What Actually Happened

On April 7, 2026, the Federal Deposit Insurance Corporation (FDIC) and the Office of the Comptroller of the Currency (OCC) issued a joint final rule banning "reputational risk" as a supervisory category.

According to the OCC's official bulletin (OCC Bulletin 2026-12), the rule prohibits both agencies from criticizing or taking adverse action against any bank on the basis of reputational risk — formally or informally. It takes effect 60 days after publication in the Federal Register.

What 'Reputational Risk' Actually Was — And How It Got Abused

On paper, reputational risk sounds reasonable. The idea: if a bank serves a client that causes public scandal, the bank's own reputation could suffer, which could destabilize it.

In practice, it became a bureaucratic weapon.

According to the FDIC's own final rule documentation, the agencies never clearly explained how banks were supposed to measure reputational risk from different clients or activities. There was no consistent standard. "Different stakeholders may have different perspectives," the OCC acknowledged — a polite way of saying the whole framework was subjective by design.

Subjective frameworks get exploited. And this one was.

Gun dealers, payday lenders, cryptocurrency firms, fossil fuel companies — entire legal industries found themselves quietly locked out of banking services. Not because they broke laws. Because regulators decided their existence looked bad.

National Review called it "overreach" and noted that serving businesses disfavored by bureaucrats should never have been classified as a financial risk.

The Rule's Specific Prohibitions

The FDIC's official filing spells this out with unusual clarity. The final rule prohibits regulators from requiring, instructing, or encouraging banks to:

• Close customer accounts
• Refuse to provide accounts, products, or services
• Modify or terminate products or services

...on the basis of a person's or entity's political, social, cultural, or religious views, constitutionally protected speech, or solely because their lawful business activity is politically disfavored.

Federal banking regulators were doing all of those things. Now it's codified that they cannot.

The rule also formally defines "reputation risk" as any risk "not clearly and directly related to the financial or operational condition of the institution." If it's not connected to actual financial safety and soundness, regulators can't touch it.

Operation Choke Point — The Ghost in the Room

Most mainstream coverage isn't saying the name out loud: Operation Choke Point.

Under the Obama administration, the Department of Justice and FDIC coordinated to pressure banks into cutting off legal businesses — payday lenders, firearms dealers, tobacco sellers — by labeling them high reputational risk. A 2014 House Oversight Committee investigation documented the coordinated pressure campaign. Banks that served these industries faced heightened scrutiny, effectively forcing them to choose between their regulators and their customers.

The Trump administration formally ended Choke Point in 2017. But the underlying supervisory tools — including reputational risk scoring — stayed on the books. Which meant a future administration could run the same play again.

This rule closes that door. Permanently, if it holds.

What Mainstream Media Is Missing

Most coverage is framing this as a conservative culture-war win on behalf of gun shops and crypto firms. That framing is incomplete.

This rule protects every legal industry from politically motivated banking exclusion — including ones the left cares about. Marijuana dispensaries in legal states have faced banking shutdowns for years, largely because federal regulators flagged cannabis businesses as reputational risks even where state law permitted them. Environmental activists' organizations have had accounts closed under pressure. The principle here is viewpoint-neutral, even if the politics driving the rule aren't.

Another underreported angle: community banks. The OCC bulletin explicitly notes the rule applies to community banks. These are the institutions serving small businesses, farms, and rural economies. They were the most vulnerable to vague supervisory pressure because they couldn't afford the legal fight that big banks could.

The Practical Impact

For regular people, this is straightforward.

If you run a legal business — gun store, energy company, payday lender, cannabis dispensary, political organization — your bank can no longer be threatened by federal regulators into dropping you as a customer based on what your business looks like to a bureaucrat.

The FDIC has already scrubbed references to reputational risk from five major examination manuals, including its Risk Management Manual, Consumer Compliance Manual, and Trust Examination Manual. According to the FDIC's own release, it will continue working to remove reputational risk references from all interagency materials.

This rule doesn't impose any new requirements on banks themselves. Banks remain free to make their own business decisions. What ends is federal regulators using the reputational risk framework as a pressure tool to make those decisions for them.

The Codification

Federal banking regulators had a vague, subjective tool that let them cut legal businesses off from the financial system without ever charging them with a crime. Now that tool is gone — codified out of existence by the FDIC and OCC. It should never have existed in the first place.