What Do Financial Examiners Do: Exams, Compliance, and Enforcement

Financial examiners audit banks, credit unions, and other financial institutions to confirm they follow federal law, hold enough capital to stay solvent, and treat customers fairly. What financial examiners do, in practical terms, is spend their days inside those institutions and inside their records: pulling loan files, testing transaction monitoring systems, checking capital ratios against underlying data, and comparing lending patterns across neighborhoods and demographic groups. Their findings are written up in a formal report that assigns ratings and can trigger anything from a private corrective agreement to civil penalties reaching $1,000,000 per day.

Who Employs Financial Examiners

No single agency oversees every bank, and which examiner shows up at a given institution depends on how it is chartered and what it does. The Office of the Comptroller of the Currency examines nationally chartered banks and federal savings associations. The Federal Deposit Insurance Corporation covers state-chartered banks that carry federal deposit insurance but are not members of the Federal Reserve System. The Federal Reserve supervises state-chartered banks that are Fed members, along with bank holding companies. The three agencies share examination data and coordinate rulemaking.1FDIC.gov. Update from the Prudential Regulators: Rightsizing Regulation to Promote American Opportunity

Credit unions fall under the National Credit Union Administration.2National Credit Union Administration. NCUAs 2026 Supervisory Priorities The Consumer Financial Protection Bureau has direct supervisory authority over depository institutions with more than $10 billion in assets for consumer protection compliance.3Consumerfinance.gov. Institutions Subject to CFPB Supervisory Authority Smaller institutions follow the same consumer protection laws, but their primary regulator handles those examinations instead of the CFPB.

How Often Examiners Show Up

Federal law requires a full-scope, on-site examination of every insured depository institution at least once every 12 months. Smaller, well-run institutions can qualify for an 18-month cycle if they have total assets under $3 billion, are well capitalized, received a top composite rating at their last exam, and are not currently under a formal enforcement action.4Office of the Law Revision Counsel. 12 USC 1820 – Administration of Corporation State banking regulators can also conduct examinations that satisfy the federal requirement in alternating periods.

The on-site exam is only part of the job. Between visits, examiners run continuous off-site monitoring by reviewing regulatory filings, audit reports, and internal data. Community banks get periodic or quarterly check-ins. Regional banks get monthly meetings. The largest institutions have examiners embedded on-site with daily contact, and a large bank supervised by the Federal Reserve might undergo roughly 12 bank-specific examinations and 20 horizontal reviews in a single year.5Federal Reserve Board. Approaches to Bank Supervision

Checking Compliance With Federal Law

A large share of examination work is verifying that a bank follows the statutes governing its operations. Examiners review internal policies, transaction records, and employee training programs to catch breakdowns before they become systemic.

Anti-Money Laundering

The Bank Secrecy Act requires financial institutions to file reports of cash transactions exceeding $10,000 and to flag suspicious activity that might indicate money laundering, tax evasion, or terrorist financing.6FinCEN. The Bank Secrecy Act Those are two separate obligations. The $10,000 threshold triggers a Currency Transaction Report for any large cash deposit or withdrawal; a Suspicious Activity Report gets filed when a transaction looks unusual regardless of dollar amount. Examiners review the bank’s transaction monitoring reports, test whether the filters actually catch the right patterns, and pull individual accounts to see if reportable activity slipped through.7FFIEC BSA/AML Manual. Assessing Compliance with BSA Regulatory Requirements – Suspicious Activity Reporting

Proprietary Trading Restrictions

The Volcker Rule, codified at 12 U.S.C. § 1851, prohibits banking entities from engaging in proprietary trading or acquiring ownership interests in hedge funds and private equity funds.8Office of the Law Revision Counsel. 12 USC 1851 – Prohibitions on Proprietary Trading and Certain Relationships with Hedge Funds and Private Equity Funds A bank cannot use depositor-backed funds to make short-term speculative bets for its own profit. Examiners review trading desks and investment portfolios to check whether the bank is crossing the line between permitted market-making and prohibited proprietary trading.9eCFR. Part 44 Proprietary Trading and Certain Interests in and Relationships with Covered Funds

Community Reinvestment

Under the Community Reinvestment Act, large banks face three tests covering lending patterns, investment activity, and the accessibility of branch services across different income levels. Examiners compare the geographic distribution of a bank’s loans against the demographics of its service area, looking for conspicuous gaps where lending drops off in lower-income neighborhoods. A poor CRA rating can block a bank’s applications for mergers, acquisitions, or new branches.

Assessing Financial Stability

Verifying that a bank can survive an economic shock is one of the most consequential parts of an examination. Examiners work through the balance sheet to see whether the institution holds enough capital and liquid assets to absorb losses without threatening depositors.

Capital Adequacy

The Tier 1 risk-based capital ratio is the primary measure. A bank qualifies as “well capitalized” with a Tier 1 ratio of at least 8%. Between 6% and 8% the bank is only “adequately capitalized,” which triggers closer regulatory attention and restrictions on certain activities.10eCFR. 12 CFR 6.4 – Capital Measures and Capital Categories Below 6%, the bank is “undercapitalized” and mandatory corrective actions kick in. Examiners trace this ratio through the bank’s filings and verify the numbers against underlying records, because the incentive to overstate capital during a downturn is real.

Loan Portfolio Quality

A bank’s loan book is where most risk hides. Examiners pull individual loan files to check whether the bank is lending to borrowers unlikely to repay, whether collateral valuations are realistic, and whether the underwriting standards on paper match what is happening in practice. When a large percentage of loans are classified as non-performing, the examiner may require the bank to increase its loan loss reserves as a cushion against future defaults.

Stress Testing for the Largest Banks

Banks with more than $250 billion in total consolidated assets face mandatory stress testing under the Dodd-Frank Act, as amended by the Economic Growth, Regulatory Relief, and Consumer Protection Act of 2018.11Office of the Law Revision Counsel. 12 USC 5365 – Enhanced Supervision and Prudential Standards for Nonbank Financial Companies Supervised by the Board of Governors and Certain Bank Holding Companies The Federal Reserve publishes economic scenarios each year, including a severely adverse scenario with sharp GDP drops, unemployment spikes, and plunging asset prices. Banks project how their capital would hold up. Examiners review both the results and the modeling assumptions, because a stress test is only as reliable as the data feeding it.

Liquidity

Capital ratios measure long-term solvency, but a bank can also fail by running out of cash to meet short-term obligations. Examiners evaluate whether the institution maintains enough high-quality liquid assets to cover projected outflows during a 30-day stress period. For the largest banks this takes the form of the Liquidity Coverage Ratio, which must stay at or above 100%. Examiners also review interest rate risk monitoring and contingency funding plans in case deposit outflows accelerate unexpectedly.

Reviewing Consumer Lending and Protection

Beyond institutional safety, examiners act as a check on how banks treat individual borrowers. That means reviewing loan files, marketing materials, and fee structures for signs the institution is exploiting the customers it serves.

Fair Lending

Examiners compare approval rates, interest rates, and loan terms across demographic groups to detect illegal discrimination, using data collected under the Home Mortgage Disclosure Act to spot possible discriminatory lending patterns.12Federal Reserve Board. HMDA Examination Procedures If similarly qualified borrowers in a protected class are consistently getting worse terms, the examiner digs deeper. These patterns don’t always reflect intentional bias; sometimes they emerge from automated underwriting models that no one has audited for disparate impact. Either way, the bank is responsible.

Truth in Lending Disclosures

The Truth in Lending Act requires creditors to provide written disclosures of finance charges and related credit terms, including the annual percentage rate, before a consumer commits to a loan.13Federal Trade Commission. Truth in Lending Act Examiners check whether the disclosed APR and total finance charges match actual loan terms and whether disclosures were delivered on time. For mortgages, the older Good Faith Estimate and initial TILA disclosure have been replaced by a single Loan Estimate form under the TILA-RESPA Integrated Disclosure rule.14Consumerfinance.gov. TILA-RESPA Integrated Disclosure FAQs Examiners confirm the Loan Estimate is accurate and delivered within three business days of application.

Real Estate Settlement

The Real Estate Settlement Procedures Act protects homebuyers from inflated closing costs and hidden conflicts of interest. No person may give or accept any fee or thing of value for referring settlement-related business.15Office of the Law Revision Counsel. 12 USC Ch 27 – Real Estate Settlement Procedures Examiners look at the bank’s relationships with third-party service providers like title companies and appraisers, checking whether referrals rest on legitimate business reasons rather than under-the-table payments.

Flood Insurance

When a bank makes a loan secured by property in a FEMA-designated Special Flood Hazard Area, examiners verify that the borrower carries flood insurance for the life of the loan. The coverage must equal at least the lesser of the outstanding loan balance, the maximum available under the National Flood Insurance Program, or the insurable value of the property. Examiners also confirm the bank notified the borrower in writing about the flood risk before closing.

Reviewing Cybersecurity and Data Protection

Examiners evaluate whether the institution maintains a written information security program with administrative, technical, and physical safeguards appropriate to its size and the sensitivity of the data it holds. Under the Gramm-Leach-Bliley Act’s Safeguards Rule, a bank must designate a qualified individual to oversee its security program, conduct written risk assessments, encrypt customer information in transit and at rest, implement multi-factor authentication for employees accessing information systems, and run annual penetration tests alongside vulnerability assessments at least every six months.16eCFR. Part 314 – Standards for Safeguarding Customer Information Examiners also check vendor management, because a data breach at a third-party processor is still the bank’s problem. The FFIEC IT Examination Handbook is the playbook they follow.17FFIEC IT Examination Handbook InfoBase. FFIEC IT Examination Handbook InfoBase – Home

Writing Up Findings and Triggering Enforcement

Everything an examiner discovers gets compiled into a Report of Examination, the institution’s formal report card. Each report assigns ratings on a 1-to-5 scale across six components known as CAMELS: Capital adequacy, Asset quality, Management, Earnings, Liquidity, and Sensitivity to market risk.18National Credit Union Administration. CAMELS Rating System A 1 means the bank is sound with strong risk management. A 5 means critically deficient performance with failure highly probable.19Federal Deposit Insurance Corporation. Section 1.1 Basic Examination Concepts and Guidelines The composite score shapes every regulatory decision that follows, from examination frequency to whether the bank can expand into new markets.

Informal Actions

Not every problem triggers a public crackdown. When examiners find weaknesses that need attention but don’t rise to the level of an enforcement action, they may negotiate a Memorandum of Understanding with the bank’s board and management. An MOU is a nonpublic agreement in which the institution commits to fixing specific problems on a set timeline.20Federal Reserve Board. Understanding Enforcement Actions Failing to follow through on an MOU can escalate matters into formal territory.

Formal Enforcement

When a bank engages in unsafe or unsound practices, the appropriate federal banking agency can issue a cease and desist order requiring the institution to stop the activity and take corrective steps. The authorizing statute, 12 U.S.C. § 1818, also lets regulators remove officers or directors who have demonstrated incompetence, willful disregard for safety, or personal dishonesty.21Office of the Law Revision Counsel. 12 USC 1818 – Termination of Status as Insured Depository Institution

Institutions that violate federal banking laws face civil money penalties that scale with severity. A first-tier violation carries a maximum of $5,000 per day. Third-tier violations, where a person knowingly commits a violation and recklessly causes a substantial loss to the bank, can reach $1,000,000 per day.22Office of the Law Revision Counsel. 12 USC 505 – Civil Money Penalty Those statutory maximums are adjusted upward for inflation, so current figures can be higher.23eCFR. 31 CFR 1010.821 – Penalty Adjustment and Table Penalties accumulate daily as long as the violation continues, which gives even a modest per-day fine real teeth if management drags its feet on compliance.

In the most severe cases, regulators can require the bank to raise additional capital, restrict its activities, or force changes to its board composition within a strict timeframe. Public enforcement actions are visible to competitors, investors, and customers, which layers reputational pressure on top of the financial consequences.20Federal Reserve Board. Understanding Enforcement Actions