Categories Banking

OCC Debanking Report 2026: What It Means for Small Business

On October 14, 2026, the Office of the Comptroller of the Currency (OCC) released a debanking review that landed hard on small business owners. The OCC reported that all nine of the largest national banks it supervises had policies between 2020 and September 2025 that could restrict financial services based on customers’ political or religious views, or on their lawful business activities. If you run a business in crypto, firearms, fossil fuels, or any other politically talked-about industry, this report is about you. And even if you don’t, the rules that decide who keeps a bank account just changed.

Here’s the short version: the report confirmed that vague “reputation risk” policies gave bank staff wide room to cut off customers for non-financial reasons. A 2025 executive order had already told regulators to strip “reputation risk” out of bank exams. What the report did not do is fine anyone, order restitution, or guarantee your next application gets approved.

What the OCC’s October 2026 debanking report actually found

The review covered the nine largest national banks the OCC supervises: JPMorgan Chase, Bank of America, Citibank, Wells Fargo, U.S. Bank, Capital One, PNC Bank, TD Bank, and BMO Bank. Together, these banks hold a majority of U.S. commercial banking assets, so their policies set the tone for the whole market.

Reports put the review at nearly 100,000 complaints examined and roughly 420,000 pages of internal bank documents reviewed. The headline finding: every one of the nine banks had policies that required, encouraged, or otherwise influenced staff to deny or limit access to financial services because of customers’ political or religious views or lawful business activities.

Two details matter. First, the OCC reportedly did not claim that every policy resulted in a customer being denied services — a policy that could restrict access is not proof it was used against a specific customer. Second, the report imposed no fines or penalties. Reuters reported that the regulator criticized the banks but stopped short of sanctions, saying it may consider policy changes. In other words, this was a findings report, not a punishment.

The examples that made headlines

The OCC’s report included concrete cases, and one got repeated everywhere. In February 2021, a bank-owned payment processor — JPMorgan’s WePay, according to reports — closed a merchant’s account for selling pro-Trump merchandise. A legal business selling lawful merchandise lost its ability to take payments.

Reports also described restrictions affecting lawful businesses in firearms manufacturing, coal mining, oil and gas production, tobacco, detention facilities, and digital assets — sometimes justified by vague concerns like negative press, protests, or pressure from advocacy groups.

What “reputation risk” was, and why it caused this mess

To understand the report, you need to understand one phrase: reputation risk. For years, bank examiners and compliance teams treated “reputation risk” as a real category of risk — the risk that serving a controversial customer could damage the bank’s public standing. On paper, that sounds reasonable. In practice, it was a blank check.

Here’s how it reportedly played out. A bank’s policy might let staff weigh whether a customer’s business could attract negative publicity or upset advocacy groups. A compliance analyst could then label a firearms dealer, coal company, crypto exchange, or outspoken merchant a “reputation risk” — even if the customer was profitable, current, and fully compliant with the law.

The OCC’s conclusion, as reported, was that these rules lacked clear, objective standards. When the standard is “could this look bad?” instead of “does this customer pose a measurable financial or legal risk?”, almost any closure can be justified after the fact.

The August 2025 “fair banking” executive order: what it ordered

The OCC’s report did not come out of nowhere. It was ordered under President Donald Trump’s August 2025 executive order, “Guaranteeing Fair Banking for All Americans” — Executive Order 14331, signed August 7, 2025, according to published summaries of the order. KPMG’s analysis of the order lays out the same core directives: removing reputation risk from guidance, re-reviewing past closures, and addressing remediation.

The order set a policy against denying financial services because of protected beliefs, affiliations, or political views, and directed that banking decisions rest on objective, risk-based assessments of each customer. Its main instructions were:

  • Strip “reputation risk” out of supervision. Within 180 days, each federal banking regulator was directed to remove “reputation risk” — or any similar concept that could enable politicized or unlawful debanking — from guidance documents, manuals, and other regulatory materials.
  • Review banks for past and current debanking. Within 120 days, regulators had to review financial institutions to identify any past or current policies or practices that led to politicized or unlawful debanking, and take appropriate remedial action — which could include fines, consent decrees, or other discipline.
  • Review religion-based debanking specifically. Within 180 days, regulators had to review supervisory and complaint data for unlawful debanking based on religion, with referral to the Attorney General for civil action if a bank could not come into compliance under the Equal Credit Opportunity Act.
    For the full breakdown of the order’s directives, see KPMG’s analysis of the “fair banking” executive order.

  • Bring in the SBA. The Small Business Administration was directed to notify lenders in its loan guarantee program of the order’s requirements within 60 days. The SBA then ordered its network of more than 5,000 lenders to halt politicized debanking, try to reinstate affected customers, and report compliance.

What the report and the order actually change for your business

This is the part most coverage skips, so let me be blunt about it. The report and the order changed the rules of the game, not the outcome of your next application.

What changed

1. “Reputation risk” is no longer a legitimate reason on its own. Regulators moved to eliminate reputation risk from exam guidance. A bank can no longer lean on “this customer could look bad” as a freestanding justification in the way it reportedly could before. If your account is closed now, the bank should be able to point to something more concrete — financial risk, legal risk, compliance risk, or a documented business reason.

2. The biggest banks are now on the record. The OCC named names and published findings, creating a paper trail. If you complain about a closure at one of these nine banks, you can point to a federal report that found the bank’s policies were part of the problem.

3. Regulators are watching this specific issue. The OCC said it will consider supervisory and policy changes. Separately, the CFPB opened an investigation into consumer harm from debanking, according to reports.

What did NOT change

1. Banks can still close accounts for real financial reasons. Nothing in the report or the order forces a bank to keep an unprofitable, high-risk, or non-compliant customer. If your business poses genuine anti-money-laundering risk, has a pattern of fraud, can’t document its funds, or costs more to serve than it earns, a bank can still end the relationship. The order targets politicized debanking, not all debanking.

2. Banks still don’t have to explain themselves in detail. Deposit accounts in the U.S. are mostly at-will. A bank can generally end a customer relationship without cause, and the deposit agreement you signed usually says so. On top of that, the Bank Secrecy Act requires banks to file Suspicious Activity Reports on unusual activity — and prohibits “tipping off” a customer that one was filed. So if your closure is tied to a suspicious-activity flag, the bank legally cannot tell you that.

3. No automatic restitution. The OCC report did not order banks to pay anyone back or reinstate specific accounts. The SBA track did push reinstatement for SBA lenders, but for the nine big banks in the OCC report, there was no reported reinstatement order or compensation scheme.

What this means if you’re in a flagged industry

The industries named in the report’s coverage — crypto and digital assets, firearms and ammunition, oil and gas, coal, tobacco and e-cigarettes, detention facilities — should read the report as validation plus a warning. Validation, because a federal regulator confirmed the pattern you may have experienced firsthand. Warning, because validation is not protection.

  • Crypto and digital assets. The OCC report listed digital assets among the affected industries, and coverage described financial-crime considerations being cited for digital-asset restrictions. Crypto businesses face a double problem: they were politically flagged and they genuinely trigger heavier anti-money-laundering scrutiny. Even with reputation risk removed, a crypto business that can’t produce clean compliance documentation, clear source-of-funds records, and a coherent licensing story will still struggle to keep accounts. Fix the paperwork first.
  • Firearms. Lawful firearms manufacturing and retail were named in the report. If you were denied or closed, the report strengthens a complaint. But firearms businesses still get extra scrutiny from payment processors and banks with their own risk appetites. Having a second banking relationship — ideally with a bank or credit union that openly serves your industry — is more valuable than any complaint.
  • Fossil fuels, coal, and politically visible businesses. Energy companies were reportedly restricted based on shifting political attitudes. And if your brand is loudly political — merchandise, media, advocacy — the February 2021 WePay example is your cautionary tale. Your risk isn’t just your industry code. It’s your public profile. A bank that doesn’t want the headache of your controversy may still find a “business reason” to exit — that gray area, a political exit described as an ordinary commercial decision, is what critics say is hardest to police.

Why accounts still get closed (the legitimate reasons)

If you want to complain effectively, you need to know which closures are defensible and which aren’t. Banks close accounts for a long list of ordinary reasons, and most of them have nothing to do with politics:

  • Suspected fraud or money laundering. Banks must run anti-money-laundering programs, and they face massive fines if they miss real crime. When in doubt, they exit. If your transactions look like layering, structuring, or fraud — even if they have an innocent explanation — expect a closure, possibly without a detailed reason.
  • Inactivity or low profitability. If you don’t use an account or keep a tiny balance, a bank may close it because it costs more to maintain than it earns. This is common and legal.
  • Repeated overdrafts or bounced payments. A pattern of overdrafts, returned checks, or failed payments signals risk. Banks monitor this constantly.
  • Incomplete documentation. If you ignore a request for beneficial-owner info, updated ID, business licenses, or source-of-funds documentation, your account can be suspended or closed. Banks are required to know their customers, and silence from you reads as risk.
  • A bad banking-history record. If a prior account was closed for cause, that history may show up when another bank checks databases like ChexSystems, which some banks use to evaluate new customers. One closure can make the next application harder, which is why the first closure is the one to fight hardest.

What to do if your bank closes your account

Act fast, in this order. Speed matters because payroll, vendor payments, and direct deposits don’t pause while you argue.

Step 1: Contact the bank and get everything in writing

Call, then follow up in writing. Ask for the specific reason, the timeline for returning your funds, and the procedure for collecting your balance. Note the date, every person you speak with, and exactly what they say. You are building a record, and a record is what turns a grievance into a complaint that goes somewhere.

Step 2: Protect your cash flow the same day

Reroute direct deposits to a backup account. Move or cancel automatic payments linked to the closed account. Tell anyone who owes you money to pay by check or to your backup account until the dust settles. If your balance is being returned by check, expect a wait — banks often mail a cashier’s check rather than wiring funds after a closure. Cover payroll, rent, and vendor payments from another account or a business credit card while you wait.

Step 3: Settle any negative balance, then file a complaint

If the account was closed with a negative balance, find out how to settle it. An unpaid balance can be sent to collections and hurt your ability to open a new account. Then, if the bank’s explanation is unsatisfactory, file a formal complaint with the right regulator:

  • OCC Customer Assistance Group. If your bank is a national bank — and all nine banks in the OCC report are — you can submit a complaint to the OCC’s Customer Assistance Group. Regulators have directed affected customers to helpwithmybank.gov for complaints and assistance regarding unjustified account closures, according to reports.
  • CFPB. For consumer financial products like checking or savings accounts, you can file a complaint with the Consumer Financial Protection Bureau at consumerfinance.gov/complaint or by calling 1-855-411-CFPB (2372). The CFPB routes your complaint to the company and tracks the response, typically within 15 to 60 days.
  • State attorney general. Your state AG’s office accepts consumer complaints about banks and may investigate or log the complaint. This matters more if your state has its own fair-banking law — Florida, for example, has reportedly passed its own debanking law (HB 989).

When you write the complaint, be specific: what product was involved, what happened (with dates, dollar amounts, and actions both sides took), and what fair resolution you want — reinstatement, a written explanation, or at minimum a documented record. Attach statements, letters, and your call notes.

Step 4: Ask the bank to reconsider, and open a new account fast

Send a formal written request for reconsideration — polite, factual, with your documentation attached. Ask for a review by a supervisor or a different team. If the closure was a compliance-algorithm misfire, this is how mistakes get fixed. If it wasn’t, the denial becomes part of your record for the regulator complaint.

Don’t wait for the complaint to resolve before banking again. Your business needs an account now. Consider a credit union, a community bank, or a second-chance account if your banking history is making approvals hard. If you’re opening a new account anyway, current bank bonus offers can offset some of the switching hassle. If you are in a flagged industry, look for banks and credit unions that openly serve your sector — industry associations and peer business owners are often the best source for names. For a fuller walkthrough of the closure playbook, see Bankrate’s guide on what to do when your bank closes your account.

How to make your business harder to debank

You can’t control a bank’s politics. You can control how easy you are to keep as a customer. Here’s what actually helps:

Keep two banking relationships. This is the single most important move. A primary operating account plus a backup account at a different institution — ideally a different type of institution, like a credit union — means one closure is an inconvenience, not a crisis. Keep the backup account active with a small balance and occasional transactions so it’s ready when you need it.

Keep your documentation boring and complete. Respond promptly to every documentation request: beneficial-owner info, updated ID, business licenses, tax forms, source-of-funds explanations. Banks close accounts over unanswered paperwork more often than over politics. A business with complete, current paperwork is simply harder to exit on a pretext.

Separate your money flows. Don’t mix personal and business funds. Don’t run unrelated side businesses through the same account. Clean, explainable money flows make compliance reviews short and uneventful. If your business handles crypto, keep those flows in a dedicated account with clear records, not tangled into your operating account.

Document your income and contracts. Keep copies of major contracts, invoices, and payment records. If a bank questions a large wire or an unusual deposit, you want to answer in one email with attachments — not scramble for a week. The same discipline that keeps your books clean for tax season keeps them clean for a bank review, and the record-keeping habits behind things like AdSense approval — verified identity, consistent business info, documented income sources — are the same habits that make a bank compliance review go smoothly.

Build a relationship with a human banker, and have a payments backup. A business banker who knows your name and your transaction patterns is far more likely to flag a problem early — and advocate for you internally — than an algorithm is. And if you rely on one payment processor, a closure there can freeze revenue even if your bank account is fine. Keep a second processor ready, and test it once so you’re not debugging it during a crisis.

The bottom line

The OCC’s October 2026 debanking report confirmed something a lot of small business owners already suspected: the biggest U.S. banks had policies that let non-financial judgments decide who kept a bank account. The 2025 fair-banking executive order started pulling “reputation risk” out of the system, and the report is the evidence that the cleanup was needed.

Your move is practical, not political. Keep two banking relationships, keep your paperwork spotless, and know how to file a complaint with the OCC and the CFPB before you need to. If your account is closed, act the same day: protect your cash flow, document everything, complain in writing, and open a new account somewhere else.

This article is general information about banking policy, not professional legal, financial, or tax advice. Rules, bank policies, and complaint procedures change — check current terms with your bank and the relevant regulator before acting on anything here.

Frequently Asked Questions

What is debanking?

Debanking is when a bank denies you an account, restricts your services, or closes your existing account — not because you broke the law or defaulted, but because the bank decided it no longer wants your business. Sometimes the reason is legitimate, like suspected fraud or unprofitable activity. The OCC’s October 2026 report focused on a different kind: closures driven by political or religious views, or by a customer’s lawful business activity, under vague “reputation risk” policies.

Which banks were named in the OCC’s October 2026 debanking report?

The OCC’s review covered the nine largest national banks it supervises: JPMorgan Chase, Bank of America, Citibank, Wells Fargo, U.S. Bank, Capital One, PNC Bank, TD Bank, and BMO Bank. All nine had policies between 2020 and September 2025 that could restrict services based on political or religious views or lawful business activities. The findings did not establish that every policy resulted in a denial, and no fines were imposed.

Does the “fair banking” executive order guarantee I can keep my bank account?

No. The August 2025 executive order, “Guaranteeing Fair Banking for All Americans,” directed regulators to remove “reputation risk” from bank supervision and to review past debanking — but it does not force banks to keep any specific customer. Banks can still close accounts for genuine financial, legal, or compliance reasons. The order’s real effect is on the reasons banks may use: a closure should now rest on objective, risk-based criteria, not on a customer’s politics, religion, or lawful industry.

What should I do first if my business bank account is closed?

Contact the bank immediately and ask for the specific reason, the timeline for returning your funds, and the procedure for collecting your balance — then follow up in writing and keep notes on every conversation. The same day, reroute direct deposits and automatic payments to a backup account, settle any negative balance, and start a new account elsewhere if you don’t already have one. If the bank’s explanation is unsatisfactory, file a formal complaint with the OCC’s Customer Assistance Group (for national banks) and/or the CFPB at consumerfinance.gov/complaint.

Can I file a complaint if I think I was debanked for political reasons?

Yes. For national banks, file with the OCC’s Customer Assistance Group — regulators have pointed affected customers to helpwithmybank.gov. You can also file with the CFPB and your state attorney general. Be specific: include dates, dollar amounts, the bank’s stated reason, and what fair resolution you want. Your complaint also feeds the CFPB’s reported separate investigation into debanking harm.

How can a small business protect itself from being debanked?

Keep two banking relationships at different institutions, keep all documentation complete and current, separate business and personal funds, document large transactions, and maintain a backup payment processor. Build a relationship with a human business banker. If you’re in a flagged industry like crypto, firearms, or fossil fuels, prioritize banks or credit unions that openly serve your sector.

Leave a Reply

Your email address will not be published. Required fields are marked *