{"id":1257,"date":"2026-05-13T05:00:03","date_gmt":"2026-05-13T05:00:03","guid":{"rendered":"https:\/\/banking.deepdigitalventures.com\/blog\/?p=1257"},"modified":"2026-05-13T05:00:03","modified_gmt":"2026-05-13T05:00:03","slug":"family-office-bank-concentration-risk-review","status":"publish","type":"post","link":"https:\/\/banking.deepdigitalventures.com\/blog\/family-office-bank-concentration-risk-review\/","title":{"rendered":"Family Office Bank Concentration Risk Review"},"content":{"rendered":"\n

This article is for a family office CFO, controller, or investment partner who needs one clear answer: has any single bank become too important across portfolio-company cash, payroll, settlement, credit, custody, or fintech sponsor-bank relationships?<\/strong><\/p>\n\n\n\n

The goal is not to rank banks or overreact to headlines. The goal is to know which company would miss payroll, lose payment access, breach a covenant, or strand customer funds if one banking relationship stopped working for a few business days.<\/p>\n\n\n\n

Executive Summary: The Decision Rule<\/h2>\n\n\n\n

Do not approve a larger balance, new credit dependency, or new sponsor-bank dependency until the review can identify seven fields: the legal bank, exposed entity, ownership category, uninsured balance, operating dependency, latest bank-data source, and latest enforcement check.<\/p>\n\n\n\n

That rule matters because bank exposure is rarely just one checking account. It can sit in payroll files, sweep programs, merchant settlement accounts, reserve accounts, revolving credit facilities, custody platforms, customer-money programs, and backup accounts that have never actually been tested.<\/p>\n\n\n\n

The FDIC records Silicon Valley Bank as closed on March 10, 2023, Signature Bank as closed on March 12, 2023, and First Republic Bank as closed on May 1, 2023.[1] The operating lesson is simple: if the family office discovers its concentration only after a bank event, the review is too late.<\/p>\n\n\n\n

The 5-Step Bank Exposure Workflow<\/h2>\n\n\n\n
    \n
  1. Collect one bank-exposure file per portfolio company.<\/strong> Require bank legal name, account owner, account purpose, current balance, uninsured amount, signer, administrator, and what business process depends on the account.<\/li>\n
  2. Verify the actual bank.<\/strong> Match each relationship to an insured depository institution, not a branch name, fintech app, processor, or trade name.<\/li>\n
  3. Score operating dependency.<\/strong> Mark whether a disruption would affect payroll, customer funds, merchant settlement, vendor payments, debt availability, or custody access.<\/li>\n
  4. Run a first-pass bank check.<\/strong> Review capital, loan mix, deposit composition, past-due loans, charge-offs, and any public enforcement actions before increasing exposure.<\/li>\n
  5. Assign an action.<\/strong> Keep the relationship, reduce uninsured cash, open a tested backup bank, move a payment flow, renegotiate a credit dependency, or schedule a bank call.<\/li>\n<\/ol>\n\n\n\n

    Use the site\u2019s bank search and individual bank profiles<\/a> as the operating dashboard for the first pass. For board materials, credit memos, and investor updates, cite the primary regulator source listed in the Sources section.<\/p>\n\n\n\n

    Bank Concentration Risk Starts With Legal Entities<\/h2>\n\n\n\n

    Start with legal entities, not bank logos. A family office may see five portfolio companies using different portals, treasury tools, payroll providers, or fintech platforms while the underlying insured bank is the same. That is the concentration risk.<\/p>\n\n\n\n

    For every family office vehicle and portfolio company, record the legal bank name, FDIC certificate number if available, account-owning entity, ownership category, account purpose, signer, online-banking administrator, and the business process that fails if access stops. The FDIC\u2019s standard insurance limit is $250,000 per depositor, per insured bank, for each ownership category.[2] Amounts above that limit are not the same risk as an ordinary vendor receivable, but they should be treated as bank credit exposure until proven otherwise.<\/p>\n\n\n\n

    Define acronyms once and keep the worksheet plain. An FBO account is a \u201cfor benefit of\u201d account often used to hold customer funds. An RSSD ID is a Federal Reserve identifier for financial institutions. Cash dominion is a lender\u2019s right to control cash under specified credit-agreement conditions. If those terms are unclear to the person approving wires, the review is not yet board-ready.<\/p>\n\n\n\n

    Exposure area<\/th>What to capture<\/th>Why it matters<\/th><\/tr><\/thead>
    Operating deposits<\/td>Bank, owner entity, balance, insured amount, uninsured amount, approvers<\/td>Shows direct cash-at-bank exposure by company and ownership category.<\/td><\/tr>
    Payroll<\/td>Payroll provider, funding account, funding day, backup ACH or wire path<\/td>Payroll fails fast if a company cannot fund or originate payments.<\/td><\/tr>
    Merchant settlement<\/td>Processor, settlement account, reserve account, redirect authority<\/td>Revenue can be trapped if settlement instructions cannot be changed quickly.<\/td><\/tr>
    Credit facility<\/td>Agent bank, lender banks, borrowing-base dates, cash-control triggers<\/td>A bank can be both a lender and a cash gatekeeper.<\/td><\/tr>
    Custody or sweep<\/td>Custodian, program banks, sweep limits, bank-level detail received<\/td>Platform statements may hide the actual bank-level concentration.<\/td><\/tr>
    Customer-money program<\/td>Sponsor bank, program manager, ledger owner, reconciliation owner<\/td>Customer funds create operational, disclosure, and reputational exposure.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

    Use A Backup Bank Before You Need One<\/h2>\n\n\n\n

    A backup bank is not a relationship that exists only in a board deck. It needs an opened account, approved signers, tested online access, wire instructions, payroll funding instructions, and at least one successful low-dollar transaction. For a company with weekly payroll or daily settlement, an untested backup account is mostly theater.<\/p>\n\n\n\n

    The practical threshold does not need to be complicated. A family office can start with this policy:<\/p>\n\n\n\n

      \n
    • If uninsured cash at one bank exceeds one payroll cycle plus two weeks of operating expenses, require an approved cash-reduction or diversification plan.<\/li>\n
    • If one bank supports both payroll and the primary credit facility, require a tested backup operating account.<\/li>\n
    • If one bank supports merchant settlement and a reserve account, require documented authority to redirect settlement instructions.<\/li>\n
    • If a portfolio company holds customer funds through a bank partner, require daily reconciliation ownership and an incident-communications owner.<\/li>\n
    • If a bank has a public enforcement action, read the order before increasing balances or adding a new dependency.<\/li>\n<\/ul>\n\n\n\n

      Those thresholds are deliberately operational. They do not try to predict bank failure. They ask whether the company can keep functioning if a bank relationship becomes unavailable, restricted, or administratively messy.<\/p>\n\n\n\n

      Failure Patterns Across Portfolio Companies<\/h2>\n\n\n\n

      The most useful finding in a bank exposure review is often not \u201cBank A is risky.\u201d It is \u201cwe designed five unrelated companies around the same point of failure.\u201d These are the patterns that deserve escalation:<\/p>\n\n\n\n

        \n
      • The payroll trap:<\/strong> operating cash is diversified, but every company funds payroll through the same bank account or treasury portal.<\/li>\n
      • The hidden settlement trap:<\/strong> revenue appears diversified by processor, but all settlement lands at one bank controlled by one administrator.<\/li>\n
      • The credit-cash trap:<\/strong> the same bank provides a revolver, holds operating cash, and can trigger cash-control rights during stress.<\/li>\n
      • The sweep-opacity trap:<\/strong> the platform reports a single cash position, but the family office cannot see the program banks, limits, or uninsured exposure.<\/li>\n
      • The fintech-ledger trap:<\/strong> the sponsor bank, program manager, processor, and ledger provider all have partial views of customer funds, and no one owns the daily exception process end to end.<\/li>\n<\/ul>\n\n\n\n

        These patterns are more actionable than a generic \u201cdiversify banks\u201d recommendation. They tell the controller what to test, the CFO what to move, and the investment partner what to ask at the next portfolio review.<\/p>\n\n\n\n

        Sponsor Bank Review For Fintech Holdings<\/h2>\n\n\n\n

        Fintech exposure should be a subsection of the family-office review unless the portfolio has multiple banking-as-a-service or embedded-finance companies. For those companies, ask one extra question: should the sponsor bank remain primary, become secondary, or trigger a backup-bank project?<\/p>\n\n\n\n

        The Synapse bankruptcy and Evolve enforcement action are useful cautionary examples, not a blacklist. The CFPB has described Synapse as filing for Chapter 11 bankruptcy protection on April 22, 2024, with an alleged consumer-funds shortfall between $60 million and $90 million.[3] The Federal Reserve announced a June 14, 2024 enforcement action against Evolve Bancorp, Inc. and Evolve Bank & Trust tied to anti-money-laundering, risk-management, and consumer-compliance deficiencies.[4]<\/p>\n\n\n\n

        For a sponsor-bank review, separate the parties on the worksheet: sponsor bank, program manager, processor, ledger provider, account owner, reconciliation owner, and customer-communications owner. If the company cannot explain who reconciles balances daily and who contacts customers during an exception, the issue is not only bank concentration. It is operating control.<\/p>\n\n\n\n

        Bank Credit Review: Keep It Decision-Driven<\/h2>\n\n\n\n

        A family office does not need to become a full-time bank analyst for every relationship. It does need enough bank data to decide whether to increase exposure, reduce exposure, or ask sharper questions. Use Call Report data for the first pass, then escalate only when the result could change an action.[5]<\/p>\n\n\n\n

        Question<\/th>Plain-English check<\/th>Action trigger<\/th><\/tr><\/thead>
        Is the deposit insured?<\/td>Compare balance against FDIC insurance rules by depositor, insured bank, and ownership category.<\/td>Reduce, sweep, or diversify excess cash if the uninsured amount is more than the company needs at that bank.<\/td><\/tr>
        Is the bank balance sheet changing?<\/td>Review assets, liabilities, capital, deposits, and loan mix in recent Call Report data.<\/td>Schedule a bank call before adding balances or credit dependency.<\/td><\/tr>
        Are problem loans increasing?<\/td>Look at past-due loans, nonaccrual loans, charge-offs, recoveries, and allowance data.<\/td>Escalate if credit deterioration overlaps with operational dependence.<\/td><\/tr>
        Does the bank have a public order?<\/td>Read the regulator order itself, not a summary.<\/td>Decide whether the findings affect deposits, payments, lending, third-party programs, or governance.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

        Commercial real estate concentration screens can help when reviewing credit-heavy banks, but they should not dominate the article or the decision. The 2006 interagency guidance identifies supervisory screens for construction and total commercial real estate concentration.[6] Treat those screens as prompts for follow-up, not automatic exit rules for depositors.<\/p>\n\n\n\n

        What To Put In The Decision Log<\/h2>\n\n\n\n

        The review should end with a dated decision log, not a folder of downloaded PDFs. Each row should include the exposed company, bank, exposure type, uninsured amount, dependency score, source date, reviewer, decision, approver, and next review date.<\/p>\n\n\n\n

        A concise example: three portfolio companies use the same regional bank for payroll, deposits, and revolving credit. After the review, the family office leaves the credit facilities in place, moves one payroll file to a second bank, opens and tests one backup operating account, reduces excess uninsured cash at two companies, and requires a quarterly bank-data and enforcement check before any company increases balances at the original bank.<\/p>\n\n\n\n

        That is the right level of output. The review does not need to predict which bank will be stressed next. It needs to make concentration visible early enough that the family office can act before a banking problem becomes a portfolio operating problem.<\/p>\n\n\n\n

        Sources<\/h2>\n\n\n\n
          \n
        1. FDIC Failed Bank List: https:\/\/www.fdic.gov\/resources\/resolutions\/bank-failures\/failed-bank-list\/ – official FDIC closing dates for failed banks, including Silicon Valley Bank, Signature Bank, and First Republic Bank.<\/li>\n
        2. FDIC Deposit Insurance FAQs: https:\/\/www.fdic.gov\/resources\/deposit-insurance\/faq\/ – FDIC explanation of the standard maximum deposit insurance amount and ownership-category treatment.<\/li>\n
        3. CFPB Synapse Financial Technologies action: https:\/\/www.consumerfinance.gov\/enforcement\/actions\/synapse-financial-technologies-inc\/ – CFPB materials describing the Synapse bankruptcy and alleged consumer-funds shortfall.<\/li>\n
        4. Federal Reserve enforcement action against Evolve Bancorp, Inc. and Evolve Bank & Trust: https:\/\/www.federalreserve.gov\/newsevents\/pressreleases\/enforcement20240614a.htm – Federal Reserve announcement of the June 14, 2024 enforcement action.<\/li>\n
        5. FFIEC Central Data Repository Public Data Distribution: https:\/\/cdr.ffiec.gov\/public\/ – public Call Report data source for bank financial schedules.<\/li>\n
        6. Interagency Guidance on Concentrations in Commercial Real Estate Lending: https:\/\/www.federalreserve.gov\/frrs\/guidance\/interagency-guidance-on-concentrations-in-commercial-real-estate-lending-sound-risk-management-practices.htm – supervisory CRE concentration guidance and screening criteria.<\/li>\n
        7. FDIC Enforcement Decisions and Orders: https:\/\/orders.fdic.gov\/s\/ – FDIC database for public enforcement actions.<\/li>\n
        8. OCC Enforcement Actions: https:\/\/www.occ.gov\/topics\/laws-and-regulations\/enforcement-actions\/index-enforcement-actions.html – OCC page for public enforcement actions.<\/li>\n
        9. Federal Reserve Enforcement Actions: https:\/\/www.federalreserve.gov\/supervisionreg\/enforcementactions.htm – Federal Reserve page for public enforcement actions.<\/li>\n
        10. Interagency Guidance on Third-Party Relationships: Risk Management: https:\/\/www.fdic.gov\/news\/financial-institution-letters\/2023\/fil23029.html – June 6, 2023 third-party risk-management guidance.<\/li>\n
        11. Agencies issue statement on bank arrangements with third parties to deliver deposit products: https:\/\/www.fdic.gov\/news\/financial-institution-letters\/2024\/agencies-issue-statement-bank-arrangements-third-parties – July 25, 2024 statement on third-party deposit arrangements.<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"

          A practical framework for reviewing bank exposure across family office portfolio companies, deposits, credit lines, and operating accounts.<\/p>\n","protected":false},"author":3,"featured_media":1959,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"","_seopress_titles_title":"Family Office Bank Concentration Risk Review","_seopress_titles_desc":"A practical bank concentration risk workflow for family offices: map portfolio-company bank exposure, set backup-bank triggers, review sponsor-bank dependencies, and log decisions.","_seopress_robots_index":"","footnotes":""},"categories":[15],"tags":[],"class_list":["post-1257","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-playbooks"],"_links":{"self":[{"href":"https:\/\/banking.deepdigitalventures.com\/blog\/wp-json\/wp\/v2\/posts\/1257","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/banking.deepdigitalventures.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/banking.deepdigitalventures.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/banking.deepdigitalventures.com\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/banking.deepdigitalventures.com\/blog\/wp-json\/wp\/v2\/comments?post=1257"}],"version-history":[{"count":6,"href":"https:\/\/banking.deepdigitalventures.com\/blog\/wp-json\/wp\/v2\/posts\/1257\/revisions"}],"predecessor-version":[{"id":2183,"href":"https:\/\/banking.deepdigitalventures.com\/blog\/wp-json\/wp\/v2\/posts\/1257\/revisions\/2183"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/banking.deepdigitalventures.com\/blog\/wp-json\/wp\/v2\/media\/1959"}],"wp:attachment":[{"href":"https:\/\/banking.deepdigitalventures.com\/blog\/wp-json\/wp\/v2\/media?parent=1257"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/banking.deepdigitalventures.com\/blog\/wp-json\/wp\/v2\/categories?post=1257"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/banking.deepdigitalventures.com\/blog\/wp-json\/wp\/v2\/tags?post=1257"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}