Ask a small-business owner what keeps them up at night, and "my bank's underwriting policy" doesn't usually make the list. But if you're an immigrant entrepreneur, or you employ workers whose income depends on a visa, a green card application, or a Social Security number that isn't quite what it seems, a quiet memo issued by three federal bank regulators on July 13, 2026 just became something you need to understand.
The FDIC, the Office of the Comptroller of the Currency, and the National Credit Union Administration jointly told every bank and credit union they supervise to tighten scrutiny on loans made to people who aren't legally authorized to work in the United States. It arrived a little over a month after the Consumer Financial Protection Bureau told lenders the opposite of what regulators had said for years: instead of ignoring immigration status, creditors may now need to factor it into whether a borrower can actually repay a loan.
Neither agency wrote a new rule. Both are reinterpreting existing ones. That distinction matters enormously for how banks will actually behave — and for what it means if you're trying to get a business loan, a line of credit, or a mortgage while your immigration status is anything less than a green card or citizenship.
What the Guidance Actually Says
The July 13 interagency guidance is framed as a reminder, not a mandate. It tells banks to apply "safe and sound underwriting practices that assess a borrower's willingness and capacity to repay" — language regulators have used for decades — but this time explicitly through the lens of a borrower's legal work authorization.
The guidance flags five areas examiners will look at more closely:
- Source of repayment. Can the bank verify that the income backing this loan is durable, or does it depend on employment that could legally end at any time?
- Collateral evaluation. If the loan is secured, does the collateral's value hold up independent of the borrower's ongoing income stability?
- Documentation and verification. What identity and income documents did the bank actually collect and check?
- Portfolio concentration risk. Does the bank have an outsized share of loans to borrowers without work authorization, concentrating risk in one bucket?
- Consumer compliance. Is the bank still following fair lending law while doing all of the above?
The stated rationale is credit risk, not immigration enforcement: a borrower whose right to work in the U.S. could end abruptly is, in the agencies' view, a borrower whose ability to keep making payments is less certain. The guidance points to Executive Order 14406, "Restoring Integrity to America's Financial System," as its authority.
The CFPB Statement That Set This Up
To understand why this landed the way it did, you have to look back to June 8, 2026, when the CFPB published a "Statement on Ability to Repay and Immigration Status." It reminded creditors that under the Truth in Lending Act (Regulation Z) and, for certain products, the Equal Credit Opportunity Act (Regulation B), a lender assessing repayment capacity may need to consider whether a borrower's income depends on continued U.S. residency — and that immigration status can be relevant to that analysis.
This was a reversal. In January 2026, the CFPB and Department of Justice had withdrawn a 2023 joint statement that told lenders the opposite: don't factor immigration status into lending decisions, because doing so risks violating ECOA and Regulation B's prohibition on national-origin discrimination. That prohibition, notably, is still on the books and still enforceable — the CFPB's new position is that considering immigration status for repayment-risk purposes is legally distinct from discriminating based on national origin. Where exactly that line sits, in practice, is the part banks' compliance and legal teams are now spending real money to figure out.
Why This Matters Even If You're Not the Borrower
If you're a U.S. citizen small-business owner, this guidance can still reach you in three ways:
1. Your employees. If part of your workforce doesn't have verified work authorization, and any of them have personal loans, auto loans, or credit lines at a bank that's tightening its underwriting, expect more banks to ask employers for income and employment verification letters — and to ask more pointed questions about the durability of that employment.
2. Your customers. If you sell to or serve a community with a large immigrant population, tighter consumer lending can mean less discretionary spending, delayed big-ticket purchases, and more cash-based transactions as some customers pull back from bank-mediated credit.
3. Your own financing, if you're a permanent resident, visa holder, or ITIN filer. Many immigrant entrepreneurs already rely on non-traditional lenders — CDFIs and nonprofit microlenders such as Accion, DreamSpring, or local community development groups — specifically because traditional banks have historically been reluctant to lend against ITIN-based income. Expect that reliance to deepen, not lessen, as depository banks recalibrate.
What Immigrant-Owned Businesses Should Do Now
None of this changes what makes a loan application strong. It does change what a bank will ask for and how it will read your file.
Get your documentation airtight before you apply. Bring at least the last three months of business bank statements, your business registration and any required licenses, a government-issued ID or ITIN, a voided business check, and your EIN if you have one. Under heightened scrutiny, an incomplete file doesn't get a follow-up call — it gets declined.
Separate personal and business finances completely. A bank assessing "source of repayment" durability wants to see that the business generates income independent of any single individual's employment status. A business with its own bank account, its own P&L, and a track record of revenue that doesn't hinge on one person's paycheck is a fundamentally different underwriting story than a sole proprietor whose only income is a single job.
Build a real paper trail of business revenue, not just personal pay stubs. If your case for repayment rests on the business — invoices, contracts, recurring customers — rather than on one person's continued work authorization, you've addressed the exact risk factor this guidance is worried about. That's not a workaround; it's what good underwriting has always wanted to see.
Know which lenders already serve this market well. CDFIs and mission-driven lenders evaluate character and community impact alongside credit history, and several — Accion, DreamSpring, Pursuit, Working Solutions, LEDC among them — have long-standing ITIN-friendly products specifically built for this situation. If a traditional bank's timeline or documentation demands become a bottleneck, these lenders are often faster and more realistic, not a consolation prize.
Watch the fair lending line, and keep records if something feels off. ECOA's prohibition on national-origin discrimination hasn't gone anywhere. If you believe a lending decision crossed from "assessing repayment risk" into discriminating against you because of where you're from, document the interaction — the application, the stated reason for denial, the timeline — and consult a consumer or fair-lending attorney. The CFPB's own guidance says the two concepts are legally separable; that separation is being tested in real applications right now, and a paper trail is what makes a fair lending complaint credible.
The Bigger Pattern: Regulatory Whiplash Is a Business Risk Too
Step back from the specifics, and there's a broader lesson here for any small-business owner: financial regulation is moving faster and reversing more often than it used to. A 2023 fair-lending stance got fully withdrawn in January 2026; a new CFPB statement followed in June; a joint bank-regulator guidance followed that in July. If your business model, hiring practices, or customer base intersects with any actively contested regulatory area — immigration, gig work classification, cannabis banking, cryptocurrency — the rules you're operating under today may not be the rules in six months.
The businesses that navigate this kind of whiplash well aren't the ones betting on regulatory stability. They're the ones with financial records clean enough to answer any auditor's or underwriter's question on short notice, regardless of which way the political wind is currently blowing.
Keep Your Books Ready for Whatever Comes Next
Whether you're documenting business income to satisfy a lender's new underwriting standard or simply building the kind of financial history that makes any future application easier, the underlying discipline is the same: clear, complete, well-organized records. Beancount.io offers plain-text accounting that gives you a transparent, auditable ledger of exactly what your business earns and spends — the kind of paper trail that holds up whether a bank's questions are routine or unusually pointed. Get started for free and keep your financial story easy to tell, no matter who's asking.