THE CREDIT CURRENT RESEARCH LIBRARY
Deep-dive library
Law & regulation

Reputation risk and 12 CFR Part 262: separating the Fed proposal from existing supervisory changes

The Federal Reserve has removed reputation risk from its examination approach and proposed codifying that policy. This does not remove financial, operational, compliance or credit risk, and it does not require a bank to approve every lawful applicant.

September 27, 2026
Current version

Initial research checked September 27, 2026. Source dates, operative law and proposed changes are distinguished; examples are illustrative.

Three different developments

The Federal Reserve announced removal of reputation risk from its examination programs in June 2025. In February 2026 it proposed adding section 262.9 to codify the policy and restrict the use of supervisory tools to compel politicized or unlawful discrimination. The official docket reviewed for this article identifies a proposal, with comments due April 27. An announced supervisory practice and an effective regulation are different authorities. [1, 2, 3]

In June 2026, the banking agencies also removed reputation-risk references from additional interagency materials. Separately, the OCC and FDIC issued their own final rule in April. Those actions should not be described as a final Federal Reserve Part 262 rule. Agency, text, status and date belong together in any implementation tracker. [4, 5]

What the policy distinction means

The Fed’s February announcement says that banks should continue managing financial risks and complying with applicable law. The proposed change targets the supervisory use of reputation risk; it is not a waiver of credit analysis, sanctions requirements, fraud prevention or consumer protection. [1]

My assessment is that the useful discipline is to replace vague conclusions with demonstrable risk. A business being unpopular is different from a business having unreliable repayment capacity, unresolved identity questions or a settlement pattern that exposes the bank to loss. The file should explain the actual risk and the evidence supporting it.

This also requires avoiding disguised proxies. Renaming a subjective reputation concern as operational risk does not make it objective. The institution should be able to explain how the observed facts affect a legitimate decision and why comparable cases receive comparable treatment.

Lawful activity does not settle the credit decision

A lawful business may still be a poor credit risk, just as a controversial business may be creditworthy. Recommended underwriting separates legality from repayment, collateral, leverage, cash-flow volatility and management capability. Account-opening decisions require a similarly specific analysis of the service requested and the bank’s capacity to provide it.

A bank may lack the systems, expertise or risk appetite to support a particular product. That conclusion is more credible when it identifies an actual operating limitation and considers whether a narrower service or a practicable control can address the problem. Broad sector labels alone do little to establish the underlying exposure.

For adverse actions or account restrictions, legal notices and communication requirements depend on the product and applicable law. The policy change is not permission to omit required explanations or invent a reason that differs from the decision actually made.

Worked example: payment risk versus public controversy

Illustrative merchant program: monthly settled volume is $100 million. At a 0.2% chargeback rate, gross chargebacks are $200,000; at 2%, they are $2 million. These amounts are not automatically the bank’s net loss, because recovery rights, reserves and timing matter. They do show a measurable exposure that a risk decision can investigate.

If the customer is financially strong and the bank has adequate reserves and controls, the program may remain supportable. If the customer cannot reimburse disputes and settlement precedes recovery, liquidity and credit exposure can rise rapidly. Either conclusion should follow the evidence rather than commentary about the customer’s popularity.

Recommended monitoring ties limits to loss allocation, reserve sufficiency, dispute trends and access to transaction data. It also tests whether a control works during rapid growth or a partner failure. The economic question is who supplies cash when disputed payments arrive before recovery.

How to revise policies and governance

Inventory policies, scorecards, committee templates and vendor standards that use reputation as a standalone rationale. Recommended revisions identify the actual financial or legal concern, the supporting metric and the accountable decision-maker. Keep a record of the source and authority for each change, especially where different bank entities have different regulators.

Train reviewers to distinguish a supervisor’s request, a binding legal obligation, internal risk appetite and a commercial preference. These can all influence a decision, but they should not be conflated. Escalation channels should allow staff to question an unsupported rationale without weakening ordinary risk controls.

For portfolio oversight, compare approvals, declines, exits and exceptions across similarly situated customers. Investigate inconsistent outcomes and document remedial action. A policy rewrite has little value if operational systems still apply an unexplained categorical exclusion.

Trade-offs and what to watch

The potential benefit is more predictable access to banking based on concrete risks and law. The implementation challenge is preserving early recognition of real exposures that sometimes first appear through complaints or public reports. The source of an allegation does not establish its truth, but credible evidence can still warrant investigation.

Watch the Fed’s official docket for a final action, effective date and any changes to scope. Follow agency manuals and interagency guidance separately. Do not assume that an OCC or FDIC milestone settles the status of a Federal Reserve proposal.

My view would strengthen if banks can demonstrate consistent, well-supported decisions and supervisors focus on measurable financial risk. It would weaken if subjective judgments merely acquire new labels or if firms interpret the change as a reason to stop investigating documented fraud, compliance or repayment problems.

Sources