In a significant and surprising regulatory shift, the U.S. Office of the Comptroller of the Currency (OCC) announced on March 20, 2025, that it will no longer assess national banks for “reputation risk” during examinations. This move effectively removes the concept entirely from the agency’s supervisory guidelines, marking a dramatic departure from decades of regulatory tradition.
“The OCC’s examination process has always focused on measurable safety and soundness concerns,” explained Acting Comptroller Rodney E. Hood in a statement accompanying the announcement. “Reputation risk, while important to banks internally, has proven difficult to define objectively, and we have decided to focus solely on quantifiable risk metrics.”
The OCC’s decision represents a sharp pivot from previous policies under which regulators explicitly considered reputation risk—a term referring to potential financial harm caused by negative public perception or controversy. Historically, regulators have utilized the concept to caution banks against business practices or clients that might attract negative publicity, even if these activities were fully lawful.
Industry experts are already characterizing the OCC’s decision as one of the most consequential regulatory updates in recent memory. Traditionally, regulators including the OCC, the Federal Reserve, and the FDIC have listed reputation risk among core risk categories, alongside credit, operational, and liquidity risks. By striking it entirely, the OCC is fundamentally reshaping its approach to oversight.
Observers suggest the decision may be connected to the arrival of new leadership under Acting Comptroller Hood, appointed earlier this year amid a broader administrative shift toward reducing regulatory ambiguity. The announcement aligns closely with recent OCC moves to clarify and streamline oversight practices, including a March decision allowing banks greater freedom to engage in cryptocurrency activities without special approvals.
“The message is crystal clear—banks will now be assessed on the risks they can control and measure, not on how certain activities might play out in the court of public opinion,” noted one banking compliance consultant.
Historically, regulators’ reliance on reputation risk has sparked controversy. Most notably, under the Obama administration’s “Operation Choke Point,” certain industries, such as payday lending and firearms, found themselves systematically denied banking services based on reputational concerns rather than concrete risk assessment. This program drew intense criticism from industry advocates and legislators who argued reputation risk was subjective and prone to misuse.
“Dropping reputation risk from formal examinations essentially guarantees banks won’t face regulatory pushback simply because they work with controversial sectors,” said a former OCC official now working as a private-sector advisor. “It’s a stunning shift toward regulatory neutrality.”
But what does this change practically mean for banks and their clients? Simply put, institutions will now enjoy clearer criteria for regulatory compliance. Previously hesitant to engage in business with controversial or emerging sectors, banks may feel emboldened to reconsider opportunities in markets such as cryptocurrency, cannabis-related enterprises, or industries previously avoided due to reputational worries.
Nevertheless, the OCC emphasized it will continue rigorous oversight of traditional, quantifiable risks. Concurrently released enforcement actions illustrate this commitment, including a cease-and-desist order against a community bank in Massachusetts over unsafe practices related to capital planning and liquidity management. Additionally, the OCC banned two former bankers from the industry for mishandling client funds.
These actions underscore that dropping reputation risk does not signify a regulatory free-for-all. Banks remain responsible for managing clearly defined risks, ensuring compliance with legal requirements, and safeguarding customers’ financial interests.
For internal auditors, risk managers, and compliance teams, the shift is substantial. Institutions may revise internal frameworks, no longer isolating “reputation” as its own risk category. Instead, they will likely integrate reputational considerations into existing categories such as operational, strategic, or compliance risks.
From a broader corporate perspective, the OCC’s move could lead to more predictable banking relationships. Businesses operating in lawful yet historically controversial industries may now find it easier to secure and maintain banking services, fostering greater business stability and growth.
Yet, it’s important to note that other regulators, like the Federal Reserve, continue to acknowledge reputation risk. The OCC’s bold stance could inspire regulatory reevaluation across other oversight bodies, potentially reshaping industry-wide attitudes toward reputational factors.
Ultimately, the OCC’s decision represents more than a technical tweak; it symbolizes a philosophical shift toward measurable risk metrics and away from subjective assessments. This is indeed a groundbreaking step in regulatory philosophy, providing banks with clearer guidelines and signaling regulators’ intent to keep oversight objective, consistent, and predictable.
As one industry analyst succinctly summarized, “It’s a wild shift, but one that clarifies expectations in a meaningful way. Banks now know exactly what they’ll be evaluated on—and what they won’t.”
Leave a Reply