Latest Compliance News

Private-equity firm General Atlantic, Brazilian bank BTG Pactual and funds managed by Blackstone and Qatar Investment Authority are among buyers of as much as 4.9% each.

Elevated asset prices and an intensely competitive landscape remind the CEO of the years just prior to the 2008 financial crisis, he said Monday.

'We’re a very engaged, active, collegial board who wants to do right by shareholders, employees and the community,' The post Spotlight: At National Bank of Indianapolis, governance balances tradition and transformation appeared first on ABA Banking Journal .

The green light, which came roughly four months after Crypto.com applied, follows conditional approval for trust charters at Circle, Ripple, Paxos and, most recently, Bridge.

The Federal Reserve is seeking public comment on a proposal to codify its recent decision to remove the use of reputational risk from its bank supervision. The post Fed seeks input on removing reputational risk from bank supervision appeared first on ABA Banking Journal .

Following earlier actions to remove reputation risk from its supervision of banks, Federal Reserve Board requests comment on proposal to codify that removal

New orders for manufactured goods in December 2025 decreased $4.3 billion, or 0.7% to $617.5 billion, the U.S. Census Bureau reported. The decline followed a 2.7% November increase. The post Factory orders decreased in December appeared first on ABA Banking Journal .

The Treasury Department has released the first two of six planned resources to help the financial services sector safely deploy artificial intelligence. The post Treasury releases first of AI resources appeared first on ABA Banking Journal .

Female billionaires are growing their wealth faster than men, as the focus is shifting from wealth preservation to empowering the next generation. The post Billionaires on the rise appeared first on ABA Banking Journal .

For banks, training, teamwork and technology are effective tools. ‘48 years can be gone in 48 hours.’ The post Financial fraud threats to seniors are continuous appeared first on ABA Banking Journal .

Public trust in banking has recovered following a sharp decline caused by the 2008 financial crisis, although the U.S. remains one of several countries where it lags behind the levels seen before the Great Recession, according to a new survey by Gallup. The post Survey: Banks regain status as one of the most trusted institutions appeared first on ABA Banking Journal .

Union representatives have long accused the bank of union busting. The National Labor Relations Board dismissed one such claim this month, but Wells faces at least one more.

Kathryn Shiber requested a regular “hard stop” at midnight to sleep and manage a mood and anxiety disorder. The bank granted the accommodation but later fired her. Terms of the settlement were not disclosed.

News items that are the most recent sanctions-related actions from the Office of Foreign Assets Control. The post Recent news from Treasury’s Office of Foreign Assets Control: February 23 appeared first on ABA Banking Journal .

Compliance QOTM answers question on adverse action notice. The post Compliance question of the month: February 2026 appeared first on ABA Banking Journal .

Wells Fargo and Citi topped the leaderboard for AI VC investments as the financial services industry works to build and scale the technology.

95% of organizations see zero return on AI investments. Learn how banks are responding.

Saying that existing capital rules have discouraged bank participation in mortgage lending, ABA and seven other associations offered proposed reforms to help reverse that trend. The post ABA, associations propose bank capital reforms to boost mortgage lending appeared first on ABA Banking Journal .

Most phishing websites are little more than static copies of login pages for popular online destinations, and they are often quickly taken down by anti-abuse activists and security firms. But a stealthy new phishing-as-a-service offering lets customers sidestep both of these pitfalls: It uses cleverly disguised links to load the target brand’s real website, and then acts as a relay between the target and the legitimate site — forwarding the victim’s username, password and multi-factor authentication (MFA) code to the legitimate site and returning its responses. There are countless phishing kits that would-be scammers can use to get started, but successfully wielding them requires some modicum of skill in configuring servers, domain names, certificates, proxy services, and other repetitive tech drudgery. Enter Starkiller , a new phishing service that dynamically loads a live copy of the real login page and records everything the user types, proxying the data from the legitimate site back to the victim. According to an analysis of Starkiller by the security firm Abnormal AI , the service lets customers select a brand to impersonate (e.g., Apple, Facebook, Google, Microsoft et. al.) and generates a deceptive URL that visually mimics the legitimate domain while routing traffic through the attacker’s infrastructure. For example, a phishing link targeting Microsoft customers appears as “login.microsoft.com@[malicious/shortened URL here].” The “@” sign in the link trick is an oldie but goodie, because everything before the “@” in a URL is considered username data, and the real landing page is what comes after the “@” sign. Here’s what it looks like in the target’s browser: Image: Abnormal AI. The actual malicious landing page is blurred out in this picture, but we can see it ends in .ru. The service also offers the ability to insert links from different URL-shortening services. Once Starkiller customers select the URL to be phished, the service spins up a Docker container running a headless Chrome browser instance that loads the real login page, Abnormal found. “The container then acts as a man-in-the-middle reverse proxy, forwarding the end user’s inputs to the legitimate site and returning the site’s responses,” Abnormal researchers Callie Baron and Piotr Wojtyla wrote in a blog post on Thursday . “Every keystroke, form submission, and session token passes through attacker-controlled infrastructure and is logged along the way.” Starkiller in effect offers cybercriminals real-time session monitoring, allowing them to live-stream the target’s screen as they interact with the phishing page, the researchers said. “The platform also includes keylogger capture for every keystroke, cookie and session token theft for direct account takeover, geo-tracking of targets, and automated Telegram alerts when new credentials come in,” they wrote. “Campaign analytics round out the operator experience with visit counts, conversion rates, and performance graphs—the same kind of metrics dashboard a legitimate SaaS [software-as-a-service] platform would offer.” Abnormal said the service also deftly intercepts and relays the victim’s MFA credentials, since the recipient who clicks the link is actually authenticating with the real site through a proxy, and any authentication tokens submitted are then forwarded to the legitimate service in real time. “The attacker captures the resulting session cookies and tokens, giving them authenticated access to the account,” the researchers wrote. “When attackers relay the entire authentication flow in real time, MFA protections can be effectively neutralized despite functioning exactly as designed.” The “URL Masker” feature of the Starkiller phishing service features options for configuring the malicious link. Image: Abnormal. Starkiller is just one of several cybercrime services offered by a threat group calling itself Jinkusu , which maintains an active user forum where customers can discuss techniques, request features and troubleshoot deployments. One a-la-carte feature will harvest email addresses and contact information from compromised sessions, and advises the data can be used to build target lists for follow-on phishing campaigns. This service strikes me as a remarkable evolution in phishing, and its apparent success is likely to be copied by other enterprising cybercriminals (assuming the service performs as well as it claims). After all, phishing users this way avoids the upfront costs and constant hassles associated with juggling multiple phishing domains, and it throws a wrench in traditional phishing detection methods like domain blocklisting and static page analysis. It also massively lowers the barrier to entry for novice cybercriminals, Abnormal researchers observed. “Starkiller represents a significant escalation in phishing infrastructure, reflecting a broader trend toward commoditized, enterprise-style cybercrime tooling,” their report concludes. “Combined with URL masking, session hijacking, and MFA bypass, it gives low-skill cybercriminals access to attack capabilities that were previously out of reach.”

As AI has become more widely implemented, businesses have begun scaling back their payrolls. The post ABA DataBank: Joblessness rose in 2025 for white-collar jobs appeared first on ABA Banking Journal .

Sales of new single-family houses in December 2025 were at a seasonally-adjusted annual rate of 745,000, according to estimates released jointly today by the U.S. Census Bureau and the Department of Housing and Urban Development. This is 1.7% below the November 2025 rate of 758,000 and is 3.8% above the December 2024 rate of 718,000.The […] The post New homes sales fell 1.7% in December appeared first on ABA Banking Journal .

Consumer sentiment edged up 0.2 points month-over-month in February to 56.6, down 8.1 points from one year ago, according to final results of the University of Michigan Surveys of Consumers. The Current Economic Conditions Index increased 1.2 points from the previous month to 56.6 but down 9.1 points from the previous year. The Consumer Expectations […] The post Final: Consumer sentiment edged up 0.2 points in February appeared first on ABA Banking Journal .

ABA is supporting a Senate bill to ensure that robberies of off-site ATMs carry the same legal consequences as bank robberies. The post Bill would strengthen criminal penalties for ATM robberies appeared first on ABA Banking Journal .

The Federal Reserve’s stress test proposal is an encouraging step toward transparency, but further changes would help the agency more fully realize its goal of a more objective process that aligns capital charges with risk, ABA and five other associations said in a joint letter. The post ABA, associations recommend revisions to Fed stress test proposal appeared first on ABA Banking Journal .

An OCC proposal to make Community Reinvestment Act strategic plans more accessible for community banks is increasingly important as the institutions pursue fintech partnerships and niche lending strategies that often do not align neatly with the traditional CRA framework, ABA said. The post ABA offers recommendations for ‘simplified’ CRA planning option for community banks appeared first on ABA Banking Journal .