What Is Prudential Supervision and How Does It Work?

Prudential supervision is the regulatory framework that requires banks, credit unions, and certain other financial institutions to hold enough capital, keep enough liquid assets on hand, and manage risk well enough to stay solvent through bad economic conditions. It works through specific numerical thresholds — minimum capital ratios, liquidity buffers, asset quality benchmarks — enforced by federal agencies that examine institutions regularly and can intervene when their finances start to slip. The point is to stop individual bank failures from spreading, and to protect depositors whose money is sitting inside those institutions.

Who the Framework Covers

Any financial organization that holds significant public deposits or performs functions critical to the broader economy falls under prudential oversight. Commercial banks and savings associations make up the largest group. Credit unions serving defined membership populations are covered separately. Insurance companies are included because of the sheer volume of capital they manage and the risk they absorb across other sectors.

Regulators work from two different vantage points at the same time. Micro-prudential supervision looks at individual firms — a single bank’s balance sheet, loan portfolio, and internal controls — to catch problems before they lead to failure. Macro-prudential supervision looks wider, watching for risks building across the whole financial system. A residential mortgage market overheating nationwide is a macro-prudential concern even when no single bank looks distressed on its own. The two perspectives feed each other: micro work catches the bank making bad loans, and macro work catches the trend that made those loans look attractive to begin with.

Which Agencies Regulate What

Several federal agencies share the work, split by how each institution is chartered and organized.

The Federal Reserve supervises bank holding companies — corporate parents that own one or more banks — along with state-chartered banks that opt into Federal Reserve membership. Its authority flows from the Bank Holding Company Act, which defines a bank holding company as any entity with direct or indirect control of a bank and gives the Fed broad power to regulate those structures.¹ The Fed also sets enhanced prudential standards for the largest institutions, including stress testing and resolution planning.

The Office of the Comptroller of the Currency charters, regulates, and supervises all national banks and federal savings associations. Its mandate centers on making sure these institutions operate safely and soundly, provide fair access to financial services, and comply with applicable laws.²

The Federal Deposit Insurance Corporation oversees state-chartered banks that are not Federal Reserve members and administers the deposit insurance fund that protects depositors when banks fail. It also carries backup enforcement authority over any insured institution, regardless of who the primary regulator is.

The National Credit Union Administration plays a parallel role for credit unions, which are member-owned cooperatives that sit outside the traditional bank charter structure. The NCUA charters and regulates federal credit unions and runs the National Credit Union Share Insurance Fund, which insures member deposits.³

Sitting above these individual mandates is the Financial Stability Oversight Council, created by the Dodd-Frank Act to watch for threats to the financial system as a whole. The FSOC’s most consequential power is designating nonbank financial companies for Federal Reserve supervision when their distress or activities could threaten U.S. financial stability.⁴ The Council prefers an activities-based approach, looking at risky behaviors across an industry rather than labeling individual firms, and turns to company-specific designations only when the broader approach cannot address a threat.⁵

Capital Requirements

Capital rules are the backbone of the whole framework. They force institutions to fund themselves partly with equity and other loss-absorbing instruments rather than relying entirely on borrowed money and depositor funds. When loans go bad or markets drop, capital is the cushion that absorbs losses before depositors or the insurance fund take a hit.

Under the Basel III framework as implemented in U.S. rules, national banks and federal savings associations must meet four minimum capital ratios at the same time:⁶

Common Equity Tier 1 of at least 4.5% of risk-weighted assets. This is the highest-quality capital — mostly common stock and retained earnings — that absorbs losses the moment they occur.
Tier 1 capital of at least 6% of risk-weighted assets, which adds “additional Tier 1” instruments such as certain preferred stock on top of the CET1 base.
Total capital of at least 8% of risk-weighted assets, layering in Tier 2 capital such as subordinated debt and qualifying loan loss reserves.⁷
A leverage ratio of at least 4%, measured against total assets rather than risk-weighted assets. This acts as a backstop that stops a bank from gaming risk weights to hold less capital than its raw size warrants.

These numbers are floors, not goals. Dipping below any one of them triggers mandatory regulatory consequences.

Capital Buffers Above the Minimums

On top of the minimums, regulators require additional CET1 buffers that effectively raise the amount of equity a bank needs to hold to operate freely. The most important is the capital conservation buffer of 2.5%. A bank that eats into this buffer faces escalating restrictions on dividends, share buybacks, and discretionary bonus payments. At the bottom of the range — a CET1 ratio between 4.5% and 5.125% — the bank must retain 100% of its earnings and cannot distribute anything.⁸ In practice, most banks target a CET1 ratio of 7% or higher just to stay out of the distribution restrictions.

A countercyclical capital buffer can be switched on when credit growth is running too hot. The Federal Reserve sets this rate; it has remained at 0% in recent years but can be raised when regulators see systemic risk building.

The largest banks carry an additional layer. Globally systemically important bank holding companies must hold a G-SIB surcharge, calculated under two methods with the higher result applying. Method 1 surcharges range from 1.0% to 4.5% or more based on a scoring system that reflects size, interconnectedness, substitutability, complexity, and cross-jurisdictional activity. Method 2 surcharges can reach 5.5% or higher for the most systemically important firms.⁹ Stack the 4.5% CET1 minimum, the 2.5% conservation buffer, and a G-SIB surcharge, and the largest U.S. banks need CET1 ratios in the double digits to operate without restrictions.

Why Risk-Weighted Assets Matter

Capital ratios only mean something if the denominator honestly reflects the risk sitting on a bank’s books. The standardized approach assigns each asset a risk weight based on its type and creditworthiness. Cash and direct exposures to the U.S. government get a 0% risk weight, meaning they require no capital backing at all.¹⁰ At the other end, most commercial and corporate loans carry a 100% risk weight, although recent rulemaking has proposed reducing that to 95%.¹¹

Residential mortgages sit in between, with risk weights that vary by loan-to-value ratio. A mortgage with an LTV of 50% or below gets a 25% risk weight, while one above 100% LTV jumps to 75%. If the loan’s repayment depends on cash flows from the property itself, such as a rental, the weights are higher, ranging from 35% at the lowest LTV tier up to 110% for deeply underwater loans.¹¹ This granularity determines how much capital backs each dollar of lending. A bank concentrated in low-LTV residential mortgages needs far less capital than one loading up on commercial real estate loans.

Liquidity and Asset Quality

Capital absorbs losses after they happen. Liquidity keeps a bank running day to day, especially when markets freeze and normal funding sources dry up. The liquidity coverage ratio requires banks to hold enough high-quality liquid assets — mostly cash and Treasury securities — to cover their projected net cash outflows during a 30-day stress scenario.¹² If depositors pull money and wholesale funding shuts down for a month, the bank can meet its obligations without a fire sale.

Asset quality monitoring runs alongside capital and liquidity. Regulators track the volume of non-performing loans and require adequate reserves for anticipated credit losses. The figures come in through detailed quarterly filings, which give supervisors a near-real-time picture of whether a loan portfolio is deteriorating.

How Supervisors Verify What Banks Report

Banks file Call Reports — formally the Consolidated Reports of Condition and Income — every quarter, submitted electronically within 30 calendar days of the quarter’s end. A domestic bank filing the FFIEC 041 form submits data across dozens of schedules covering its balance sheet, income statement, loan portfolio broken down by type, past-due and nonaccrual loans, deposit composition, derivatives exposure, off-balance-sheet commitments, regulatory capital components, and fair-value measurements.¹³ Much of this feeds off-site monitoring systems that flag emerging problems between full examinations.

Separately, the Basel III Pillar 3 framework requires public disclosures about risk management, capital adequacy, and risk-weighted assets, so investors, counterparties, and analysts can form their own judgments about an institution’s health.¹⁴

On-Site Examinations and CAMELS Ratings

Federal law requires a full-scope, on-site examination of every insured institution at least once every 12 months.¹⁵ Smaller, well-run institutions get a longer leash. Banks with total assets under $3 billion that are well-capitalized, well-managed, and rated a composite 1 or 2 under the CAMELS system can qualify for an 18-month cycle.¹⁶

Examiners rate each institution across six components: Capital adequacy, Asset quality, Management capability, Earnings sufficiency, Liquidity position, and Sensitivity to market risk. Each gets a rating from 1 (strongest) to 5 (most concerning), and the examiner assigns a composite rating reflecting overall condition.¹⁷ During an on-site exam, examiners dig into internal ledgers, loan files, board minutes, and risk management documentation. The exam concludes with a Report of Examination that spells out findings and any corrective actions the bank must take. A composite rating of 3, 4, or 5 typically brings heightened supervisory attention: more frequent contact, shorter intervals between exams, and potentially formal enforcement actions.

Stress Testing for the Largest Firms

For the largest institutions, meeting today’s capital minimums is not enough. The Federal Reserve runs annual supervisory stress tests on bank holding companies with $100 billion or more in total consolidated assets, evaluating whether those firms would maintain adequate capital through at least a baseline and a severely adverse scenario.¹⁸¹⁹ Results directly affect how much capital a bank can distribute to shareholders. A firm that barely scrapes through the severely adverse scenario faces pressure to retain more earnings, cut its dividend, or raise new capital. The results are public, so a poor showing damages market confidence immediately, which creates its own incentive for banks to hold capital well above the minimums.

Banks at $250 billion or more in assets are automatically subject to the full suite of enhanced prudential standards, including stress testing, resolution planning, liquidity requirements, and concentration limits. For banks between $100 billion and $250 billion, the Fed has discretion to apply most of these standards case by case after considering the institution’s risk profile.

What Happens When a Bank Falls Short

When capital ratios slip below the minimums, the response is not discretionary. Federal law mandates escalating intervention through the Prompt Corrective Action framework, which sorts institutions into capital categories with specific consequences at each level.

A bank qualifies as well-capitalized only if it meets all four of these: a total capital ratio of 10% or higher, a Tier 1 ratio of 8% or higher, a CET1 ratio of 6.5% or higher, and a leverage ratio of 5% or higher.²⁰ These thresholds sit meaningfully above the absolute minimums, so a bank can technically meet every minimum and still not qualify as well-capitalized.

An institution falls into the undercapitalized category if any ratio drops below the minimums. At the significantly undercapitalized level, consequences become severe. The banking agency must take mandatory actions that can include forced recapitalization through a stock sale or acquirer; deposit rate caps that prevent the bank from attracting deposits with above-market yields; asset growth limits that freeze or shrink the balance sheet; management changes including new board elections or dismissal of senior officers; compensation restrictions prohibiting executive bonuses and capping pay at pre-undercapitalization levels; and forced divestitures of subsidiaries or of the bank itself from its parent company.²¹ The framework is deliberately automatic. Regulators cannot sit on their hands when capital deteriorates; the statute presumes certain actions will be taken unless the agency affirmatively finds they would not serve the framework’s purpose.

Formal Enforcement

When supervision uncovers problems a bank cannot or will not fix voluntarily, regulators have a graduated enforcement toolkit. Escalation usually starts informally, through board resolutions and memoranda of understanding that are not publicly disclosed. When informal measures fail, formal enforcement follows.

A Cease and Desist Order requires a bank to stop an unsafe practice and take affirmative steps to correct the resulting harm.²² Agencies can impose civil money penalties of up to $1,000,000 per day for violations, or up to the lesser of $1,000,000 per day or 1% of the institution’s total assets for the most severe offenses. The amount depends on the size of the institution, the gravity of the violation, and prior history.²³

Regulators can also remove individual officers and directors from their positions and permanently bar them from the industry. Anyone who violates a removal order and knowingly participates in the affairs of an insured institution faces criminal penalties of up to $1,000,000 in fines and five years in prison. These personal consequences mean the framework is not limited to penalizing institutions as abstract entities.

Resolution Planning for the Largest Firms

The 2008 financial crisis made clear that some institutions are so large and interconnected that an unplanned failure would cause widespread economic damage. Bank holding companies with $250 billion or more in total consolidated assets must periodically submit resolution plans, commonly called living wills, describing how they could be wound down rapidly and in an orderly fashion if they faced material financial distress.

A full resolution plan is a massive document. It must include a strategic analysis of how the firm would actually execute its resolution, the funding and liquidity needed to keep critical operations running during the process, a detailed map of the corporate structure down to each material subsidiary, descriptions of major counterparty relationships and cross-guarantees, and an inventory of the technology systems the firm depends on.²⁴ The plan must also identify potential impediments to resolution and describe how the firm would address them. For globally systemically important bank holding companies, additional loss-absorbing capacity requirements ensure that even in failure, regulators have enough resources on hand to restructure the firm without taxpayer bailouts.²⁵

1
eCFR. 12 CFR Part 225 – Bank Holding Companies and Change in Bank Control (Regulation Y)
2
Office of the Comptroller of the Currency. About the OCC
3
National Credit Union Administration. Regulation and Supervision
4
Office of the Law Revision Counsel. 12 USC 5323 – Authority To Require Supervision and Regulation of Certain Nonbank Financial Companies
5
Federal Register. Authority To Require Supervision and Regulation of Certain Nonbank Financial Companies
6
eCFR. 12 CFR Part 3 Subpart B – Capital Ratio Requirements and Buffers
7
Bank for International Settlements. Definition of Capital in Basel III
8
Bank for International Settlements. RBC30 – Buffers Above the Regulatory Minimum
9
eCFR. 12 CFR 217.403 – GSIB Surcharge
10
eCFR. 12 CFR Part 3 Subpart D – Risk-Weighted Assets, Standardized Approach
11
Federal Register. Regulatory Capital Rules: Regulatory Capital and Standardized Approach for Risk-Weighted Assets
12
Bank for International Settlements. Basel III: The Liquidity Coverage Ratio and Liquidity Risk Monitoring Tools
13
FFIEC (Federal Financial Institutions Examination Council). FFIEC 041 Consolidated Reports of Condition and Income
14
Bank for International Settlements. Pillar 3 Disclosure Requirements – Updated Framework
15
Office of the Law Revision Counsel. 12 USC 1820 – Administration of Corporation
16
eCFR. 12 CFR 4.6 – Frequency of Examination of National Banks and Federal Savings Associations
17
Federal Deposit Insurance Corporation. Section 1.1 – Basic Examination Concepts and Guidelines
18
Federal Reserve Board. 2026 Stress Test Scenarios
19
Office of the Law Revision Counsel. 12 USC 5365 – Enhanced Supervision and Prudential Standards
20
eCFR. 12 CFR Part 6 – Prompt Corrective Action
21
Office of the Law Revision Counsel. 12 USC 1831o – Prompt Corrective Action
22
Office of the Comptroller of the Currency. Enforcement Action Types
23
Office of the Law Revision Counsel. 12 USC 1818 – Termination of Status as Insured Depository Institution
24
eCFR. 12 CFR Part 381 – Resolution Plans
25
Office of the Comptroller of the Currency. Regulatory Capital Rule: Modifications to the Enhanced Supplementary Leverage Ratio Standards for U.S. Global Systemically Important Bank Holding Companies