposal is being scoped; compliance and technology teams should begin modeling reporting-system and onboarding changes now rather than waiting for proposed text.

▸

CLARITY Act's bipartisan path narrowed: Senate Republicans released an updated CLARITY Act draft Wednesday carrying a new ethics provision barring the President, senior officials, and their families from issuing digital assets while in office. A key bloc of Senate Democrats promptly declared formal opposition, calling the text inadequate, while the stablecoin-yield standard — the deposit-substitution concern that 78 banking organizations formally opposed in Section 404 — remains unresolved. Goldman Sachs' CEO publicly backed the bill despite the banking industry's objection; analysts flag the yield gap as wide enough "to drive a truck through." A pre-recess Senate path is now in real doubt, and the deposit-substitution question stays open into the fall.

▸

Johnson and Crews before Senate Banking: CFPB Director nominee Brian Johnson told the Senate Banking Committee that dismantling the bureau "is not my intention," calling it "a creature of statute" with "deficiencies" but "capable of great good." He agreed to a Capital One recusal and to forfeit unvested restricted stock. NCUA Board nominee John Crews was also considered at the same hearing. The testimony points to a CFPB operating at sharply reduced scale focused on statutory mandates — a live question for banks planning around consumer-enforcement posture; the Crews seat sits outside the Fed's for-cause protection wall, tracking how far executive appointment power reaches into the independent agencies.

Regulatory Developments

▸

OFAC's largest-ever cartel action: Treasury designated more than 50 Mexican individuals and entities tied to the Cartel de Jalisco Nueva Generación on July 23, including new leader Juan Carlos González, under Executive Orders 14059 and 13224 and the Kingpin Act. The targets span front companies in fuel, real estate, resorts, and agriculture — a deliberate move against financial facilitators, not just leadership. Blocking obligations attached on publication; banks with Mexican customer, correspondent, or transaction exposure face immediate screening pressure across those sectors.

▸

Hamas financing network disrupted: In a separate July 23 action, OFAC designated seven parties under EO 13224 — a senior Egyptian Muslim Brotherhood official, two Hamas-linked sham charities, and a Turkey-based money exchange — targeting charitable facades, underground banking, and crypto channels. The release warns of secondary-sanctions exposure for foreign financial institutions maintaining correspondent accounts with the designated parties, a distinct reconciliation from the cartel action across different geographies and authorities.

▸

The Zanjani evasion network extended: On July 24 OFAC designated four individuals and nine entities in Iranian financier Babak Zanjani's network, building on the January designation of his Zedcex and Zedxion digital-asset exchanges. The new targets include Turkey- and UAE-based fintech infrastructure and gold-backed digital tokens used to launder IRGC revenue. Blocking attached immediately; the 10-business-day window governs only the blocking-report filing. Banks with Iran, digital-asset, or precious-metals exposure should prioritize those sectors.

▸

OFAC EO 13382 WMD proliferation designation: A Notice of Sanctions Action published July 20, effective July 15, designated one or more persons as SDNs under Executive Order 13382. Blocking attached the moment the listing took effect; the 10-business-day window governs only the blocking-report filing, not the freeze. Names appear in the referenced Federal Register graphics and must be pulled from OFAC's list for screening.

▸

The Hong Kong emergency unwinds both ways: OFAC ended the national emergency under EO 13936, effective July 14, in a move that cuts in opposite directions. Individuals designated solely under IEEPA authority come off the SDN List with assets unblocked, while those under the Hong Kong Autonomy Act shift to the Non-SDN Menu-Based Sanctions List, where transaction prohibitions persist. The risk is symmetrical: over-blocking the delisted and under-screening the transferred. Reconcile both files this week.

▸

The SEC moves to flip the delivery default: The Commission's proposed Regulation E-Delivery, published July 21, would make electronic delivery of proxy materials, shareholder reports, and tender documents the baseline and paper the opt-out — the first structural overhaul of client-communication rules since the 1990s. The economics favor the industry; the obligations run the other way, toward recipient-access verification and audit trails. A client claiming non-receipt of a critical disclosure becomes examination and litigation exposure. Comments close September 21.

▸

FTC sets a deposit-marketing benchmark: The FTC finalized settlements against three Celsius Network founders — former CEO Alexander Mashinsky paying $10 million, with Shlomi Daniel Leon and Hanoch Goldstein paying $4.1 million and $2.4 million — plus permanent marketing bans, over claims that deposits were "safer than banks" and paid 18% yields. Separately, it entered a $45.9 million judgment against student-loan debt-relief operator Dennise Merdjanian. Both actions target individuals, not banks — but they set a standard any institution with fintech deposit-substitute or servicing partnerships should measure its own disclosures against.

▸

FINRA recalibrates its supervisory touch: A July 22 member communication moved lower-risk firms to six-year examination cycles, cut external data requests by 12%, and added advance exam notice and written preliminary findings — a risk-based shift that presumes stronger self-governance. It follows the July 15 extension of Trade Reporting Facility hours to roughly 23 hours a day, five days a week, which retired the overnight-reporting exception. Firms gaining longer exam cycles inherit a heavier internal-controls burden of proof.

▸

CRA relief signaled for community lenders: The OCC and FDIC are preparing a proposal to ease Community Reinvestment Act anti-redlining requirements for smaller institutions, per Bloomberg Law — a notable reversal after years of expanding assessment obligations, and a marker of the deregulatory posture now shaping the community-bank supervisory agenda.

▸

Ninth Circuit checks FinCEN's process: The appeals court affirmed an injunction against FinCEN's Southwest border geographic targeting order, holding it likely constitutes a rule requiring notice-and-comment rulemaking. The ruling is a procedural boundary on how much the bureau can accomplish through GTOs versus formal rulemaking — relevant as it scopes broader BSA modernization.

Market & Macro Signals

▸

Oil above $100 reprices the curve: Brent crossed $100 a barrel Friday, up roughly 42% in 20 days, after Iran rejected a US-brokered ceasefire on day 145 of the conflict. The move ran straight into funding markets: the 10-year Treasury yield pushed above 4.70%, its highest since January 2025, and the 30-year has held above 5.00% for its longest stretch since 2007. Energy-concentrated credit books benefit on the asset side; long-end funding costs, securities-portfolio marks, and mortgage pricing all warrant a fresh look regardless of energy positioning.

▸

The FOMC into a rate-hike whisper: Rate-hike odds are climbing on the oil shock heading into next week's Federal Open Market Committee meeting, with the Fed now broadly expected to hold through 2026. For deposit-cost and duration management, the decision and any guidance shift are the week's central variable — the setup that determines how every balance-sheet question above resolves.

▸

Sanctions enforcement reaches the wallet: Bessent said Treasury froze a $130 million crypto account tied to Iran's Islamic Revolutionary Guard Corps — a concrete enforcement data point for any institution with digital-asset custody or correspondent exposure to flagged wallets, and a companion to the week's Zanjani designations.

▸

Trade friction stacks on the energy shock: Three July 21 proclamations imposed an additional 50% tariff on a range of Canadian goods, and Yemen's Houthis declared a maritime embargo on Saudi Arabia. Treasury's semiannual FX report named no manipulator but placed 10 economies — including China, Japan, Korea, and Germany — on its monitoring list. Trade-finance and cross-border desks face repricing on Canadian counterparty exposure and should track those jurisdictions for policy shifts.

▸

A crack in the riskiest credit layers: CLO equity tranches returned −15% in Q1 2026, the worst quarterly print since the 2020 crash, per the Kobeissi Letter — worth monitoring for banks holding the most subordinated collateralized-loan-obligation layers as the rate backdrop stays elevated.

Earnings Watch

▸

Costs, not revenue, separated the regionals: Across the week's reports, top-line results clustered in line with estimates while the divergence sat below it — expense discipline and credit costs did the sorting. Huntington Bancshares (HBAN) and Customers Bancorp (CUBI) each beat by a penny on modest NIM compression (3.21% and 3.17%), while Zions Bancorp (ZION) missed at $1.74 against $1.85 on in-line revenue; detailed NIM figures were not disclosed in the flash results for KEY and ZION.

▸

Consumer credit reads as stabilizing: Ally Financial (ALLY) missed on EPS at $1.21 but posted an NIM of 3.59% and a 36-basis-point charge-off improvement to 1.57% — the miss sitting below a stabilizing consumer book. Live Oak Bancshares (LOB) beat by roughly 16% at $0.74, with the upside coming below the top line, consistent with the season's pattern of expense and credit dynamics — not revenue — separating results.

▸

Friday's slate extended the miss pattern: Flagstar Bank's EPS missed estimates, with revenue also below consensus. First Hawaiian posted improved net interest margin and higher net income — a cleaner regional read. US Century Bank matched EPS estimates while revenue fell short. The results are consistent with the season's pattern: margin and expense dynamics, not revenue, are separating results across the regional book.

computed from company filings and verified earnings data

Industry Watch

▸

Community-bank M&A ran hot: Consolidation accelerated on multiple fronts — Cincinnati's First Financial agreed to acquire Finward Bancorp for $208 million, Alaska's Northrim Bank will buy Oregon's People's Bank of Commerce for $167.3 million, and Optus and M&F will merge in a roughly $105 million deal forming the country's largest Black-owned bank. Credit-union-buys-bank momentum continued as Gesa Credit Union agreed to acquire Willamette Valley Bank. The through-line: scale economics and a friendlier merger-review posture are pulling smaller institutions toward the table.

▸

Incumbents shift from complaint to litigation: Top US banks are reportedly weighing suit against the OCC over its crypto trust-bank charters, challenging the regulatory pathway that would admit digital-asset firms into chartered supervision — a claim that a single aggregator has reported includes Circle and Augustus, though the OCC charter approval for Augustus has not been confirmed in primary coverage. The threat marks an escalation over the digital-asset charter lane — the same lane the Wise and Upstart decisions just defined — and sets up a direct test of the OCC's authority to widen it.

▸

Revolut resets the challenger benchmark: Revolut secured a full authorized deposit-taking institution licence from Australia's prudential regulator, the first global fintech to hold an unrestricted ADI there, and confirmed a $115 billion valuation that exceeds Barclays and Deutsche Bank. The charter-by-charter global build is widening the neobank competitive perimeter faster than incumbents' regulatory moats can adjust.

▸

Stablecoin settlement rails kept building: Visa began beta-testing a bank stablecoin platform, Western Union launched a Visa/Rain stablecoin card, Zelle began minting its own stablecoin, and Circle expanded into South Korea — with monthly stablecoin payment volume now topping $100 billion even as aggregate dollar-stablecoin supply contracted. The Balance stablecoin's roughly 99% collapse after a $1 million oracle exploit was the counterpoint: fully-reserved GENIUS-framework issuance and fragile algorithmic designs are diverging fast.

▸

European consolidation and crypto attrition: Germany's Commerzbank agreed to enter takeover talks with Italy's UniCredit, a potential landmark for cross-border bank consolidation, while crypto derivatives venue BitMEX announced it is winding down after 11 years amid weak digital-asset markets — a reminder that even established venues face consolidation pressure.

▸

NY AG's Zelle suit proceeds to discovery: A New York state court denied Early Warning Services' motion to dismiss Attorney General Letitia James's fraud-prevention suit over the Zelle platform, allowing litigation that could set new fraud-control standards for participating banks to move forward into discovery.

▸

Fed master-account access remains a bottleneck: Kraken Financial — the first crypto-focused tier-3 applicant to win Fed master-account approval — still cannot operationalize the account more than a year later, its CEO testified last week. With Custodia's denial now at the Supreme Court on a cert petition, correspondent-banking relationships that provide payment-system access to these firms remain economically durable near-term — but incumbents should map which counterparties gain direct Fed access over the medium term.

Cross-Agency Patterns

▸

The sanctions apparatus is targeting facilitators, not figureheads: The cartel, Hamas, and Zanjani designations in Regulatory Developments, paired with Treasury's $130 million IRGC crypto freeze in Market Signals, point the same direction — OFAC is pursuing the financial and digital-asset plumbing of illicit networks, front companies and gold-backed tokens included. Screening built around named individuals will increasingly miss the target.

▸

A coordinated deregulatory tilt for smaller institutions: The signaled CRA easing, FINRA's longer exam cycles, and continued congressional pressure on the Fed to streamline merger reviews converge on a lighter supervisory touch for community and lower-risk firms — with the burden of proof migrating from examiner to internal controls.

▸

The stablecoin framework is being built agency-by-agency: The FDIC's reporting forms lead this edition, but the OCC's coming licensing notice, FinCEN's pending customer-identification rule, and the unresolved CLARITY Act yield fight are assembling the same structure from different corners. Issuers should plan for a multi-regulator compliance stack, not a single rulebook.

▸

The digital-asset charter is now contested ground: The OCC's Wise/Upstart line and the incumbent litigation threat, both surfaced above, mark the charter lane as the industry's live structural battle — the agency widening the door as the largest banks prepare to challenge whether it may.