The Fed just moved on three fronts simultaneously — enforcement, rulemaking, and insider credit — and if you think that's coincidence, you haven't been paying attention.

The Fed just moved on three fronts simultaneously — enforcement, rulemaking, and insider credit — and if you think that's coincidence, you haven't been paying attention.

Heritage State Bank's former chief lending officer just caught a Federal Reserve enforcement action. No fine amount disclosed — and that silence is doing work. When the Fed goes quiet on the number, you read the omission. Something settled. Something got buried. Watch for follow-on disclosure.

Second front: the Fed is formally proposing amendments to bank anti-money laundering program requirements and opening a comment period. Do not sleep on rulemaking just because it hasn't landed yet. Comment periods close. Rules finalize. Compliance costs hit margins. Regional banks get squeezed first — and the CFOs who think they're insulated because they run a clean shop haven't priced in what a mandatory program overhaul actually costs at scale.

Third front — and this is the one nobody's flagging — the Fed is targeting the insider credit channel. Board members, executives, major shareholders. That's Regulation O territory. When regulators start pulling on insider lending simultaneously with AML and individual enforcement, that is a coordinated posture shift, not three separate press releases.

Here's what the posture actually means: the supervisory environment just got structurally tighter. All three moves — individual accountability, program-level compliance, and insider access — those are the three levers you pull when you're signaling that the last cycle of looser oversight is over. Management at regional banks will tell you they're prepared. Management always says that. The question is whether their compliance spend matches the ambition of what the Fed just put on the table — and historically, the gap between what executives claim in earnings calls and what auditors find is where this gets expensive.

If you hold regional bank names right now, this isn't background noise. The question isn't whether your compliance team knows about these proposals — it's whether your exposure survives the answer being no.

The numbers are the numbers. Management can spin. We don't.