+8
Sentiment Score
12-day trend
2
Developments Read This Week
|
The Joint Statement on core service providers is not a proposal awaiting comment — it is already operative, meaning banks that read September 11 as a deregulatory reprieve have misread the one document that actually binds them today. The practical shift: due diligence on core processors now runs through a magnitude-times-probability test, not an activity classification, so banks that haven't re-mapped their vendor inventory to that two-part standard are already behind the examiner's current expectation.
FEDERAL RESERVE · SEP 16 · RATE 3.75–4% EFFECTIVE The Fed's first hike since 2023 Going into Wednesday the market had already flipped: at the start of 2026 it priced four cuts, and by the vote it priced a rise. The Federal Reserve delivered. The FOMC lifted the target range to 3.75–4 percent, its first increase since July 2023, on a unanimous 12-0 vote. The median projection now carries another rise this year and no cuts through 2027. For bank treasurers the easing branch is gone. Deposit-beta math and low-coupon securities books have to be re-run against a terminal rate the Committee will not forecast downward, and funding plans written for a cutting cycle need the same treatment before the quarter closes. FEDERAL RESERVE · SEP 17 · PROJECTIONS RELEASED | ▸ | The path, not the quarter-point, is the shock: The projections released with the statement turn a two-sided planning exercise into one branch. Liability pressure was already visible before the vote: commercial-bank borrowing from the Federal Home Loan Bank system rose 20 percent in the second quarter as deposit competition grew costlier. Goldman now sees a further move in October, and TD sees October and January. The reciprocal-deposit comment window at the FDIC closes October 1, so community banks funding large balances through those networks should file the post-hike numbers rather than spring's. |
FEDERAL RESERVE · FDIC · SEP 17–18 · PRELIMINARY / RESCINDED | ▸ | Supervision rebuilt from both ends: Vice Chair for Supervision Michelle Bowman released the preliminary Starling review of the Silicon Valley Bank failure in London on September 18. It put the cause on examiner culture rather than on tailoring: supervisors documented the fatal vulnerabilities in March 2022, then waited a year. Her answer adds an "observation" rung below Matters Requiring Attention, with monthly escalation straight to heads of supervision. The FDIC moved the opposite guardrail the same week, rescinding its 2016 statement on how examiners frame non-binding recommendations. Banks now have to define who owns an observation and what evidence closes it, before the next exam writes that answer for them. |
FDIC · SEP 17 · COMMENT 60 DAYS AFTER FR PUBLICATION | ▸ | FDIC rewrites bank-merger review: The board proposed to overhaul review under the Bank Merger Act, and the changes acquirers will weigh most are the competitive screen and the clock. Credit unions and centrally booked deposits would enter the competitive analysis, a de minimis deal would clear on a deemed-approval letter within five business days, and expedited processing would reach 25 percent of assets. A companion proposal reads the Riegle-Neal parity provision to keep a host state's law off an out-of-state state bank where it would not bind a national bank; rate exportation is untouched. Both remain proposals. The 1998 policy statement still governs deals filed today, and comments run 60 days after Federal Register publication, which had not occurred as of Friday. |
OCC · FED · FDIC · NCUA · SEP 15 · COMMENT NOV 16 2026 | ▸ | Four agencies propose new third-party risk management guidance: The OCC, Federal Reserve, FDIC and NCUA published proposed third-party risk management guidance on September 15 that would rescind and replace the existing vendor guidance in favor of expectations scaled to the risk each relationship actually carries rather than uniform process applied to every contract. The Federal Reserve simultaneously proposed a companion guide written only for community banking organizations below $30 billion in assets, drawing on examination experience to show how the high-level principles apply to the relationships those banks actually have; the Board stated explicitly that the guide is not a rule and that declining to follow it will not draw supervisory criticism. Comments on both close November 16, 2026. |
NYDFS · SEP 10 · PART 500 CYBERSECURITY GUIDANCE | ▸ | NYDFS sets the evidentiary standard for cybersecurity risk assessments: New York's Department of Financial Services issued a September 10 industry letter telling every institution it supervises what a cybersecurity risk assessment must show when an examiner asks to see one. The guidance, issued under Part 500 of the state's cybersecurity rule, adds no new legal duty; it explains what the existing annual assessment requirement means in practice and names five deficiencies the Department keeps finding in examinations: incomplete asset scope and visibility, weak or inconsistent methodologies, failure to account for evolving interconnected risks, insufficient governance and risk treatment, and results that never feed back into the cybersecurity program. The standard is evidentiary — an institution must show how its assessment drove control selection, the compensating controls chosen, and the risks accepted. |
SENATE · SEC · CFTC · SEP 16–18 · CLOTURE FAILED 49-50 | ▸ | Market-structure bill dies, agencies draw the line anyway: The CLARITY Act failed cloture Tuesday on a 49-50 vote, eleven short, with no Democrat in favor. The stablecoin-yield fight the bank trade groups waged for a month ends unresolved in statute. Within 48 hours the SEC issued a conditional exemptive order for tokenized-securities venues and CFTC staff granted a no-action position for passive software providers. The CFTC then sent a digital-asset market rulemaking to OMB. JPMorgan analysts warned that agency-made rules are reviewable in court, which is the practical objection to the whole route. |
OFAC · FINCEN · SEP 14–18 · DESIGNATIONS FINAL | ▸ | Iran sanctions campaign reaches the crypto layer: OFAC designated VTB Bank on September 14 for moving frozen Iranian assets and building rial-ruble channels, its third listing. On September 18 Treasury hit the Iranian exchange BitBank under Operation Economic Outcast, saying financier Babak Zanjani used it to move hundreds of millions in bitcoin to the Islamic Revolutionary Guard Corps. FinCEN convened global banks on September 16 on the same procurement networks. Blocking attaches immediately on designation; the blocking report is due within 10 business days per Executive Order 13902 and OFAC regulations. |
CSBS · SEP 16 · STATE ADOPTION DISCRETIONARY | ▸ | State examiners get an AI playbook: The Conference of State Bank Supervisors released an AI Supervisory Framework on September 16 for examiners of state-chartered banks and state-licensed nonbanks. It draws on the NIST AI Risk Management Framework, the Cyber Risk Institute's financial-services version and Treasury's AI Lexicon, and CSBS published it so institutions can see the questions an examiner may ask. Each state agency decides how far to adopt it, so it is a discretionary tool, not a rule. State-chartered banks can run it against their own AI inventory before the next exam. |
…and 4 further developments this week — the full log is at lexregpulse.com.
| ▸ | Yields at levels not seen since 2007: The 10-year Treasury reached 5.04 percent on Fed day, its highest since July 2007, taking the average 30-year mortgage to 7.24 percent by Friday. The two-year hit a fresh multi-year high, and the message in the curve is short rates staying high for longer. |
| ▸ | A fuel shock feeding the inflation read: US diesel set records for twelve straight days to $6.49 a gallon, roughly double its January low, after attacks kept Saudi Arabia's East-West pipeline shut. This is the cost line trucking, agricultural and distribution borrowers absorb first, and it is the argument against near-term disinflation. |
| ▸ | Global tightening moved with the Fed: The Bank of Japan raised its policy rate to 1.25 percent, the highest since 1995, on the shortest interval between Japanese hikes since 1990. The dollar index cleared 100, and Asian currencies weakened. |
| ▸ | Foreign demand for Treasuries thinned again: Overseas holdings fell $50 billion in July to $9.25 trillion, the fourth monthly decline in five, with China at its lowest since 2008. Interest costs on the public debt reached a record $1.27 trillion through eleven months of the fiscal year, about 26 percent of receipts. |
| ▸ | Housing and leverage flash caution: The NAHB builder-sentiment index fell to 32, matching the December 2022 trough, with 38 percent of builders cutting prices. Margin debt rose $37 billion in August to $1.45 trillion, the second-highest on record. Markets price a 53 percent chance of another hike in October. |
| ▸ | The charter queue keeps filling: The near-prime lender Avant applied to the OCC for a full-service de novo national charter, American Banker reported. Law360 reported that the OCC approved three trust charters for stablecoin businesses, and The Wall Street Journal and Law360 reported a conditional trust approval for Bastion. A trust bank is uninsured, takes no deposits, and is not a permitted payment stablecoin issuer under the GENIUS Act, whose rules remain proposed. Against that, Enova walked away from its $369 million purchase of Grasshopper Bancorp, and its chief executive publicly blamed unclear licensing standards. The doors into supervision are multiplying even as one applicant concludes the wait is unpriceable. |
| ▸ | Revolut confirms a customer data breach: Revolut confirmed that attackers gained access to customer data — including identity documents, selfie verification images, balances and transaction records — through fraudulent requests impersonating legitimate government channels. The confirmation matters to US institutions because Revolut holds conditional OCC approval for a national bank charter, placing the incident in front of supervisors mid-application, and the attack method — spoofed official requests defeating staff rather than systems — is the control gap no perimeter tool closes. |
| ▸ | Digital-asset rails reach the community tier: Coinbase and Stablecore opened digital-asset services to more than 3,000 banks and credit unions. US Bank completed a first USBDC transfer on the Stellar network. Community boards should keep the categories straight: a tokenized deposit is still insured; a stablecoin is neither. |
| ▸ | The plumbing consolidates: Vista Equity brought in bankers to weigh a sale of Finastra, one of the largest lending and payments software suppliers to banks, and S&P Global agreed to buy the smart-contract security firm OpenZeppelin. Truist is exiting near-prime auto lending and selling a $5.5 billion book. Institutions mid-contract should expect an ownership change to reopen terms. |
| ▸ | Know-your-agent arrives before the rulebook: Visa and Mastercard both shipped products to manage AI-agent transaction risk, and the two are building a shared attribution protocol with Ant International for a counterparty type no error-resolution rule contemplates. Circle released its Arc blockchain to institutions. Banks whose dispute operations assume a human at the keyboard should ask their networks for agent-attribution fields now. |
| ▸ | State enforcers set the lending theory: Citizens sued SoFi over mortgage and commercial hiring, framing talent flight as racketeering. Separately, 41 state attorneys general settled with subprime auto lender Credit Acceptance for roughly $710 million in restitution and debt relief. No federal regulator was a party to either; the conduct findings are the theory state enforcers will bring next. |
FEDERAL RESERVE | ▸ | The vocabulary of examination is being rewritten at once: The Fed's new "observation" rung and the FDIC's rescission of its 2016 recommendations statement (Lead Stories) move the same taxonomy in opposite directions in the same week. The intake process that sorts findings from suggestions now runs on standards neither agency has fully written down. |
SEC | ▸ | With no statute, the perimeter is agency work product: The failed CLARITY vote, the SEC's tokenized-securities order, the CFTC no-action position and its rulemaking at OMB (Regulatory Developments) all point to a crypto perimeter drawn by order and enforcement, not by law. Each piece is reviewable in court, so the boundary can move. |
FDIC · Sep 28 | ▸ | Preemption pressure arrives from two doors: The FDIC's parity proposal (Lead Stories) answers by rule the question the Supreme Court conferences on September 28 in the escrow-interest petitions. Banks operating across state lines without branches should track both, because a ruling and a rulemaking could land on the same question within weeks of each other. |
Enforcement Barometer
Trailing 12 months: 253 actions · computed from the LexRegPulse enforcement database — no model-generated statistics
Enforcement Heat · 90 Days · COOLING
net -9 · 5 new restrictive orders vs 14 terminations of existing orders
Heat by Domain (90d)
| Insider/Integrity |
▇▇▇▇▇▇▇▇▇ |
22 |
| Safety & Soundness |
▇▇▇▇▇▇▇ |
16 |
| AML/BSA |
▇ |
1 |
| Capital |
▇ |
1 |
| Consumer |
▇ |
1 |
The Tape (12m)
Terminations 87 vs new restrictive orders 28
54% of actions target individuals, not institutions
Penalties: $733K total · largest $147K
| ▸ | CFPB director nomination heads to the floor: The Senate Banking Committee advanced Brian Johnson's nomination to lead the CFPB on September 17 on a 13-11 party-line vote, Consumer Finance Monitor reported. The full Senate has not scheduled a vote. A confirmed director resets supervisory priorities for consumer-facing banks and their fintech partners. |
| ▸ | SEC 14a-8 and proxy modernization: Both proposals were published for comment, with the window running 60 days from Federal Register publication. Bank holding companies should model the shortened broker search period against their next record date. |
| ▸ | Electronic delivery comments close September 21: The SEC's proposal on electronic delivery under the federal securities laws closes Monday, the last business day to file. Bank broker-dealer affiliates that still default to paper have no further window. |
| ▸ | NYDFS payment stablecoin issuer regulation comments close September 21: The comment window on NYDFS proposed rule 23 NYCRR 202 closes Monday. Issuers weighing a state regime against an OCC trust charter should note that no Treasury certification of a substantially similar state regime yet exists. |
| ▸ | Colorado's chatbot rules, revised draft September 23: The state Attorney General's revised automated-decision and chatbot rules carry duties starting January 1, 2027. Lenders running conversational agents in servicing or collections own the exposure, and other AGs may copy the text. |
| ▸ | One CFTC and one OCC filing close September 25: The swap-execution-facility order-book proposal and the OCC information collection for payment-stablecoin-issuer applications both close September 25. The OCC form fixes what an applicant must produce well before any final rule binds. |
| ▸ | Supreme Court escrow-preemption conference September 28: The Court conferences on three petitions, with an order list expected October 5. The outcome governs the same cross-border question the FDIC's parity proposal answers by rule. |
| ▸ | The October 1 cluster: The OCC's "violations of laws or regulations" definition, the FDIC reciprocal-deposit proposal, and FinCEN's Banque Misr special measure all close for comment October 1, the day the Financial Data Transparency Act joint data standards take effect for OCC-supervised institutions. Assign owners this week. |
From This Week’s Reading Pile
primary sources that informed the lead stories
Re: FDIC rewrites bank-merg
Additional primary sources this week
Signed
Lex
Primary-source research · AI-drafted · human-reviewed
|
Sentiment Score
The FSI Banking Environment Favorability Score tracks regulatory climate across three signals — administrative posture, regulatory tone, and market sentiment. Updated every morning.
|
|
How we calculate it →
|
|
Latest from Lex
Weekly deep-dives on regulatory trends — primary sources, no noise.
|
|
Read →
|
|
|