Banking

Subscribe to Banking via RSS

The U.S. Department of Justice (DOJ) has issued an interim final rule extending the compliance dates for its 2024 Americans with Disabilities Act (ADA) Title II website and mobile application accessibility regulations for state and local governments. This development is noteworthy for anyone watching the long‑running debate over web accessibility standards, as well as the potential implication of this rulemaking for a future DOJ proposed rule governing public accommodations under Title III of the ADA.

On March 13, the Consumer Financial Protection Bureau (CFPB or Bureau) released its draft Strategic Plan for FY 2026–2030 and accepted public comment through April 17. The plan, required under the Government Performance and Results Act, sets the Bureau’s mission and priorities for the next four years and explicitly aligns the CFPB’s regulatory strategy with President Trump’s pro‑growth, deregulatory agenda.

On April 17, the Office of the Comptroller of the Currency (OCC), Board of Governors of the Federal Reserve System (Federal Reserve), and Federal Deposit Insurance Corporation (FDIC) (collectively, the federal agencies) issued revised interagency guidance on model risk management. The guidance updates and consolidates supervisory expectations for how banks manage the growing use of models across their businesses and effectively manage those risks, while rescinding prior guidance issued by each agency. The updated guidance is principles-based and risk-based, rather than prescriptive, and the federal banking agencies emphasize that model risk management should be tailored to a bank’s model risk profile, as well as the size and complexity of its operations. The agencies further state that non-compliance with the guidance itself will not, standing alone, result in supervisory criticism. That said, weak model risk management can still lead to findings of unsafe or unsound practices or violations of law.

Delaware is positioning itself at the center of digital asset and stablecoin innovation with a coordinated package of legislation aimed at modernizing its banking code and creating a comprehensive framework for payment stablecoins. Senate Bill 16, the “Delaware Banking Modernization Act of 2026,” (SB 16) and Senate Bill 19, the “Delaware Payment Stablecoin Act,” (SB 19) were introduced on March 23, 2026, and are currently moving through the General Assembly. If enacted, both measures would take effect immediately, with implementation required by the earlier of one year after enactment or the issuance of final regulations by the State Bank Commissioner.

On April 7, the Office of the Comptroller of the Currency (OCC) and the Federal Deposit Insurance Corporation (FDIC) issued a final rule to remove “reputation risk” from their supervisory and examination frameworks and sharply limit their ability to influence banks’ customer relationships based on political or ideological grounds. This final rule is a central implementation step for President Trump’s debanking initiative under Executive Order 14331, “Guaranteeing Fair Banking for All Americans,” which aims to address concerns about financial institutions improperly restricting access to banking services based on customers’ political, religious, or ideological beliefs.

The U.S. Department of the Treasury (Treasury) has delivered to Congress the report on Innovative Technologies to Counter Illicit Finance Involving Digital Assets, as required by the Guiding and Establishing National Innovation for U.S. Stablecoins (GENIUS) Act. The report largely reflects the comments Treasury received about how financial institutions (including digital asset service providers (DASPs)) use technologies such as artificial intelligence (AI), digital identity, blockchain analytics, and application programming interfaces (APIs) to detect and disrupt illicit finance involving digital assets, including payment stablecoins. The report highlights many of the challenges and frustrations that institutions are experiencing in trying to adopt these emerging technologies, and promises additional guidance in the future.

On February 11, the National Credit Union Administration (NCUA) released a proposed rule to implement the Guiding and Establishing National Innovation for U.S. Stablecoins Act (the GENIUS Act) for federally insured credit unions (FICUs). Under the proposal, credit unions cannot issue payment stablecoins directly. Instead, only NCUA‑licensed “permitted payment stablecoin issuers” (PPSIs) that are subsidiaries of FICUs would be allowed to issue payment stablecoins, and FICUs would be limited to investing only in PPSIs licensed by the NCUA.

In this episode of The Crypto Exchange, hosts Ethan Ostroff and Genna Garver look back at 2025 — ultimately a pivotal year for digital assets and crypto regulation in the U.S. — drawing on Troutman Pepper Locke’s flagship publication, Financial Services Industry 2025 Digital Assets Year in Review. The report reflects insights from more than 10 of our firm’s practice areas and more than 30 attorneys, offering a comprehensive, cross-practice view of how the regulatory landscape is evolving.

In continuation of increased state efforts to regulate state-chartered banks and fintech partnerships,Oregon’s newly enrolled House Bill (HB) 4116 would enact an express “opt‑out” from a key provision of the Depository Institutions Deregulation and Monetary Control Act of 1980 (DIDMCA) for consumer finance loans made in Oregon. HB 4116 also updates licensing requirements and clarifies when Oregon law applies to remote and online loans. This Oregon development comes on the heels of the Tenth Circuit’s decision in Weiser upholding Colorado’s DIDMCA opt-out and holding that a loan is “made in such State” if either the borrower or lender is located in the opt-out state as discussed here. A petition for rehearing en banc has been filed in Weiser, and it remains unsettled where a loan is “made” for purposes of DIDMCA.

Payward Financial’s Wyoming Special Purpose Depository Institution (SPDI), Kraken Financial, has received a master account from the Federal Reserve Bank of Kansas City, giving it direct access to the Federal Reserve’s core payment infrastructure. The approval, initially for a one-year term, allows Kraken Financial to connect directly to Fedwire and other Fed payment rails, a capability traditionally limited to insured financial institutions. As a general matter, digital assets, fintech and other firms that are not FDIC-insured have generally depended on correspondent banking relationships to move fiat funds over these payment rails.