Skip to content
FinObservatory

Supervisory discipline

Trace formal supervisory actions against US banks

The 4,266 formal enforcement actions against supervised institutions carried in the Federal Reserve's and the Office of the Comptroller of the Currency's own machine-readable exports, 1987 to 2026. These are public supervisory records, not verdicts of misconduct: a written agreement or a cease-and-desist order is a supervisory tool, and only an order that says so is a finding against anyone. Actions against named individuals are excluded entirely; this page is institution-level.

4,266
Actions (institution-level)
1987–2026
1,559
Federal Reserve
state member banks, holdcos
2,707
OCC
national banks, thrifts
$16.87B
Penalty / restitution $
627 actions with a $ figure

Data as of Jul 18, 2026 (retrieved from each regulator; the registers update continuously)

US bank supervision

Bank enforcement peaked at 493 institution actions in 2010.

Annual counts of US institution-level enforcement actions issued by the Federal Reserve and OCC, 1987 to 2026, stacked by harmonized action category. Two waves stand out: the early-1990s cleanup and the larger post-crisis crest. Formal-agreement and cease-and-desist volume drove both.
Cease and DesistCivil Money PenaltyWritten Agreement / Formal AgreementPrompt Corrective ActionSection 19 / removal-of-prohibitionOther formal action
0100200300400199019952000200520102015202020252026
Institution-level actions only. Harmonized categories; each regulator's own raw labels are in the table below. The FDIC is excluded because it provides no machine-readable export.

Source: Federal Reserve enforcement actions (CSV) | OCC Enforcement Action Search Methodology

US bank supervision

Both regulators' action counts surged after the financial crisis

Annual counts of US institution-level enforcement actions over the same full record, split by issuing regulator. The OCC covers national banks and federal thrifts; the Federal Reserve covers state member banks and holding companies.
Federal ReserveOCC
0100200300400199019952000200520102015202020252026
The regulators supervise different institutions, so their counts are not a like-for-like comparison of strictness. The FDIC-supervised universe is absent.

Source: Federal Reserve enforcement actions (CSV) | OCC Enforcement Action Search Methodology

Termination dates on file

A missing termination date is a record-coverage flag, not a claim that an action remains in force. Civil money penalties are one-off assessments, and other actions can have an unrecorded termination. Of the 4,266 institution actions on file, 814 carry no termination date and 3,452 carry a recorded termination date.

814
No termination on file
3,452
Terminated
1,961 (46%)
Matched to an FDIC cert

Penalty dollars, where machine-readable

Dollar figures are read from the OCC's Amount field and, for the Fed, parsed from the action text where a clean figure appears. Coverage is partial: 627 of 4,266 actions carry a machine-readable amount, and where one order names several affiliated banks the export repeats the full amount on each named institution, so a year total can count a single penalty more than once. The largest years are 2013–2015, the post-crisis settlement era.

YearPenalty / restitution totalActions with a $ figure
2013$2.97B45
2014$2.93B40
2015$2.32B34
2012$1.74B22
2024$1.29B5
2020$1.08B14
2018$949.8M24
2017$833.6M26

Eight largest years by disclosed dollar amount, of 37 years with any machine-readable figure.

The regulators’ own action types

The harmonized categories above collapse each regulator’s own labels. Here are the raw labels as issued, most frequent first.

RegulatorAction type (as issued)Harmonized categoryCount
OCCFormal AgreementWritten Agreement / Formal Agreement1,278
Federal ReserveWritten AgreementWritten Agreement / Formal Agreement944
OCCCease-and-Desist Order (C&D) or Personal Cease-and-Desist Order (PC&D)Cease and Desist875
OCCCivil Money Penalty (CMP)Civil Money Penalty376
Federal ReserveCease and Desist OrderCease and Desist241
Federal ReservePrompt Corrective ActionPrompt Corrective Action62
OCCC&D or PC&D Requiring RestitutionCease and Desist56
OCCPrompt Corrective Action (PCA) DirectivePrompt Corrective Action48
Federal ReserveCivil Money PenaltyCivil Money Penalty43
OCCSecurities Enforcement ActionOther formal action41
OCCCapital DirectiveCease and Desist12
OCCGLBA AgreementWritten Agreement / Formal Agreement12
Federal ReserveAmendment to 4/13/2011 Order to Cease and DesistCease and Desist9
Federal ReserveCivil Money Penalty $50,000Civil Money Penalty9

What each regulator says

Federal Reserve

“Generally, the Federal Reserve takes formal enforcement actions against the above entities and individuals for violations of laws, rules, or regulations, unsafe or unsound practices, breaches of fiduciary duty, and violations of final orders. Formal enforcement actions include cease and desist orders, written agreements, prompt corrective action directives, removal and prohibition orders, and orders assessing civil money penalties. Since August 1989, the Federal Reserve has made all final enforcement orders public in accordance with the Financial Institutions Reform, Recovery, and Enforcement Act of 1989; since November 1990, it has made written agreements public.”

Federal Reserve, About Enforcement Actions →

OCC

“The Office of the Comptroller of the Currency expressly disclaims any responsibility for the acts of any individual or entity subject to an enforcement action, whether or not that individual or entity appears on these lists. These lists are NOT guaranteed to be comprehensive.”

The OCC also notes that prohibition notifications issued before 23 December 2022 no longer appear, following the Fair Hiring in Banking Act’s amendment of 12 U.S.C. § 1829, and that subject-matter tags exist only for actions issued since 2012.

OCC Enforcement Action Search →

Why the FDIC is not here

The FDIC supervises state non-member banks and publishes its Enforcement Decisions and Orders through a search site (orders.fdic.gov). That site is a Salesforce Lightning “EDOS” guest community whose results are served only through authenticated application actions: an unauthenticated automated client is told “Guest user access is not allowed.” There is no documented bulk CSV or XLSX, and the FDIC BankFind Suite REST API family (institutions, financials, history, locations, summary of deposits, demographics, failures, risk view) carries no enforcement endpoint. Rather than partially scrape it or invent figures, the FDIC is left out and the gap is recorded. It will be added if a clean machine-readable route appears.

Source: FDIC Enforcement Decisions and Orders (search only) No machine-readable export at retrieval time; documented in data/raw/enforcement/SOURCE.md. Methodology

Reading this register

  • These are the issuing regulators’ own public records, reproduced as issued. FinObservatory adds no misconduct score, ranking, or editorial label.
  • Institution identity is matched to an FDIC certificate only by an exact normalized name-and-state key that is unique in the FDIC registry, so 46% of actions carry a cert and the rest do not. A name-based match is not a legal identification.
  • Coverage is bounded by what each regulator publishes: the OCC’s list is not guaranteed comprehensive and drops certain older prohibition notices, and neither register carries the FDIC-supervised banks. Read this as most of the federal bank-supervision record, not all of it.
  • This is reference information, not legal, compliance, or investment advice. See the methodology for sources, the individuals-exclusion rule, the join method and match rate, and license notes.