OCCGeneralAugust 27, 2026

OCC Proposes Two-Tier Framework for Violations: Substantive vs. Technical

The OCC is proposing to split regulatory violations into 'substantive' and 'technical' categories to better calibrate supervisory responses, including when Matters Requiring Attention (MRAs) are issued. For banks and trust companies engaged in crypto or fintech activities, this could affect how examiners escalate findings related to BSA/AML, KYC, or digital asset compliance gaps. Comment period is open, giving institutions an opportunity to shape the final framework.

What to do

Review the proposed rule and assess how the substantive vs. technical violation distinction could affect your institution's existing MRA history and ongoing compliance programs; consider submitting a comment letter.

Who this affects

Bank / Credit UnionTrust Company

Does this affect your program?

Pick your institution type for an instant read on whether you're in scope — then see exactly which sections of your own policies this changes.

Source

Read the official publication

This radar entry is educational and does not constitute legal advice. Summaries are AI-assisted and grounded in the linked official source; always verify against the primary source and consult qualified legal counsel for jurisdiction-specific guidance.

Related developments

SEC

SEC Proposes Modernized Rules for Registered Transfer Agents

The SEC is proposing to overhaul the regulatory framework governing registered transfer agents, including new rules, amendments to existing rules, and updates to registration and reporting forms (Form TA-1 and Form TA-2). Crypto and fintech firms that act as — or rely on — transfer agents for digital securities should pay close attention, as modernized rules could reshape recordkeeping, operational, and compliance obligations in that space. Trust companies and broker-dealers involved in securities processing may also face updated requirements.

OCC

Regulators Clarify What Banks Can (and Can't) Tell Customers About SARs

Five federal regulators — OCC, Federal Reserve, FDIC, FinCEN, and NCUA — jointly clarified the rules around SAR confidentiality when institutions communicate with customers about potentially fraudulent transactions. The statement addresses a persistent compliance tension: institutions must protect SAR confidentiality (including not 'tipping off' subjects) while still being able to warn or question customers about suspicious activity without inadvertently disclosing a SAR has been filed. Compliance officers should review customer-facing fraud communication workflows to ensure staff are not crossing the tipping-off line.

OCC

OCC Revises Enforcement Action and MRA Policies and Procedures

The OCC has released updated internal policy manuals governing how bank enforcement actions and Matters Requiring Attention (MRAs) are issued and managed. These revisions signal a shift toward greater consistency and transparency in how the OCC responds to supervisory findings, which is directly relevant to banks and trust companies navigating crypto, BSA/AML, and fintech-related examination findings. Compliance officers should review the updated PPMs to anticipate examiner expectations.

OCC

OCC Announces Clearer, More Consistent Enforcement and Supervisory Standards

The OCC announced coordinated actions to improve transparency in how it issues MRAs and enforcement actions, including two revised policy manuals and a proposed rule change to the violations framework. For banks and trust companies—including those offering crypto custody or digital asset services—this means greater predictability in how examination findings will be escalated. Compliance teams should treat this as an opportunity to reassess their internal remediation and examiner-relations processes.

Stay ahead of every rule change

PliOS monitors FinCEN, OCC, OFAC, the SEC and CFTC and tells you which of your policies each new rule affects — with the edit already drafted. Start free.

Run My Free Assessment