OCC flags operational banking risks
- The OCC said on May 7 that federally supervised banks still look healthy, but operational risk, cyber threats, fraud, and concentrated vendors are rising. - The sharpest outside detail came from Philadelphia Fed researchers: banks were 8 to 9 times more likely to sell bonds with gains than losses. - That matters because hidden rate risk and outsourced operations can spread stress faster than old-school credit losses.
Banks are not in a 2023-style panic right now. That is the easy part. The harder part is what sits underneath that calm. On May 7, the Office of the Comptroller of the Currency put out its Spring 2026 risk review and basically said the system still has solid capital, solid liquidity, and manageable credit losses — but the weak spots are increasingly operational, interconnected, and harder to see in a simple balance-sheet snapshot. (occ.gov) ### What did the OCC actually say? The OCC’s message was two-sided. Earnings improved in 2025, first-quarter 2026 results looked broadly similar, and capital and liquidity stayed high by historical standards. But the agency highlighted four risk buckets at once — credit, market, operational, and compliance — with special attention on cyber threats, fra(occ.gov)ey functions. (occ.gov) ### Why is “operational risk” the important phrase? Because this is not just about bad loans anymore. Operational risk means the plumbing — payments, vendors, cloud services, data systems, identity controls, fraud defenses, third-party processors, all of it. A bank can look fine on capital ratios and still get hit if one critical service provider fails(occ.gov)he OCC paired “balance sheets remain strong” with warnings about cybercriminals, scams, and increasingly advanced tools that can both help and hurt security work. (occ.gov) ### Where do bonds come into this? The Philadelphia Fed dropped a useful companion piece the same day. It looked back at the 2022–23 rate shock, when the Fed pushed rates from near zero to 5.25%–5.5% by July 2023. As rates rose, banks’ bond portfolios — especially Treasuries and mortgage-backed securities — fell below par, deposits got less sticky, and(occ.gov)nancing. (philadelphiafed.org) ### So why didn’t banks just cut the risk? Turns out many barely did. The researchers say banks bought shorter-term securities, but they rarely sold the riskier bonds they already owned and did not expand hedging enough to offset the shock. The most telling detail is behavioral: banks were 8 to 9 times m(philadelphiafed.org)t. (philadelphiafed.org) ### Why does that matter now? Because unrealized losses are not just an accounting curiosity when funding gets shaky. If deposits leave, a bank may need liquidity fast. Selling “underwater” securities then turns paper losses into real ones. The Philadelphia Fed paper also says banks reduced the interest-rate sensitivity of regulat(philadelphiafed.org)immediate without making it disappear economically. (philadelphiafed.org) ### Is the OCC warning about another banking crisis? Not directly. This is more subtle. The OCC is saying the classic indicators still look decent, but stress could now travel through more channels at once — funding, markets, vendors, fraud, cyber, and compliance. That is a nastier mix because these channels can reinforce each other. A liquidity squeeze is bad. A liquidity squeeze during a cyber outage or major fraud wave is worse. (occ.gov) ### Why do fintech links make this bigger? Because banks do not operate alone anymore. A lot of customer-facing finance now runs through shared processors, middleware, cloud infrastructure, and bank-fintech partnerships. The upside is speed and reach. The catch is concentration. If too many firms depend on the same operational rails, one failure can ri(occ.gov)w credit cycle. That is the backdrop for why regulators keep talking about resilience, not just solvency. (occ.treas.gov) ### Bottom line The story is not “banks are weak.” It is “banks may be more fragile than headline ratios suggest if stress shows up through operations and funding at the same time.” That is what the OCC flagged this week — and the Philadelphia Fed’s bond research helps explain why. (occ.gov)
