The OCC's Debanking Report Says Banks Restricted Digital Assets as Financial Crime Risk. The Fix Is Aimed at Reputation Risk

What Happened

The Office of the Comptroller of the Currency (OCC) released its report on large-bank debanking on Wednesday, October 14, closing the review ordered by Executive Order 14331, Guaranteeing Fair Banking for All Americans, signed August 7, 2025. The review covered the 9 largest national banks the agency supervises: JPMorgan Chase, Bank of America, Citibank, Wells Fargo, U.

S. Bank, Capital One, PNC, TD Bank, and BMO. Examiners read nearly 100,000 complaints and about 50,000 bank documents running to roughly 420,000 pages. The conclusion, in Comptroller Jonathan Gould's words, is 'irrefutable evidence that the nation's largest banks have denied, debanked and discriminated against customers and lawful businesses.'

The mechanism the report names is reputation risk: all 9 banks, it says, kept policies between 2020 and September 2025 that lacked clear, objective standards and could turn a customer's politics, religion, or lawful line of business into a reason to deny or limit service. The industries listed are firearms, oil and gas, coal, tobacco, detention facilities, and digital assets.

The conclusion comes with 2 admissions. The agency says it was 'unable to quantify on a comprehensive basis the full extent of debanking or alleged debanking actions,' and that a policy on paper does not prove every customer it touched was turned away. On digital assets, the report states, as quoted by Cointelegraph, that 'many institutions also placed restrictions on banking digital asset activities, including on issuers, exchanges, or administrators, often attributed to financial crime considerations,' and it offers no crypto-specific case.

All 9 banks told the OCC they have revised or consolidated their policies; the agency answered that none has fully acknowledged past decisions or built a program to remediate affected customers. No fines were announced. Gould said he is 'not confident' the banks' efforts will be enough and that the OCC will weigh further changes, including rules against political and religious discrimination.

The Consumer Financial Protection Bureau (CFPB), which supervises banks above $10 billion in assets, said the same day it will investigate whether the 9 banks and others broke federal consumer financial law.

The report counts the policies and cannot count the customers. The one industry it lists under financial crime is the one its remedy does not reach.

Two Reasons on File, One Remedy

The report is 2 findings under 1 headline. The first is about reputation, and the OCC's answer to it is already law: the OCC and the Federal Deposit Insurance Corporation (FDIC) issued a joint final rule on April 7 that bars examiners from criticizing a bank or taking adverse action on reputation-risk grounds.

It took effect June 9, and the Federal Reserve proposed a parallel rule in February. The second finding is about digital assets, and its label is different. 'Financial crime considerations' is the language of a Bank Secrecy Act and anti-money-laundering (BSA/AML) program, where a bank rates customers and whole industries by the cost of monitoring them.

A restriction booked there is not a reputation call. It is a compliance call, it is lawful, and nothing in the June 9 rule or in a future rule against political discrimination touches it.

The OCC has known about that gap for more than a year. In August 2025 it said it was reviewing its own BSA/AML supervision to make sure it was not contributing to unlawful debanking, and CNBC reported Wednesday that regulators are still examining whether anti-money-laundering rules contributed to the practice.

Examining is not changing. The skeptical reading deserves its hearing: the report's window includes the November 2022 collapse of FTX and the March 2023 failures of Silvergate and Signature, and a bank that rated digital-asset businesses as elevated financial-crime risk in 2023 was not inventing the category.

FinCEN's September alert on scam-compound funding, covered in the archive, lists the red flags banks are now asked to act on: drained savings, liquidated retirement accounts, home equity, then transfers to crypto platforms. From a compliance desk, that is also what a large, deliberate purchase of self-custodied bitcoin looks like.

A restriction grounded in that rulebook survives any rule aimed at reputation, because it was never filed under reputation.

The Supervisors Wrote the Condition

The report does not say who taught the banks to treat crypto as a financial-crime line, and the answer is in the OCC's own filing cabinet. Interpretive Letter 1179, issued November 18, 2021, told national banks to obtain written supervisory non-objection before offering crypto custody, holding stablecoin reserves, or running a node.

On January 3, 2023, the OCC, the FDIC, and the Federal Reserve issued a joint statement on crypto-asset risks to banking organizations. Through 2022 and 2023 the FDIC sent what became known as pause letters to 24 institutions; it released 175 of those documents on February 5, 2025 after a Freedom of Information Act suit.

A bank that in 2023 put digital-asset issuers and exchanges behind an extra approval layer, or off its list, was reading its supervisors correctly.

Then the supervisors changed. The OCC rescinded Letter 1179 on March 7, 2025 and withdrew from the 2023 joint statements the same day; the FDIC rescinded its notice requirement on March 28; the Fed withdrew its own crypto letters and the joint statements on April 24. Winston & Strawn's note on the December preliminary findings observed that the report was silent on the regulators' own role in pressuring banks, and none of the early coverage of Wednesday's report describes a section on it.

Between 2021 and 2025 nothing about bitcoin changed that explains a bank's crypto policy flipping from restricted to encouraged. What changed was the supervisor. The archive's July piece on Custodia Bank's Supreme Court petition described the same conditionality one layer up, where the Fed decides which banks get a master account at all; that petition, docket 26-62, is pending.

What This Means for You

Start with what is conditional and what is not. A bank account is a relationship the bank can end for any lawful reason or none, and the report confirms that for 5 years the reasons included a list of industries, with digital assets on it under a compliance label. Bitcoin held on your own private keys is on no bank's prohibited-business list, because it is not a bank product.

Every dollar conversion does fall inside the policy, and that is the limit of self-custody here: the asset is yours unconditionally, the ramp is yours on terms set by a risk rating you will never see. The restrictions in the report were on businesses, not retail buyers, but the same BSA/AML program that rated an exchange reads your transfers to that exchange, and an individual closure arrives the way a business closure does: a letter, often 30 to 60 days of notice, no stated reason, and sometimes a suspicious activity report (SAR) the bank is barred from telling you about.

The response is redundancy, not reliance. Keep 2 banking relationships at separate institutions and route exchange traffic through 1 of them, so a closure costs you a ramp and not your payroll. Read the deposit agreement's prohibited-business and unusual-activity clauses before the first transfer, not after the letter.

Keep a source-of-funds record for every exchange transfer; re-papering elsewhere is faster with it. Treat a closure notice as a clock: move recurring payments first, withdraw to the second account next, and do not argue a decision the bank will not explain. If your bitcoin exposure is an exchange balance rather than your own keys, the exchange's banking is a jurisdictional contact point you cannot see, and the report says those relationships were restricted at the largest banks for 5 years.

Hold the asset yourself and leave only working capital on the venue.

The last point is what to expect from the fix. The OCC's remedy is a fairer gatekeeper: no reputation risk, no political or religious screening, and possibly rules to enforce both. That is a real improvement for a coal company. For a crypto customer it changes less, because the line against digital assets was booked under financial crime, and the only review of that rulebook is still a review.

A gatekeeper that was told one thing in 2023 and the opposite in 2025 will be told something else later. The coins on your keys do not need to know which; the ramp does. Plan for the setting to change, not for it to be fixed.

What to Watch

The first checkpoint is whether the OCC's further changes include anything filed under BSA/AML, since a rule that only names political and religious discrimination leaves the crypto line where it is. The CFPB's investigation is the second: it can turn a policy finding into an enforcement case at banks above $10 billion, and whether it counts digital-asset closures as consumer harm will show what the executive order covers in practice.

Any of the 9 banks publishing a remediation program with names and dollar figures would be the first evidence of customers rather than policies. The Supreme Court's handling of Custodia's petition decides whether access to the Fed's own rails is a right or a discretion. And the next exam cycle will show whether 'financial crime considerations' still means the whole industry or the specific customer.

Tracked entities this report names, with total coverage across the archive. Follow one into the Actor Network to see every report it appears in.

Other reports that name the same tracked actors — a different thread than “related,” which follows wording. These are linked by who appears in them.