What Is Reputation Risk in Banking?
Reputation risk in banking is the risk that negative public opinion about a bank’s actions, customers or products will damage its business by driving away depositors, investors, counterparties or regulators’ trust. Traditionally, reputation risk in banking was treated as a broad, catch‑all concept that could touch almost any other risk, from credit and liquidity to legal and compliance. In practice, this meant supervisors and banks sometimes invoked reputation risk when they worried about how certain customers, sectors or controversies might look, even when the underlying financial risks were not clearly articulated. Over time, regulators and industry groups came to see that such a vague category made prudential supervision less predictable and harder to tie to objective bank supervisory risk categories like credit, market, operational or legal risk.
Key Takeaways
- The Federal Reserve has proposed a rule to permanently remove “reputation risk” from bank supervision and codify that it cannot be used in exams, manuals or guidance.
- Supervisors must instead describe issues using specific bank supervisory risk categories such as credit, liquidity, market, operational or compliance risk, directly tied to safety and soundness.
- Parallel OCC/FDIC proposals would define unsafe or unsound banking practices in rule and limit MRAs to practices likely to cause material financial harm or that violate law.
- These changes respond to long‑standing concerns that reputation risk in banking had become ambiguous, subjective and vulnerable to misuse in “debanking” debates.
- Banks now need to align their internal frameworks with a more risk‑based, evidence‑driven model of prudential supervision.
Reputation Risk in Fed Supervision
In US bank supervision, reputation risk historically meant the risk that negative public opinion could harm a bank’s franchise, funding or business relationships. The Fed’s 2026 proposal would codify its removal from supervisory programs and prohibit examiners from using reputation risk as a standalone basis for criticism or adverse action.
Fed “Reputation Risk” Proposal
The Federal Reserve’s 2026 proposed rule would formalise the removal of reputation risk from exam programs and supervisory materials and ban its use as a supervisory tool. Supervisory concerns must instead be expressed through established risk categories—credit, liquidity, market, operational or compliance—directly linked to safety and soundness.
Unsafe or Unsound Practice (FDIC/OCC)
FDIC and OCC have proposed to define an unsafe or unsound banking practice as conduct that is contrary to generally accepted standards of prudent operation and is likely, if continued, to materially harm an institution’s financial condition or pose a material risk of loss to the Deposit Insurance Fund.
Matters Requiring Attention (MRAs)
Under the FDIC/OCC proposal, agencies may only issue a Matter Requiring Attention where a practice is imprudent and could reasonably be expected, if continued, to materially harm the institution or create a material risk to the DIF, or where there is an actual violation of banking law or regulation.
History of Reputation Risk in Bank Supervision
For decades, supervisors treated reputation risk in banking as a legitimate supervisory concern, even though it rarely appeared in statute or binding regulations. It emerged as a way to capture situations where a bank’s association with certain industries, products or scandals might undermine confidence, funding or franchise value, even when capital and liquidity ratios still looked sound.
Over time, however, this broad, qualitative notion became problematic. Industry groups, lawmakers and some regulators argued that reputation risk was too ambiguous and inherently subjective, making it hard for banks to predict how their choices would be viewed by examiners. In the 2010s and early 2020s, reputation risk was repeatedly cited in debates over alleged “debanking” of lawful but controversial customers, from politically sensitive businesses to certain legal but disfavoured sectors.
Around 2025–2026, US agencies began to pivot. The Fed removed reputation risk from its examination programs and then proposed a rule to codify that change. At the same time, FDIC and OCC proposed to define unsafe or unsound banking practices in regulation and tighten the standards for MRAs, anchoring prudential supervision in clearer, measurable risk concepts instead of open‑ended reputational concerns.
What Exactly Is the Fed’s “Reputation Risk” Proposal?
The Federal Reserve’s 2026 proposal on reputation risk is part of a broader effort to re‑wire prudential supervision around measurable risk. The rule would codify that reputation risk is no longer a component of Fed examination programs or supervisory materials and cannot be used as a stand‑alone supervisory tool. Instead, examiners must frame concerns using traditional bank supervisory risk categories—credit, liquidity, market, operational or compliance—and link them to safety‑and‑soundness expectations.
This formal rulemaking builds on the Board’s earlier decision, in 2025, to strip reputation risk from exam protocols, making the shift durable and transparent. For banks, it means that while they may still monitor reputation risk internally, supervisory conversations are meant to focus on whether specific practices create unsafe or unsound banking practices or other prudential issues, not on reputational discomfort by itself.
How the FDIC/OCC “Unsafe or Unsound Practice” and MRA Rules Fit In
In parallel, the OCC and FDIC have proposed a joint rule that, for the first time, provides a regulatory definition of unsafe or unsound banking practices under section 8 of the Federal Deposit Insurance Act. A practice would qualify only if it is contrary to generally accepted standards of prudent operation and likely, if continued, to materially harm the institution’s financial condition or pose a material risk of loss to the Deposit Insurance Fund.
The same rule would revise the framework for Matters Requiring Attention (MRAs), stating that agencies may only issue MRAs when a practice could reasonably be expected to become unsafe or unsound under current or foreseeable conditions, or when there is an actual violation of law or regulation. This narrows MRAs to issues with a clear safety‑and‑soundness nexus, reducing scope for findings that rest mainly on generic reputation risk in banking rather than concrete prudential concerns.
Old vs New Reputation‑Risk Supervisory Framework
What This Means for Banks in Practice
- Re‑map internal risk taxonomies
Banks should ensure internal frameworks translate legacy reputation‑risk narratives into specific, measurable categories—credit, liquidity, operational, legal and compliance—aligned with modern bank supervisory risk categories. - Tighten MRA governance
With new standards for MRAs and unsafe or unsound banking practices, each supervisory finding will need a clear prudential rationale tied to material financial impact or legal breaches. - Review debanking and customer‑risk policies
Customer‑selection and account‑closure policies should rely on AML/CFT, sanctions, credit and operational risk analysis, not generic references to reputation risk in banking. - Enhance documentation and challenge processes
Clearer definitions give banks a stronger basis to challenge supervisory conclusions that lack a solid link to safety and soundness, pointing back to the new risk‑based standards. - Prepare for more legalistic, evidence‑driven prudential supervision
As concepts like reputation risk fall away and unsafe or unsound practices are codified, supervisory dialogue will increasingly revolve around data, law and prudential logic rather than perceptions alone.
FAQ: Reputation Risk and Prudential Supervision
Does this mean banks can ignore reputation risk?
No. The Fed explicitly states that banks may still consider reputational factors in their own risk management, but examiners cannot use “reputation risk” as a supervisory mechanism; concerns must be tied to concrete financial or compliance risks.
Will this stop all “debanking” controversies?
Not entirely, but by removing reputation risk as a stand‑alone justification, the rules reduce the scope for regulatory pressure based solely on reputational concerns, and push decisions back to legal, credit, AML/CFT and operational risk analysis.
What changes for MRAs in practice?
MRAs should become more targeted, since agencies may only issue them when a practice could reasonably become unsafe or unsound or when there is a legal violation; low‑impact or primarily reputational concerns should be addressed through other channels.
Is this shift just about the Fed?
No. The Fed is codifying the removal of reputation risk, while OCC and FDIC are defining unsafe or unsound banking practices and revising the MRA framework; together, these moves signal a system‑wide shift in prudential supervision.
Summary
US regulators are moving away from reputation risk in banking as a catch‑all supervisory label and toward a clearer, codified framework built around measurable prudential risks. By defining unsafe or unsound banking practices in rule and tightening the criteria for MRAs, agencies are narrowing supervision to issues that can materially affect safety and soundness or violate law. The Fed’s proposal to ban reputation risk as a supervisory tool is one piece of this broader regulatory evolution, not an isolated event. For banks, the practical challenge now is to align internal taxonomies, policies and documentation with this risk‑based, evidence‑driven model of prudential supervision, making supervisory conversations more predictable, objective and legally grounded.
Sources
- Prohibition on Use of Reputation Risk by Regulators
- Fed Seeks Public Feedback on Proposal To Drop “Reputation Risk” From Bank Supervision
- Federal Reserve Proposes Rules to Codify Removal of “Reputation Risk” From Bank Supervision
- Following earlier actions to remove reputation risk from its supervision of banks, Federal Reserve Board requests comment on proposal to codify that removal
- BPI Supports OCC and FDIC’s Proposed Rulemaking Defining ‘Unsafe or Unsound Practices’
Add Comment