Skip to Main Content

insightsarticles

2026 National Money Laundering Risk Assessment: Impacts on banks & broker‑dealers

05.11.26 /

Read this if you are a chief compliance officer or an AML/CFT officer at a community bank, credit union, or broker-dealer firm. 

The US Department of the Treasury’s 2026 National Money Laundering Risk Assessment (NMLRA), which was issued in March 2026, provides a comprehensive look at the most significant illicit finance threats facing the US financial system. While the report spans the entire economy, several themes are particularly relevant for community banks, credit unions, and broker-dealers—all of which remain critical entry points and transit nodes for illicit funds. 

Why this matters for banks and broker-dealers

The Treasury report confirms that the core money laundering threats—fraud, drug trafficking, cybercrime, human trafficking, corruption, and professional money laundering networks—have not changed. What has changed is scale and velocity.

Criminals are generating larger proceeds more quickly by: 

  • Leveraging digital channels, social media, and encrypted communications 
  • Using artificial intelligence (AI) to create synthetic identities, deepfakes, and believable scam communications 
  • Moving funds rapidly across banks, broker‑dealers, money services businesses (MSBs), and digital asset platforms 

For smaller institutions and broker‑dealers with limited compliance resources, this evolution increases both operational risk and regulatory exposure. 

Fraud risks facing banks and broker-dealers 

The NMLRA identifies fraud—not drug trafficking—as the largest source of illicit proceeds entering the US financial system. The most common suspicious activity includes:  

  • Investment fraud 
  • Business email compromise 
  • Confidence scams 
  • Elder financial exploitation 
  • Digital asset‑related scams 

Key implications:

  • Community banks and credit unions are frequently used as deposit and transit accounts for fraud proceeds, often involving unwitting account holders or money mules (people who collect or receive illicit proceeds and then transport, transfer, or convert the funds on behalf of another person or organization). 
  • Broker‑dealers face rising exposure to: 
    • Ramp‑and‑dump (a market-manipulation scheme where bad actors artificially “ramp” up a stock’s price/volume—often via deceptive promotion—then sell into the spike, leaving other investors with losses) and pump‑and‑dump (similar manipulation: promoters “pump” a stock with misleading hype, then “dump” their shares at inflated prices) securities schemes 
    • Foreign‑based investment clubs operating via social media 
    • Omnibus and correspondent-style accounts masking beneficial ownership 

Regulators are increasingly focused not just on transaction monitoring failures, but on whether firms understand how modern scams operate and have controls aligned to current typologies. 

Digital assets and stablecoins: No longer peripheral 

Although the report notes that most laundering still occurs through fiat channels, digital assets—especially stablecoins—play a growing role across fraud, ransomware, sanctions evasion, and drug trafficking. 

For community banks and broker‑dealers, the takeaway is not limited to crypto custody or trading: 

  • Fraud proceeds are often converted into stablecoins after passing through traditional deposit accounts. 
  • Digital asset kiosks, over-the-counter (OTC) brokers, and foreign exchanges are frequently downstream of US institutions. 
  • Even firms that do not directly offer digital asset products may still be the first regulated touchpoint in the laundering chain.

Institutions are expected to recognize digital asset exposure through customer behavior, not just through product offerings.

Regulatory expectations are increasingly risk‑based—and personal 

The assessment highlights that most anti-money laundering (AML) enforcement actions in recent years stem from: 

  • Weak internal controls 
  • Inadequate customer due diligence 
  • Insufficient authority, independence, or resourcing of the BSA (Bank Secrecy Act)/AML officer 
  • Failure to reassess risk as products, technologies, or customer behavior change 

Notably, enforcement actions and SEC/FINRA cases against broker‑dealers emphasize individual accountability, including AML and compliance officers. 

What regulators are signaling: 

  • “Check‑the‑box” AML programs are no longer sufficient 
  • Firms must demonstrate active understanding of emerging risks 
  • Boards and senior management are expected to own AML risk, not delegate it entirely 

Community institutions face unique pressure points 

The Treasury report recognizes that most US banks and credit unions are small institutions, often operating with lean compliance teams while facing the same threat environment as large, global firms. 

Common vulnerabilities include: 

  • Rapid customer onboarding driven by competition and fintech pressures 
  • Mergers or core conversions that disrupt customer risk profiles 
  • Third‑party and fintech relationships that blur AML accountability 
  • Overreliance on vendors without sufficient internal challenge or oversight 

At the same time, Treasury explicitly acknowledges the need to avoid excessive compliance burden, reinforcing that risk‑based tailoring—not volume of suspicious activity reports (SARs)—is the benchmark.

How community banks, credit unions, and broker-dealers can stay ahead 

The 2026 National Money Laundering Risk Assessment reinforces a central message: Illicit finance risk is no longer confined to niche products or large institutions. 

Community banks, credit unions, and broker‑dealers sit at critical points in the financial ecosystem. Institutions that proactively align their AML programs to modern fraud typologies, digital behaviors, and evolving regulatory expectations will be best positioned to manage risk without incurring unnecessary burden.

Practical takeaways for financial institutions and broker-dealers 

  1. Refresh fraud risk assessments: This is especially important for elder customers, peer-to-peer (P2P) payments, wire activity, and investment‑related referrals. 
  2. Revisit customer due diligence: Focus on beneficial ownership, nominee activity, and unexplained changes in behavior. 
  3. Assess stress‑test controls around money mule activity: Funnel accounts, rapid movement of funds, and pass‑through behavior remain top red flags. 
  4. Evaluate digital asset exposure—even indirectly: Consider how customers interact with exchanges, kiosks, or stablecoins outside the institution. 
  5. Ensure BSA/AML governance is board‑engaged: Regulators increasingly expect documented oversight and challenge from senior leadership. 

BerryDunn can help

Our risk management team helps clients develop and implement effective risk management programs tailored to each organization’s size, risk level, and resources. If you have questions, please reach out to your BerryDunn financial institutions and broker-dealers teams. 

Related Industries

Related Services

Related Professionals

Leaders

BerryDunn experts and consultants

In auditing, the concept of professional skepticism is ubiquitous. Just as a Jedi in Star Wars is constantly trying to hone his understanding of the “force”, an auditor is constantly crafting his or her ability to apply professional skepticism. It is professional skepticism that provides the foundation for decision-making when conducting an attestation engagement.

A brief definition

The professional standards define professional skepticism as “an attitude that includes a questioning mind, being alert to conditions that may indicate possible misstatement due to fraud or error, and a critical assessment of audit evidence.” Given this definition, one quickly realizes that professional skepticism can’t be easily measured. Nor is it something that is cultivated overnight. It is a skill developed over time and a skill that auditors should constantly build and refine.

Recently, the extent to which professional skepticism is being employed has gained a lot of criticism. Specifically, regulatory bodies argue that auditors are not skeptical enough in carrying out their duties. However, as noted in the white paper titled Scepticism: The Practitioners’ Take, published by the Institute of Chartered Accountants in England and Wales, simply asking for more skepticism is not a practical solution to this issue, nor is it necessarily always desirable. There is an inevitable tug of war between professional skepticism and audit efficiency. The more skeptical the auditor, typically, the more time it takes to complete the audit.

Why does it matter? Audit quality.

First and foremost, how your auditor applies professional skepticism to your audit directly impacts the quality of their service. Applying an appropriate level of professional skepticism enhances the likelihood the auditor will understand your industry, lines of business, business processes, and any nuances that make your company different from others, as it naturally causes the auditor to ask questions that may otherwise go unasked.

These questions not only help the auditor appropriately apply professional standards, but also help the auditor gain a deeper understanding of your business. This will enable the auditor to provide insights and value-added services an auditor who doesn’t apply the right degree of skepticism may never identify.

Therefore, as the white paper notes, audit committees, management, and investors should be asking “How hard do our auditors get pushed on fees, and what effect does that have on the quality of the audit?” If your auditor is overly concerned with completing the audit within a fixed time budget, professional skepticism and, ultimately, the quality of the audit, may suffer.

Applying skepticism internally

By its definition, professional skepticism is a concept that specifically applies to auditors, and is not on point when it comes to other audit stakeholders. This is because the definition implies that the individual applying professional skepticism is independent from the information he or she is analyzing. Other audit stakeholders, such as members of management or the board of directors, are naturally advocates for the organizations they manage and direct and therefore can’t be considered independent, whereas an auditor is required to remain independent.

However, rather than audit stakeholders applying professional skepticism as such, these other stakeholders should apply an impartial and diligent mindset to their work and the information they review. This allows the audit stakeholder to remain an advocate for his or her organization, while applying critical skills similar to those applied in the exercise of professional skepticism. This nuanced distinction is necessary to maintain the limited scope to which the definition of professional skepticism applies: the auditor.

Specific to the financial statement reporting function, these stakeholders should be assessing the financial statements and ask questions that can help prevent or detect flaws in the financial reporting process. For example, when considering significant estimates, management should ask: are we considering all relevant information? Are our estimates unbiased? Are there alternative accounting treatments we haven’t considered? Can we justify our selected accounting treatment? Essentially, management should start by asking itself: what questions would we expect our auditor to ask us?

It is also important to be critical of your own work, and never become complacent. This may be the most difficult type of skepticism to apply, as most of us do not like to have our work criticized. However, critically reviewing one’s own work, essentially as an informal first level of review, will allow you to take a step back and consider it from a different vantage point, which may in turn help detect errors otherwise left unnoticed. Essentially, you should both consider evidence that supports the initial conclusion and evidence that may be contradictory to that conclusion.

The discussion in auditing circles about professional skepticism and how to appropriately apply it continues. It is a challenging notion that’s difficult to adequately articulate. Although it receives a lot of attention in the audit profession, it is a concept that, slightly altered, can be of value to other audit stakeholders. Doing so will help you create a stronger relationship with your auditor and, ultimately, improve the quality of the financial reporting process—and resulting outcome.

Article
Professional skepticism and why it matters to audit stakeholders

This is our second of five articles addressing the many aspects of business valuation. In the first article, we presented an overview of the three stages of the value acceleration process (Discover, Prepare, and Decide). In this article we are going to look more closely at the Discover stage of the process.

In the Discover stage, business owners take inventory of their personal, financial, and business goals, noting ways to increase alignment and reduce risk. The objective of the Discover stage is to gather data and assemble information into a prioritized action plan, using the following general framework.

Every client we have talked to so far has plans and priorities outside of their business. Accordingly, the first topic in the Discover stage is to explore your personal plans and how they may affect business goals and operations. What do you want to do next in your personal life? How will you get it done?

Another area to explore is your personal financial plan, and how this interacts with your personal goals and business plans. What do you currently have? How much do you need to fund your other goals?

The third leg of the value acceleration “three-legged stool” is business goals. How much can the business contribute to your other goals? How much do you need from your business? What are the strengths and weaknesses of your business? How do these compare to other businesses? How can business value be enhanced? A business valuation can help you to answer these questions.

A business valuation can clarify the standing of your business regarding the qualities buyers find attractive. Relevant business attractiveness factors include the following:

  • Market factors, such as barriers to entry, competitive advantages, market leadership, economic prosperity, and market growth
  • Forecast factors, such as potential profit and revenue growth, revenue stream predictability, and whether or not revenue comes from recurring sources
  • Business factors, such as years of operation, management strength, customer loyalty, branding, customer database, intellectual property/technology, staff contracts, location, business owner reliance, marketing systems, and business systems

Your company’s performance in these areas may lead to a gap between what your business is worth and what it could be worth. Armed with the information from this assessment, you can prepare a plan to address this “value gap” and look toward your plans for the future.

If you are interested in learning more about value acceleration, please contact the business valuation services team. We would be happy to meet with you, answer any questions you may have, and provide you with information on upcoming value acceleration presentations.

Next up in our value acceleration series is all about what we call the four C's of the value acceleration process. 

Article
The discover stage: Value acceleration series part two (of five)

This is the first article in our five-article series that reviews the art and science of business valuation. The series is based on an in-person program we offer from time to time.  

Did you know that just 12 months after selling, three out of four business owners surveyed “profoundly regretted” their decision? Situations like these highlight the importance of the value acceleration process, which focuses on increasing value and aligning business, personal, and financial goals. Through this process, business owners will be better prepared for business transitions, and therefore be significantly more satisfied with their decisions.

Here is a high-level overview of the value acceleration process. This process has three stages, diagrammed here:

The Discover stage is also called the “triggering event.” This is where business owners take inventory of their situation, focusing on risk reduction and alignment of their business, personal, and financial goals. The information gleaned in this stage is then compiled into a prioritized action plan utilized in future stages.

In the Prepare stage, business owners follow through on business improvement and personal/financial planning action items formed in the discover stage. Examples of action items include the following:

  • Addressing weaknesses identified in the Discover stage, in the business, or in personal financial planning
  • Protecting value through planning documents and making sure appropriate insurance is in place
  • Analyzing and prioritizing projects to improve the value of the business, as identified in Discover stage
  • Developing strategies to increase liquidity and retirement savings

The last stage in the process is the Decide stage. At this point, business owners choose between continuing to drive additional value into the business or to sell it.

Through the value acceleration process, we help business owners build value into their businesses and liquidity into their lives.

If you are interested in learning more about value acceleration, please contact the business valuation services team. We would be happy to meet with you, answer any questions you may have, and provide you with information on upcoming value acceleration presentations.

Read more! In our next installment of the value acceleration blog series, we cover the Discover stage.

Article
The process: Value acceleration series part one (of five)

Do you know what would happen to your company if your CEO suddenly had to resign immediately for personal reasons? Or got seriously ill? Or worse, died? These scenarios, while rare, do happen, and many companies are not prepared. In fact, 45% of US companies do not have a contingency plan for CEO succession, according to a 2020 Harvard Business Review study.  

Do you have a plan for CEO succession? As a business owner, you may have an exit strategy in place for your company, but do you have a plan to bridge the leadership gap for you and each member of your leadership team? Does the plan include the kind of crises listed above? What would you do if your next-in-line left suddenly? 

Whether yours is a family-owned business, a company of equity partners, or a private company with a governing body, here are things to consider when you’re faced with a situation where your CEO has abruptly departed or has decided to step down.  

1. Get a plan in place. First, assess the situation and figure out your priorities. If there is already a plan for these types of circumstances, evaluate how much of it is applicable to this particular circumstance. For example, if the plan is for the stepping down or announced retirement of your CEO, but some other catastrophic event occurs, you may need to adjust key components and focus on immediate messaging rather than future positioning. If there is no plan, assign a small team to create one immediately. 

Make sure management, team leaders, and employees are aware and informed of your progress; this will help keep you organized and streamline communications. Management needs to take the lead and select a point person to document the process. Management also needs to take the lead in demeanor. Model your actions so employees can see the situation is being handled with care. Once a strategy is identified based on your priorities, draft a plan that includes what happens now, in the immediate future, and beyond. Include timetables so people know when decisions will be made.  

2. Communicate clearly, and often. In times of uncertainty, your employees will need as much specific information as you can give them. Knowing when they will hear from you, even if it is “we have nothing new to report” builds trust and keeps them vested and involved. By letting them know what your plan is, when they’ll receive another update, what to tell clients, and even what specifics you can give them (e.g., who will take over which CEO responsibility and for how long), you make them feel that they are important stakeholders, and not just bystanders. Stakeholders are more likely to be strong supporters during and after any transition that needs to take place. 

3. Pull in professional help. Depending on your resources, we recommend bringing in a professional to help you handle the situation at hand. At the very least, call in an objective opinion. You’ll need someone who can help you make decisions when emotions are running high. Bringing someone on board that can help you decipher what you have to work with and what your legal and other obligations may be, help rally your team, deal with the media, and manage emotions can be invaluable during a challenging time. Even if it’s temporary. 

4. Develop a timeline. Figure out how much time you have for the transition. For example, if your CEO is ill and will be stepping down in six months, you have time to update any existing exit strategy or succession plan you have in place. Things to include in the timeline: 

  • Who is taking over what responsibilities? 
  • How and what will be communicated to your company and stakeholders? 
  • How and what will be communicated to the market? 
  • How will you bring in the CEO's replacement, while helping the current CEO transition out of the organization? 

If you are in a crisis situation (e.g., your CEO has been suddenly forced out or asked to leave without a public explanation), you won’t have the luxury of time.  

Find out what other arrangements have been made in the past and update them as needed. Work with your PR firm to help with your change management and do the right things for all involved to salvage the company’s reputation. When handled correctly, crises don’t have to have a lasting negative impact on your business.   

5. Manage change effectively. When you’re under the gun to quickly make significant changes at the top, you need to understand how the changes may affect various parts of your company. While instinct may tell you to focus externally, don’t neglect your employees. Be as transparent as you possibly can be, present an action plan, ask for support, and get them involved in keeping the environment positive. Whether you bring in professionals or not, make sure you allow for questions, feedback, and even discord if challenging information is being revealed.  

6. Handle the media. Crisis rule #1 is making it clear who can, and who cannot, speak to the media. Assign a point person for all external inquiries and instruct employees to refer all reporter requests for comment to that point person. You absolutely do not want employees leaking sensitive information to the media. 
 
With your employees on board with the change management action plan, you can now focus on external communications and how you will present what is happening to the media. This is not completely under your control. Technology and social media changed the game in terms of speed and access to information to the public and transparency when it comes to corporate leadership. Present a message to the media quickly that coincides with your values as a company. If you are dealing with a scandal where public trust is involved and your CEO is stepping down, handling this effectively will take tact and most likely a team of professionals to help. 

Exit strategies are planning tools. Uncontrollable events occur and we don’t always get to follow our plan as we would have liked. Your organization can still be prepared and know what to do in an emergency situation or sudden crisis.  Executives move out of their roles every day, but how companies respond to these changes is reflective of the strategy in place to handle unexpected situations. Be as prepared as possible. Own your challenges. Stay accountable. 

BerryDunn can help whether you need extra assistance in your office during peak times or interim leadership support during periods of transition. We offer the expertise of a fully staffed accounting department for short-term assignments or long-term engagements―so you can focus on your business. Meet our interim assistance experts.

Article
Crisis averted: Why you need a CEO succession plan today

Reading through the 133-page exposure draft for the Proposed Statement on Auditing Standards (SAS) Forming an Opinion and Reporting on Financial Statements of Employee Benefit Plans Subject to ERISA, issued back in April 2017, and then comparing it to the final 100+ page standard approved in September 2018, may not sound like a fun way to spend a Sunday morning sipping a coffee (or three), but I disagree.

Lucky for you, I have captured the highlights here. And it really is exciting. Our feedback was incorporated into the final standard both through written comments on the exposure draft and a voice via our firm’s Director of Quality Assurance, who holds a seat on the Auditing Standards Board.

"Limited scope" audits will no longer exist

The debate over the “limited scope” audit has been going on for years. The new standard is designed to help auditors clearly understand their responsibilities in performing an audit, and provide plan sponsors, plan participants, the Department of Labor (DOL), and other interested parties with more information about what auditors do in situations when audits are limited in scope by the plan’s management, which is permitted by DOL reporting and disclosure rules.

Once effective, Audit Committee and Board of Director meetings in which plan financial statements are presented will include more clarity into what an employee benefit plan audit entails, based on revisions to the auditor’s report. I know I would frequently kick off meetings covering the auditor’s report opinion by explaining what a “limited scope” audit was. As a “limited scope” audit will no longer exist, the revised auditor’s report language clearly articulates what the auditor is, and is not, opining on.

When is the new standard effective?

The effective date is “to be determined” as it will be aligned with the new overall auditor’s reporting standard once that is finalized, and the standard does not permit early adoption. So there is still time to educate and prepare all parties involved.

Probably the biggest conversation piece around the water cooler for the new standard is the lingo. The “limited scope” audit language will be going away and now the auditor’s report and all related language will refer to an “ERISA section 103(a)(3)(C)” audit. I know, it’s a mouthful?try and say that one three times fast!

The auditor's report will look much different

The auditor’s report under an ERISA section 103(a)(3)(C) audit will look significantly different from the old “limited scope” auditor’s report, once the standard is effective. There are several illustrative examples of reports included in the standard to refer to. One thing you will immediately notice?the auditor’s report is getting longer and not shorter. Some highlights:

The Opinion section will include two bullets that explicitly state, in basic summarized terms: (1) the certified information agrees to the financial statements, and (2)  the auditor’s opinion on everything else, which the auditor has audited.

Other Matter—Supplemental Schedules Required by ERISA section will include two bullets that explicitly state, in basic summarized terms, (1) the certified information agrees to the financial statements and (2) the auditor’s opinion on everything else, which the auditor has audited in relation to the financial statements. Sound similar to the Opinion section? Well, that’s because it is!).

Other key takeaways

  • Auditors will be required to make inquiries of management to gain assurance they performed procedures to determine the certifying institution is qualified for the ERISA section 103(a)(3)(C) audit, as it is management’s responsibility to make that determination.
  • Fair value disclosures included within the plan’s financial statements are also included under the certification umbrella and subject to the same audit procedures. As an auditor, if anything comes to our attention that does not meet expectations, we would further assess as necessary.
  • The auditor is required to obtain and read a draft Form 5500 prior to issuance of the auditor’s report.

The final standard also removed some highly debated provisions included in the draft proposal as follows:

  • There is no report on findings required, but the auditor is required to follow AU-C 250, AU-C 260 and AU-C 265. Should anything arise that warrants communication to those charged with governance, those findings must be communicated in writing. Be sure to grab another coffee and refresh yourself on AU-C 250, AU-C 260 and AU-C 265!
  • The new required procedures section for an audit was scrapped and replaced with an Appendix A for recommended audit procedures based on risk assessments. There are some great tools there to look at.
  • The required emphasis-of-matter section paragraph section of the auditor’s report was also scrapped.

Questions about the new employee benefit audit standard or employee benefit plan audits

At BerryDunn, we perform over 200 employee benefit plan audits each year. If you have any questions, we would love to help. And we’ll keep the acronyms to a minimum. Please reach out with any questions.

Article
Auditing standards board approves new employee benefit plan auditing standard: What you need to know

Banks often provide awards to lure new customers or to strengthen customer loyalty. Awards can take the form of a simple gift (cash or non-cash) or can be more complex, such as a sweepstakes involving some element of chance, or a reward points program.

If you have received an award from a bank, the IRS, always ready to claim the government’s share, may come knocking on your door. Taxation is dependent on how you receive the awards, what the award is, and its value. In certain situations, banks are required to, and may send a Form 1099, which reports the award value to the IRS and the award recipient. Here are some different award scenarios and corresponding actions to take.

Awards for Opening an Account
Awards for opening accounts are generally considered interest income and are taxable to the account holder. If an award is paid in cash, the amount of interest income is the amount of cash paid. However, an award may also be non-cash, such as a gift card or a specified item (e.g., an item of merchandise from a rewards brochure). Gift cards are normally valued at the amount of the gift on the card and merchandise at retail value. Once the value of all rewards are tallied, the value should be added to any other interest earned on the account. If the total is at least $10, the IRS requires you to file a Form 1099-INT.

Cash awards are generally easier to administer as the award can be deposited to the customer’s account and credited as interest. In-kind awards often present additional complexity when filing Forms 1099. These awards are often purchased in bulk, and given to customers when they open an account. Therefore, you don’t include the value in the customer account and you can only capture it in the 1099 reporting processes using manual intervention. To ensure these values are captured, you should develop procedures to address any manual processes.

Miscellaneous Awards Programs
Awards provided for something other than the use of money (e.g., opening an account) may also be taxable. For example: amounts provided under a birthday gift program could be taxable. Assume, under a birthday gift program, all customers under the age of 19 receive a $5 gift on their birthday. As the amounts do not appear to be for the use of money (no new account necessary and no specified account balance necessary), these payments would NOT be included on Form 1099-INT.

However, the government still wants their portion. Oftentimes, amounts under these types of programs are very low and do not require tax reporting. If reporting is required, amounts would be included on Form 1099-MISC rather than Form 1099-INT.

You need to consider these payments under the 1099-MISC reporting rules. These rules, different than the 1099-INT rules, only require reporting when the aggregate payments during the year exceed $600. Therefore, no IRS reporting would be required under this program unless payments under this program and any other program which would require a 1099-MISC, exceed $600.

Account Opening Sweepstakes
Occasionally, an incentive program may take the form of a sweepstakes or similar give-away. Winners are chosen randomly, from a pool consisting of customers opening a new checking account during a specified time period and, perhaps, non-customers if a no-purchase required entry option is available. As these prizes are limited and determined by luck (not by skill or by virtue of having an account, other than it qualified them for entry) this is more properly reported as a gambling winning. Gambling winnings are reported on Form W-2G (when in excess of $600).

IRS rules require mandatory withholding for certain gambling prizes. IRS rules also require income tax withholding for proceeds of more than $5,000. The IRS provided an example in their rules that states when no wager is placed, withholding is not required. The example concerns those entered into the sweepstakes simply by virtue of purchasing a magazine subscription for which they paid the regular subscription price. As new checking account customers generally are not paying additional amounts or receiving different terms than the regular terms an account holder receives, they are not considered to have made a wager. Therefore, we believe withholding is not required because there is a withholding exception if no wager is placed.

Reward Points Programs
Benefits from reward points programs are more complex and may not be subject to tax and reporting, depending on the provisions of the program.

The IRS has ruled that a program that is not transferable and is not convertible into cash or cash equivalents should not create gross income to the enrollees. Therefore, amounts earned and collected under a similar program would not be subject to information reporting rules, and not included on Form 1099-MISC.

Furthermore, in some circumstances cash-back options do not create gross income because the cash-back options are treated as a discount on the purchase or a rebate. In short, you have actually paid less for your merchandise because of the discount/rebate provided by the credit card.

However, if there is an award or cash provided simply for signing up for the card (no purchase necessary) the benefit may be taxable and includible on Form 1099-MISC, if the minimum threshold of $600 is satisfied.

Incentive programs to acquire and retain customers may result in taxable income to the customer. Additionally, information reporting may be required if the aggregate amount of all benefits provided exceeds certain thresholds.

We recommend banks review their procedure with regard to incentive programs to ensure proper tax reporting. We also suggest developing a customer-facing communication plan when incentives involve a significant benefit, so that customers are informed of their obligations and not surprised by hidden and unexpected tax costs. We are happy to assist in this area.

Article
The hidden tax cost of bank incentive rewards

When last we blogged about the Financial Accounting Standards Board’s (FASB) new “current expected credit losses” (CECL) model for estimating an allowance for loan and lease losses (ALLL), we reviewed the process for developing reasonable and supportable forecasts for use in establishing the ALLL. Once you develop those forecasts, how does that information translate into amounts to set aside for loan losses?

A portion of the ALLL will continue to be based on specifically identified loans you’re concerned about. For those loans, you will continue to establish a specific component of the ALLL based on your estimate of the loss ultimately expected on the loans.

The tricky part, of course, is estimating an ALLL for the other 99% of the loan portfolio. This is where the forecasts come in. The new rules do not prescribe a particular methodology, and banking regulators have indicated community banks will likely be able to continue with their current approach, adjusted to use appropriate inputs in a manner that complies with the CECL model. One of the biggest challenges is the expectation in CECL that the ALLL will be estimated using the institution’s historical information, to the extent available and relevant.

Following is just one of many ways  you can approach it. I’ve also included a link at the end of this article to an example illustrating this approach.

Step One: Historical Loss Factors

  1. First, for a given subset of the loan portfolio (e.g., the residential loan pool), you might first break down the portfolio by the number of years remaining until expected payoff (via maturity or refinancing). This is important because, on average, a loan with seven years remaining until expected payoff will have a higher level of remaining lifetime losses than a loan with one year remaining. It therefore generally wouldn’t be appropriate to use the same loss factor for both loans.
     
  2. Next, decide on a set of drivers that tend to correlate with loan losses over time. FASB has indicated it doesn’t expect highly mathematical correlation models will be necessary, especially for community banks. Instead, select factors in your bank’s experience indicative of future losses. These may include:
    • External factors, such as GDP growth, unemployment rates, and housing prices
    • Internal factors such as delinquency rates, classified asset ratios, and the percentage of loans in the portfolio for which certain policy exceptions (e.g., loan-to-value ratio or minimum credit score) were granted
       
  3. Once you select this set of drivers, find an historical loss period — a period of years corresponding to the estimated remaining life of the portfolio in question — where the historical drivers best approximate those you’re expecting in the future, based on your forecasts. For that historical loss period, determine the lifetime remaining loss rates of the loans outstanding at the beginning of that period, broken down by the number of years remaining until payoff. (This may require significant data mining, especially if that historical loss period was quite a few years ago.
     
  4. Apply those loss rates to the breakdown derived in (a) above, by years remaining until maturity.

    Step Two: Adjustments to Historical Loss Rates

    The CECL model requires we adjust historical loss factors for conditions that may not be adequately captured by the historical loss period analysis we’ve just described. Let’s say a particular geographical subset of your market area is significantly affected by the economic fortunes of a large employer in that area.  Based on economic trends or recent developments, you might expect that employer to have a particularly bright – or dim – future over the forecast period; accordingly, you forecast loans to borrowers in that area will have losses that differ significantly from the rest of the portfolio.

    The approach for these loans is the same as in the previous step. However:

    These loans would be segregated from the remainder of the portfolio, which would be subject to the general approach in step one. As you think through this approach, there are myriad variations and many decisions to make, such as:

    Our intent in describing this methodology is to help your CECL implementation team start the dialogue in terms of converting theoretical concepts in the CECL model to actual loans and historical experience.

    To facilitate that discussion, we’ve included a very simple example here that illustrates the steps described above. Analyzing an entire loan portfolio under the CECL model is an exponentially more complex process, but the concepts are the same — forecasting future conditions, and establishing an ALLL based on the bank’s (or, when necessary, peers’) lifetime loan loss experience under similar historical conditions.

    Given the amount of number crunching and analysis necessary, and the potentially significant increase in the ALLL that may result from a lifetime-of-loan loss model, it’s safe to say the time to start is now! If you have any questions about CECL implementation, please contact Tracy Harding or Rob Smalley.

    Other resources
    For more information on CECL, check out our other blogs:

    CECL: Where to Start
    CECL: Bank and Branch Acquisitions
    CECL: Reasonable and Supportable

    To sign up to receive notification of our next CECL update, click here.

    • In substep (c), you would focus on forecasted conditions (such as unemployment rate and changes in real estate values) in the geographical area in which the significant employer is located.
    • You would then select an historical loss period that had actual conditions for that area that best correspond to those you’ve just forecasted.
    • In substep (d), you would determine the lifetime remaining loss rates of loans outstanding at the beginning of that period.
    • In substep (e), you would apply those rates to loans in that geographic area.
    • How to break down the portfolio
    • Which conditions to analyze
    • How to analyze the conditions for correlation with historical loss periods
    • Which resulting loss factors to apply to which loans
Article
CECL implementation: So, you've developed reasonable and supportable forecasts — now what?

Recently, federal banking regulators released an interagency financial institution letter on CECL, in the form of a Q&A. Read it here. While there weren’t a lot of new insights into expectations examiners may have upon adoption, here is what we gleaned, and what you need to know, from the letter.

ALLL Documentation: More is better

Your management will be required to develop reasonable and supportable forecasts to determine an appropriate estimate for their allowance for loan and lease losses (ALLL). Institutions have always worked under the rule that accounting estimates need to be supported by evidence. Everyone knows both examiners and auditors LOVE documentation, but how much is necessary to prove whether the new CECL estimate is reasonable and supportable? The best answer I can give you is “more”.

And regardless of the exact model institutions develop, there will be significantly more decision points required with CECL than with the incurred loss model. At each point, both your management and your auditors will need to ask, “Why this path vs. another?” Defining those decision points and developing a process for documenting the path taken while also exploring alternatives is essential to build a model that estimates losses under both the letter and the spirit of the new rules. This is especially true when developing forecasts. We know you are not fortune tellers. Neither are we.

The challenge will be to document the sources used for forecasts, making the connections between that information and its effect on your loss data as clear as possible, so the model bases the loss estimate on your institution’s historical experience under conditions similar to those you’re forecasting, to the extent possible.

Software may make this easier… or harder.               

The leading allowance software applications allow for virtually instantaneous switching between different models, permitting users to test various assumptions in a painless environment. These applications feature collection points that enable users to document the basis for their decisions that become part of the final ALLL package. Take care to try and ensure that the support collected matches the decisions made and assumptions used.

Whether you use software or not there is a common set of essential controls to help ensure your ALLL calculation is supported. They are:

  • Documented review and recalculation of the ALLL estimate by a qualified individual(s) independent of the preparation of the calculation
  • Control over reports and spreadsheets that include data that feed into the overall calculation
  • Documentation supporting qualitative factors, including reasonableness of the resulting reserve amounts
  • Controls over loan ratings if they are a factor in your model
  • Controls over the timeliness of charge-offs

In the process of implementing the new CECL guidance it can be easy to focus all of your effort on the details of creating models, collecting data and getting to a reasonable number. Based on the regulators’ new Q&A document, you’ll also want to spend some time making sure the ALLL number is supportable.  

Next time, we’ll look at a lesser known section of the CECL guidance that could have a significantly negative impact on the size of the ALLL and capital as a result: off-balance-sheet credit exposures.

Article
CECL: Reasonable and supportable? Be ready to be ALLL in

By now, pretty much everyone in the banking industry has heard plenty of talk about CECL – the forthcoming “Current Expected Credit Loss” model of accounting for an institution’s allowance for loan losses (ALL). While the previous “Incurred Loss” model has been problematic to implement conceptually, and most of us thought CECL would improve ALL accounting and make it more comparable to how banks account for other debt instruments, it’s beginning to feel a bit like the dog who caught the car – now that we have this model, how the heck do we implement it?

The good news: We have a number of years before CECL’s effective date, and thus have some time to better understand the new rules and how to adapt an institution’s ALL model to reflect them. The bad news – the banking regulators recently announced they want banks to get cracking on this, and will expect to see some progress when they visit during upcoming exams – maybe not immediately, but likely at some point during the 2017 exam cycle.

This is the third in a series of articles addressing various aspects of this complex pronouncement. We hope that they provide you with practical advice that can help you get started on the nuts and bolts of CECL implementation.

Our previous article offered pointers on building the CECL team, brainstorming the process, and starting the data gathering conversation. In this article, we look at how to implement CECL when acquiring another bank, one or more branches of another bank, or simply a loan portfolio, such as a group of auto or credit card loans.

First, let’s remember the basics

The basic premise of CECL is that lifetime expected losses are to be booked at origination (or, in the case of an acquisition, at the acquisition date). You’ve likely heard some gnashing of teeth over the fact that this means losses are recorded “on Day One”, which many of us have some degree of conceptual difficulty with: For example, a higher risk loan will likely carry a higher yield at origination, so booking a higher level of expected losses on Day One (through the ALL) and the offsetting higher yield over the loan term (through interest income) feels like a mismatch between income and expense.

The Financial Accounting Standards Board (FASB) was sympathetic to this point, and spent a lot of time pondering it. Its international equivalent, the International Accounting Standards Board (IASB), which establishes – you guessed it – international accounting standards, actually tackled this issue by precluding Day One losses, unless they were expected to materialize within one year of origination (Day 365 losses?).

This approach, however, has led to a fairly convoluted – and challenging – model, which is already drawing a fair amount of criticism in the international community. In the end, although they had hoped to have a “converged” standard that would result in the same approach for U.S. and international institutions, FASB and the IASB decided to part company and use different models.

The short answer? We have to accept the notion of Day One losses as the price to pay for a less convoluted (but still complex to implement) model. This becomes important to remember as we look at accounting for acquisitions.

Accounting for acquisitions

Whether you’re acquiring a pool of loans, a branch, or an entire institution, the basic accounting under CECL is the same, and it’s the same (with a twist) as the accounting for originated loans: an ALL should be established for the purchase price allocated to the loans, and that ALL should reflect management’s estimate of the lifetime losses in the acquired portfolio.

Before we get into the details of how to do this, let’s take a moment to celebrate. Prior to CECL, it was not permissible to establish an initial ALL for acquired loans. Many bankers – and investors – complained that this made it difficult to compare one bank to another on metrics such as ALL coverage ratios. If one bank had a strategy that included acquisitions, and another didn’t, their ALLs would likely be quite different even if their loan portfolios and estimated incurred losses were similar. Now, with the CECL model, these two banks’ financial statements are much easier to compare.

As noted above, an ALL should be established for these loans under CECL, using the same methodology you would use for originated loans. The twist relates to what to do with the other side of the entry. The solution:

  • For loans with a more-than-insignificant amount of credit deterioration since origination, the offset is to add this amount to the amount originally recorded for the purchase price allocated to the loans.
  • For the rest of the acquired portfolio, the offset is to loan loss expense. That’s right, your provision is increased by the amount of ALL recorded in the transaction, except as noted in the previous bullet.

Why is this so? FASB is apparently assuming that:

  • Buyers adjust the purchase price for the first item above. These loans, which we used to call “purchased – credit impaired (PCI)”, and now will call “purchased – credit deteriorated (PCD)” under CECL, are the loans with hair on them. They probably got some extra scrutiny during due diligence, thus theoretically depressing the purchase price a bit. Therefore, the amount of the purchase price allocated to loans is a lower number, and offsetting the establishment of the ALL by adding that amount to the purchase price assigned to the loans properly “grosses up” the recorded loan balance.
  • Buyers don’t adjust the purchase price for other loans. This is probably true, as the lifetime losses on loans that aren’t PCD are just the cost of doing business for financial institutions. Therefore, as it is with originated loans, a big Day One provision is booked at closing.

It should be noted that the extent to which the definition of PCD loans differs from the previous definition of PCI loans depends on your interpretation of the old PCI definition. It appears clear that the new definition of PCD loans refers to loans that have specific indicators of significant credit deterioration since origination.

Let’s look at an example:

A bank buys three branches from another bank, which have total loans with a principal balance of $20 million and a fair value of $20,100,000. The portfolio includes loans with a principal balance of $1 million, and a fair value of $910,000, that are PCD.

The buyer bank determines the ALL under CECL would be $100,000 for the PCD loans and $475,000 for the rest of the acquired portfolio. Thus, the buyer bank records an ALL of $575,000. What’s the offset? As noted above:

  • For the PCD loans, the offsetting $100,000 will be added to the $910,000 of purchase price allocated to those loans. As a result, these loans will have a gross amount allocated of $910,000 plus $100,000, or $1,010,000, which will then be reduced by an ALL of $100,000 on the balance sheet, for a net reported amount of $910,000 (their fair value). The difference between the gross amount assigned ($1,010,000) and the principal balance ($1 million), or $10,000, represents an implied adjustment to reflect current market interest rates, and is therefore amortized over the expected loan term through interest income.
  • For the rest, the offsetting $475,000 will be an increase to the provision for loan losses, and will thus reduce income.

The last number could be a big one for institutions that do large or frequent acquisitions; thus, their balance sheets may be more comparable to other banks, but their income statements in the year of acquisition won’t be! The good news – like other acquisition costs such as legal fees and conversion expenses, this amount will be separately disclosed, so a reader can adjust for it if they believe it’s appropriate to do so.

Next time, we’ll look at the nuts and bolts of CECL’s concept of “reasonable and supportable” by considering proper documentation and controls over the ALL.

Article
How our new friend CECL affects bank and branch acquisitions