The Biggest Bank Regulatory Overhaul You Haven't Heard About

Three separate but interconnected regulatory overhauls are moving through the federal banking system right now. Together, they would fundamentally change how regulators watch banks, punish them, and decide who banks can do business with.

Most mainstream coverage has treated each piece in isolation. Connected, they reveal a coherent push to make bank regulation less arbitrary, less political, and more grounded in measurable risk.

The Secret Scores Running Your Bank

Every bank in America gets a CAMELS rating — a composite score grading Capital, Assets, Management, Earnings, Liquidity, and Sensitivity to market risk. Regulators use it to decide how closely to monitor a bank, whether to approve mergers, and whether to slap on restrictions.

You've never seen your bank's score. Neither has any investor. The ratings are legally confidential.

As Aaron Klein, Senior Fellow at the Brookings Institution, pointed out in a 2020 analysis, CAMELS ratings were so secretive that until 1997, banks weren't even told their own scores. Regulators were grading institutions without telling them their grade.

Klein's argument: make the composite ratings public, at least for large institutions. His reasoning is practical. The FDIC already publishes aggregate assets of all banks rated 4 or 5 — the troubled tier. For the biggest banks, each holding over $300 billion in assets, it would be trivially easy for markets to figure out which institution just got flagged. The secrecy is already a fiction at the top. Bloomberg reported regulators are now actively considering reshaping this system.

The case for transparency is strong. Investors in publicly traded bank stocks currently have zero access to information that regulators consider material to a bank's health. That creates a market distortion and lets weak banks hide from accountability longer than they should.

Killing 'Reputation Risk' as a Supervisory Tool

On October 7, 2025, the OCC and FDIC issued joint Notices of Proposed Rulemaking to eliminate reputation risk as a factor in bank supervision, according to the Global Financial Regulatory Blog's analysis written by attorneys Betty M. Huber, Arthur S. Long, Parag Patel, Pia Naib, Austin J. Pierce, and Deric Behar.

"Reputation risk" has been used by regulators for years to pressure banks into cutting off legal businesses — gun dealers, cryptocurrency firms, payday lenders, and others that regulators personally disliked but couldn't ban outright. It gave examiners a vague, unaccountable lever to debank entire industries without formal rulemaking or due process.

The new proposal directly follows an August 7, 2025 Executive Order titled "Guaranteeing Fair Banking for All Americans," which directed regulators to base banking service decisions on "material, measurable, and justifiable risks" — NOT political or religious beliefs or involvement in lawful-but-disfavored businesses.

The proposal also formally defines "unsafe or unsound practice" for the first time. Right now there's NO statutory definition. Regulators have been enforcing a standard that doesn't exist in writing. The new framework would require that a practice actually threatens a bank's financial condition before triggering enforcement — not just that a regulator finds it distasteful.

The documented reality is that "reputation risk" was weaponized under the Obama-era Operation Choke Point to cut legal industries off from banking without congressional authorization.

Rethinking Anti-Money Laundering: Less Paper, More Results

On April 7, 2026, the Financial Crimes Enforcement Network (FinCEN) and banking agencies proposed a complete overhaul of Bank Secrecy Act compliance rules, according to the ABA Banking Journal.

Treasury Secretary Scott Bessent put it plainly: "For too long, Washington has asked financial institutions to measure success by the volume of paperwork rather than their ability to stop illicit finance threats."

Banks currently file millions of Suspicious Activity Reports annually. The vast majority are noise. Law enforcement has said publicly that the SAR system generates so much volume it's hard to find the actual threats.

The new framework would require AML programs built around four pillars: internal controls with risk-based customer due diligence, independent testing focused on effectiveness not box-checking, a designated U.S.-based compliance officer, and ongoing training.

Enforcement actions would only be triggered by "significant or systemic failures" — not technical deficiencies in a program that's otherwise functioning. Banks have faced massive fines for paperwork violations that had zero connection to actual money laundering.

What Mainstream Coverage Is Missing

Left-leaning outlets are framing the reputation risk and AML changes as rollbacks of consumer and financial protection. That framing skips the documented abuse of those tools to target legal industries.

Right-leaning outlets are treating all of this as a Trump win without examining whether transparency on CAMELS ratings — which could expose weak banks faster — creates its own systemic risk during a crisis.

Both miss the bigger picture: regulatory opacity protects regulators, not the public. Secret ratings, undefined standards, and paperwork-as-compliance theater all serve the bureaucracy. They don't serve depositors, investors, or the businesses trying to access the banking system.

What It Means for You

If you own bank stocks, you've been investing blind — regulators have material information about bank health that you legally cannot access.

If you run a legal business that's been denied banking services for political reasons, these rules are designed to stop that.

If you're worried about financial crime, ask yourself: did the old system actually catch criminals, or did it just drown banks in compliance costs while bad actors found workarounds?

The regulatory overhaul is moving fast.