Regulatory Compliance

OCC Nails Chicago Bank for Blasting Veterans with Fake VA Loan Offers

April 16, 2026 Rebecca Leung
Table of Contents

TL;DR

  • The OCC issued a consent order against The Federal Savings Bank (Chicago, $1.1B assets) for sending millions of deceptive mailers to veterans falsely claiming “available funds” — really just VA cash-out refinancing pitches.
  • The scheme ran from 2022 to 2024 and steered service members into loans with higher fees, higher interest rates, and bigger monthly payments.
  • The bank must hire a restitution consultant to identify harmed veterans and determine payback amounts within 90 days.
  • Every consumer compliance officer needs to run their advertising through a UDAP pre-clearance checklist — especially anything touching military audiences.

A small Chicago bank just got caught running a bait-and-switch on veterans.

The OCC dropped a consent order on The Federal Savings Bank this April after finding that the $1.1 billion-asset institution had blasted service members with millions of mailers claiming they had “available funds” waiting — funds that only existed if those veterans agreed to VA cash-out refinancings with significantly higher costs than the ads implied.

This is a textbook Section 5 FTC Act violation: deceptive acts or practices. And it’s a reminder that consumer compliance isn’t just a CFPB problem. OCC-supervised banks face the same deceptive advertising liability — and when you’re targeting veterans, regulators are paying close attention.

The Scheme: How the Mailers Worked

Between 2022 and 2024, The Federal Savings Bank sent out mailers telling veterans they had “available funds.” That language — specifically designed to imply the money was already there, waiting — was misleading. The “funds” didn’t exist until a consumer agreed to a VA cash-out refinancing. And the bank couldn’t actually guarantee what the ads implied: lower interest rates and lower monthly payments.

According to the OCC’s 12-page consent order (Docket No. AA-ENF-2025-63), the bank made multiple false or misleading statements in these ads, including:

  • False claims of a special VA relationship. The ads implied The Federal Savings Bank had a unique, privileged connection with the Department of Veterans Affairs — it didn’t.
  • Misleading statements about eligibility. Veterans were led to believe they already qualified for specific loan terms, when actual eligibility and terms depend on individual financial profiles.
  • Implied rate and payment reductions. The bank suggested cash-out refinancings would lower borrowers’ rates and monthly payments, when in many cases they resulted in higher origination fees, higher interest rates, and bigger monthly payments.

What made this particularly egregious: the target audience was service members and veterans who had earned VA loan benefits through military service. Targeting this population with deceptive ads isn’t just a compliance failure — it’s predatory in the eyes of regulators.

What the OCC Found — and Why It Matters

The OCC’s authority here comes from Section 5 of the Federal Trade Commission Act, which prohibits unfair or deceptive acts or practices. For OCC-supervised banks, this is the federal equivalent of the CFPB’s UDAAP standard — and it carries the same teeth.

The OCC didn’t need a dollar penalty to make this hurt. The consent order itself is a public enforcement record, a regulatory finding of deceptive conduct, and a compliance management overhaul mandate. For a $1.1 billion bank, the reputational and operational costs are substantial.

What triggered this? Two things the OCC consistently cites in consumer compliance examinations:

  1. Inadequate marketing pre-clearance. Ads went out without sufficient compliance review. Nobody caught the “available funds” language before it reached millions of mailboxes.
  2. No substantiation process. The bank couldn’t demonstrate the claims in its ads — rate reductions, payment savings — were achievable for the average recipient. Claims without substantiation are deceptive under the FTC Act.

What the Bank Has to Do Now

The consent order imposes a structured remediation program. The board is directly accountable:

RequirementDeadlineWho Owns It
Form 3-member board compliance committeeImmediateBoard of Directors
Appoint dedicated Consumer Compliance OfficerImmediateCEO / Board
Hire restitution consultant — identify harmed veterans90 daysBoard / CCO
Restitution methodology approved and executedTBDRestitution Consultant
Enhanced AML programPer OCC reviewBSA Officer
Management accountability measures implementedPer OCC reviewCCO

The restitution piece is significant: the bank must hire an independent consultant to go through all the consumers who responded to these ads and determine how many were genuinely harmed — and how much they’re owed. The OCC didn’t set a number yet. That number is coming.

This is what an under-resourced consumer compliance program looks like when it fails under pressure: the board gets directly involved, an outside consultant takes over the remediation calculation, and management accountability mechanisms get layered in externally because internal culture clearly wasn’t producing results.

Where the Control Program Broke Down

Deceptive advertising failures almost always trace to one of three root causes:

1. Marketing creates materials without compliance in the room. The people writing “available funds” copy weren’t thinking about FTC Act substantiation requirements. They were thinking about response rates. When compliance is downstream of marketing — reviewing ads as the last step before they go out, rather than embedded in the creative process — misleading language slips through.

2. No advertised claims matrix. Every specific claim in an ad (lower rate, lower payment, available funds) should map to a documented substantiation source. If you can’t fill out that matrix, the claim doesn’t go in the ad. Most smaller banks don’t have this process formalized.

3. Military audience = amplified regulatory scrutiny. Veterans and service members are an explicitly protected class under multiple federal statutes, including the Servicemembers Civil Relief Act (SCRA) and the Military Lending Act (MLA). When you’re marketing VA loan products to this population, you’re already under a microscope. The OCC, CFPB, and VA all have explicit mandates to protect service members from predatory financial practices. Marketing materials aimed at this audience require an extra layer of review.

Practitioner Takeaways: What Your Consumer Compliance Program Needs

Compliance Officer (CCO): Pull all active advertising materials across every channel — direct mail, digital, email, social. Flag any ad that contains an implied claim: “available funds,” “you qualify,” “guaranteed savings,” “special access,” “government-backed offer.” Every implied claim needs to be supported by a written substantiation analysis.

Marketing Compliance Reviewer: Implement a pre-clearance gate: no marketing material targeting consumers gets distributed without a documented compliance sign-off. For VA loan and military-specific products, add a second-level review checkpoint.

Board / Audit Committee: Ask management to produce the current consumer compliance testing calendar. When was the last time marketing materials were tested against a UDAP/UDAAP checklist? When was the last mystery shop or ad audit? If the answer is “we do it when marketing asks us to,” that’s your gap.

Risk / RCSA Owner: Add “Marketing and Advertising” as a standalone risk category in your RCSA. Evaluate it separately from general consumer compliance. Score it on: volume of consumer-facing marketing, use of implied claims, audience vulnerability (military, elderly, low-income), and complaint trends tied to specific campaigns.

5 Things to Check Monday Morning

  1. Audit all active direct mail and digital campaigns for implied claims (“available funds,” “you may qualify,” “guaranteed lower payment”). Anything that can’t be substantiated gets pulled.

  2. Document the pre-clearance process. Who in compliance reviews marketing materials before distribution? Is it documented? Is there a sign-off log? If not, create one.

  3. Create a claims substantiation matrix for each product: list every specific claim made in advertising, the source of substantiation, and the conditions under which the claim is true.

  4. Review your military/veteran-specific marketing with heightened scrutiny. If you originate VA loans or offer military-specific products, apply SCRA/MLA awareness to all consumer-facing materials.

  5. Check complaint data for spikes by product. Consumer complaints about specific loan products — especially cash-out refinancings — are an early warning sign that marketing may be outpacing what the product actually delivers. Your complaint management system should flag that correlation.


The harder question this raises: How many other institutions are running similar campaigns right now? Millions of mailers with implied “available funds” language is not an original idea. The OCC found it here. The next exam at another institution could find the same pattern.

If you don’t have a formal UDAP/UDAAP risk assessment for your marketing program, that’s the gap this case highlights. The RCSA Template includes a consumer compliance risk category with advertising and marketing as a scored control area — use it as a starting point to assess where your program stands.


Related reading:

Sources:

Frequently Asked Questions

What did The Federal Savings Bank do wrong?
The Federal Savings Bank sent millions of mailers to veterans falsely claiming they had 'available funds' waiting — funds that only existed if veterans agreed to VA cash-out refinancings with higher fees and payments. The OCC found these ads violated Section 5 of the FTC Act as deceptive acts or practices.
What is the OCC consent order requiring?
The consent order requires the bank to form a three-member board compliance committee, appoint a dedicated consumer compliance officer, hire a restitution consultant to identify harmed veterans within 90 days, enhance AML procedures, and implement management accountability measures.
Does this only affect mortgage lenders?
No. Any institution that markets products to consumers — including banks, credit unions, and fintechs — can face UDAP/UDAAP liability for deceptive advertising. The FTC Act Section 5 applies to OCC-supervised banks; CFPB's UDAAP authority covers nonbanks.
What is a UDAP or UDAAP violation in consumer advertising?
UDAP stands for Unfair or Deceptive Acts or Practices under the FTC Act — the federal standard that applies to national banks regulated by the OCC. CFPB's UDAAP standard adds 'Abusive.' Deceptive advertising means any statement that's misleading to a reasonable consumer, including implied claims and half-truths.
What controls prevent deceptive advertising risk?
Pre-clearance review of all marketing materials by compliance before distribution, explicit prohibition on implied claims that can't be substantiated, plain-language advertising policy, and a complaint monitoring system that flags spikes related to specific products or campaigns.
How should compliance officers respond to this OCC action?
Pull your VA loan (or equivalent product) marketing materials and run them against a UDAP checklist: does any ad imply funds exist before the consumer applies? Does any ad claim a 'special relationship' with a government agency? Are rate/payment claims specific and conditioned on actual qualification? Fix anything that fails.
Rebecca Leung

Rebecca Leung

Rebecca Leung has 8+ years of risk and compliance experience across first and second line roles at commercial banks, asset managers, and fintechs. Former management consultant advising financial institutions on risk strategy. Founder of RiskTemplates.

Related Framework

RCSA (Risk & Control Self-Assessment)

141 pre-populated fintech risks with control assessments, questionnaire framework, and testing calendar.

Immaterial Findings ✉️

Weekly newsletter

Sharp risk & compliance insights practitioners actually read. Enforcement actions, regulatory shifts, and practical frameworks — no fluff, no filler.

Join practitioners from banks, fintechs, and asset managers. Delivered weekly.