OCC Names Key Risks Facing Federal Banking System in Fall Report
The OCC’s Fall 2026 report flags interest rate, refinancing, compliance and AI-driven cyber risk as bank profitability hits a two-decade high.
The Office of the Comptroller of the Currency (OCC) named credit, market, compliance and operational risks as the key themes in its Fall 2026 Semiannual Risk Perspective, released on November 12, as profitability at federal banks reached its highest level in more than two decades.
The OCC Semiannual Risk Perspective is the regulator’s twice-yearly statement of the risks it sees at the national banks, federal savings associations and federal branches it supervises. It shapes where examiners spend their time, so compliance, risk and audit teams read it for signals on the next exam cycle.
This edition pairs a benign view of loan quality with warnings on interest rates, refinancing, and the use of advanced artificial intelligence by criminals. It also records changes to how the OCC itself supervises.
What the OCC Semiannual Risk Perspective says on credit and rates
The OCC said credit risk in the loan portfolios of the banks it supervises “remains modest overall.” The agency made no broader call of rising credit stress in the release.
Interest rate developments are the main market risk the OCC identified. They could affect both the net interest margin (NIM), the gap between what banks earn on loans and pay on funding, and the value of the securities banks hold.
Higher interest rates could also increase commercial refinancing risk, the OCC said. That is the risk that borrowers with maturing commercial loans cannot refinance on current terms.
The Spring 2026 edition, released on May 7, 2026, raised related concerns. It said credit conditions and refinancing risk in certain commercial real estate and private credit segments needed continued monitoring. It also noted modest increases in past-due loans in some consumer portfolios, while describing exposure to weaker-credit borrowers as manageable.
Bank profits reach a two-decade high
The OCC reported that profitability for the federal banking system, and for community banks with assets below $30 billion, rose in the first half of 2026 to levels not seen in more than two decades.
The regulator credited loan growth, modest NIM expansion and higher non-interest income for strong revenue growth. Lower provisioning for credit losses added to net income.
The last point matters for risk teams. Provisions are the money banks set aside for expected loan losses. When they fall, earnings rise, so earnings are more exposed if credit quality turns. The OCC’s own warning on rates and refinancing sits against that backdrop.
The Spring 2026 edition described capital ratios and liquidity as high by historical standards and said bank earnings improved in 2025 on loan growth and lower funding costs.
Compliance and operational risk: what the report flags
The OCC listed compliance and operational risk alongside credit and market risk as key themes in the Fall 2026 release. The release does not detail the compliance risks.
The Spring 2026 edition was more specific. It said geopolitical tensions raise sanctions and money laundering risk, strain bank compliance systems, and may increase the potential for Bank Secrecy Act and anti-money laundering (BSA/AML) violations.
For AML compliance officers, the two editions together show compliance risk staying a standing theme for OCC-supervised banks. Teams that hold monitoring and screening data in separate systems face the strain the OCC described, a problem covered in RegTech Post’s look at AML tech stacks and data silos.
Operational risk also covers outside providers. The OCC’s interagency guidance on third-party relationships sets out how banks are expected to manage risk across the life of a vendor arrangement. Banks building third-party risk programs are working against that guidance.
Advanced AI cuts both ways in the OCC Semiannual Risk Perspective
The report treats advanced artificial intelligence, which the OCC calls Super Intelligence (SI), as an opportunity and a threat. Banks of all sizes are exploring ways to use it, and the OCC said its growing availability creates opportunities to improve efficiency and internal controls, sharpen analytics and customize services.
The OCC also said: “Employed by threat actors, advanced SI amplifies cybersecurity and fraud concerns.”
The same point appeared in the Spring edition, which said criminal groups targeting the financial sector were growing more sophisticated, that foreign state-sponsored actors remained a threat, and that fraud and scams were elevated. It added that AI tools for cybersecurity can help but that their risks need to be understood.
For boards, the OCC’s framing links AI adoption to internal controls rather than to efficiency alone. RegTech Post has reported that compliance teams not verifying AI were nearly three times as likely to report fines.
OCC supervision shifts toward material financial risk
The OCC said that since the previous Semiannual Risk Perspective it has continued to reset its risk tolerance and make its supervisory policies and practices more risk-based.
It named two specific actions. The first is the codification of unsafe or unsound practices. The second is expanded eligibility for an 18-month exam cycle for community banks with up to $6 billion in assets.
The OCC said these and other changes aim to focus supervision on material financial risk and reduce exam burdens, especially for community banks.
The shift has critics. Senator Elizabeth Warren has urged the Federal Reserve, the OCC and the Federal Deposit Insurance Corporation to restore bank examiner powers. The OCC has also reported on the nine largest US banks denying services on reputation risk, one of the areas where it has changed what examiners should look at.
What comes next for OCC-supervised banks
Community banks with up to $6 billion in assets that qualify for the 18-month cycle will see fewer full-scope examinations. Larger banks and federal branches stay on their existing schedules under the changes the OCC described.
The full Fall 2026 report is available on the OCC website, alongside the news release announcing it. The Spring 2026 edition remains on the OCC site for comparison.
The OCC publishes the report twice a year, so the next edition is due in spring 2027, when readers can check whether the agency’s view of credit and refinancing risk has held.

The go to weekly newsletter for compliance, risk, and governance professionals.
Trusted by 10,000+ industry leaders for authoritative RegTech intelligence, delivered weekly.
Join them today.
