The OCC, the Office of the Comptroller of the Currency, is the US Treasury bureau that charters and supervises national banks, federal savings associations, and US branches of foreign banks. It examines those institutions for BSA and AML compliance using the shared FFIEC standards.
What is the OCC, in plain English?
The OCC is one of the main US federal banking supervisors. It charters national banks and federal savings associations, and it supervises them along with the US branches of foreign banks. Part of that supervision is checking BSA and AML compliance: whether a bank has the systems, controls, and staffing to detect and report financial crime.
The OCC does not invent its own AML exam standard in isolation. It applies the shared FFIEC BSA/AML examination manual, the common playbook used across the federal banking agencies, so an OCC exam looks broadly like a Federal Reserve or FDIC exam. What differs is which banks each agency supervises.
For operators at an OCC-supervised bank, the practical takeaway is simple: your primary regulator is the OCC, so its bulletins, exam findings, and enforcement actions are the ones to prioritize when you plan and defend your program.
How an OCC exam unfolds
A BSA/AML exam is a structured cycle, not a surprise raid:
- Scope — Plan the exam. Examiners set scope based on the bank's risk profile, prior findings, and recent changes.
- Test — Review the program. They test the four pillars, monitoring, filings, and independent testing against the FFIEC manual.
- Rate — Findings and ratings. Weaknesses are documented as findings; serious ones can lead to formal actions.
- Remediate — Fix and follow up. The bank remediates identified issues, and examiners verify the fixes at the next cycle.
Who is involved?
Who | Their role |
The OCC | Charters and supervises national banks and examines them for BSA/AML compliance. |
FFIEC | Sets the shared examination manual the OCC and other banking agencies apply. |
Fed and FDIC | Peer federal supervisors that examine the banks the OCC does not. |
The BSA officer | The bank's designated official accountable for the AML program the OCC tests. |
What it looks like in practice
In practice
A national bank grows its business-banking book quickly, onboarding a wave of small money-service businesses. At the next OCC exam, examiners scope in on that growth and test whether monitoring and due diligence kept pace.
They find that the bank's alert thresholds were not recalibrated for the higher-risk customer mix and that some enhanced due diligence files are thin. The OCC documents the findings and sets remediation expectations. The BSA officer stands up a project to retune monitoring and rebuild the EDD files, knowing examiners will verify the fixes next cycle and that unresolved findings can escalate to a formal enforcement action.
Why the OCC matters to operators
If your bank is OCC-supervised, the OCC is the body that defines and tests your federal AML expectations. Knowing that helps you prioritize: its bulletins and enforcement actions are the most direct guide to what your examiners will expect, so they deserve more attention than signals from agencies that do not supervise you.
The OCC also matters across the industry because it acts alongside the Federal Reserve and FDIC to shape banking-sector AML standards through the shared FFIEC framework. Its enforcement patterns often preview themes that spread across all federally supervised banks, so even non-OCC banks watch its actions for where supervisory attention is heading.
What to watch
- OCC bulletins. These set expectations and flag emerging risks; treat ones relevant to your business as direct guidance.
- Enforcement actions. Consent orders and civil penalties name the exact failures the OCC penalizes; map them to your controls.
- FFIEC manual updates. Changes to the shared examination manual change how your next exam will be conducted.
- Risk-profile shifts. Fast growth or new higher-risk customer types will draw exam scope; recalibrate monitoring before examiners arrive.
- Repeat findings. Unresolved issues from a prior exam escalate quickly; remediate and evidence the fixes fully.
Quick questions
Which banks does the OCC supervise?
National banks, federal savings associations, and the US branches and agencies of foreign banks. State-chartered banks fall under the Federal Reserve or FDIC depending on their charter and membership.
Does the OCC write its own AML exam rules?
It applies the shared FFIEC BSA/AML examination manual used across the federal banking agencies, so exams are broadly consistent. It supplements this with its own bulletins and enforcement guidance.
How does the OCC relate to FinCEN?
FinCEN administers the Bank Secrecy Act and writes the rules; the OCC examines the banks it supervises for compliance with those rules. The OCC is the front-line examiner, FinCEN the rule-maker and FIU.
What happens if an OCC exam finds problems?
Weaknesses are documented as findings with remediation expectations. Serious or unresolved problems can escalate to formal enforcement actions such as consent orders and civil money penalties.
Is the OCC different from the Federal Reserve?
Yes. Both are federal banking supervisors, but they oversee different institutions. They use the same FFIEC standards, so their AML exams are comparable even though the banks they cover differ.
Why should a non-OCC bank watch the OCC?
Because its enforcement patterns often preview themes that spread across all federally supervised banks under the shared FFIEC framework. Its actions are a useful read on where banking-sector supervision is heading.