InfoBytes Blog
Filter
Subscribe to our InfoBytes Blog weekly newsletter and other publications for news affecting the financial services industry.
Agencies warn banks of crypto-asset risks
On January 3, the FDIC, Federal Reserve Board, and OCC issued a joint interagency statement highlighting key risks banks should consider when choosing to engage in cryptocurrency-related services. Risks flagged by the agencies include: (i) the possibility of fraud and scams among crypto-asset sector participants; (ii) legal uncertainties related to custody practices, redemptions, and ownership rights; (iii) misleading disclosures made by crypto firms that may be unfair, deceptive, or abusive; (iv) volatility in crypto-asset markets, including the susceptibility of stablecoins to run risk, which could impact deposit flows; (v) contagion risks resulting from interconnections among crypto-asset participants that may present concentration risks for banks with exposure to the crypto-asset sector; (vi) lack of maturity in risk management and governance practices within the crypto-asset sector; and (vii) elevated risks associated with open, public, and/or decentralized networks.
The agencies commented that while they will continue to take a cautious approach to current or proposed crypto-asset-related activities (and are not prohibiting nor discouraging banks from providing crypto services to customers, as permitted by law or regulation), they currently “believe that issuing or holding as principal crypto-assets that are issued, stored, or transferred on an open, public, and/or decentralized network, or similar system is highly likely to be inconsistent with safe-and-sound banking practices.” Moreover, the agencies expressed “significant safety and soundness concerns with business models that are concentrated in crypto-asset-related activities or have concentrated exposures to the crypto-asset sector.” Agencies have developed processes for banks to engage in robust supervisory discussions with their supervisory office about any proposed or existing crypto-asset-related activities, the agencies advised, adding that before launching any activities, banks should take appropriate risk management measures and assess whether the activity can be performed in a safe and sound manner, is legally permissible, and complies with applicable laws and regulations. Additional statements will be released in the future by the agencies.
“The events of the past year have been marked by significant volatility and the exposure of vulnerabilities in the crypto-asset sector,” the agencies said as they stressed the importance of keeping crypto-asset risks that cannot be mitigated or controlled from migrating to the banking system.
The OCC separately issued a bulletin advising supervised banks to follow processes outlined in OCC Interpretive Letter 1179 (covered by InfoBytes here) before engaging in certain crypto-asset-related activities.
NCUA proposal looks to promote CU-fintech partnerships
On December 15, the NCUA issued a proposed rule seeking input on amendments to the agency’s regulations on the purchase of loan participations and the purchase, sale, and pledge of eligible obligations and other loans, including notes of liquidating credit unions. Among other things, the proposed rule would remove certain prescriptive limitations and other qualifying requirements to provide federal credit unions with additional flexibility to purchase eligible obligations of their members and engage with advanced technologies and other opportunities presented by fintechs. Improved flexibility and individual autonomy will allow federal credit unions “to establish their own risk tolerance limits and governance policies for these activities, while codifying due diligence, risk assessment, compliance and other management processes that are consistent with the Board’s long-standing expectations for safe, sound, fair and affordable lending practices,” the NCUA said. Comments on the proposed rule are due 60 days after publication in the Federal Register.
“As I have emphasized before, credit unions should recognize and harness the potential opportunities fintechs may offer them,” NCUA Chairman Todd Harper said. “However, we must also acknowledge the potential risks they pose to credit unions, their members, and the system and develop appropriate guardrails. This proposed rule strikes that balance. It provides flexibility, safety, and tailored relief to credit unions while fostering greater innovation.”
FSOC annual report highlights digital asset, cybersecurity, and climate risks
On December 16, the Financial Stability Oversight Council (FSOC or the Council) released its 2022 annual report. The report reviewed financial market developments, identified emerging risks, and offered recommendations to mitigate threats and enhance financial stability. The report noted that “amid heightened geopolitical and economic shocks and inflation, risks to the U.S. economy and financial stability have increased even as the financial system has exhibited resilience.” The report also noted that significant unaddressed vulnerabilities could potentially disrupt institutions’ ability to provide critical financial services, including payment clearings, liquidity provisions, and credit availability to support economic activity. FSOC identified 14 specific financial vulnerabilities and described mitigation measures. Highlights include:
- Nonbank financial intermediation. FSOC expressed support for initiatives taken by the SEC and other agencies to address investment fund risks. The Council encouraged banking agencies to continue monitoring banks’ exposure to nonbank financial institutions, including reviewing how banks manage their exposure to leverage in the nonbank financial sector.
- Digital assets. FSOC emphasized the importance of enforcing existing rules and regulations applicable to the crypto-asset ecosystem, but commented that there are gaps in the regulation of digital asset activities. The Council recommended that legislation be enacted to grant rulemaking authority to the federal banking agencies over crypto-assets that are not securities. The Council said that regulatory arbitrage needs to be addressed as crypto-asset entities offering services similar to those offered by traditional financial institutions do not have to comply with a consistent or comprehensive regulatory framework. FSOC further recommended that “Council members continue to build capacities related to data and the analysis, monitoring, supervision, and regulation of digital asset activities.”
- Climate-related financial risks. FSOC recommended that state and federal agencies should continue to work to advance appropriately tailored supervisory expectations for regulated entities’ climate-related financial risk management practices. The Council encouraged federal banking agencies “to continue to promote consistent, comparable, and decision-useful disclosures that allow investors and financial institutions to consider climate-related financial risks in their investment and lending decisions.”
- Treasury market resilience. FSOC recommended that member agencies review Treasury’s market structure and liquidity challenges, and continue to consider policies “for improving data quality and availability, bolstering the resilience of market intermediation, evaluating expanded central clearing, and enhancing trading venue transparency and oversight.”
- Cybersecurity. FSOC stated it supports partnerships between state and federal agencies and private firms to assess cyber vulnerabilities and improve cyber resilience. Acknowledging the significant strides made by member agencies this year to improve data collection for managing cyber risk, the Council encouraged agencies to continue gathering any additional information needed to monitor and assess cyber-related financial stability risks.
- LIBOR transition. FSOC recommended that firms should “take advantage of any existing contractual terms or opportunities for renegotiation to transition their remaining legacy LIBOR contracts before the publication of USD LIBOR ends.” The Council emphasized that derivatives and capital markets should continue transitioning to the Secured Overnight financing Rate.
CFPB Director Rohit Chopra issued a statement following the report’s release, flagging risks posed by the financial sector’s growing reliance on big tech cloud service providers. “Financial institutions are looking to move more data and core services to the cloud in coming years,” Chopra said. “The operational resilience of these large technology companies could soon have financial stability implications. A material disruption could one day freeze parts of the payments infrastructure or grind other critical services to a halt.” Chopra also commented that FSOC should determine next year whether to grant the agency regulatory authority over stablecoin activities under Dodd-Frank. He noted that “[t]hrough the stablecoin inquiry, it has become clear that nonbank peer-to-peer payments firms serving millions of American consumers could pose similar financial stability risks” as these “funds may not be protected by deposit insurance and the failure of such a firm could lead to millions of American consumers becoming unsecured creditors of the bankruptcy estate, similar to the experience with [a now recently collapsed crypto exchange].”
Senate Banking holds hearing on crypto
On December 14, the Senate Banking Committee held a hearing to hear from witnesses about how customer and investor protections should apply to cryptocurrencies, among other topics. Committee Chairman Sherrod Brown (D-OH) opened the hearing by emphasizing that it is the committee’s job “to keep learning more about the collapses” of crypto firms, and that there should be collaboration with regulators to put consumers—not the crypto industry—first. Brown warned that crypto has “ushered in a whole new dimension of fraud and threats to national security.” Senator Elizabeth Warren (D-MA) expressed similar concerns, stating that the “dark underbelly of crypto is its critical link to financing terrorism and human trafficking and drug dealing and helping rogue nations like North Korea and Iran.” Warren went on to describe her bipartisan bill, the Digital Asset Anti-Money Laundering Act, noting that it “requires crypto to follow the same money laundering rules” that every bank and every broker are subjected to. Senator Cynthia Lummis (R-WY) also advocated for the regulation of digital asset trading, and providing consumers with adequate bankruptcy protection, disclosures, and stable coin regulation. Ranking Member Pat Toomey (R-PA) expressed openness to the possibility of regulations tailored to crypto, including more disclosure from issuers and oversight of secondary market trading. Toomey argued against pausing cryptocurrency before legislation. Additionally, some witnesses discussed drafting potential cryptocurrency legislation. One witness told the committee that when crypto assets are made from thin air, they can be “used to obscure financial realities.” Another witness said cryptocurrencies are “at best a vehicle for speculation, an exercise in a zero-sum game of chance, much like online poker,” but, “at worst, they are an instrument of crime.”
OCC warns of crypto-asset and cybersecurity risks facing the federal banking system
On December 8, the OCC released its Semiannual Risk Perspective for Fall 2022, which reports on key risks threatening the safety and soundness of national banks, federal savings associations, and federal branches and agencies. The OCC reported that, in the aggregate, banks “remain well capitalized” and have “ample liquidity and sound credit quality, although macroeconomic headwinds are a concern.” The OCC highlighted interest rate, operational, compliance, and credit risks as key risk themes. Observations include: (i) the rising rate environment has adversely impacted bank investment portfolios; (ii) operational risk, including evolving cyber risk, is elevated, with “threat actors continuing to target the financial services industry with ransomware and other attacks”; (iii) compliance risk remains heightened as banks navigate significant regulatory changes; and (iv) credit risk in commercial and retail loan portfolios remains moderate and demonstrates resiliency, “but signs of potential weakening in some segments warrant careful monitoring.”
The report discussed emerging risks related to innovation and the adoption of new products and services, including crypto-assets. Highlighting risks arising from banks’ expansion into digital offerings and the “heightened” threat of fraud risk associated with innovative peer-to-peer payment platforms, the OCC noted that banks should be “clearly communicating risks, educating customers on potential scams, and enhancing internal fraud monitoring capabilities” to mitigate threats and protect consumers. The report noted that “[b]anks may require additional or different controls to safeguard against fraud, financial crimes, violations of Bank Secrecy Act, anti-money laundering, and Office of Foreign Assets Control (BSA/AML/OFAC) requirements, and consumer protection or fair lending laws, or operational errors,” and should “maintain comprehensive operational resilience frameworks commensurate with the size and complexity of products, services, and operations being supported.”
The OCC reiterated the importance of taking a “careful and cautious approach” toward banks’ engagement with the crypto-related firms. Recent events in the crypto market have also “revealed a high degree of interconnectedness between certain crypto participants through a variety of opaque lending and investing arrangements,” which has led to “a high risk of contagion among connected parties.” The report noted that national banks and federal savings associations interested in engaging in crypto-asset activities should discuss the activities with their supervisory office before engaging the activities. Some activities may require a supervisory non-objection under OCC Interpretive Letter #1179.
The report cited risks related to cybersecurity and partnerships with fintech and other third parties. The OCC said it is applying a “heightened supervisory focus” to its scrutiny of banks’ oversight of third-party relationships and flagged an upward trend in ransomware attacks targeting banks’ service providers and other third parties. Partnering with fintechs to support operations or provide opportunities for customers to enter the digital asset market can “increase the risk of unfair or deceptive acts or practices because of the coordination, communication, and disclosure challenges involved in these partnerships,” the report said, adding that “[u]nclear or arbitrary partnership agreements may result in implementation breakdowns, untimely resolution of issues, or failure to deliver products or services as intended, and may result in significant customer remediation.” The OCC cautioned that banks must “conduct appropriate due diligence” before entering a partnership with a third party. “The scope and depth of due diligence, as well as ongoing monitoring and oversight of the third party’s performance, should be commensurate with the nature and criticality of the proposed activity.”
The report also discussed forthcoming climate risk management guidelines applicable to banks with more than $100 billion in total consolidated assets. As previously covered by InfoBytes, the OCC, Federal Reserve Board, and the FDIC announced they intend to issue final interagency guidance to promote consistency.
Brown urges Yellen to coordinate efforts to combat crypto risks
On November 30, Senator Sherrod Brown (D-OH) sent a letter urging Treasury Secretary Janet Yellen to join forces on drafting legislation that will “create authorities for regulators to have visibility into, and otherwise supervise, the activities of the affiliates and subsidiaries of crypto asset entities.” Recognizing the “troubling risks” within the crypto asset markets and pointing to the recent collapse of a major crypto exchange, Brown suggested that Treasury develop a broad framework for all crypto assets to ensure risks “are contained and do not spillover into traditional financial markets and institutions.” Copying the heads of the SEC, CFTC, Federal Reserve Board, NCUA, CFPB, FDIC, and OCC, Brown encouraged the agencies to enforce existing laws as well as supervisory and regulatory authorities in order to “take on the significant noncompliance with current law among crypto asset firms and minimize, if not eliminate, the opportunities for regulatory arbitrage.” Brown further asked the regulators to “assess the impact of vertical integration in crypto asset markets,” and to coordinate efforts to improve entity and crypto-asset disclosures, market integrity, and transparency.
Senators demand answers on collapsed cryptocurrency exchange; NYDFS seeks tougher crypto approach
On November 16, Senator Elizabeth Warren (MA-D) and Senator Richard Durbin (IL-D) sent a letter to the ex-CEO and his successor of a cryptocurrency exchange that filed for bankruptcy. In the letter, the senators requested a series of files from the cryptocurrency exchange, including copies of internal policies and procedures regarding the relationship between the firm and its affiliated crypto hedge fund. The senators stated that the cryptocurrency exchange’s customers and Americans “fear that they will never get back the assets they trusted to [the cryptocurrency exchange] and its subsidiaries.” Additionally, the senators argued that “the apparent lack of due diligence by venture capital and other big investment funds eager to get rich off crypto, and the risk of broader contagion across the crypto market that could multiply retail investors’ losses, ‘call into question the promise of the industry.’” The senators emphasized that “the public is owed a complete and transparent accounting of the business practices and financial activities leading up to and following the cryptocurrency lending firm's collapse and the loss of billions of dollars of customer funds.” Among other things, the senators asked the cryptocurrency exchange to provide requested information by November 28, including: (i) complete copies of all the firm’s and its subsidiaries’ balance sheets, from 2019 to the present; (ii) an explanation of how “a poor internal labeling of bank-related accounts” resulted in the firm’s liquidity crisis; (iii) a list of all the firm’s transfers to its affiliated crypto hedge fund; (iv) copies of all written policies and procedures regarding the relationship between the firm and its affiliated crypto hedge fund; and (v) an explanation of the $1.7 billion in the firm’s customer funds that were allegedly reported missing.
The same day, NYDFS Superintendent Adrienne Harris participated in a “fireside chat” before the Brooking Institute’s event, Digital asset regulation: The state perspective - Effective regulatory design and implementation for virtual currency. During the chat, Harris expressed her support for a national framework similar to what New York has because she believes that “it is proving itself to be a very robust and sustainable regime.” Harris also discussed NYDFS priorities regarding digital assets for the future, stating that crypto companies can expect more guidance on a number of key regulatory issues. Specifically, Harris disclosed that NYDFS will “have more to say on capitalization,” and “on consumer protection, disclosures, advertising … [and] complaints, making sure these companies have an easy way for consumers to complain.” She also warned that NYDFS will “bolster and broaden” its authority, adding that there is “lots of work for us to do to make clear the expectations that we have already, and to make sure that the things we have on the books equip us well to keep up with this marketplace.”
Senators Warren and Sheldon Whitehouse (D-RI) also sent a letter to the DOJ asking that the former CEO and any complicit company executives be held personally accountability for wrongdoing following the cryptocurrency exchange’s collapse.
On December 13, the House Financial Services Committee will hold a hearing to discuss the cryptocurrency exchange’s collapse and the possible implications for other digital asset companies.
FINRA requests information on crypto asset retail communications
Recently, FINRA announced that it is conducting a targeted exam of firm practices regarding retail communications on crypto asset products and services for the time period of July 1, 2022 through September 30, 2022. In the targeted exam letters, FINRA requested, among other things, that firms or their affiliates provide: (i) all retail communications on the firm’s behalf that refer to, relate to, or concern a crypto asset or service involving the transaction or holding of a crypto asset; (ii) written supervisory procedures concerning the review, approval, record keeping, and dissemination of communications; and (iii) any compliance policies, manuals, training materials, compliance bulletins, and any other written guidance.
Treasury recommends closer supervision of fintech-bank partnerships
On November 16, the U.S. Treasury Department, in consultation with the White House Competition Council, released a report entitled Assessing Impacts of New Entrant Non-bank Firms on Competition in Consumer Finance Markets. The report is a product of President Biden’s July 2021 Executive Order, Promoting Competition in the American Economy, (covered by InfoBytes here), which, among other things, ordered Treasury to submit a report within 270 days on the effects on competition of large technology and other non-bank companies’ entry into the financial services space. Assessing Impacts of New Entrant Non-bank Firms on Competition in Consumer Finance Markets is the final report in a series of reports that assesses competition in various aspects of the economy. Among other things, the report found that while concentration among federally insured banks is increasing, new entrant non-bank firms, specifically “fintech” firms, are adding significantly to the number of firms and business models competing in consumer finance markets and appear to be contributing to competitive pressure. In addition to enabling new capabilities, fintech firms are also creating new risks to consumer protection and market integrity, according to the report. The report noted that non-bank firms could “pose risks by engaging in harmful regulatory arbitrage, conducting activities in a manner that inappropriately sidesteps safety and soundness and consumer protection law requirements applicable to an [insured depository institution].”
The report also noted that new entrant non-bank firms or their offerings may pose risks of reliability or fraud issues, in addition to data privacy risks and the potential for new forms of surveillance and discrimination. The report provided recommendations for regulators to encourage fair and responsible competition that benefits consumers and their financial well-being, including: (i) addressing market integrity and safety and soundness concerns by providing a clear and consistently applied supervisory framework for bank-fintech relationships; (ii) protecting consumers by robustly supervising bank-fintech lending relationships for compliance with consumer protection laws and their impact on consumers’ financial well-being; and (iii) encouraging consumer-beneficial innovation by supporting innovations in consumer credit underwriting designed to increase credit visibility, reduce bias, and prudently expand credit to underserved consumers.
Yellen cites crypto market risks
On November 16, Treasury Secretary Janet Yellen issued a statement addressing recent crypto market developments. “The recent failure of a major cryptocurrency exchange and the unfortunate impact that has resulted for holders and investors of crypto assets demonstrate the need for more effective oversight of cryptocurrency markets,” Yellen said, stressing that existing regulations must be rigorously enforced against those who operate in the crypto-asset space. Acknowledging recent actions taken by federal regulators to address crypto risks in response to President Biden’s Executive Order on Digital Assets (covered by InfoBytes here), Yellen cautioned that it is imperative for the federal government, including Congress, to move quickly to address regulatory gaps in this space. She warned that while spillovers from recent events in the crypto markets “have been limited,” the interconnections between the traditional financial system and the crypto markets “could raise broader financial stability concerns.”