Supervision gets a legal floor

Week’s Lead Stories

OCC · FDIC · EFFECTIVE DATE PENDING FEDERAL REGISTER PUBLICATION
Supervision gets a legal floor
For decades "unsafe or unsound practice" carried no regulatory definition, and examiners stretched it across everything from capital to culture. The OCC and FDIC issued a joint final rule defining the term for the first time, and it sets a two-prong test: a practice must depart from prudent banking standards and be likely to cause material harm to the institution's financial condition or the Deposit Insurance Fund. Reputational harm alone no longer qualifies. The same rule lifts the threshold for Matters Requiring Attention and creates a lower "supervisory observations" tier that triggers no board reporting. Comptroller Jonathan Gould called it the end of a check-the-box culture. The rule's effective date is pending Federal Register publication; the OCC's revised policy manuals on enforcement actions and MRAs have applied since August 27. Re-paper the examiner-intake process before the next exam, not after.

OCC · EFFECTIVE AUG 27

▸

The enforcement manuals turn public: Revised PPM 5310-3 on enforcement actions and PPM 5400-11 on MRAs took effect the same day, and 5400-11 is public for the first time. The OCC will now allow remediation through the supervisory process before formal action, calibrate responses to size and complexity, and close existing orders once a bank reaches "substantial compliance" rather than perfection. General counsel should re-read open enforcement actions against that standard. Several may be closable on the record already built.

TREASURY · OFAC · AUG 24 · DETERMINATIONS EFFECTIVE

▸

Sanctions move from names to sectors: Treasury Secretary Scott Bessent opened Operation Economic Outcast on August 24, a campaign against Iran built on five sectoral determinations covering digital assets, technology, gold, aviation, and shipping. The mechanism is the story. OFAC can now reach any person operating in those sectors with an Iran nexus, without a prior listing, and it paired the determinations with roughly 60 designations. Blocking attaches the moment a designation takes effect; the 10-business-day clock governs only the report to OFAC. Correspondent, trade-finance, and digital-asset desks now need sector-level diligence, not just SDN matching.

FINCEN · AUG 28 · COMMENT 30 DAYS AFTER FR PUBLICATION

▸

A UAE branch cut from the dollar: On August 28 FinCEN proposed to name Banque Misr's UAE branch a primary money-laundering concern under Section 311, barring U.S. correspondent accounts for the branch and requiring special due diligence to keep its transactions out of other correspondent chains. Treasury estimates the branch processed roughly $1.8 billion for 103 companies tied to Iranian shadow-banking networks between January 2024 and June 2026. Screening has to sit at the branch and BIC level, not the institution name. Any bank that cleared for the branch has a look-back to run this week.

7 AGENCIES · AUG 25 · EFFECTIVE AUG 25

▸

Fair-lending safe harbor withdrawn: Seven agencies — the FDIC, OCC, NCUA, CFPB, HUD, DOJ, and FHFA — rescinded the 2022 interagency statement on special purpose credit programs, effective immediately, saying it cannot be squared with statutory text and recent Supreme Court precedent. The controlling date sits earlier. The Regulation B amendment effective April 22 already removed the permission to design lending around protected characteristics. Banks running community-development or minority- and women-owned-business programs should document a legal basis across that whole window, including originations after April. Some banks wound programs down before the rescission, which means examiners will read a decision made without a documented basis.

SEC · AUG 17 · COMMENT WINDOW CLOSED

▸

Trade-through rule faces repeal — and rare cross-industry opposition: SEC Chair Paul Atkins has moved to repeal Rule 611, the 2005 trade-through rule that bars platforms from executing orders at prices worse than the best quote on any of nearly 20 exchanges. Unwinding it would end forced connectivity to those exchanges and the market-data feeds that price them, rewriting order-routing and best-execution obligations for every firm that touches equities. Hundreds of comment letters landed in opposition before the window closed August 17, from major Wall Street firms, asset managers, pension-fund advocates, and Citadel Securities. With the comment window closed, the remaining levers are the adopting release and the courts. Capital-markets and compliance teams should inventory trade-through infrastructure, pricing-data costs, and routing logic now. Legal should expect litigation to follow a final repeal.

Regulatory Developments

9TH CIR · AUG 28 · RULING

▸

Ninth Circuit holds Kalshi's sports contracts are bets outside CFTC jurisdiction: A unanimous panel in KalshiEX LLC v. Assad held that Kalshi's sports contracts are sports bets outside the CFTC's exclusive jurisdiction, so Nevada can enforce its gaming laws against the exchange. The ruling binds nine western states and splits with the Third Circuit, which sided with Kalshi against New Jersey in April. The court sent the election-contract question back to the district court undecided; sports made up more than 90% of Kalshi's trades in 2025 by the court's count. Banks that sponsor, bank, or process for event-contract platforms now face a state-licensing question in those nine states that a CFTC registration does not answer.

FINCEN · GENIUS ACT · ONGOING

▸

Stablecoin KYC perimeter fight shapes the GENIUS Act framework: The substantive contest behind the OCC's November supervisory rule and Treasury's October 19 GENIUS Act comment window is a direct dispute over identity-verification scope. The Bank Policy Institute and The Clearing House are urging FinCEN to extend customer identification requirements to stablecoin secondary markets — so issuers and distribution partners meet the same AML standards banks already carry — while crypto trade groups are pressing to cap those requirements at direct customers only. Whether verification stops at the issuer's direct customer or follows the token determines the compliance cost of any bank distribution role.

OCC · STABLECOIN · RULEMAKING

▸

OCC stablecoin rules reach the White House: The OCC has sent its final stablecoin rules to the White House for sign-off, per Law360 — the last review stage before publication, and ahead of the January 18, 2027 licensed-issuer window. Banks weighing an issuer or distribution role should expect the supervisory text before year-end.

FDIC · AUG 27 · INTERIM FINAL

▸

Reciprocal deposits conformed: The FDIC Board unanimously approved an interim final rule amending reciprocal-deposit treatment to reflect the Road to Housing Act Congress passed this year. Interim final status means the rule binds while comments are still taken. Institutions funding through reciprocal networks should model the classification and coverage effects now.

SEC · AUG 27 · CHARGES FILED

▸

38 phantom advisers charged: The Commission alleged 38 entities filed false Forms ADV between 2025 and 2026, using fabricated Colorado addresses, disconnected phone lines, and counterfeit SEC registration certificates, many run from abroad. For wealth platforms and referral programs, the read-across is direct: a clean hit in the adviser database is no longer proof of anything.

…and 1 further development this week — the full log is at lexregpulse.com.

Market & Macro Signals

▸

Warsh puts a hike in play: At his first Jackson Hole the Fed Chair said underlying inflation is "not meaningfully improving" and the central bank has "work to do," reaffirming his retreat from forward guidance toward reading market signals directly. The 30-year Treasury yield climbed to levels last seen in 2008, and gold fell below $4,500. ALM committees running only hold-or-cut scenarios now need a hike branch with real weight.

▸

Fed independence under pressure: The administration's effort to remove Fed Governor Lisa Cook — which her counsel this week called legally groundless — sits alongside the thinning of FDIC and NCUA board seats. Fed governors retain for-cause removal protection; FDIC and NCUA board members do not sit behind the same wall, which is where a successful removal theory would land next.

▸

The strongest quarter in years: The FDIC's Q2 Quarterly Banking Profile showed 4,238 insured institutions earned $90.1 billion, up 12%, on a 1.37% return on assets near the highest since 1984. Commercial and industrial lending drove it. Capital fell and securities losses stayed elevated. Examiners will read that strength as capacity to absorb the marks, not license to defer them.

▸

The data cut both ways: July core PCE held at 3.3%, its second-highest reading since October 2024, while the Chicago PMI fell to 47.1 and a benchmark revision erased another 79,000 jobs. The September meeting now faces contradictory inputs. Rate scenarios weighted to one direction understate both tails.

▸

The tariff wall runs both ways: Canada matched the U.S. 50% duties with retaliatory tariffs on roughly $20 billion of imports, from steel to smartphones. The President said Monday that U.S. tariffs on Canadian cars, trucks, auto parts, and steel rise to 50% on January 1, 2027. Asset-based and inventory lenders should revisit borrowing-base assumptions on Canada-bound goods alongside the inbound supply-chain review.

▸

A liquidity-rule trade surfaces: According to Capitol Account, Treasury Secretary Bessent is championing a swap: let banks count collateral prepositioned at the discount window toward the Liquidity Coverage Ratio, conditioned on their borrowing periodically. No agency has proposed anything, since Treasury does not write the rule. Building discount-window readiness is a no-regret step whether or not the trade survives.

▸

Venezuela oil deal lands on a live sanctions program: President Trump announced a deal for "majority control" of more than 65 billion barrels of Venezuelan reserves, with Chevron and Halliburton reported near multibillion-dollar investments. No OFAC action accompanied the announcement. Energy payments touching Venezuelan oil remain license-dependent under the current Venezuela general licenses, which OFAC amended on August 21 and August 27; sanctions and correspondent teams should work from the current general-license text rather than any prior version.

Industry Watch

▸

JPMorgan weighs a stablecoin: The Wall Street Journal reported that the bank most publicly skeptical of stablecoins is considering issuing one, with Wells Fargo and other banks advancing a separate joint venture, and Circle shares fell on the news. The build-or-wait question got an answer from the largest balance sheet in American banking. The OCC's licensed-issuer window opens January 18, 2027.

▸

China-linked intrusion reached Federal Reserve networks: The Justice Department and FBI seized domains used by a China-linked hacking group whose victims, per court filings, included the Fed, DOJ, NASA, and the Senate. A nation-state actor inside central bank networks resets the baseline for financial-sector threat modeling.

▸

Charter traffic sorts winners: Per industry reporting, Zerohash refiled for a national trust charter weeks after the OCC returned its first bid; Nissan withdrew its industrial loan company application; VALT Bank cleared FDIC deposit insurance for a fourth-quarter launch. The gate is rewarding balance sheet and documentation over novelty.

▸

Colorado sues EarnIn over tips and expedite fees: Attorney General Phil Weiser announced a suit August 27 in Denver District Court pleading EarnIn's Cash Out advances as loans under state payday and consumer-credit law. Per the complaint, as reported by Fintech Business Weekly, users paid a tip or expedite fee on more than 92% of transactions, at an average APR near 388%, and EarnIn collected on 99% of advances it markets as non-recourse. Banks and processors behind earned-wage products should read the pleading as the template other states will copy.

▸

PayPal buyout collapses: Stripe and Advent walked away from a roughly $53 billion pursuit, ending what would have ranked among the largest leveraged buyouts ever attempted. PayPal shares fell about 13%. Payments incumbents are left to build rather than buy.

▸

M&A keeps churning across tiers: Valley National agreed to buy Chicago-area Providence Bank & Trust for $247 million, its first offensive move in two years; Indiana's First Financial agreed to buy Hickory Point Bank for $111.3 million; Florida's Gulf Winds Credit Union agreed to buy Madison County Community Bank, the sixth whole-bank purchase by a credit union this year.

▸

Stablecoin rails get built abroad and consolidated: Visa joined a Monetary Authority of Singapore pilot linking card rails to stablecoin settlement; Revolut began rolling out a euro token issued by Stripe-owned Bridge; the BankChain Alliance signed 37 state bankers associations. BitGo bought NYDIG's institutional trading arm. Custody and settlement capability is being bought, not built.

▸

GSIB surcharge fight turns internal: Bank of America has joined the clash over the Fed's revision to the global systemically important bank capital surcharge, and the largest banks are now openly opposing one another as the rulemaking nears its endgame — custody-heavy and markets-heavy institutions want different calibrations of the same formula. A divided industry comment record gives the Fed room to write the rule it prefers.

Earnings Watch

▸

Affirm's most profitable quarter: The buy-now-pay-later lender posted its most profitable quarter, beat revenue estimates, and raised guidance, with CFO Rob O'Hare pointing to room to take share from card issuers. Card portfolios competing on revolving balances should read it as continued attrition at the point of sale.

▸

Canadian banks' U.S. units drove third-quarter profit growth: BMO, RBC, TD, and CIBC each saw their U.S. units drive third-quarter profit growth despite the cross-border trade fight. BMO and RBC separately sold their co-owned processor Moneris Solutions to Francisco Partners for $1.4 billion. The CEOs of BMO and Scotiabank called the tariff impact "manageable."

▸

Varo's losses test the de novo thesis: Jason Mikula's analysis of Q2 2026 Call Reports shows Varo Bank — the OCC's marquee fintech de novo since July 2020 — has accumulated more than $875 million in cumulative losses, posting a $23.4 million quarterly loss on $42 million of revenue despite cutting headcount 28%. With 57.5% of recent OCC de novo applications carrying digital-asset business plans, the case is a caution: a national charter confers legitimacy, not a viable model.

computed from company filings and verified earnings data

Cross-Agency Patterns

▸

Supervisors recalibrate toward tailoring: The unsafe-or-unsound definition and rewritten manuals in the lead, read with the reciprocal-deposit interim rule, all point one way this week — the banking agencies are narrowing what counts as a finding and calibrating response to size and complexity.

▸

Screening shifts from names to conduct and ownership: The Iran sectoral determinations and Banque Misr Section 311 finding in the lead, alongside this week's counterterrorism designations under Executive Order 13224, each demand diligence beyond list-matching: by sector, by branch, by beneficial owner. Sanctions desks should assume the next exam tests all three.

▸

The stablecoin perimeter is set by rulemaking, not statute: The OCC's final stablecoin rules have reached the White House for sign-off — surfaced in Regulatory Developments above — and the SEC's custody amendments are at OMB. Thin odds on the CLARITY Act together say the operative track is agency text. Institutions planning digital-asset activity should keep building against it.

Supervision gets a legal floor — Weekly Intelligence Digest, Aug 30, 2026