OCC Nails Chicago Bank for Blasting Veterans with Fake VA Loan Offers
Table of Contents
TL;DR
- The OCC issued a consent order against The Federal Savings Bank (Chicago, $1.1B assets) for sending millions of deceptive mailers to veterans falsely claiming “available funds” — really just VA cash-out refinancing pitches.
- The scheme ran from 2022 to 2024 and steered service members into loans with higher fees, higher interest rates, and bigger monthly payments.
- The bank must hire a restitution consultant to identify harmed veterans and determine payback amounts within 90 days.
- Every consumer compliance officer needs to run their advertising through a UDAP pre-clearance checklist — especially anything touching military audiences.
A small Chicago bank just got caught running a bait-and-switch on veterans.
The OCC dropped a consent order on The Federal Savings Bank this April after finding that the $1.1 billion-asset institution had blasted service members with millions of mailers claiming they had “available funds” waiting — funds that only existed if those veterans agreed to VA cash-out refinancings with significantly higher costs than the ads implied.
This is a textbook Section 5 FTC Act violation: deceptive acts or practices. And it’s a reminder that consumer compliance isn’t just a CFPB problem. OCC-supervised banks face the same deceptive advertising liability — and when you’re targeting veterans, regulators are paying close attention.
The Scheme: How the Mailers Worked
Between 2022 and 2024, The Federal Savings Bank sent out mailers telling veterans they had “available funds.” That language — specifically designed to imply the money was already there, waiting — was misleading. The “funds” didn’t exist until a consumer agreed to a VA cash-out refinancing. And the bank couldn’t actually guarantee what the ads implied: lower interest rates and lower monthly payments.
According to the OCC’s 12-page consent order (Docket No. AA-ENF-2025-63), the bank made multiple false or misleading statements in these ads, including:
- False claims of a special VA relationship. The ads implied The Federal Savings Bank had a unique, privileged connection with the Department of Veterans Affairs — it didn’t.
- Misleading statements about eligibility. Veterans were led to believe they already qualified for specific loan terms, when actual eligibility and terms depend on individual financial profiles.
- Implied rate and payment reductions. The bank suggested cash-out refinancings would lower borrowers’ rates and monthly payments, when in many cases they resulted in higher origination fees, higher interest rates, and bigger monthly payments.
What made this particularly egregious: the target audience was service members and veterans who had earned VA loan benefits through military service. Targeting this population with deceptive ads isn’t just a compliance failure — it’s predatory in the eyes of regulators.
What the OCC Found — and Why It Matters
The OCC’s authority here comes from Section 5 of the Federal Trade Commission Act, which prohibits unfair or deceptive acts or practices. For OCC-supervised banks, this is the federal equivalent of the CFPB’s UDAAP standard — and it carries the same teeth.
The OCC didn’t need a dollar penalty to make this hurt. The consent order itself is a public enforcement record, a regulatory finding of deceptive conduct, and a compliance management overhaul mandate. For a $1.1 billion bank, the reputational and operational costs are substantial.
What triggered this? Two things the OCC consistently cites in consumer compliance examinations:
- Inadequate marketing pre-clearance. Ads went out without sufficient compliance review. Nobody caught the “available funds” language before it reached millions of mailboxes.
- No substantiation process. The bank couldn’t demonstrate the claims in its ads — rate reductions, payment savings — were achievable for the average recipient. Claims without substantiation are deceptive under the FTC Act.
What the Bank Has to Do Now
The consent order imposes a structured remediation program. The board is directly accountable:
| Requirement | Deadline | Who Owns It |
|---|---|---|
| Form 3-member board compliance committee | Immediate | Board of Directors |
| Appoint dedicated Consumer Compliance Officer | Immediate | CEO / Board |
| Hire restitution consultant — identify harmed veterans | 90 days | Board / CCO |
| Restitution methodology approved and executed | TBD | Restitution Consultant |
| Enhanced AML program | Per OCC review | BSA Officer |
| Management accountability measures implemented | Per OCC review | CCO |
The restitution piece is significant: the bank must hire an independent consultant to go through all the consumers who responded to these ads and determine how many were genuinely harmed — and how much they’re owed. The OCC didn’t set a number yet. That number is coming.
This is what an under-resourced consumer compliance program looks like when it fails under pressure: the board gets directly involved, an outside consultant takes over the remediation calculation, and management accountability mechanisms get layered in externally because internal culture clearly wasn’t producing results.
Where the Control Program Broke Down
Deceptive advertising failures almost always trace to one of three root causes:
1. Marketing creates materials without compliance in the room. The people writing “available funds” copy weren’t thinking about FTC Act substantiation requirements. They were thinking about response rates. When compliance is downstream of marketing — reviewing ads as the last step before they go out, rather than embedded in the creative process — misleading language slips through.
2. No advertised claims matrix. Every specific claim in an ad (lower rate, lower payment, available funds) should map to a documented substantiation source. If you can’t fill out that matrix, the claim doesn’t go in the ad. Most smaller banks don’t have this process formalized.
3. Military audience = amplified regulatory scrutiny. Veterans and service members are an explicitly protected class under multiple federal statutes, including the Servicemembers Civil Relief Act (SCRA) and the Military Lending Act (MLA). When you’re marketing VA loan products to this population, you’re already under a microscope. The OCC, CFPB, and VA all have explicit mandates to protect service members from predatory financial practices. Marketing materials aimed at this audience require an extra layer of review.
Practitioner Takeaways: What Your Consumer Compliance Program Needs
Compliance Officer (CCO): Pull all active advertising materials across every channel — direct mail, digital, email, social. Flag any ad that contains an implied claim: “available funds,” “you qualify,” “guaranteed savings,” “special access,” “government-backed offer.” Every implied claim needs to be supported by a written substantiation analysis.
Marketing Compliance Reviewer: Implement a pre-clearance gate: no marketing material targeting consumers gets distributed without a documented compliance sign-off. For VA loan and military-specific products, add a second-level review checkpoint.
Board / Audit Committee: Ask management to produce the current consumer compliance testing calendar. When was the last time marketing materials were tested against a UDAP/UDAAP checklist? When was the last mystery shop or ad audit? If the answer is “we do it when marketing asks us to,” that’s your gap.
Risk / RCSA Owner: Add “Marketing and Advertising” as a standalone risk category in your RCSA. Evaluate it separately from general consumer compliance. Score it on: volume of consumer-facing marketing, use of implied claims, audience vulnerability (military, elderly, low-income), and complaint trends tied to specific campaigns.
5 Things to Check Monday Morning
-
Audit all active direct mail and digital campaigns for implied claims (“available funds,” “you may qualify,” “guaranteed lower payment”). Anything that can’t be substantiated gets pulled.
-
Document the pre-clearance process. Who in compliance reviews marketing materials before distribution? Is it documented? Is there a sign-off log? If not, create one.
-
Create a claims substantiation matrix for each product: list every specific claim made in advertising, the source of substantiation, and the conditions under which the claim is true.
-
Review your military/veteran-specific marketing with heightened scrutiny. If you originate VA loans or offer military-specific products, apply SCRA/MLA awareness to all consumer-facing materials.
-
Check complaint data for spikes by product. Consumer complaints about specific loan products — especially cash-out refinancings — are an early warning sign that marketing may be outpacing what the product actually delivers. Your complaint management system should flag that correlation.
The harder question this raises: How many other institutions are running similar campaigns right now? Millions of mailers with implied “available funds” language is not an original idea. The OCC found it here. The next exam at another institution could find the same pattern.
If you don’t have a formal UDAP/UDAAP risk assessment for your marketing program, that’s the gap this case highlights. The RCSA Template includes a consumer compliance risk category with advertising and marketing as a scored control area — use it as a starting point to assess where your program stands.
Related reading:
- UDAAP Risk Assessment: How to Evaluate Products Before the Examiner Does
- Consumer Complaint Management Program: What the CFPB Exam Manual Requires
- CFPB Under the New Administration: What Changed and What Still Matters
Sources:
Related Template
RCSA (Risk & Control Self-Assessment)
141 pre-populated fintech risks with control assessments, questionnaire framework, and testing calendar.
Frequently Asked Questions
What did The Federal Savings Bank do wrong?
What is the OCC consent order requiring?
Does this only affect mortgage lenders?
What is a UDAP or UDAAP violation in consumer advertising?
What controls prevent deceptive advertising risk?
How should compliance officers respond to this OCC action?
Rebecca Leung
Rebecca Leung has 8+ years of risk and compliance experience across first and second line roles at commercial banks, asset managers, and fintechs. Former management consultant advising financial institutions on risk strategy. Founder of RiskTemplates.
Related Framework
RCSA (Risk & Control Self-Assessment)
141 pre-populated fintech risks with control assessments, questionnaire framework, and testing calendar.
Keep Reading
State Money Transmitter Licensing for Crypto: The Patchwork Compliance Challenge
49 states require money transmitter licenses for crypto businesses. OKX paid $505M for getting this wrong. Here's the state-by-state breakdown and how to build your licensing strategy.
Apr 21, 2026
Regulatory ComplianceVoyager Pacific Capital's $25M Ponzi: What the SEC + DOJ Double Tap Means for Investment Advisers
The SEC charged Voyager Pacific Capital Management in a $25M real estate Ponzi that ran five years. Here's what compliance teams must fix before examiners ask.
Apr 21, 2026
Regulatory ComplianceStablecoin Compliance Under the GENIUS Act: Consumer Protection Requirements Explained
The GENIUS Act is law. Here's what permitted payment stablecoin issuers owe consumers—reserve requirements, redemption policies, fee disclosures, and bankruptcy protections.
Apr 20, 2026
Immaterial Findings ✉️
Weekly newsletter
Sharp risk & compliance insights practitioners actually read. Enforcement actions, regulatory shifts, and practical frameworks — no fluff, no filler.
Join practitioners from banks, fintechs, and asset managers. Delivered weekly.