Banking and Payments Regulation Overview

Why This Topic Matters
Treasury professionals operate inside a dense web of banking and payments regulation. Every wire you release, every ACH file you originate, every bank account you open, and every check you deposit is governed by a specific body of law or rule. The AFP CTP exam places this material in the Financial Regulatory and Operational Risk domain because regulation is one of the primary sources of operational, legal, and reputational risk for a treasury function. A treasurer who does not understand which law governs a payment cannot allocate liability correctly, cannot structure banking relationships efficiently, and cannot protect the organization from penalties. On the exam, this topic is heavily tested through scenario questions that ask you to identify the governing regulation, the responsible regulator, or the practical treasury consequence of a rule. Mastering it earns reliable points and builds the foundation for related topics such as fraud prevention, AML compliance, and bank relationship management.

What Banking and Payments Regulation Is
Banking regulation refers to the laws and supervisory frameworks that govern how depository institutions are chartered, capitalized, supervised, and permitted to operate. Payments regulation refers to the laws, central bank rules, and private network operating rules that define the rights, duties, and liabilities of parties when money moves between accounts. Together they determine what a bank can offer a corporate client, what a corporation can expect from its bank, and who bears the loss when something goes wrong.

It helps to view the landscape in three layers:
1. Statutory law enacted by legislatures (for example, Dodd-Frank, Gramm-Leach-Bliley, the Bank Secrecy Act).
2. Regulations and supervisory guidance issued by agencies that implement statutes (for example, Federal Reserve Regulations CC, D, E, and J).
3. Private rules and commercial law that govern specific payment systems and commercial relationships (for example, the Uniform Commercial Code and the Nacha Operating Rules).

Key U.S. Banking Regulators
Federal Reserve (the Fed): Central bank; conducts monetary policy, supervises bank holding companies and state member banks, operates Fedwire and FedACH, and issues the lettered regulations.
Office of the Comptroller of the Currency (OCC): Charters and supervises national banks and federal savings associations.
Federal Deposit Insurance Corporation (FDIC): Insures deposits (currently 250,000 dollars per depositor, per insured bank, per ownership category), supervises state non-member banks, and resolves failed institutions.
Consumer Financial Protection Bureau (CFPB): Created by Dodd-Frank; enforces consumer financial protection laws. Its rules affect corporations indirectly through card and consumer payment programs.
State banking departments: Charter and supervise state banks in the dual banking system.
Financial Crimes Enforcement Network (FinCEN) and Office of Foreign Assets Control (OFAC): Treasury Department units that administer anti-money-laundering rules and economic sanctions respectively.

Landmark U.S. Banking Legislation You Must Know
Glass-Steagall Act (1933): Separated commercial banking from investment banking and created the FDIC. Its Regulation Q prohibition on paying interest on corporate demand deposits shaped decades of cash management practice (sweep accounts, earnings credit rates).
Bank Holding Company Act (1956): Placed bank holding companies under Fed supervision and restricted non-banking activities.
Depository Institutions Deregulation and Monetary Control Act (1980): Phased out interest rate ceilings, extended reserve requirements to all depository institutions, and required the Fed to price its payment services.
Riegle-Neal Interstate Banking and Branching Efficiency Act (1994): Permitted interstate banking and branching, enabling corporations to consolidate accounts across states.
Gramm-Leach-Bliley Act (1999): Repealed key Glass-Steagall barriers, allowing financial holding companies to combine banking, securities, and insurance. Also imposed financial privacy requirements.
Check Clearing for the 21st Century Act, Check 21 (2004): Created the substitute check as the legal equivalent of the original, enabling image exchange and remote deposit capture.
Dodd-Frank Wall Street Reform and Consumer Protection Act (2010): The most sweeping reform since the 1930s. Created the CFPB and the Financial Stability Oversight Council (FSOC), established orderly liquidation authority, imposed the Volcker Rule limiting proprietary trading, regulated OTC derivatives (central clearing, swap dealer registration), repealed Regulation Q so banks could pay interest on corporate checking accounts (effective 2011), and included the Durbin Amendment capping debit interchange fees for large issuers.
Bank Secrecy Act (1970) and USA PATRIOT Act (2001): Together they form the anti-money-laundering (AML) framework: currency transaction reports (CTRs) above 10,000 dollars, suspicious activity reports (SARs), customer identification programs (CIP), know-your-customer (KYC) and beneficial ownership requirements. Corporate treasurers experience these as documentation demands when opening accounts.
Sarbanes-Oxley Act (2002): Not a banking law per se, but Section 302 and Section 404 internal control requirements directly shape treasury controls over cash and payments.

Key Federal Reserve Regulations
Regulation CC (Expedited Funds Availability Act): Sets maximum hold periods for deposited checks and governs check return rules. Next-day availability applies to certain items; most local checks must be available by the second business day.
Regulation D: Reserve requirements on deposits and historically the six-per-month transfer limit on savings and money market deposit accounts (the limit was suspended in 2020 but the concept is still examined).
Regulation E (Electronic Fund Transfer Act): Protects consumers in electronic transfers such as debit cards and consumer ACH. It generally does not protect corporate accounts, a distinction the exam loves.
Regulation J: Governs check collection and funds transfers through Federal Reserve Banks, including Fedwire.
Regulation Q: Historical prohibition on interest for demand deposits; repealed by Dodd-Frank.
Regulation Z (Truth in Lending): Consumer credit disclosure, relevant to corporate card programs only indirectly.

The Uniform Commercial Code (UCC)
The UCC is state-enacted model commercial law that governs most commercial payment disputes.
Article 3, Negotiable Instruments: Defines checks, drafts, and notes; sets rules for endorsement, holder in due course, and forgery.
Article 4, Bank Deposits and Collections: Governs the relationship between a bank and its depositor, including the duty to examine statements and report unauthorized items (commonly within one year, often shortened by account agreement to 30 or 60 days) and the standard of ordinary care.
Article 4A, Funds Transfers: Governs wholesale wire and corporate ACH credit transfers. Key concepts include commercially reasonable security procedures, the sender being bound by a payment order verified under an agreed security procedure even if unauthorized, the money-back guarantee if a transfer is not completed, and the rule that the originating company bears loss if it rejected a bank-offered reasonable security procedure.
Article 5, Letters of Credit: Governs documentary and standby letters of credit alongside the ICC rules (UCP 600 and ISP98).
Article 9, Secured Transactions: Governs security interests and perfection by filing, relevant to collateral in credit agreements.

Payment System Rules
Fedwire: Real-time gross settlement system operated by the Fed; transfers are final and irrevocable when processed; governed by Regulation J and UCC 4A.
CHIPS: Private large-value system operated by The Clearing House, used heavily for cross-border dollar payments; multilateral netting with intraday finality.
ACH: Batch system governed by the Nacha Operating Rules plus Regulation E for consumer entries and UCC 4A for corporate credits. Return timeframes differ sharply: consumers have 60 days from statement for unauthorized debits, while corporate accounts generally must return by the second banking day. This is a frequent exam point regarding ACH debit blocks and filters.
Checks: Governed by UCC Articles 3 and 4, Regulation CC, and Check 21.
Cards: Governed by network rules (Visa, Mastercard), the Durbin Amendment, Regulation Z and Regulation E for consumers, and PCI DSS as an industry data security standard.
Real-time payments: RTP from The Clearing House and FedNow from the Fed, both offering immediate, irrevocable credit transfers.

International Frameworks
Basel Accords (Basel I, II, III): Issued by the Basel Committee on Banking Supervision; set risk-based capital, leverage, and liquidity standards. Basel III introduced the Liquidity Coverage Ratio (LCR) and Net Stable Funding Ratio (NSFR), which changed how banks value corporate deposits. Operational deposits tied to cash management services are treated more favorably than non-operational or wholesale deposits, influencing bank pricing and appetite for corporate balances.
SEPA: Single Euro Payments Area harmonizing euro credit transfers and direct debits.
PSD2: European Payment Services Directive promoting open banking and strong customer authentication.
FATF: Intergovernmental body setting global AML standards.
FATCA: U.S. law requiring foreign financial institutions to report accounts held by U.S. persons, generating documentation burdens for multinational treasuries.

How It Works in Practice for Treasury
Think of regulation as flowing through every treasury activity:
1. Opening and maintaining accounts: KYC and beneficial ownership rules under the BSA and PATRIOT Act dictate documentation; FDIC insurance limits drive deposit diversification; Basel III LCR shapes the earnings credit rate and fees offered.
2. Making payments: UCC 4A determines liability for wires and corporate ACH; adopting the bank-offered security procedure (dual approval, tokens, callbacks) is essential because rejecting it shifts fraud loss to the company.
3. Collecting payments: Regulation CC governs availability; Check 21 enables remote deposit capture; Nacha rules govern ACH debit origination and authorization retention.
4. Fraud and loss allocation: UCC 4 imposes a duty to review statements promptly; failure to report forged checks within the agreement period shifts loss to the company. Positive pay is often a condition of favorable liability treatment.
5. Compliance: OFAC screening of counterparties, SAR and CTR awareness, and sanctions compliance apply to corporations as well as banks.
6. Bank relationship and counterparty risk: Dodd-Frank resolution authority and Basel capital rules affect bank stability assessments and the choice between bank deposits and money market alternatives.

Exam Tips: Answering Questions on Banking and Payments Regulation Overview
1. Match the payment type to its governing law. Checks point to UCC 3 and 4 plus Regulation CC and Check 21. Wires and corporate ACH credits point to UCC 4A and Regulation J. Consumer electronic debits point to Regulation E and the EFTA. Letters of credit point to UCC 5 and UCP 600. If a question asks which law governs a corporate wire dispute, the answer is almost always UCC Article 4A.
2. Separate consumer from corporate protections. Regulation E protects consumers only. A corporate account that suffers an unauthorized ACH debit must rely on Nacha return rules (two-day window) and the account agreement, not Regulation E. Questions often insert a corporate account to test whether you wrongly apply consumer protections.
3. Know what each landmark act did, in one sentence. Glass-Steagall separated commercial and investment banking and created the FDIC. Gramm-Leach-Bliley repealed those barriers. Riegle-Neal allowed interstate branching. Check 21 created substitute checks. Dodd-Frank created the CFPB, repealed Regulation Q, imposed the Volcker Rule and Durbin Amendment, and regulated derivatives. Sarbanes-Oxley addressed internal controls and financial reporting.
4. Link the regulator to the institution. National banks go to the OCC, state member banks and holding companies to the Fed, state non-member banks to the FDIC and state regulators. Deposit insurance is always FDIC.
5. Remember the loss-shifting rules. Under UCC 4A the company bears wire fraud loss if the bank followed a commercially reasonable security procedure that the company agreed to, or if the company refused a reasonable procedure the bank offered. Under UCC 4 the company bears check fraud loss if it failed to review statements and report problems within the agreed period.
6. Understand Basel III from the corporate side. The exam does not expect you to compute capital ratios, but it does expect you to know that the LCR makes operational deposits more valuable to banks than non-operational balances, affecting pricing and the willingness of banks to accept large short-term deposits.
7. Connect AML rules to treasury tasks. When a question describes a bank demanding beneficial ownership information or delaying account opening, the correct framework is the Bank Secrecy Act and USA PATRIOT Act, enforced by FinCEN. Sanctions screening questions point to OFAC.
8. Watch for the word best or most. Many regulation questions offer several partially correct answers. Choose the one that most directly addresses the specific payment type, party, or risk in the scenario rather than a general statement.
9. Use elimination on acronyms. If you cannot recall a specific regulation, eliminate those clearly tied to another area (for example, Regulation Z is consumer credit disclosure, so it is wrong for a check availability question) and choose among the remaining plausible options.
10. Study the historical trajectory. The exam frequently frames questions as before and after a law. Knowing that Regulation Q once prohibited interest on corporate demand deposits and that Dodd-Frank repealed it explains why sweep accounts and earnings credit rates developed and how the landscape changed after 2011.

Quick Review Summary
Banking regulation determines how banks are chartered, supervised, and capitalized; payments regulation determines rights and liabilities when funds move. The Fed, OCC, FDIC, CFPB, and state regulators supervise institutions; FinCEN and OFAC police financial crime and sanctions. Landmark acts progressed from Glass-Steagall separation to Gramm-Leach-Bliley integration to Dodd-Frank re-regulation. The UCC, especially Articles 3, 4, and 4A, together with Regulations CC, D, E, and J, Check 21, and the Nacha Operating Rules, govern day-to-day payment operations. Basel III shapes how banks price corporate deposits. For the CTP exam, anchor every scenario to the correct payment type, the correct party (consumer versus corporate), and the correct governing rule, and you will consistently select the right answer.