CFPB Debanking Investigation: Operation Choke Point Comes Full Circle

Last updated: October 20, 2026

On October 14, 2026, the Consumer Financial Protection Bureau announced it is investigating nine of the largest banks in America, Chase, Bank of America, Citibank, Wells Fargo, U.S. Bank, Capital One, PNC, TD Bank, and BMO, over account closures and restrictions tied to customers’ beliefs or lawful business activities.

The CFPB named three legal theories: the Equal Credit Opportunity Act, the Fair Credit Reporting Act’s adverse action requirements, and the prohibition on unfair, deceptive, or abusive acts or practices.

For licensed lenders who lost operating accounts in the years since Operation Choke Point, this is the first time the federal government has put the banks’ closure files under a consumer-protection microscope.

Thirteen years after Operation Choke Point, the banks that closed your accounts are the ones under investigation.

Consumer using multiple cash advance apps while traditional payday and installment lenders compete for borrowers.

Debanking is a bank closing or restricting a customer’s accounts based on who the customer is or what lawful industry they operate in, rather than on individualized risk.

In this industry it arrives as a form letter citing “internal policy,” no appeal process, and 30 days to move your operating accounts, your ACH origination, and your payroll.

The practice got its institutional start in 2013, and licensed small-dollar lenders have been managing around it ever since.

I cover every regulatory move that touches your loan book, every week, in the Inner Circle newsletter. Free. Operator intel, no fluff.

What the CFPB Announced on October 14

The announcement followed a report by the Office of the Comptroller of the Currency identifying policies at the nine banks that denied or restricted access based on customers’ political or religious beliefs or on lawful business activities. The sectors the announcement named most affected: firearms, oil and gas, and tobacco.

Acting Director Mark Paoletta said the agency will “fully investigate whether the institutions featured in OCC’s report” complied with federal consumer financial law.

Three things matter for operators:

Every one of the nine banks sits above the $10 billion asset threshold where the CFPB holds primary supervisory and enforcement authority. No referral needed.

The CFPB updated its complaint portal specifically to collect debanking complaints. That portal is open to businesses whose accounts were closed over lawful activity.

The stated legal theories are ECOA, the FCRA’s adverse action notice requirements, and UDAAP. Watch that middle one. Regulation B says adverse action reasons “must be specific” and that reasons citing “the creditor’s internal standards or policies” are insufficient. Every debanked lender in America has a letter in a drawer that says exactly that.

No public enforcement action has been filed. The OCC’s findings are supervisory, not adjudicated. But the audience for those closure files just changed.

Operation Choke Point: The Scar This Industry Still Carries

Summer 2013. The Department of Justice, working alongside federal bank regulators, began pressuring banks to cut off entire categories of lawful businesses flagged as “high-risk.” Payday lenders sat at the top of the list, alongside firearms dealers and tobacco sellers.

The mechanics were quiet. No statute named our industry. No rule was published for comment. Banks simply received the message that serving licensed small-dollar lenders invited regulatory heat, and they responded the way banks always respond to heat: they exited.

Operating accounts died by the thousands. Lenders with state licenses on the wall and clean exam histories got 30-day closure notices with no stated reason a human being would recognize. Some operators I know ran through five banking relationships in three years. Every switch cost money, broke ACH continuity, and put portfolios at risk.

The DOJ formally ended the initiative in 2017. The reflex it installed in bank compliance departments never left.

Then August 2025: Executive Order 14331, “Guaranteeing Fair Banking for All Americans,” directed federal banking regulators to strip “reputation risk” from their guidance and review institutions for politicized debanking. The same month, the SBA directed more than 5,000 lenders to end the practice, reinstate affected clients, and report compliance. The OCC report followed. Now the CFPB investigation.

Thirteen years, start to finish, for the wheel to turn.

2013 vs. 2026: The Same Practice, a Different Referee

 Operation Choke Point (2013)CFPB Investigation (2026)
Who held the pressure DOJ and bank regulators pressured banks CFPB examining the banks themselves
Target "High-risk" industries, payday lenders at the top Nine named banks' closure policies
Process Informal guidance, no public rule, no appeal OCC report, ECOA / FCRA / UDAAP review, open complaint portal
Paper trail Closure letters citing "internal policy" Those same letters, now evidence
Operator's position No recourse, find a new bank Documented closures can be filed with the CFPB

Compiled October 19, 2026 from the CFPB's October 14 announcement, the OCC report it cites, and public reporting on Operation Choke Point (2013-2017). The 2026 column describes an open investigation, not adjudicated findings. Regulatory posture changes; verify current status before acting.

Two Moves Every Lender Makes This Week

Move 1: Pull your debanking file.

If a bank ever closed or restricted your accounts over your lawful lending business, assemble the record now. Account opening dates. The closure letter. The stated reason, word for word. Any verbal explanations and who gave them. What it cost you to move: ACH re-origination, new account fees, portfolio disruption, staff hours.

Then decide whether to file through the CFPB’s complaint portal. The agency said it is reviewing consumer complaints and supervisory data for evidence of unlawful debanking. A documented, dated, specific complaint is worth a hundred angry ones.

Move 2: Read your own denial letters like an examiner would.

Here’s where it breaks for operators who think this story is only about the banks. Regulation B’s adverse action standard, the one the CFPB just aimed at Chase, reads the same for a $300 installment loan as for a $300 million account relationship. Specific reasons. Principal reasons. “Internal standards or policies” does not cut it.

Pull ten recent denial letters from your LMS. If the stated reasons would embarrass you in front of a state examiner, fix the template this week, not after the exam notice arrives.

Your Bank Is Not Your Partner.
Your Playbook Is.
Choke Point taught this industry that a banking relationship can vanish with one form letter. The 500-page bible covers ACH strategy, redundant banking relationships, compliance files that survive scrutiny, and the underwriting and collections machinery that keeps your shop running when the ground moves.
GET THE BIBLE

Built from 20+ years operating and consulting in subprime lending.

Harden Your Banking Relationships Before You Need To

The investigation changes the referee. It does not change your exposure tomorrow morning. Operators who survived the Choke Point years did it with redundancy and paperwork, and that playbook still runs:

Hold at least two active banking relationships, with ACH origination capability live at both. A dormant backup account is not a backup. Test it quarterly.

Build the compliance narrative your bank’s risk team needs before they ask. License copies, exam results, complaint volume and resolution record, your principal paydown policy. Make it a single PDF a banker can forward to their compliance committee. The easier you make their yes, the longer it lasts.

Know your bank’s exposure, not just your own. A community bank where you are 4% of deposits treats you differently than a money-center bank where you are a rounding error with headline risk.

Document every conversation about account status. If this week proved anything, it is that closure paperwork gets read eventually. Make sure your side of the file is the complete one.

FAQ: The CFPB Debanking Investigation

What exactly did the CFPB announce on October 14, 2026? An investigation into whether nine of the largest national banks, Chase, Bank of America, Citibank, Wells Fargo, U.S. Bank, Capital One, PNC, TD Bank, and BMO, violated federal consumer financial law when they closed or restricted customer accounts. The review follows an OCC report identifying closure policies tied to customers’ beliefs or lawful business activities.

Is debanking illegal? That is the open question the investigation exists to answer. The CFPB named ECOA, the FCRA’s adverse action requirements, and UDAAP as its theories. Nothing has been adjudicated. I am an operator, not an attorney; treat this as operational insight and get qualified counsel for your specific situation.

What was Operation Choke Point? A 2013 Department of Justice initiative, run with federal bank regulators, that pressured banks to drop categories of lawful businesses labeled high-risk, with payday lenders prominently on the list. It was formally ended in 2017. Its effect on bank risk appetites toward this industry outlived it by a decade.

My bank closed my lending business’s accounts years ago. Can I do anything now? You can document it and file a complaint through the CFPB’s portal, which the agency updated to collect debanking complaints. Whether anything comes of an individual complaint is unknowable. A specific, dated, documented record costs you an afternoon and positions you for whatever remediation framework emerges.

Does this investigation change my obligations as a lender? It changes nothing in the rulebook. It should change your attention. The adverse action standard the CFPB is applying to the banks, specific and principal reasons under Regulation B, is the same standard that applies to your denial letters. Audit your templates.

Will banks get friendlier to subprime lenders because of this? Pressure now runs against category-based closures, which helps. But banks move slowly and remember Choke Point too. Keep redundant relationships and a forwardable compliance file regardless of how this investigation ends.

The information above reflects Jer’s operational experience as of October 19, 2026.

The CFPB investigation described here is open and unadjudicated; laws and regulatory guidance change, and federal and state posture toward this industry moves.

Readers should verify current status and consult qualified legal counsel before acting. Nothing here is legal advice.

Jer Ayles founded Trihouse Consulting and built a subprime loan business from one store in Mission Viejo to 15 locations before selling to private equity. He has guided 300+ operators, fintechs, and investors through licensing, launch, and scale. About Jer ยท Contact