Bank holding company acquisitions and bank mergers operate within a regulatory framework that differs from general corporate M&A in almost every material dimension. The timeline is driven by federal agency review, not negotiation. The approval standards involve public convenience and community needs, not just shareholder value. The due diligence must surface enforcement actions, CRA ratings, BSA/AML program quality, and capital adequacy, all of which survive closing and bind the acquirer. This guide addresses the full regulatory architecture, from BHC Act Section 3 applications and Change in Bank Control Act notices through CRA protest management, capital planning, and Day 1 integration readiness.
The 2026 Banking M&A Landscape
Banking M&A activity in 2026 reflects a confluence of consolidation pressure, evolving capital standards, a cautious but reopening regulatory posture toward larger combinations, and ongoing convergence between traditional depository institutions and fintech platforms. Community banks facing margin compression from higher funding costs, technology investment demands that exceed their standalone capacity, and succession challenges among founding ownership groups are evaluating combinations with greater urgency than at any point in the prior decade. Regional banks looking to achieve the scale necessary to compete with the largest institutions are similarly pursuing strategic acquisitions of community banks and mid-sized thrifts.
The regulatory environment for bank mergers has evolved considerably since the prior cycle. The federal banking agencies have signaled renewed attention to competitive effects and financial stability in the context of larger transactions, while continuing to process community bank combinations efficiently. Proposals that would create institutions above certain asset thresholds face more detailed scrutiny of competitive effects, systemic risk implications, and the adequacy of the acquirer's capital and resolution planning. Counsel must understand where a proposed transaction falls within this spectrum before advising on the regulatory strategy.
Failed-bank assisted transactions arranged by the FDIC under the Federal Deposit Insurance Act continue to represent a distinct category of banking M&A. In an assisted transaction, the FDIC as receiver solicits bids from qualified acquirers and selects a winning bidder under expedited procedures. The regulatory approval process is compressed, mandatory waiting periods are waived or shortened, and the FDIC provides loss-sharing agreements or other structural support to make the transaction viable. Acquirers who develop relationships with the FDIC before a bank failure occurs and maintain the financial and operational capacity to execute quickly are best positioned to compete in the assisted transaction market.
Fintech convergence represents an emerging dimension of banking M&A strategy. Bank holding companies acquiring fintech companies, and fintech companies acquiring bank charters through either de novo applications or acquisitions of existing institutions, present regulatory questions that span multiple agencies and statutory frameworks. The OCC's national bank charter, the ILC charter regulated by the FDIC and applicable state agencies, and the various state banking charters each carry distinct ownership and control rules. Counsel advising on fintech-bank combinations must analyze the applicable charter type and the acquirer's existing regulatory footprint before structuring the transaction.
Primary Regulatory Framework
The legal architecture governing bank holding company acquisitions and bank mergers is built on four principal federal statutes, each covering a distinct aspect of ownership, control, and structural change. Understanding which statute applies to a given transaction, and what approval or notice obligation it triggers, is the threshold question in any banking M&A engagement.
The Bank Holding Company Act of 1956, as amended, governs the acquisition of banks and bank holding companies by bank holding companies. Section 3 of the BHC Act requires prior Federal Reserve Board approval before a bank holding company may acquire control of a bank or another bank holding company. The FRB evaluates applications under a five-factor statutory standard that examines the financial and managerial resources of the combined institution, the competitive effects of the proposed transaction, the convenience and needs of the communities to be served, the financial stability of the United States banking system, and the effectiveness of the acquirer's AML compliance program. No acquisition covered by Section 3 may close without FRB approval and the expiration of applicable waiting periods.
The Bank Merger Act, codified at 12 USC 1828(c), governs mergers and consolidations among insured depository institutions. Unlike the BHC Act, which assigns jurisdiction to the FRB, the Bank Merger Act assigns jurisdiction to the primary federal banking regulator of the resulting institution. If the resulting institution will be a national bank, the OCC approves. If the resulting institution will be a state member bank, the FRB approves. If the resulting institution will be a state non-member insured bank, the FDIC approves. In transactions involving both a holding company acquisition and a downstream bank merger, both the BHC Act and the Bank Merger Act processes must run simultaneously or sequentially, and the timing must be coordinated carefully.
The Change in Bank Control Act governs acquisitions of control of insured depository institutions that occur outside the bank holding company structure. CIBCA requires a 60-day advance notice to the primary federal banking regulator before any person acquires control. The statute also applies to acquisitions of control of bank holding companies by individuals or groups that are not themselves bank holding companies. Finally, state charter statutes impose additional approval obligations for banks chartered under state law, and the timing and standards for state approvals vary considerably across jurisdictions.
FRB Application Under BHC Act Section 3
The Federal Reserve Board's review of a BHC Act Section 3 application is organized around five statutory factors that the Board must consider before approving or denying an application. Each factor requires a substantive showing from the applicant, and deficiencies in any factor can delay or defeat approval. Counsel preparing a Section 3 application must treat each factor as a distinct analytical and evidentiary requirement, not a formality to be addressed with boilerplate language.
The financial resources factor requires the applicant to demonstrate that the combined institution will maintain adequate capital, liquidity, and earnings capacity following the acquisition. The FRB evaluates pro forma capital ratios, the quality of the acquirer's existing capital base, the purchase price and its financing structure, and any planned capital distributions that would reduce capital levels after closing. An acquirer whose pro forma capital ratios are thin, or who is relying on leverage to finance the acquisition, faces heightened scrutiny of financial resources and may be required to commit to maintaining specific capital ratios for a defined period post-closing.
The managerial resources factor evaluates the quality and depth of management at both the acquirer and the target, and the acquirer's track record in managing acquired institutions. The FRB reviews the supervisory ratings assigned by examiners to both institutions, the experience and regulatory history of senior executives and directors who will oversee the combined entity, and any prior enforcement actions involving the acquirer's management team. An acquirer with a strong supervisory record and a demonstrated track record of successful bank integrations presents better managerial resources than one with a recent formal action or a first-time acquirer team.
The competitive effects factor, discussed further in the antitrust section below, requires a deposit concentration analysis in every local banking market where both institutions operate. The convenience and needs factor requires a showing that the transaction will serve the convenience and needs of the communities to be served, with particular attention to the CRA performance of both institutions. The financial stability factor requires an assessment of whether the transaction poses risks to the stability of the United States banking or financial system, a factor that the FRB has applied primarily to larger transactions. The AML effectiveness factor, added by the Anti-Money Laundering Act of 2020, requires the applicant to address the effectiveness of its BSA/AML compliance program and, for larger acquirers, to disclose any enforcement actions involving money laundering or BSA violations.
OCC and FDIC Roles in Bank Merger Approvals
The Office of the Comptroller of the Currency serves as the primary federal banking regulator for national banks and federal savings associations. When a bank merger results in a national bank, the OCC is the approving agency under the Bank Merger Act, and the merger may not be consummated until OCC approval is received and applicable waiting periods expire. The OCC evaluates bank merger applications under standards substantially similar to the FRB's Section 3 five-factor analysis, assessing competitive effects, financial and managerial resources, convenience and needs, and community reinvestment considerations.
The OCC publishes its bank merger application procedures and standards in the Comptroller's Licensing Manual, which is updated periodically to reflect policy changes and judicial developments. The OCC's approach to competitive analysis relies on the same deposit market concentration methodology used by the FRB, and the OCC coordinates its competitive review with the DOJ's Antitrust Division. Applications involving significant competitive concerns in local banking markets require the applicant to propose and execute branch divestitures as a condition of OCC approval, with approved divestiture purchasers identified before final action.
The FDIC serves as the primary federal banking regulator for state-chartered banks that are not members of the Federal Reserve System. When a bank merger results in a state non-member bank, the FDIC is the approving agency under the Bank Merger Act. The FDIC's review of bank merger applications follows the same five-factor analytical framework applied by the FRB and OCC. The FDIC also plays a distinct and critical role in failed-bank transactions, where it acts as receiver for the failed institution and orchestrates the competitive bidding and assisted acquisition process outside the normal Bank Merger Act approval timeline.
Coordination among the FRB, OCC, and FDIC is required when a transaction involves multiple regulatory approvals. A bank holding company acquisition that triggers both a Section 3 FRB approval and a downstream bank merger requiring OCC approval must sequence the two approval processes carefully. In practice, the FRB and OCC coordinate their reviews and share examination findings, but each agency acts independently and on its own timeline. Deal teams should not assume that approval from one agency will accelerate or be determinative of approval from the other.
State Regulator Approvals and Interstate Expansion
State banking regulators retain significant authority over bank mergers and holding company acquisitions involving state-chartered institutions. The applicable state banking department must approve mergers involving state-chartered banks, and in many states, the state regulator also has authority to review acquisitions of state-chartered bank holding companies. State approval timelines, standards, and filing requirements vary considerably, and failing to include state approvals in the deal timeline is a common mistake that can create closing delays.
The Riegle-Neal Interstate Banking and Branching Efficiency Act of 1994 created the current framework for interstate bank acquisitions. Before Riegle-Neal, interstate banking was governed by state opt-in statutes, and nationwide bank holding company acquisitions were not universally available. Riegle-Neal authorized adequately capitalized and managed bank holding companies to acquire banks in any state, subject to the deposit concentration caps discussed in the FAQ section below. The Act also permitted interstate bank mergers, subject to state opt-out provisions that some states exercised in the initial post-Riegle-Neal period.
The 30 percent state deposit cap under Riegle-Neal is the provision that most frequently affects multi-state acquirers. When a bank holding company's combined deposits in a single state, following the proposed acquisition, would exceed 30 percent of total insured deposits in that state, the FRB may not approve the acquisition as to that state's institutions. States may adopt a different threshold by statute, and some have done so. The 30 percent cap does not apply to the initial entry of a bank holding company into a state, meaning that a holding company without existing deposits in a state may acquire a bank in that state even if the acquisition would immediately place the combined institution above 30 percent in that state.
Interstate branching rules under Riegle-Neal permit banks to establish branches across state lines following a merger, subject to host state laws on branching restrictions. Some states prohibit de novo interstate branching while permitting acquisition of an existing branch network through a merger. Counsel advising on post-merger branch integration must confirm which states permit interstate branching by merger and which require the acquirer to maintain the acquired branches as a separately chartered subsidiary rather than merging them into the acquirer's charter.
Navigating Concurrent Federal and State Approval Processes
Most bank acquisitions require simultaneous FRB, OCC or FDIC, and state banking regulator approvals, each on independent timelines. Sequencing these processes correctly from the outset, and building appropriate outside dates and extension provisions into the purchase agreement, is essential to protecting the deal.
Submit Transaction DetailsChange in Bank Control Act 60-Day Notice
The Change in Bank Control Act of 1978 requires advance notice to the applicable federal banking regulator before any person acquires control of an insured depository institution. The CIBCA notice regime is distinct from the BHC Act application process and applies in circumstances where the acquirer is an individual or entity that is not using a bank holding company structure. Understanding when CIBCA applies, and when it overlaps with or is displaced by the BHC Act, is essential for any investor acquiring a stake in a banking organization.
Control under CIBCA is presumed when the acquirer would own, control, or hold the power to vote 25 percent or more of any class of voting securities of the institution. Control is also presumed when the acquirer would own, control, or hold the power to vote 10 percent or more of any class of voting securities if the institution has a class of securities registered under the Securities Exchange Act of 1934, or if no other person will own, control, or hold the power to vote a greater percentage of voting securities after the acquisition. An acquirer may rebut the 10 percent presumption by demonstrating that the acquisition will not result in control, but the burden of rebuttal rests with the acquirer and the regulator retains significant discretion to reject a rebuttal.
The CIBCA notice must be filed at least 60 days before the proposed acquisition date and must include information about the acquirer's identity, financial condition, business plans, and the source of funds for the acquisition. The regulator must act on the notice within the 60-day period, either disapproving the acquisition or permitting it to proceed by inaction. Grounds for disapproval under CIBCA include the financial condition of the acquirer being inadequate to support the institution, competence or integrity concerns about the proposed management, the acquisition being contrary to the convenience and needs of the community, or the acquisition constituting a violation of law.
CIBCA's application to private equity investors acquiring bank stakes has been a recurring regulatory question. The FRB and OCC have issued guidance on when a private equity fund's acquisition of a bank stake triggers CIBCA or constitutes control for BHC Act purposes, taking into account governance rights, board representation, investment restrictions, and the fund's ability to exit the investment. Private equity investors in banking organizations must analyze the full package of rights they are acquiring, not just the voting share percentage, to determine the applicable regulatory framework.
Community Reinvestment Act Diligence and Protest Exposure
The Community Reinvestment Act of 1977 requires federal banking agencies to assess and take into account each institution's record of meeting the credit needs of its entire community, including low- and moderate-income neighborhoods, when evaluating applications for mergers, acquisitions, and other structural changes. A bank's CRA performance rating, assigned following periodic CRA examinations, is a central element of the regulatory review of any merger or acquisition application. An Outstanding rating strengthens an application; a Satisfactory rating is neutral; a Needs to Improve or Substantial Noncompliance rating is a significant obstacle.
The public comment period for a bank merger or acquisition application, typically 30 days from publication in the Federal Register, provides an opportunity for community groups, advocacy organizations, and members of the public to submit comments supporting or opposing the application. A protest letter that documents specific CRA deficiencies, unmet credit needs in the assessment area, or concerns about the proposed merger's impact on low- and moderate-income communities can trigger additional regulatory review, requests for supplemental information from the applicant, and in some cases a public meeting before the regulator acts on the application.
Proactive CRA diligence before signing a merger agreement allows the acquirer to assess the protest risk accurately and develop a mitigation strategy. Key diligence elements include reviewing the target's most recent CRA public performance evaluations, analyzing lending patterns in the assessment areas for evidence of disparate treatment or redlining risk, assessing the target's investment and service activities, and identifying community organizations that have been active in the target's markets. An acquirer who discovers a Needs to Improve rating at the target before signing can negotiate contractual protections, including a CRA remediation obligation as a closing condition, rather than inheriting the deficiency without recourse.
CRA agreements between acquirers and community organizations, negotiated during the public comment period, have become a common mechanism for managing protest risk. These agreements typically commit the combined institution to specific lending, investment, and service targets in affected communities over a multi-year period. While voluntary CRA agreements are not legally binding on the regulator, they can neutralize community opposition and demonstrate to the agency that the acquirer takes its CRA obligations seriously. Counsel should review any proposed CRA agreement carefully to ensure that the commitments are achievable, that the measurement methodology is defined, and that consequences for non-performance are proportionate and manageable.
HSR Act Plus Bank Regulatory Antitrust Analysis
Bank mergers are subject to antitrust review by both the DOJ's Antitrust Division and the applicable federal banking regulator, but the HSR Act premerger notification requirements interact with the banking regulators' review in a specific way. Under 15 USC 18a(c)(7), transactions that require approval under the Bank Merger Act are exempt from HSR filing requirements if the transaction will be subject to antitrust review by the applicable banking regulator. As a result, most bank mergers that require OCC or FDIC approval under the Bank Merger Act are not separately subject to HSR filing, although the DOJ retains the right to challenge approved bank mergers in federal court for up to 30 days after approval is published.
The deposit concentration analysis used by banking regulators to assess competitive effects differs from the DOJ's standard merger analysis framework. Banking regulators analyze competitive effects at the local banking market level, using FDIC Summary of Deposits data to calculate the Herfindahl-Hirschman Index for each market where the merging institutions both operate. A post-merger HHI above 1,800, combined with an HHI increase exceeding 200 points attributable to the merger, presumptively raises competitive concerns requiring additional analysis or divestiture commitments. The DOJ participates in this analysis as a matter of coordination with the banking regulators, and DOJ staff review proposed divestitures to confirm they are sufficient to address competitive concerns.
Branch divestitures are the primary remedy for competitive concerns in bank mergers. When deposit concentration in one or more local banking markets exceeds the applicable threshold, the applicant must identify branches or whole bank subsidiaries for divestiture, negotiate with approved acquirers, and commit to completing the divestitures as a condition of regulatory approval. The regulatory agencies require that the divestiture acquirer be identified and that the terms of the divestiture be substantially agreed before the agencies will grant final approval. Divestitures take time to execute, and acquirers who underestimate the number of markets requiring divestiture, or who fail to identify willing and qualified divestiture purchasers, can find the divestiture condition materially delaying closing.
Counsel must run the deposit concentration analysis at the local banking market level, not the national or state level, for every market where both institutions have deposit-taking locations. Federal Reserve districts publish local banking market definitions that may not correspond to intuitive geographic boundaries, and the relevant market definitions can significantly affect the concentration calculation. Obtaining current FDIC Summary of Deposits data and mapping it to the applicable market definitions is an early diligence step that should be completed before finalizing the deal structure.
AML/BSA and OFAC Diligence
Bank acquisitions require more intensive AML and BSA diligence than general corporate M&A because the stakes are asymmetric. An acquirer who purchases a manufacturing company with undisclosed BSA deficiencies may face regulatory fines and remediation costs. An acquirer who purchases a bank with undisclosed BSA deficiencies inherits an obligation that the federal banking regulators will hold the new management accountable for immediately, under public scrutiny, and with potential consequences for the combined institution's ability to grow, branch, or make further acquisitions.
The FinCEN beneficial ownership rules, as substantially revised under the Corporate Transparency Act, affect the BSA/AML diligence analysis in two ways. First, the acquired bank's existing beneficial ownership identification and verification procedures for customers must be assessed for compliance with current FinCEN requirements. Second, the acquirer's own BSA/AML program must be evaluated by the FRB as part of the Section 3 application under the AML effectiveness factor added in 2020. An acquiring institution with a documented history of BSA examination findings, consent orders involving AML program deficiencies, or civil money penalties from FinCEN faces a more difficult Section 3 approval process than one with a clean AML supervisory record.
OFAC sanctions screening program diligence is a distinct component of the BSA review. The target bank's sanctions screening program must be assessed for its comprehensiveness, frequency of list updates, procedures for handling potential matches, and documentation of screening results. Any history of apparent OFAC violations, voluntary self-disclosures, or OFAC enforcement actions must be identified during diligence and disclosed in the regulatory application. Acquirers must also assess whether the target's customer base, geographic footprint, or product mix creates elevated sanctions risk that will require program enhancements after closing.
Integration of the target's BSA/AML and OFAC programs into the acquirer's compliance infrastructure is a Day 1 planning obligation, not a post-closing project to be scheduled at convenience. The combined institution must maintain a functional, compliant program from the moment the merger closes. Integration planning must address customer risk rating migration, transaction monitoring system harmonization, beneficial ownership record transfer, and staff training on the combined institution's policies and procedures. Regulators examine BSA/AML program quality on a post-merger examination schedule that may arrive sooner than anticipated for acquirers who have not completed integration.
BSA/AML and Enforcement Action Diligence in Bank Acquisitions
Inherited BSA/AML deficiencies and carry-forward enforcement actions are among the most consequential diligence findings in banking M&A. Identifying these issues before signing, and structuring appropriate contractual protections, requires banking regulatory counsel engaged from the earliest stages of the transaction.
Request Engagement AssessmentCapital Treatment and Regulatory Capital Plans
Regulatory capital adequacy is both a diligence consideration and a closing condition in bank acquisitions. The acquirer must demonstrate, as part of the Section 3 application and the Bank Merger Act application, that the combined institution will meet all applicable regulatory capital requirements immediately after closing and on a forward-looking basis. This requires preparation of pro forma capital analyses that model the impact of the purchase price, any goodwill and other intangible assets generated by purchase accounting, the capital of the target on a carry-forward basis, and any planned capital actions in the period following closing.
Common Equity Tier 1, Tier 1, and Total Capital ratios for the combined institution must be calculated under the applicable capital rule framework. For community banks that have adopted the community bank leverage ratio framework, the analysis focuses on the leverage ratio rather than the risk-based capital ratios. For larger institutions subject to the full Basel III capital framework, the analysis is more complex and must account for risk-weighted asset calculations, counterparty credit risk, and the treatment of specific asset categories under the standardized or advanced approaches. Institutions subject to stress testing requirements must also address how the acquisition affects their capital planning assumptions and stress test results.
Deferred tax assets generated by purchase accounting differences between book value and fair value of acquired assets can affect regulatory capital immediately after closing. Under the Basel III capital rules, deferred tax assets that depend on future profitability are subject to limitations on their inclusion in Common Equity Tier 1 capital. A transaction that generates significant deferred tax assets from purchase accounting may produce a combined institution with pro forma capital ratios that appear adequate under GAAP but that are constrained under the regulatory capital framework due to deferred tax asset limitations.
Capital planning for the post-merger period should address dividend policy, share repurchase plans, capital distribution requests to the holding company from bank subsidiaries, and any planned growth in risk-weighted assets. The FRB and other banking agencies expect acquirers to maintain capital above minimum requirements with adequate buffers throughout the integration period, and may require the acquirer to commit to maintaining specific capital ratios as a condition of approval. Any pre-closing capital planning commitments made to the regulator must be reflected in the post-closing capital plan and monitored carefully.
MOUs, Consent Orders, and Formal Agreement Carry-Forward
The principle that enforcement actions carry forward through a merger or acquisition is one of the most consequential features of banking M&A from a risk allocation perspective. When a bank subject to a memorandum of understanding, written agreement, formal agreement, or consent order is acquired, the acquirer inherits the obligation to comply with those enforcement actions on the same terms that bound the target. The change of ownership does not terminate the action, suspend its requirements, or extend any compliance timelines. The combined institution and its new management are accountable from closing for satisfying every outstanding obligation in every inherited enforcement action.
Informal actions such as memoranda of understanding are not publicly disclosed by the banking agencies, making their discovery dependent entirely on the target's voluntary disclosure and the acquirer's diligence. A target that is subject to an MOU has an obligation to disclose it under the standard representations and warranties of a bank merger agreement, but the acquirer cannot verify the disclosure independently through publicly available information. Counsel must include explicit representations requiring the target to disclose all informal and formal enforcement actions, including actions that have been terminated within a specified lookback period, and must require production of the actual action documents as part of diligence.
The Federal Reserve's supervisory rating, known as the CAMELS composite rating, affects the acquirer's ability to proceed with the acquisition in several respects. An acquirer rated 3 or worse may face more intensive scrutiny of its managerial resources and financial condition in the Section 3 application. A target rated 4 or 5 raises immediate questions about the adequacy of the purchase price, the acquirer's capacity to remediate the identified deficiencies, and the feasibility of obtaining timely regulatory approval. Regulators may require enhanced commitments from the acquirer regarding the timing of remediation, the allocation of management attention to the acquired institution, and the maintenance of capital above minimum levels during the remediation period.
State banking agency enforcement actions carry forward independently of federal enforcement actions and must be addressed separately. A state-chartered bank may be subject to both a federal and a state enforcement action for the same underlying deficiencies, and both carry forward through the merger. The acquirer must engage with both the federal and state regulators regarding the status of inherited actions and the plan for satisfying outstanding obligations. In some cases, coordinating the resolution of federal and state enforcement actions before or shortly after closing can be accomplished through a single remediation plan accepted by both agencies.
Executive Compensation Change-in-Control and Golden Parachute Limits
Executive compensation arrangements in bank acquisitions are subject to regulatory constraints that do not apply to general corporate M&A. The FDIC's golden parachute rule under 12 CFR Part 359 restricts payments to institution-affiliated parties in connection with a change in control when the institution is in troubled condition. These restrictions affect the design of change-in-control severance agreements, equity vesting acceleration provisions, and any other compensation arrangements that are triggered by or conditioned on a change of ownership.
Part 359 defines a golden parachute payment to include any payment made by an insured depository institution or its holding company to an institution-affiliated party on account of the departure of the party in connection with the merger or acquisition, if the payment is contingent on the insolvency, bankruptcy, or appointment of a conservator or receiver for the institution, or if the institution is in troubled condition at the time of payment. Troubled condition is defined to include institutions with composite CAMELS ratings of 4 or 5, institutions subject to formal enforcement orders, and institutions for which the primary federal regulator has notified the institution in writing of its troubled condition designation.
Payments that would otherwise be restricted under Part 359 may be made with the prior written approval of the FDIC and the institution's appropriate federal banking agency. The application must include an affidavit by the institution-affiliated party confirming that the party did not participate in the decisions that led to the institution's troubled condition, and the agencies must find that the payment is not excessive under the circumstances. Counsel advising on executive compensation in bank acquisitions must identify at the outset whether either the target or the acquirer is in troubled condition, and must structure all change-in-control compensation arrangements to comply with Part 359 or to obtain the required regulatory approvals.
Beyond Part 359, executive compensation in bank holding company acquisitions is subject to the general compensation safety and soundness standards applied by banking regulators, which require that compensation be reasonable and not create incentives for excessive risk-taking. Acquirers designing post-merger retention programs for key executives at the target must ensure that the structure of those programs, including vesting schedules, performance conditions, and clawback provisions, is consistent with the combined institution's safety and soundness obligations and with applicable regulatory guidance on incentive compensation.
Branch Consolidation and Deposit Broker Relationships
Branch consolidation following a bank merger requires compliance with the branch closing notice procedures established under the Federal Deposit Insurance Act and implementing regulations. A bank intending to close a branch must provide at least 90 days' advance notice to the applicable banking agency and to affected customers. The notice must describe the reasons for the closure, the date of the proposed closure, and the alternative banking facilities available to affected customers. The agency may, in connection with its review of the notice, require the bank to address community concerns about the impact of the closure on low- and moderate-income areas.
For national banks, OCC regulations under 12 CFR 5.30 govern the procedures for branch closings, including the required notice content, the timing of customer notifications, and the OCC's authority to require community input. For state-chartered banks, the applicable state banking law governs branch closing procedures, and requirements vary considerably across states. Some states require state banking agency approval for branch closings, not merely notice, and failure to obtain required state approvals can expose the institution to regulatory action.
Deposit broker relationships present a distinct regulatory consideration in bank acquisitions. Banks that are not well-capitalized under the federal capital regulations are restricted in their ability to accept brokered deposits, and banks that are adequately capitalized may accept brokered deposits only with a waiver from the FDIC. When an acquisition results in a combined institution whose capital ratios are below the well-capitalized thresholds in any capital category, the institution becomes subject to brokered deposit restrictions. An acquirer who relies on brokered deposits as a funding source must model the combined institution's capital ratios carefully and plan for the possibility of brokered deposit runoff if capital ratios fall below well-capitalized levels during the integration period.
The FDIC's brokered deposit rules, which were significantly revised in 2021, affect how institutions classify deposits obtained through third-party intermediaries, including deposit placement networks and reciprocal deposit arrangements. The revised rules created a new framework for determining which deposits are classified as brokered, with important implications for institutions that participate in deposit network programs. Acquirers must evaluate both institutions' participation in deposit networks under the revised rules and assess the brokered deposit classification implications for the combined institution following the merger.
Integration Planning and Day 1 Readiness
Integration planning for a bank acquisition is a more operationally complex undertaking than integration planning for most general corporate M&A, because banking operations are subject to continuous regulatory supervision and customer expectations for uninterrupted service. The integration must achieve legal entity rationalization, core system conversion, compliance program harmonization, and operational consolidation while maintaining service quality, regulatory compliance, and capital adequacy throughout the transition period. Planning for this process must begin before closing, not after.
Core banking system conversion is the highest-risk element of most bank integration programs. Banks operate on core processing systems that manage deposit accounts, loan portfolios, payment processing, and general ledger functions. Merging two banks typically requires converting the target's accounts and data to the acquirer's core system or to a new combined system, a process that is technically complex, operationally disruptive, and subject to regulatory scrutiny. The OCC and other banking agencies issue guidance on technology change management that applies to core system conversions, and regulators may require advance notification and a detailed conversion plan before approving a conversion that is scheduled to occur shortly after closing.
Legal entity rationalization involves the structural simplification of the combined holding company, including the merger of subsidiary banks, the elimination of intermediate holding companies, the transfer of assets between affiliates, and the restructuring of intercompany arrangements. Each of these steps may require additional regulatory approvals or notifications beyond the initial merger approval. Counsel must map the full legal entity structure of both the acquirer and the target, identify all entities that will be affected by the rationalization plan, and determine the regulatory approvals required for each step before the rationalization plan is finalized.
HMDA and CRA reporting integration is a compliance obligation that becomes effective immediately for the combined institution. The Home Mortgage Disclosure Act requires annual reporting of mortgage loan data by geography and borrower characteristics, and the report must reflect the combined institution's entire lending activity for the calendar year in which the merger closes. Similarly, CRA performance examinations following the merger will evaluate the combined institution's lending, investment, and service activities across all assessment areas, including those inherited from the target. The CRA assessment area configuration must be reviewed and potentially revised following the merger to ensure that it accurately reflects the combined institution's footprint.
Selecting Counsel for a Bank M&A Transaction
Banking M&A transactions require counsel with distinct competencies that differ from those needed in general corporate M&A. The regulatory approval process involves direct engagement with the Federal Reserve, OCC, FDIC, and state banking agencies, each with its own procedures, preferences, and relationship expectations. Counsel without established relationships with the banking regulatory agencies and familiarity with their current application standards will face a steeper learning curve that can affect both the quality of the regulatory submissions and the efficiency of the review process.
Banking regulatory depth means more than familiarity with the applicable statutes. It means understanding how the agencies are currently applying those statutes, which factors they are weighing most heavily in the current supervisory environment, which issues are generating pre-filing inquiries from agency staff, and what level of detail and documentation the agencies expect in support of each element of the application. This practical knowledge, accumulated through sustained engagement with the regulatory process, is not replicated by reading statutes and regulations. Deal teams should ask prospective counsel about their recent experience with applications to the specific agencies that will be reviewing the proposed transaction.
Concurrent coordination with general corporate counsel is a structural feature of most bank M&A transactions, not an exception. The banking regulatory process is handled by banking regulatory counsel. The merger agreement drafting, public company disclosure obligations, securities law compliance, and general corporate governance aspects of the transaction are handled by general M&A counsel. When the acquirer or target is a public company, SEC registration statements and proxy materials are prepared by securities counsel. These workstreams must be coordinated from the outset to ensure that positions taken in regulatory filings are consistent with positions taken in SEC filings and merger agreement representations, and that the overall timeline accommodates the longest-lead regulatory approval process.
The role of partner-level attention in banking M&A cannot be overstated. Federal banking regulators know the counsel who appear regularly before them, and the credibility of regulatory submissions is partly a function of the reputation and experience of the counsel who prepare them. A transaction that involves difficult regulatory issues, including competitive concerns requiring divestitures, CRA protest risk, or enforcement action carry-forward, requires counsel with the judgment and regulatory relationships to navigate those issues effectively. Acquirers who engage banking M&A counsel early, before the letter of intent is signed, position themselves to address regulatory risk proactively rather than reactively.
Bank Holding Company M&A: Frequently Asked Questions
How long does a BHC Act Section 3 application take to clear FRB?
The Federal Reserve Board's statutory review period for a BHC Act Section 3 application is 91 days from the date the application is accepted as complete, but most approvals arrive well before that outside date. In practice, an uncontested community bank acquisition with no competitive concerns, no adverse CRA ratings, and no outstanding enforcement actions typically reaches approval in 60 to 75 days from filing. Contested applications, those involving CRA protests from community groups, significant HHI concentration in local deposit markets, or acquirers with any pending supervisory matters, can run the full statutory period or receive a tolling letter that extends the timeline further. The Federal Reserve also imposes a 15-day post-approval waiting period before closing may occur, and this waiting period can be waived in limited circumstances such as a failed-bank assisted transaction. Pre-filing engagement with the applicable Federal Reserve Bank, thorough preparation of financial and managerial resources exhibits, and proactive contact with community groups before filing can meaningfully compress the review timeline. Filers should plan for a minimum of 90 days from filing to closing when setting deal milestones.
When do we trigger a Change in Bank Control Act notice instead of a BHC Act application?
The Change in Bank Control Act requires a 60-day advance notice to the applicable federal banking regulator when an individual, group acting in concert, or entity acquires control of an insured depository institution without using a bank holding company structure. Control is presumed at 25 percent or more of any class of voting securities, and also presumed at 10 percent or more when the institution has a class of securities registered under the Securities Exchange Act or when the acquirer will be the largest shareholder after the acquisition. A BHC Act Section 3 application, by contrast, is required when a bank holding company acquires another bank or bank holding company. The two frameworks are not always mutually exclusive. A private equity investor acquiring a minority stake in a bank holding company below the 10 percent presumption threshold may still trigger CIBCA if other facts establish control, such as board representation rights, management agreements, or veto rights over major decisions. Counsel must analyze the specific ownership structure, governance documents, and the acquirer's relationship with existing shareholders before determining whether a Section 3 application, a CIBCA notice, or a rebuttal of the control presumption is the appropriate regulatory pathway.
What happens to existing MOUs, consent orders, or memorandums of understanding at closing?
Existing enforcement actions against an acquired bank do not terminate at closing. A memorandum of understanding, written agreement, consent order, or formal agreement entered into between the target bank and its primary federal or state regulator carries forward and binds the acquiring institution and its new management as successors in interest. The acquirer steps into the shoes of the acquired bank with respect to all outstanding supervisory obligations, including capital maintenance requirements, management information system improvements, BSA/AML program remediation timelines, and any restrictions on dividends, growth, or new activities. The Federal Reserve, OCC, FDIC, and state banking departments do not automatically terminate enforcement actions upon a change of control. In some cases, the acquirer may negotiate with the regulator before closing to have a formal order terminated or downgraded to an informal action, but this requires demonstrating to the agency's satisfaction that the underlying deficiencies have been corrected or will be corrected under the new ownership structure. The existence of any enforcement action at the target level is a significant diligence finding that warrants direct regulatory engagement before signing and careful contractual allocation between buyer and seller.
How do Riegle-Neal deposit caps affect an interstate bank holding company acquisition?
The Riegle-Neal Interstate Banking and Branching Efficiency Act of 1994 imposes two deposit concentration limits on interstate bank acquisitions. The nationwide cap prohibits the resulting bank holding company from controlling more than 10 percent of total insured deposits in the United States following the acquisition. The state cap prohibits the resulting institution from controlling more than 30 percent of total insured deposits in any single state where both the acquirer and the target have existing deposits. States may waive the 30 percent cap or set a different threshold, and some states have adopted caps lower than 30 percent. The nationwide 10 percent cap applies regardless of state law. These caps are measured at the time of consummation, using FDIC Summary of Deposits data. Acquirers approaching either threshold must calculate pro forma combined deposit shares before signing and factor potential divestiture obligations into the deal structure and pricing. Divestitures of branches or whole banks may be required as a condition of FRB approval to bring the combined institution within applicable limits. Counsel must obtain current deposit concentration data from the FDIC and from applicable state banking agencies before finalizing the acquisition strategy.
What is the CRA protest risk in a bank merger and how do we mitigate it?
The Community Reinvestment Act requires federal banking regulators to consider the CRA performance of the acquiring institution and, in some contexts, the target when evaluating a bank merger or acquisition application. Community groups and advocacy organizations have the right to submit comment letters opposing an application during the public comment period, which is typically 30 days from the date the application is published in the Federal Register. A formal protest, particularly one filed by a well-organized advocacy group with documented evidence of CRA deficiencies, can extend the regulatory review period, trigger requests for additional information from the agency, and in some cases lead the regulator to hold a public meeting before acting on the application. Mitigation strategies include ensuring that both the acquirer and target carry Satisfactory or Outstanding CRA ratings, engaging proactively with community organizations in affected assessment areas before filing, developing a post-merger CRA plan that commits to expanded lending and investment in underserved communities, and communicating that plan to potential protest filers before the public comment period opens. Institutions with Outstanding ratings and a documented record of community engagement face materially lower protest risk than institutions with Needs to Improve or Substantial Noncompliance ratings.
When does the DOJ require branch divestitures in a bank merger?
The Department of Justice evaluates the competitive effects of bank mergers in coordination with the primary federal banking regulator, using a deposit-based market concentration analysis under the Herfindahl-Hirschman Index. The DOJ's Bank Merger Guidelines establish thresholds above which a transaction is presumed to have adverse competitive effects. Generally, a post-merger HHI above 1,800 in a relevant banking market, combined with an HHI increase of more than 200 points attributable to the merger, triggers enhanced scrutiny and a presumption of competitive concern. When a merger produces concentration levels above these thresholds, the DOJ typically requires divestitures of branches in the affected markets sufficient to reduce post-merger concentration below the applicable threshold. The markets subject to deposit concentration analysis are defined by the Federal Reserve as local banking markets, which may correspond to metropolitan statistical areas, rural counties, or custom market definitions. Buyers must model deposit shares at the local market level for every overlapping market before signing, identify likely divestiture candidates, and factor divestiture costs and the time required to complete branch sales into the deal timeline. Divestiture agreements with approved acquirers must typically be in place before the primary regulator will grant final approval.
How do we handle change-in-control severance payments under FDIC Part 359?
The FDIC's golden parachute rule under 12 CFR Part 359 restricts the ability of insured depository institutions and their holding companies to make certain change-in-control severance payments, commonly called golden parachute payments, to institution-affiliated parties. A payment is subject to Part 359 restrictions if it is made to an institution-affiliated party in connection with a change in control, if the institution is in troubled condition, or if the payment is made after the institution is closed or placed into conservatorship or receivership. Troubled condition is defined to include institutions with composite CAMELS ratings of 4 or 5, institutions subject to formal enforcement actions, or institutions for which the primary regulator has otherwise notified the institution of its troubled condition designation. Payments that would otherwise be restricted may be made with advance written consent from the FDIC and, if applicable, the appropriate federal banking agency. The application for approval must demonstrate that the payment is not excessive, that the institution-affiliated party was not responsible for the condition that led to the troubled designation, and that the payment is otherwise consistent with safe and sound banking practices. Deal teams should analyze whether either the target or the acquirer carries a troubled condition designation before executing any change-in-control severance agreements.
Can we close a bank merger before all regulatory approvals are final?
No. Closing a bank merger before all required regulatory approvals have been obtained and all applicable waiting periods have expired is a violation of federal law. Under the Bank Holding Company Act, a bank holding company may not acquire control of a bank without prior Federal Reserve Board approval. Under the Bank Merger Act, a bank merger may not be consummated before the applicable federal banking regulator has approved the transaction. Even after regulatory approval is granted, most approvals carry a mandatory waiting period before the transaction may close, typically 15 days under the BHC Act and 30 days under the Bank Merger Act to allow the DOJ to challenge the transaction on antitrust grounds. The 30-day DOJ waiting period can be shortened to 15 days with DOJ concurrence, but may not be waived entirely absent special circumstances. In failed-bank assisted transactions arranged by the FDIC under the Federal Deposit Insurance Act, these waiting periods may be shortened or waived because the FDIC acts as receiver and the transaction is structured to protect depositors rather than to effectuate a voluntary merger. Parties who attempt to pre-close or informally transfer operational control before receiving all required approvals expose themselves to enforcement action, civil money penalties, and potential unwinding of the transaction.
What AML/BSA diligence is required before signing a bank acquisition LOI?
AML and BSA diligence for a bank acquisition should begin before the letter of intent is signed, not after. Pre-LOI diligence should include a review of the target's most recent BSA/AML examination findings and ratings from the primary federal regulator, any FinCEN enforcement actions or civil money penalties in the past five years, the status of any ongoing suspicious activity report investigations, the quality and completeness of the target's beneficial ownership procedures, and the target's OFAC sanctions screening program and its history of any apparent violations. Post-LOI diligence deepens this initial review to include a transaction testing sample to verify that the target's BSA/AML procedures are functioning as documented, an assessment of the target's customer risk rating methodology, a review of correspondent banking relationships and any terminations for cause, and an analysis of the geographic footprint and product mix for BSA/AML risk concentration. Acquirers who discover material BSA/AML deficiencies after signing often face difficult choices: renegotiate the price, require remediation before closing, or walk away. The risk of inheriting a deficient BSA/AML program is particularly acute because federal regulators expect the acquirer to remediate inherited deficiencies promptly, and the post-closing window for remediating inherited programs is short before the regulator begins attributing ongoing deficiencies to new management.
How do we coordinate SEC proxy/registration disclosure with FRB application timing?
In a public company bank merger, the acquiring company or the target typically must file a registration statement on Form S-4 with the SEC containing a proxy statement for the shareholder vote on the transaction. The SEC review process and the FRB application review process run on independent tracks with different timelines, and coordinating the two is essential to avoid closing delays. The SEC review of an S-4 typically takes 30 days for an initial comment letter, followed by additional rounds of comments and responses that can extend the process to 90 days or longer for complex transactions. The FRB typically will not accept an application as complete until the S-4 has been declared effective by the SEC, because the FRB relies on the proxy statement as a source of publicly available information about the transaction. This sequencing means that FRB application preparation should proceed in parallel with S-4 drafting, but formal FRB filing should be timed to follow, not precede, SEC effectiveness. Deal teams should plan for total regulatory approval timelines of 120 to 180 days from signing in a public company bank merger, accounting for SEC comment rounds, FRB review, state regulator approvals, and mandatory post-approval waiting periods before closing may occur.
Related Resources
FRB BHC Act Section 3 Change of Control Application
Five-factor statutory standard, application requirements, and FRB review timelines for bank holding company acquisitions.
CRA Protest Risk in Bank Mergers and Acquisitions
CRA performance ratings, public comment periods, community group engagement, and protest mitigation strategies.
FDIC Bank Merger Act Approval and Deposit Insurance Considerations
Bank Merger Act application process, FDIC review standards, and deposit insurance continuity in bank combinations.
Related Practice Areas
Our attorneys handle M&A transactions and securities matters nationwide. Alex Lubyansky leads every engagement personally.