Federal bank regulators just put a massive spotlight on a quiet, widespread practice in American finance.
On July 13, 2026, the Office of the Comptroller of the Currency (OCC), the Federal Deposit Insurance Corporation (FDIC), and the National Credit Union Administration (NCUA) issued joint guidance warning financial institutions about the credit risks of lending to people without legal work authorization. For a deeper dive into this area, we suggest: this related article.
If you think this is just a routine regulatory update, you're missing the bigger picture. This move is part of a broader, systemic effort by the Trump administration to squeeze undocumented immigrants out of the traditional U.S. financial system.
For years, many banks quietly approved mortgages, auto loans, and credit cards for undocumented immigrants using Individual Taxpayer Identification Numbers (ITINs). It was a profitable, growing market. Now, regulators are fundamentally shifting how financial institutions must assess those borrowers, transforming how risk is managed on the ground. For additional background on the matter, detailed analysis is available on The New York Times.
The Core Risk Argument from Regulators
Let's look at what the regulators are actually saying. The core of their argument rests on a simple premise: if a borrower isn't legally allowed to work in the U.S., their income is inherently unstable.
The joint guidance warns that income derived from unauthorized employment is "less reliable" and represents "increased credit risk".
The regulators point to three specific pressure points:
- The sudden loss of employment because of non-legal status.
- An ongoing inability to obtain legal, stable employment.
- The physical removal of the borrower from the United States through deportation.
From a strict underwriting perspective, it's hard for banks to argue with the logic. If a borrower is deported, the bank's chances of recovering the unpaid balance on an auto loan or a personal credit card drop close to zero. Even on a mortgage, foreclosing on a property when the owner has been removed from the country is a legal and administrative nightmare.
This new guidance doesn't technically create new laws or absolute bans. It's framed as a reminder to banks to use "safe and sound underwriting practices". But in the highly regulated world of banking, a "reminder" from the FDIC or the OCC carries the weight of a direct order. When bank examiners show up for audits, they will be looking closely at how institutions measure and monitor these specific credit risks.
Squeezing the Financial System From Both Sides
This lending warning doesn't exist in a vacuum. It's the execution of an executive order signed by President Donald Trump back in May, which directed federal agencies to target the use of financial services by undocumented immigrants.
What we're seeing is a multi-pronged strategy designed to make it highly uncomfortable for banks to serve this customer base.
In June, the Treasury Department’s Financial Crimes Enforcement Network (FinCEN) teamed up with the IRS, FDIC, OCC, and NCUA to issue an intense advisory. They urged banks to look for "suspicious activity" tied to the employment of undocumented workers.
FinCEN wasn't just talking about credit risk; they flagged identity theft, payroll tax fraud, and money laundering. They claimed that businesses using unauthorized labor get an unfair advantage, depress wages, and sometimes route funds to transnational criminal organizations.
FinCEN went so far as to list 18 specific "red flags" to help banks detect and report suspicious activity.
These actions target both sides of the ledger. On one end, FinCEN is telling banks to monitor and report businesses that might be hiring undocumented workers. On the other end, the OCC, FDIC, and NCUA are telling banks to rethink lending to the workers themselves. The message to financial institutions is clear: serving this population brings regulatory scrutiny you probably don't want.
The ITIN Dilemma
For years, the Individual Taxpayer Identification Number (ITIN) was the golden key for undocumented immigrants trying to build a life in the U.S.
The IRS issues ITINs to people who need to pay taxes but don't qualify for a Social Security number. Recognizing a massive, untapped market of hardworking taxpayers, many banks and credit unions designed specific "ITIN lending programs."
These programs allowed people to build credit, buy cars, and purchase homes. It was a win-win: immigrants got access to capital, and banks got reliable, high-yield loan portfolios.
The new regulatory pressure changes the calculation on ITINs.
Regulators are now actively pushing banks to treat the presentation of an ITIN—instead of a Social Security number—as a potential credit risk factor in itself. While they aren't outlawing ITIN loans, they are telling banks to perform enhanced due diligence. They want lenders to scrutinize the stability of the borrower's income much more aggressively.
This creates a massive compliance headache. Under the Consumer Financial Protection Bureau (CFPB) guidance released in June, lenders actually are allowed to consider immigration status when evaluating creditworthiness for mortgages and credit cards. This essentially greenlights banks to pull back on ITIN lending under the banner of risk management.
The Collateral Damage of Restricting Credit
Squeezing undocumented immigrants out of the mainstream financial system has real-world consequences that stretch far beyond banking balance sheets.
First, there is the immediate economic impact on industries that rely heavily on this workforce—like agriculture, construction, hospitality, and domestic services. When workers can't get car loans, they can't get to work. When they can't access basic bank accounts, they are forced to rely on predatory cash-checking services, carrying large amounts of physical cash, which makes them prime targets for crime.
Second, there is a legitimate risk of driving a massive population into a shadow financial system.
If reputable, regulated banks pull their ITIN loan products to satisfy federal examiners, undocumented workers won't stop needing credit. They will simply be forced to turn to unregulated, predatory lenders, private loan sharks, and underground financial networks. This doesn't make the financial system safer; it just pushes the risk into the dark where regulators can't see it at all.
How Banks are Navigating the New Reality
If you run a financial institution or work in credit risk management, you can't afford to ignore this guidance. Here is how forward-thinking institutions are adapting without completely abandoning their communities:
- Enhanced Income Verification: Banks are moving away from simple self-attestation of income for ITIN holders. They are requiring deeper historical proof of income stability, looking for multi-year patterns of consistent earnings even within specialized sectors.
- Collateral Revaluation: Lenders are adjusting the loan-to-value (LTV) ratios on loans secured by physical assets, like cars or real estate. By requiring larger down payments, banks mitigate the loss-given-default risk if a borrower is deported or loses their job.
- Strict Compliance Mapping: Compliance officers are mapping the 18 FinCEN red flags directly into their automated transaction monitoring systems. This helps identify commercial accounts that may have payroll patterns linked to unauthorized employment before it triggers an external audit.
- Distinguishing DACA and TPS: While the administration has also targeted programs like DACA (Deferred Action for Childhood Arrivals) and Temporary Protected Status (TPS) by reclassifying certain tax benefits, these individuals still maintain temporary legal work authorization. Smart compliance teams are training underwriters to clearly distinguish between completely unauthorized workers and those with valid, albeit temporary, work permits to avoid fair lending violations.
The regulatory environment is shifting rapidly. The era of quietly growing an ITIN lending portfolio without intense board-level oversight is officially over.
