Bank Due Diligence Screen: Finding Hidden Balance-Sheet Risk

A bank deal can look cheap for reasons that do not show up in ordinary operating-company diligence. This screen is for private equity bank diligence, sponsor-bank risk review, and bank-adjacent underwriting when the real question is whether deposits, securities, credit, or enforcement risk should slow the deal before valuation takes over.

As of 2026-04-23, the schedules, thresholds, and guidance referenced below are summarized from public FFIEC, FDIC, OCC, and Federal Reserve sources. Verify the latest filings and enforcement updates on the linked pages before citing in a credit memo or investor document.

Plain-English summary: this bank diligence screen asks five questions: are deposits stable, can securities become liquidity without forcing a capital hit, is credit risk concentrated, are regulators already constraining the institution, and do the public filings support management’s growth story? It helps decide whether to keep underwriting, reprice the risk, or pause until the diligence file answers the gap.

Start with the public record: the FFIEC Central Data Repository[1], FDIC current-quarter Call Report forms and instructions[2], FDIC BankFind[3], and the National Information Center[4]. For the March 31, 2026 report cycle, the FDIC page lists FFIEC 031, FFIEC 041, and FFIEC 051 forms and the instruction books with a most recent update dated December 31, 2025.

The Call Report is the quarterly regulatory filing. Use the plain-English labels first and the schedule codes second: balance sheet (Schedule RC), regulatory capital (RC-R), loans (RC-C), past-due and nonaccrual loans (RC-N), deposit detail (RC-E), deposit insurance and uninsured-deposit data (RC-O), income (RI), charge-offs and recoveries (RI-B), allowances (RI-C), and average balances (RC-K). That keeps the memo tied to schedules a banker, board member, or regulator can recognize without letting the acronym list bury the risk question.

Start bank diligence with deposits and funding

A bank’s franchise value starts with deposits, but the practical funding question is simple: which balances are relationships, and which can leave quickly when rates, headlines, or platform relationships change? FDIC deposit insurance materials state the standard maximum deposit insurance amount is $250,000 per depositor, per insured bank, for each account ownership category[5]. Schedule RC-O Memorandum item 2 is the public starting point for estimated uninsured deposits, and FDIC FIL-37-2023 points banks back to the Call Report instructions for that item[6].

The deposit thresholds below are internal screening heuristics, not regulatory limits. They are meant to force diligence before funding gets treated as franchise value: high loan-to-deposit ratios can signal limited flexibility, uninsured balances can move quickly, and deposit costs show whether growth is being bought rather than earned.

  • Loan-to-deposit ratio: divide Schedule RC-C loans and leases by Schedule RC deposits. Treat 95 percent as an internal review trigger and more than 100 percent as a red flag unless the bank has stable noncore liquidity sources, documented borrowing capacity, and a clear reason for the loan mix.
  • Deposit cost: compare RI interest expense on deposits with RC-K average interest-bearing deposits. If the implied deposit cost is more than 100 basis points above a close peer median, ask whether the bank is buying balances rather than earning them through franchise relationships.
  • Uninsured and brokered exposure: compare RC-O uninsured deposits with total deposits, and pair that with RC-E brokered deposits, reciprocal deposits, and listing-service deposits. An internal screen can mark uninsured deposits above 35 percent of total deposits as a watch item and above 50 percent as a committee-level issue because larger uninsured blocks can move faster than retail operating accounts.
  • Concentration not visible in Call Reports: request the top 20 depositor list, fintech program deposit balances, custodial or FBO-account mapping, and the three largest deposit outflows in the last four quarters. The public schedules show the shape of the risk; the diligence file has to show who can move the money.

For fintech sponsor banks, this deposit work should be tied to third-party controls. The June 2023 Interagency Guidance on Third-Party Relationships says a bank’s use of third parties does not remove its responsibility to operate safely and comply with law[7], and FDIC FIL-19-2024 gives community banks a guide for planning, due diligence, contract negotiation, monitoring, and termination[8]. A sponsor-bank target with deposit growth from programs should be screened as both a funding story and an operational-control story.

Review securities and interest-rate exposure

Securities may be high quality from a credit standpoint while still creating capital pressure. Use Schedule RC-B for available-for-sale and held-to-maturity securities, Schedule RC-R for capital, RC-K for average balances, and RI for interest income and expense. The practical question is not only whether the bonds will default. It is whether fair-value losses, duration, and funding costs reduce the bank’s ability to sell securities, fund loan growth, or support a capital raise.

  • AOCI pressure: compare accumulated other comprehensive income (AOCI) in RC-R with common equity tier 1 (CET1) capital. Treat a negative AOCI swing of more than 25 percent of CET1 as an internal tangible-capital screen before using price-to-tangible-book multiples.
  • HTM lock-up: compare the fair-value shortfall on held-to-maturity securities in RC-B with total capital from RC-R. A large gap can matter even if the accounting loss is not flowing through current earnings.
  • Carry trade warning: compare the yield on securities from RI and RC-K with the marginal cost of deposits and borrowings. A bank that earns old asset yields while paying new liability costs can show GAAP earnings pressure before credit losses appear.
  • Liquidity question: match securities maturities and pledge status against borrowing lines. If the balance sheet depends on selling securities that would crystallize a capital hit, do not treat the securities book as clean liquidity.

The 2023 regional-bank failures made this practical rather than theoretical, but the screen should stay schedule-driven. Do not write rate risk in a memo without a bridge from RC-B fair values, RC-R capital, RI interest income, RC-K average balances, and disclosed borrowings.

Look for credit concentration and hidden acquisition risk

Credit concentration is where a cheap bank can become expensive. The practical question is whether one lending theme can overwhelm capital before headline nonperforming assets look bad. The December 2006 Interagency Guidance on Concentrations in Commercial Real Estate Lending gives two widely used supervisory screens: construction, land development, and other land loans at 100 percent or more of total capital, or total CRE loans at 300 percent or more of total capital combined with 50 percent or more CRE growth during the prior 36 months[9]. Those are supervisory criteria for further analysis, not hard lending limits or safe harbors; the other percentage triggers in this article are internal diligence heuristics unless labeled otherwise.

  • CRE: calculate construction and land development loans from RC-C against total risk-based capital from RC-R. Then calculate total CRE exposure under the 2006 guidance and test the 300 percent plus 50 percent growth screen.
  • Asset quality: read RC-N for 30-89 day past due loans, 90 day past due loans, and nonaccrual loans. Rising early delinquencies matter because they can lead charge-offs by several quarters.
  • Loss content: use RI-B net charge-offs and recoveries by loan category, then compare them with RI-C allowance activity. If charge-offs are rising faster than the allowance build, ask whether CECL assumptions are catching up.
  • Allowance method: FASB ASU 2016-13, Topic 326 moved credit-loss accounting to the current expected credit loss model, or CECL[10]. For diligence, the issue is whether management’s qualitative adjustments match the loan book’s geography, vintage, collateral, and borrower type.

Commercial real estate, construction, agriculture, energy, consumer growth, and local employer dependence each change the risk story. The screen should not stop at headline nonperforming assets. It should tie loan growth, RC-N delinquencies, RI-B charge-offs, RI-C allowances, collateral marks, and local economic exposure into one credit view.

Check enforcement orders before valuation

A bank-adjacent target can have acceptable capital ratios and still carry a public-order problem that changes closing risk, growth assumptions, or sponsor-bank economics. Search the FDIC, OCC, and Federal Reserve enforcement pages before building the base case[11][12][13], then translate any public action into deal mechanics: growth limits, compliance spend, board attention, BSA/AML remediation, sponsor-bank onboarding delays, or supervisory non-objection risk.

Named public markers show how broad the issue can be. The Federal Reserve’s June 14, 2024 Evolve Bancorp, Inc. and Evolve Bank & Trust release described deficiencies in anti-money laundering, risk management, and consumer compliance programs[14]. The OCC’s February 15, 2024 Blue Ridge Bank, N.A. release described a cease-and-desist order tied to unsafe or unsound practices including BSA/AML, capital ratios, capital and strategic planning, liquidity risk management, and information technology controls[15]. FDIC FIL-42-2024 covered the AML/CFT program requirements NPRM and interagency statement[16]. The takeaway is narrower than the citation list: public orders are not valuation footnotes; they are operating constraints.

If the target is a national bank subject to OCC heightened governance expectations, also check 12 CFR Part 30 Appendix D[17]. For larger or more complex institutions, governance, audit, risk management, and board oversight can be valuation issues because a growth plan may require supervisory non-objection or remediation work before it can be executed.

Use a repeatable bank diligence screen

Use this order of operations before a valuation model, sponsor-bank RFP, or board strategy session. Start in the bank search and individual bank profiles, then use the peer comparison view for outliers and the underlying public-data context view when a ratio needs to be traced back to a public source.

StepSourceTriggerFollow-up question
1. Confirm the institutionFDIC BankFind and NICDifferent legal entity, charter, or holding company than expectedWhich entity is the actual counterparty or acquisition target?
2. Test fundingRC, RC-E, RC-O, RI, RC-KLoan-to-deposit above 95 percent, uninsured deposits above 35 percent, or deposit cost more than 100 basis points above peersWhich balances are relationship deposits, and which are rate-sensitive or program-linked?
3. Test rate exposureRC-B, RC-R, RI, RC-KNegative AOCI or securities fair-value gap greater than 25 percent of CET1Can the bank raise liquidity without turning paper losses into realized losses?
4. Test creditRC-C, RC-N, RI-B, RI-CCRE concentration screen met, early delinquencies rising, or charge-offs outpacing allowance buildDoes CECL reflect current collateral, geography, vintage, and borrower stress?
5. Test supervisory dragFDIC, OCC, and Federal Reserve enforcement pagesActive order, recent termination, or unresolved third-party-risk findingWhat remediation work, growth restriction, or non-objection requirement changes the deal plan?

Data timing also matters. If a filing is delayed, amended, or prepared during an unusual reporting window, note the reason and avoid treating one quarter as a clean trend. In a present-day diligence file, that means checking whether a ratio reflects a real balance-sheet change, a restatement, a merger, or a reporting-timing artifact.

FAQ

Is a high loan-to-deposit ratio always a deal killer? No. It is a funding question. A bank above 95 percent can still be attractive if deposit retention, unused borrowing capacity, loan cash flows, and securities liquidity support the plan. Above 100 percent, the diligence memo should explain exactly how growth is funded.

Should a fintech founder care about RC-O uninsured deposits? Yes. RC-O is the Call Report schedule that includes estimated uninsured deposits. A sponsor bank with high uninsured or program-linked deposits may face faster liquidity pressure if customers, platforms, or treasury teams move balances. The founder should ask how end-customer funds are titled, insured, reconciled, and monitored.

Why use the 2006 CRE guidance if it is not a hard limit? Because the 100 percent and 300 percent plus 50 percent screens are still recognized supervisory markers. They do not prove a bank is unsafe, but they do tell an analyst when CRE deserves more than a generic asset-quality paragraph.

Can public Call Reports replace legal and regulatory diligence? No. Call Reports identify outliers and trends. Legal counsel, regulatory counsel, loan-file review, deposit analytics, and management interviews are still needed before signing a letter of intent or choosing a sponsor bank.

When to pause a deal

  • Funding depends on deposit growth that is uninsured, brokered, rate-sensitive, or program-linked, especially when the loan-to-deposit ratio is above 100 percent without a credible liquidity plan.
  • Uninsured deposits exceed 50 percent of total deposits without granular customer support, account titling, deposit-insurance mapping, and outflow analysis.
  • Securities losses, negative AOCI, or a held-to-maturity fair-value gap exceed 25 percent of CET1 without a liquidity bridge.
  • The CRE supervisory screen is met without a capital, stress-testing, and collateral answer.
  • An active or recent public order constrains the growth plan, sponsor-bank economics, compliance capacity, or required supervisory non-objection.

Do not move from screen to valuation until each red flag has a named data source, a diligence owner, and a next question. That is the point of the screen: not to prove the deal is bad, but to keep hidden balance-sheet risk from being discovered after the price is already set.

Sources

  1. FFIEC Central Data Repository – Public Call Report lookup and filing access.
  2. FDIC current-quarter Call Report forms and instructions – Current Call Report forms, instructions, and update dates.
  3. FDIC BankFind – Institution lookup for insured banks.
  4. National Information Center – Institution and holding-company lookup.
  5. FDIC insured deposits brochure – Deposit insurance limit and ownership-category explanation.
  6. FDIC FIL-37-2023 – Estimated uninsured deposit reporting expectations.
  7. Interagency Guidance on Third-Party Relationships – Third-party risk-management guidance.
  8. FDIC FIL-19-2024 – Third-party risk-management guide for community banks.
  9. Interagency CRE concentration guidance – Supervisory CRE concentration screens and risk-management expectations.
  10. FASB ASU 2016-13, Topic 326 – Current expected credit loss accounting standard.
  11. FDIC enforcement decisions and orders – FDIC public enforcement database.
  12. OCC enforcement actions – OCC public enforcement-action page.
  13. Federal Reserve enforcement actions – Federal Reserve public enforcement-action page.
  14. Federal Reserve Evolve release, June 14, 2024 – Public action involving Evolve Bancorp, Inc. and Evolve Bank & Trust.
  15. OCC Blue Ridge Bank release, February 15, 2024 – Public cease-and-desist order announcement.
  16. FDIC FIL-42-2024 – AML/CFT program requirements NPRM and interagency statement.
  17. 12 CFR Part 30 Appendix D – OCC heightened standards for larger or more complex national banks.