Regulators Tell Banks to Treat Unauthorized Immigrants as Elevated Credit Risk

What Happened

On Monday, July 13, 2026, the Office of the Comptroller of the Currency, the Federal Deposit Insurance Corporation, and the National Credit Union Administration jointly issued guidance telling banks and credit unions to scrutinize lending to people who aren't authorized to work in the United States, according to CNBC and the Associated Press.

The guidance says unauthorized immigrants may pose an "elevated credit risk" because their "ability to generate income, maintain employment, and remain financially stable may be subject to greater uncertainty." The stated logic: deportation can cut off someone's income overnight, which makes loan repayment less certain.

Comptroller of the Currency Jonathan Gould framed it as nothing new. "Banks have an obligation to know their customer. That's a pre-existing obligation," Gould told CNBC's Squawk on the Street Monday.

No New Rule, But a Clear Signal

The guidance doesn't create a legal requirement to deny loans or verify immigration status on every application, according to CNBC. It "reminds" banks of duties they already have under know-your-customer rules and existing underwriting standards.

Attorneys at Troutman Pepper Locke, writing about the underlying executive order in May, noted it "appears to stop short of requiring financial institutions to verify every customer's immigration status," and instead "reinforces a risk-based approach." Banks retain discretion here, at least on paper.

But regulatory guidance from three agencies at once is not a suggestion banks are likely to ignore. When your prudential regulator publicly flags a category of borrower as riskier, banks tend to tighten lending to that category to avoid supervisory friction, regardless of whether there's a hard mandate.

The Numbers Are Tiny

The most concrete data point in this story is how small the affected market actually is. The Urban Institute estimated 5,000 to 6,000 mortgages nationwide in 2023 used an Individual Tax Identification Number instead of a Social Security number, according to CNBC. Most ITIN holders are unauthorized immigrants.

Compare that to roughly 4.6 million total mortgage originations in 2023, according to the National Community Reinvestment Coalition. ITIN mortgages are about 0.1% of total home loans, according to briefs.co's July 13 analysis. This is a niche product, not a mainstream lending channel.

ITINs have existed since 1996 specifically so people who can't get a Social Security number can still file and pay federal taxes, according to briefs.co. Some community banks and credit unions built small lending programs around them, typically requiring bigger down payments and charging higher rates to offset perceived risk. That's a legitimate business model regulators are now putting under closer scrutiny.

Part of a Longer Pattern

This guidance is not a standalone event. It follows an executive order President Trump signed in May 2026 directing financial regulators to scrutinize the citizenship status of bank customers and crack down on unauthorized immigrants' use of mortgages, auto loans, credit cards and other consumer credit, according to the AP.

That order kicked off what the AP describes as a nine-month stretch of measures nudging banks to remove unauthorized immigrants as customers without formally requiring it. In May, Treasury's FinCEN issued a separate advisory telling banks to watch for identity theft, payroll tax fraud, and money laundering tied to hiring unauthorized workers, flagging more than a dozen red flags banks should look for.

Last November, Treasury reclassified certain refundable tax credits as "federal public benefits," which the AP reports bars some immigrant taxpayers from receiving them even if they file and pay taxes and would otherwise qualify.

The Case for This, and Against It

The administration's logic has a straightforward core: a bank underwriting a 30-year mortgage should account for the real possibility that a borrower without legal work authorization could be removed from the country and lose their income source. That's a legitimate credit risk factor, not an invented one, and banks are generally expected to price and manage risk, not ignore it.

Critics, cited by CNBC, argue the guidance could have a chilling effect that extends beyond its intended target, discouraging even immigrants with legal work authorization from using banks at all if they fear scrutiny. They also warn it could raise compliance costs for banks and push money into unregulated channels, which critics say could actually increase fraud risk rather than reduce it.

Both concerns warrant attention. A policy aimed narrowly at unauthorized borrowers can still produce broader chilling effects if bank compliance staff, worried about regulatory exposure, start asking more invasive questions of anyone who looks foreign-born, regardless of legal status. Whether that happens in practice is not yet documented in the data available. No study has yet measured whether legal immigrants are reducing bank use as a result of these overlapping measures.

There is also limited data generally on how many unauthorized immigrants use banks or hold loans, according to the AP, because banks aren't required to collect citizenship information from customers. That data gap cuts both ways: it means nobody can say precisely how many people this guidance will actually affect, and nobody can rule out broader spillover effects either.

The open question now is enforcement. The guidance sets expectations but leaves discretion with individual banks. Whether examiners start citing banks for insufficiently scrutinizing ITIN borrowers, and whether that shows up in tighter underwriting for legal immigrants too, will only be visible in future supervisory actions and lending data that hasn't been published yet.