The CAMELS rating system is a confidential 1-to-5 score that federal banking regulators assign to every insured bank and credit union in the United States after examining its financial condition. A 1 means the institution is sound in nearly every respect; a 5 means it may be close to failing. You won’t find the score published anywhere, but it shapes almost every regulatory decision that follows, from how often examiners return to how much the institution pays for deposit insurance.
The same definitions and the same scale apply across the Federal Reserve, the Office of the Comptroller of the Currency, the FDIC, and the National Credit Union Administration, so a composite 3 carries the same meaning regardless of which agency issued it.1National Credit Union Administration. CAMELS Rating System
What the Six Letters Stand For
CAMELS is an acronym. Examiners rate each of the six components on the same 1-to-5 scale, then use those scores plus their judgment about which risks matter most to arrive at a single composite rating.
Capital Adequacy
This asks whether the institution holds enough of its own money, rather than borrowed funds, to absorb losses and keep operating. Examiners look at regulatory capital ratios, including Tier 1 leverage and common equity requirements, and judge whether the cushion is big enough for the risks the bank is actually taking.
Asset Quality
Asset quality is about credit risk: how likely borrowers are to repay. Examiners review delinquent and non-performing loans, the reserves set aside for expected losses, and the rigor of underwriting standards. Concentrations in a single industry or a portfolio heavy with shaky commercial real estate will pull the score down quickly. For the largest institutions, those with $250 billion or more in assets, regulators also require periodic stress tests modeling how the loan book would perform in a severe recession.2Office of the Comptroller of the Currency. Dodd-Frank Act Stress Test (Company Run)
Management
This is the most qualitative component. Examiners assess whether the board and senior officers understand the institution’s risk profile and have working controls to manage it. They look at strategic planning, internal audit, compliance culture, and whether leadership responds when problems appear. A bank with strong capital and steady earnings can still draw a poor management rating if leadership is not paying attention.
Earnings
Earnings measures the ability to generate sustainable profits. Examiners weigh income quality, net interest margins, and overhead efficiency. One-time gains from asset sales or tax benefits do not carry much weight; regulators want to see that recurring operations can fund the bank’s own growth and build its reserves.
Liquidity
Liquidity is about meeting short-term obligations, such as depositor withdrawals, maturing debts, and loan commitments, without selling assets at fire-sale prices. Examiners review cash and easily convertible securities on hand along with access to backup funding like Federal Home Loan Bank advances or the Federal Reserve’s discount window.3Office of the Comptroller of the Currency. Interagency Advisory on the Use of the Federal Reserve’s Primary Credit Program in Effective Liquidity Management A bank leaning heavily on volatile short-term wholesale funding is far more fragile than one built on stable retail deposits.
Sensitivity to Market Risk
The sixth component evaluates how exposed the institution is to shifts in interest rates, foreign exchange rates, and commodity prices. A bank holding long-term fixed-rate mortgages funded by short-term deposits, for example, faces real trouble if rates spike. Examiners review the stress-testing models and the sophistication of the systems used to monitor and hedge these exposures.
What Each Composite Rating Means
The composite rating is not a simple average of the six component scores. It reflects the examiner’s judgment about the institution’s overall condition, weighted toward whichever risks are most material. Here is what each level signals in practice, based on FDIC definitions:
- Composite 1. Sound in every respect. Components generally rate 1 or 2, weaknesses are minor, and risk management is strong for the bank’s size and complexity. Regulators have no concerns, and the institution can weather economic turbulence without intervention.4Federal Deposit Insurance Corporation. Composite Ratings Definition List
- Composite 2. Fundamentally sound, with moderate weaknesses the board and management can correct. No component is typically worse than 3. Supervisory response stays informal and limited.4Federal Deposit Insurance Corporation. Composite Ratings Definition List
- Composite 3. Raises supervisory concern. Weaknesses range from moderate to severe, management may not be addressing them effectively, and the bank may be in significant noncompliance with laws or regulations. Enforcement actions become likely. Failure still appears unlikely given the bank’s overall capacity.4Federal Deposit Insurance Corporation. Composite Ratings Definition List
- Composite 4. Exhibits unsafe and unsound practices. Deficiencies are serious and unresolved. Formal enforcement action is usually necessary, and the institution poses a risk to the deposit insurance fund. Failure is a distinct possibility if the problems are not addressed.4Federal Deposit Insurance Corporation. Composite Ratings Definition List
- Composite 5. Critically deficient. Problems are beyond management’s ability to control, and the bank needs immediate outside financial assistance to remain viable. Failure is highly probable without drastic intervention, and the institution poses a significant risk to the deposit insurance fund.4Federal Deposit Insurance Corporation. Composite Ratings Definition List
Most U.S. banks carry a composite 1 or 2. A drop to 3 changes the tone of the regulatory relationship from routine oversight to active concern, and the consequences escalate quickly from there.
How the Rating Affects Examination Frequency
Federal law requires a full-scope, on-site examination of every insured depository institution at least once every 12 months. An institution can qualify for a longer 18-month cycle only if it is well capitalized, carries a composite CAMELS rating of 1 or 2, has a management component of 1 or 2, holds less than $3 billion in total assets, and is not under any formal enforcement action.5eCFR. 12 CFR 208.64 – Frequency of Examination
That six-month difference matters. Examinations consume management time, require heavy document production, and cost real money. An institution rated 3 or worse loses the 18-month option and faces annual exams at minimum. Banks rated 4 or 5 often see examiners far more often than once a year, sometimes with near-continuous on-site monitoring.
How the Rating Affects Deposit Insurance Premiums
Every FDIC-insured institution pays quarterly assessments into the Deposit Insurance Fund, and the CAMELS composite is a primary input in setting the rate. The FDIC uses composite ratings to establish floors and ceilings on what an institution pays per dollar of its assessment base.6Federal Deposit Insurance Corporation. Risk-Based Assessments
For established small institutions (those insured for five or more years), the total base assessment rates run as follows:
- CAMELS composite 1 or 2: 2.5 to 18 basis points annually
- CAMELS composite 3: 4 to 32 basis points annually
- CAMELS composite 4 or 5: 13 to 32 basis points annually
A basis point is one cent per $100 of the assessment base. A bank with a $500 million assessment base rated composite 1 might pay around $125,000 a year at the low end, while the same bank rated composite 4 could owe over $1.6 million, a difference that comes straight out of earnings.7Federal Deposit Insurance Corporation. FDIC Assessment Rates
Enforcement Actions Tied to Low Ratings
A rating of 3 or worse does more than raise costs. It triggers active regulatory intervention that escalates with the severity of the score.
At composite 3, regulators typically begin with informal enforcement: board resolutions, memorandums of understanding, or commitment letters that spell out corrective steps. These agreements are not publicly disclosed but carry real weight, and ignoring them almost guarantees the next step.
At composite 4, regulators almost always move to formal enforcement actions. Cease-and-desist orders carry the force of law and can mandate specific changes such as raising capital, restricting dividends, or removing individual officers. Institutions under formal action may also face restrictions on opening new branches, entering new business lines, or growing the balance sheet without prior approval.8Federal Deposit Insurance Corporation. FDIC’s Controls Over the CAMELS Rating Review Process
At composite 5, the institution typically needs immediate outside assistance: a capital injection, a merger partner, or in the worst case, FDIC receivership. Regulators may invoke Prompt Corrective Action provisions under federal law, which impose mandatory restrictions on undercapitalized institutions and can force closure of critically undercapitalized ones.9Office of the Law Revision Counsel. 12 USC 1831o – Prompt Corrective Action
Why You Cannot Look Up a Bank’s Rating
CAMELS ratings are among the most tightly guarded numbers in banking. They are not available to the public, to shareholders, or even to most bank employees. Access is limited to senior management, the board, and the relevant regulatory agencies.
The legal basis for that secrecy runs through several layers. Exemption 8 of the Freedom of Information Act specifically shields examination reports and condition assessments prepared by or for financial regulators from public disclosure requests.10Office of the Law Revision Counsel. 5 USC 552 – Public Information; Agency Rules, Opinions, Orders, Records, and Proceedings Courts have read the exemption broadly, allowing agencies to withhold entire examination reports rather than just sensitive portions.11U.S. Department of Justice. FOIA Guide: Exemption 8 On the institution’s side, federal regulations prohibit banks from disclosing their CAMELS ratings to insurers, investors, or other third parties without regulator permission, and anyone who discloses or misuses non-public examination information may face criminal penalties.12Federal Deposit Insurance Corporation. Interagency Advisory on Confidentiality of CAMELS Ratings and Other Non-Public Supervisory Information
The reasoning is practical. If depositors learned their bank had been downgraded to a 4, many would pull their money out immediately, potentially creating the liquidity crisis regulators are trying to prevent. Confidentiality gives regulators room to work with the institution on corrective measures without triggering a bank run.
Can a Bank Challenge Its Rating?
Yes. An institution that believes its CAMELS rating is unfair can challenge it through a formal appeals process. At the FDIC, appeals of material supervisory determinations, including composite ratings, go to the Office of Supervisory Appeals, an independent office that reviews the dispute without deferring to the original examiners’ judgment.13Federal Deposit Insurance Corporation. Amendments to FDIC Guidelines for Appeals of Material Supervisory Determinations Credit unions supervised by the NCUA may appeal composite ratings of 3, 4, or 5 under NCUA regulations.1National Credit Union Administration. CAMELS Rating System
Formal appeals are rare. Most institutions that receive a disappointing rating negotiate informally with examiners during the exam itself, pushing back on specific findings before the rating becomes final. Filing a formal appeal signals real disagreement with the regulator’s conclusions, and because the examiner relationship is ongoing, most banks weigh that step carefully.