Categories
Compliance Into the Weeds

Compliance into the Weeds: Banking Regulators Cut Model Risk Guidance: Implications for Compliance, Audit, and AML Oversight

The award-winning Compliance into the Weeds is the only weekly podcast that takes a deep dive into a compliance-related topic, literally going into the weeds to explore it more fully, and looking for some hard-hitting insights on compliance. Look no further than Compliance into the Weeds! In this episode of Compliance into the Weeds, Tom Fox and Matt Kelly discuss new Federal Reserve, FDIC, and OCC model risk management guidance issued late Friday, arguing it replaces detailed, bright-line expectations with thin, principles-based language.

They contrast the prior OCC guidance (109 pages) with the new 12-page document, saying it describes model risk governance abstractly but offers little direction on what banks should do, leaving decisions about materiality and oversight to management. They highlight practical consequences for bank compliance and internal audit, including reduced leverage to insist on prudent governance, potential weakening of AML model oversight under the strict-liability Bank Secrecy Act, and the risk of more arbitrary enforcement amid reduced regulatory staffing. They also note that the guidance excludes AI models, with future AI guidance promised only through a later comment process.

Key highlights:

  • From 109 pages to 12
  • Principles vs specifics debate
  • Internal audit sidelined
  • Regulators and capacity cuts
  • AI models left out 

Resources:

Matt on Radical Compliance

 Tom

Instagram

Facebook

YouTube

Twitter

LinkedIn

A multi-award-winning podcast, Compliance into the Weeds was most recently honored as one of the Top 25 Regulatory Compliance Podcasts, a Top 10 Business Law Podcast, and a Top 12 Risk Management Podcast. Compliance into the Weeds has been conferred a Davey, a Communicator Award, and a W3 Award, all for podcast excellence.

Categories
AI Today in 5

AI Today in 5: February 18, 2026, The AI for Rural Healthcare Edition

Welcome to AI Today in 5, the newest addition to the Compliance Podcast Network. Each day, Tom Fox will bring you 5 stories about AI to start your day. Sit back, enjoy a cup of morning coffee, and listen in to the AI Today In 5. All, from the Compliance Podcast Network. Each day, we consider five stories from the business world, compliance, ethics, risk management, leadership, or general interest about AI.

Top AI stories include:

  1. AI to transform fraud investigations. (PRNewswire)
  2. Better defensible AI oversight. (PRNewswire)
  3. What’s in your compliance gap? (Forbes)
  4. Is the AI moment here? (FRSF)
  5. Oz wants AI avatars for rural healthcare. (NPR)

For more information on the use of AI in Compliance programs, my new book, Upping Your Game, is available. You can purchase a copy of the book on Amazon.com.

Categories
Daily Compliance News

Daily Compliance News: January 28, 2026, The ABC App Goes Rogue Edition

Welcome to the Daily Compliance News. Each day, Tom Fox, the Voice of Compliance, brings you compliance-related stories to start your day. Sit back, enjoy a cup of morning coffee, and listen in to the Daily Compliance News. All, from the Compliance Podcast Network. Each day, we consider four stories from the business world, compliance, ethics, risk management, leadership, or general interest for the compliance professional.

Top stories include:

  • Meta, TikTok, YouTube, and Snap are being sued for causing addiction. (NYT)
  • Remaking FED oversight. (WSJ)
  • Former Citi MD sues for HR harassment after complaint. (FT)
  • Albanian ABC app goes rogue. (NYT)
Categories
Daily Compliance News

Daily Compliance News: January 23, 2026, The Lying Liars Who Lie Edition

Welcome to the Daily Compliance News. Each day, Tom Fox, the Voice of Compliance, brings you compliance-related stories to start your day. Sit back, enjoy a cup of morning coffee, and listen in to the Daily Compliance News. All, from the Compliance Podcast Network. Each day, we consider four stories from the business world, compliance, ethics, risk management, leadership, or general interest for the compliance professional.

Top stories include:

  • FirstEnergy’s reputation for telling the truth is still trashed. (Cleveland.com)
  • The black box of AI hiring decisions. (NYT)
  • Supreme Court balks at Trump’s attempt to control the Fed. (WSJ)
  • What happens when the dog bites (or even eats) its tail? (FT)
Categories
Daily Compliance News

Daily Compliance News: January 13, 2026, The Don’t Be a FED Chair Edition

Welcome to the Daily Compliance News. Each day, Tom Fox, the Voice of Compliance, brings you compliance-related stories to start your day. Sit back, enjoy a cup of morning coffee, and listen in to the Daily Compliance News. All, from the Compliance Podcast Network. Each day, we consider four stories from the business world, compliance, ethics, risk management, leadership, or general interest for the compliance professional.

Top stories include:

  • Xi says China cannot afford to lose the fight against corruption. (SCMP)
  • Paramount threatens Board proxy fight for Warner Bros. (NYT)
  • The Trump DOJ opens a criminal probe against the Fed Chair. (WSJ)
  • Suit cleared to go to trial alleging Citi fraud in Mexico. (Reuters)
Categories
Daily Compliance News

Daily Compliance News: November 18, 2025, The UBS to America Edition

Welcome to the Daily Compliance News. Each day, Tom Fox, the Voice of Compliance, brings you compliance-related stories to start your day. Sit back, enjoy a cup of morning coffee, and listen in to the Daily Compliance News. All, from the Compliance Podcast Network. Each day, we consider four stories from the business world, compliance, ethics, risk management, leadership, or general interest for the compliance professional.

Top stories include:

  • Canaccord is close to a settlement for compliance lapses. (Bloomberg)
  • A resigned Fed Official violated trading rules. (NYT)
  • Corruption in the CZ pardon. (Newsweek)
  • Will UBS relocate to America? (FT)

The Daily Compliance News has been honored as the No. 2 in the Best Regulatory Compliance Podcasts category.

Categories
Daily Compliance News

Daily Compliance News: August 27, 2025, The Anti-DEI Compliance Edition

Welcome to the Daily Compliance News. Each day, Tom Fox, the Voice of Compliance, brings you compliance-related stories to start your day. Sit back, enjoy a cup of morning coffee, and listen in to the Daily Compliance News. All, from the Compliance Podcast Network. Each day, we consider four stories from the business world, including compliance, ethics, risk management, leadership, or general interest, relevant to the compliance professional.

Top stories include:

You can donate to flood relief for victims of the Kerr County flooding by going to the Hill Country Flood Relief here.

Categories
Daily Compliance News

Daily Compliance News: August 21, 2025, The Fabricated Evidence Edition

Welcome to the Daily Compliance News. Each day, Tom Fox, the Voice of Compliance, brings you compliance-related stories to start your day. Sit back, enjoy a cup of morning coffee, and listen in to the Daily Compliance News. All, from the Compliance Podcast Network. Each day, we consider four stories from the business world, compliance, ethics, risk management, leadership, or general interest for the compliance professional.

Top stories include:

  • Trump fabricates evidence against the Fed Governor, and they say he will fire her. (WSJ)
  • More NYC Mayor associates to face corruption charges. (NYT)
  • CVS ordered to pay $290MM in whistleblower suit. (Reuters)
  • Quantas hit with record fine. (BBC)

You can donate to flood relief for victims of the Kerr County flooding by going to the Hill Country Flood Relief here.

Categories
Blog

Wells Fargo, Risk Management and Reputational Recovery – Part 1: The Penalty

On June 3, 2025, the Federal Reserve lifted its unprecedented $2 trillion asset cap on Wells Fargo, marking the symbolic end to one of the most consequential compliance enforcement actions in modern U.S. banking history. For the compliance and risk management community, this moment is not a victory lap—it is a case study of how compliance failures cascade, reputational risk becomes operationally tangible, and regulatory patience has its limits.

Over the next two blog posts, I want to explore what happened, why it mattered, and what lessons every compliance professional should carry forward. These blog posts are based on two primary articles. The First Wells Fargo Is Allowed to Grow Again After 7 Years Under Asset-Cap Penalty, by Gina Heeb in the Wall Street Journal. The second is “Wells Fargo Asset Cap Lifted by Fed, Paving Way for Growth” by Yizhu Wang in Bloomberg. The final is an op-ed piece in Bloomberg, entitled “Wells Fargo’s Asset Cap Has Been a Good Punishment,” by Paul Davies.

The Scandal That Shook the System

The Wells Fargo saga began with a simple, albeit stunning, revelation: employees had opened millions of unauthorized deposit and credit card accounts to meet aggressive internal sales goals. Between 2009 and 2016, over 3.5 million accounts were opened without the customer’s consent. Many of these accounts generated fees, tarnishing customer relationships and shaking public trust in one of the most storied names in American banking.

As the crisis deepened, it was not just a case of bad apples. It was a system-wide failure of controls, risk oversight, and a corporate culture that incentivized misconduct. The sales quotas that fueled the behavior were directly tied to compensation and job security, creating a high-pressure environment where fraud became a means of survival.

Regulators acted swiftly. In 2016, Wells Fargo was fined $185 million. In 2018, the Federal Reserve took the rare and dramatic step of capping the bank’s total assets at approximately $2 trillion, essentially freezing its ability to grow until it could demonstrate a wholesale overhaul of its risk management and governance practices.

The Asset Cap: Punishment with Purpose

We need to be clear: this was not just a penalty. It was a structural constraint that directly impacted Wells Fargo’s ability to operate and compete in its core business. The $2 trillion asset cap imposed by the Federal Reserve in 2018 did not simply send a signal; it built a wall. It limited Wells Fargo’s ability to grow its balance sheet, take on new deposits, issue new loans, and expand into revenue-generating business lines, such as investment banking, trading, and wealth management. Unlike traditional enforcement actions, which often result in fines or deferred prosecution agreements, the asset cap attacked the bank’s future potential, not just its past misdeeds.

In short, it was a period of growth stagnation. For a publicly traded institution that relies on growth to attract investors, increase shareholder value, and maintain market position, such a freeze is devastating.

The restriction forced the bank into a defensive crouch. Instead of competing for market share or innovating with new financial products, Wells Fargo was compelled to pour resources into compliance remediation and cultural rehabilitation. According to public filings and internal estimates, the bank spent more than $2.5 billion above its 2018 baseline to maintain the risk, control, and compliance infrastructure needed to satisfy dozens of consent orders. This included the hiring of more than 10,000 employees dedicated to risk and regulatory functions—a remarkable mobilization of resources that most firms would struggle to afford.

As Davies aptly observed, “The asset cap has become a feared punishment for banks in the U.S.; they will want to avoid it at all costs.” And banks should. Because it not only restricts current operations, it sends a clear signal to markets, analysts, and regulators: this institution is not yet trusted to grow.

However, here’s the twist: in the case of Wells Fargo, it did work.

The asset cap’s forced pause compelled the bank to undertake a comprehensive review of its governance and culture. Under the leadership of CEO Charlie Scharf, who joined BNY Mellon in 2019 and previously held senior roles at Visa and JPMorgan, Wells Fargo began the arduous but necessary work of rebuilding. Scharf wasted no time restructuring the risk and compliance functions, streamlining reporting lines, and replacing much of the leadership team that had presided over the bank’s previous failures. Perhaps most importantly, he made compliance the focal point of executive decision-making, beginning every operating committee meeting with a thorough review of regulatory progress.

In effect, the asset cap did not simply punish Wells Fargo; it saved the bank from itself. It forced the kind of systemic, sustainable change that no fine or press release could have achieved. Wells Fargo emerged leaner, more disciplined, and more compliant. In many ways, it became a model for what the Federal Reserve, the Department of Justice (DOJ), and numerous other regulatory agencies now expect. Not simply accountability but a demonstrable and lasting commitment to cultural transformation.

This is remediation before reward. It is tone at the top in action. And for compliance professionals everywhere, it is proof that when structural enforcement is coupled with leadership willing to change, reform is not only possible but, as Theranos might say, “inevitable.”

Why It Worked: Enforcement as a Governance Driver

For corporate compliance professionals, Wells Fargo is more than a cautionary tale. It is proof that regulatory enforcement, when aligned with structural consequences, can drive actual change. The asset cap was not a mere symbolic gesture. It constrained Wells Fargo’s operations at its core, limiting everything from loan issuance to deposit intake to investment banking expansion.

Even more significantly, it reshaped how the bank’s board and senior executives prioritized compliance. For years, every operating committee meeting began with updates on regulatory matters. This became the bank’s daily bread.

The message is clear: when enforcement bites into business, executives listen.

Join us tomorrow as we delve into Part 2, where we examine lessons learned for the compliance professional.

Categories
Everything Compliance - Shout Outs and Rants

Shout Outs and Rants: Episode 155, To Tesla and Beyond

Welcome to this edition of Everything Compliance, Shout-Outs, and Rants. In this episode, we have the quintet of Matt Kelly, Jonathan Armstrong, Jonathan Marks, and Special Guest Panelist Hemma Lomax, all hosted by Tom Fox.

  1. Hemma Lomax shouts out to AI for podcasters.
  2. Matt Kelly both shouts out and rants about Marjorie Taylor Greene and her reading list.
  3. Jonathan Marks highlights the quiet compliance professionals who do the day-to-day work of compliance.
  4. Jonathan Armstrong delves into the finances of Tesla, examining its profitability. He shouts out to Operation Spider’s Web.
  5. Tom Fox highlights Wells Fargo’s compliance remediation, the Fed’s asset cap placed on Wells Fargo, and its subsequent removal.

The members of Everything Compliance are:

Tom Fox, the Voice of Compliance, is the host, producer, and sometimes panelist of Everything Compliance. He can be reached at tfox@tfoxlaw.com. The award-winning Everything Compliance is part of the Compliance Podcast Network.