Feature Operational Risk
The 2026 CRE Loan Maturity Wall: How Community Banks Should Stress-Test Their Commercial Real Estate Portfolios Right Now
More than $1.5 trillion in commercial real estate loans mature in 2026. Roughly 31% of all U.S. banks are CRE-concentrated. Here's the stress-testing methodology community banks need — before examiners ask for it.
Table of Contents
If you’re a community bank with meaningful CRE exposure, the next 18 months are not theoretical. Over $1.5 trillion in commercial real estate loans mature in 2026 — and a significant portion of those loans were originated when rates were near zero, values were climbing, and refinancing was easy. None of those conditions exist today.
TL;DR
- More than $1.5 trillion in CRE loans mature in 2026; office alone is ~$148B, and multifamily maturities surge 56% year-over-year
- 31% of all U.S. banks (1,374 institutions) are CRE-concentrated per FDIC year-end 2024 data
- The Fed’s 2026 DFAST severely adverse scenario assumes a 40% CRE price decline — use it as a floor, not a ceiling
- Community banks don’t need enterprise DFAST, but examiners expect meaningful portfolio stress testing, especially for CRE-concentrated institutions
The FDIC’s 2026 Risk Review doesn’t bury the lead: roughly 31% of all banks — 1,374 institutions — exceeded CRE concentration thresholds at year-end 2024. Examiners aren’t surprised by concentration. They’re expecting you to have tested it.
What the Maturity Wall Actually Looks Like
The “$1.5 trillion maturity wall” is a useful headline, but the more important analysis happens at the property-type level — because the risk profiles are completely different.
Office: The most distressed sector. Office CMBS delinquency rates exceeded 12% in early 2026. Approximately $148 billion in office-backed CRE debt matures in 2026, and much of it was originated against valuations that remote work trends have since destroyed. Downtown Class B and C office is particularly toxic — vacancy rates in many markets still exceed 20%.
Multifamily: Not distressed in the same way, but the volume is staggering. Multifamily CMBS maturities are projected at approximately $162 billion in 2026 — a 56% increase from $104 billion in 2025. The challenge here isn’t vacancy; it’s that many loans were originated at 3.5-4% rates and need to refinance at 6-7%. The math doesn’t work at the original underwriting without meaningful rent growth or equity infusion.
Retail and Industrial: Retail remains structurally bifurcated — grocery-anchored community centers are fine, enclosed malls are not. Industrial has cooled from its post-COVID highs, but fundamentals are still sound in most markets. The risk here is secondary and tertiary markets where the development surge of 2021-2023 created supply that’s still being absorbed.
Hospitality: Extended-stay and limited-service hotels are generally performing. Full-service hotels in gateway cities are still recovering from conference-business declines.
For community banks, the practical question is: which of these property types do you hold, at what concentrations, with what loan-to-value and debt service coverage ratios — and have you stress-tested them at 2026 market conditions?
What Examiners Are Actually Looking For
The 2006 interagency guidance established two CRE concentration thresholds: total CRE loans exceeding 300% of total capital, and construction and land development loans exceeding 100% of total capital. Exceed either threshold and you’re a “CRE-concentrated institution” — which means your examiner will expect to see:
- A board-approved concentration management policy that defines risk appetite, sets internal concentration limits by property type, and establishes a review cadence
- A stress-testing program that’s more than a spreadsheet someone built in 2019 and never updated
- Meaningful management reporting — not just loan-level data, but portfolio-level analysis showing how stress scenarios affect capital ratios
- A problem loan process with early identification, workout capacity, and modification tracking
What examiners flag isn’t concentration itself — it’s concentration without governance. If your CRE portfolio is 250% of capital and you have all four of the above, you’re in a much better place than a bank at 200% that can’t produce a stress test.
The OCC has been clear that while complex enterprise-wide DFAST stress testing is not required of community banks, portfolio-level stress testing is a basic supervisory expectation. “Not required to do DFAST” doesn’t mean “not required to stress test.”
Building a CRE Stress Test That Holds Up
The core mechanics of a CRE stress test are simpler than they sound. You’re asking: if market conditions deteriorate, how does each material loan re-underwrite, and what does that mean for my capital position?
Here’s the framework:
Step 1: Segment Your Portfolio
Don’t stress test a homogenous blob. Segment by:
- Property type (office, retail, multifamily, industrial, hospitality, mixed-use)
- Geography (local market vs. out-of-market; primary vs. secondary vs. tertiary)
- Loan structure (fixed vs. floating rate; IO vs. amortizing; recourse vs. non-recourse)
- Maturity profile (maturing in <12 months, 12-24 months, 24+ months)
- Borrower quality (relationship strength, other exposure, guarantor capacity)
This segmentation tells you where your risk is concentrated before you run a single scenario.
Step 2: Define Your Scenarios
At minimum, run three:
| Scenario | NOI Change | Cap Rate Change | Estimated Value Impact |
|---|---|---|---|
| Baseline | 0% | 0 bps | Current appraised value |
| Adverse | -10 to -15% | +50 to +100 bps | -15 to -25% |
| Severely Adverse | -25 to -30% | +150 to +200 bps | -35 to -45% |
The Federal Reserve’s 2026 DFAST severely adverse scenario assumes a 40% CRE price decline. If you’re a $500M community bank that’s never run a 40% scenario, do it now — not because the Fed requires it of you, but because your examiner is aware of what that scenario looks like and will be wondering whether you are.
Step 3: Re-Underwrite LTV and DSCR
For each scenario, calculate the stressed LTV and DSCR on your material CRE loans. The triggers that matter:
- DSCR below 1.20x: Watchlist candidate — property income is close to not covering debt service
- DSCR below 1.0x: High probability of default — property can’t cover debt service without borrower equity infusion
- Stressed LTV above 80% (non-owner-occupied): Enhanced monitoring and potential collateral evaluation
- Stressed LTV above 100%: Borrower is underwater — workout or modification discussions should already be happening
For office specifically: given current market conditions, consider building in a scenario where valued at 60% LTV minimum regardless of model output. The range of outcomes in office is wide, and “the model says 72% LTV” for a downtown office building in a work-from-home city is probably optimistic.
Step 4: Aggregate to Capital Impact
Once you have stressed loan-level risk ratings, calculate:
- Expected stress losses across the portfolio (using your historical LGD assumptions, or industry benchmarks)
- Impact on your allowance for credit losses (ACL) — does your current reserve cover the stressed scenario?
- Impact on capital ratios — do you stay above well-capitalized thresholds under the adverse and severely adverse scenarios?
This is the output your board and examiners need to see.
Step 5: Document Proactive Modification Activity
The single most effective risk management move for the maturity wall is starting modification conversations before the loan matures, not after. If you wait until 2026, you’re one of hundreds in a lender’s workout queue — and examiners will view that as reactive, not proactive.
For loans that will struggle to refinance cleanly:
- Initiate contact at least 12 months before maturity
- Assess borrower capacity for principal paydown, equity infusion, or rate step-ups
- Classify the loan appropriately — a troubled debt restructuring (TDR) handled proactively looks very different in an exam than a loan that hits non-accrual at maturity
The KRIs Your Board Should Be Seeing Monthly
Stress testing is a point-in-time exercise. KRI monitoring is how you catch the portfolio moving toward stress before it arrives.
For CRE-concentrated community banks, your board reporting should include at least:
| KRI | Definition | Amber Threshold | Red Threshold |
|---|---|---|---|
| CRE-to-capital ratio | Total CRE / Tier 1 + Tier 2 capital | 250% | 300% |
| Construction-to-capital ratio | Construction / Tier 1 + Tier 2 capital | 80% | 100% |
| Portfolio average DSCR | Weighted avg DSCR across CRE portfolio | 1.30x | 1.20x |
| Share of loans DSCR <1.20x | % of CRE portfolio below watchlist trigger | 5% | 10% |
| Upcoming maturities (12-month) | $ maturing in next 12 months with refinance risk | Track | Track |
| Classified asset ratio | Classified assets / (capital + ALLL) | 20% | 35% |
If your board isn’t seeing these numbers monthly — not just at exam time — your concentration management program has a gap that examiners will find.
The Office Problem Deserves Its Own Paragraph
If you have meaningful office exposure in a market where hybrid work has become permanent, your stress test assumptions need to reflect market reality, not the 2019 playbook.
Vacancy rates above 20% in downtown markets, cap rate expansion, and a near-complete halt in office investment sales mean that appraised values from 2022 may be 30-40% above what you’d realize today. The gap between “book value” and “market value” for office CRE is not a theoretical risk — it’s a documented reality in markets like San Francisco, Chicago, and Manhattan.
If you have an office loan maturing in the next 18 months and the borrower can’t refinance at current rates with current valuations, your options are limited: modify, extend with a hard equity contribution requirement, or face a workout. The modification conversation is significantly easier when it starts 15 months before maturity than 30 days before.
So What?
The 2026 maturity wall is a manageable risk for community banks that have been running stress tests, monitoring concentration KRIs, and maintaining proactive borrower relationships. It’s a very hard problem for banks that have let concentration management slide since rates started rising.
If you’re in the latter category, the exam cycle will be uncomfortable. If you’re in the former, the exam cycle is an opportunity to show that your risk management program is actually working.
Three things to do before your next exam:
- Run your CRE portfolio through a 30-40% value decline scenario — document what it does to capital
- Pull a maturity schedule for the next 12 and 24 months, flag loans with refinancing risk, and initiate borrower conversations now
- Make sure your board is seeing CRE KRIs monthly, not just when an examiner asks
For teams building out a KRI monitoring framework, the KRI Library (132 Key Risk Indicators) includes pre-built operational, credit, and concentration KRIs with thresholds calibrated for financial services — so you’re not starting from a blank spreadsheet when examiners ask to see your monitoring program.
Also see: our posts on credit risk KRIs for fintech lenders, liquidity risk KRI metrics, and the OCC’s 2026 supervisory priorities for community banks.
Sources:
◆ Need the working template?
Start with the source guide.
These answer-first guides summarize the required fields, evidence, and implementation steps behind the templates practitioners search for.
◆ Related template
KRI Library (132 Key Risk Indicators)
132 KRIs with thresholds, data sources, and escalation triggers pre-built for financial services.
◆ Immaterial Findings · Weekly
Sharp risk & compliance insights. No fluff.
◆ FAQ
Frequently asked questions.
How large is the 2026 CRE loan maturity wall?
Are community banks required to conduct DFAST-style stress tests for their CRE portfolios?
What stress scenarios should community banks run on CRE portfolios?
What are the DSCR and LTV thresholds that signal CRE loan stress?
What does 31% of all banks being CRE-concentrated actually mean for exam risk?
What KRIs should community banks track for CRE portfolio health?
Author
Rebecca Leung
Rebecca Leung has 8+ years of risk and compliance experience across first and second line roles at commercial banks, asset managers, and fintechs. Former management consultant advising financial institutions on risk strategy. Founder of RiskTemplates.
◆ Related framework
KRI Library (132 Key Risk Indicators)
132 KRIs with thresholds, data sources, and escalation triggers pre-built for financial services.
◆ Keep reading
Related posts.
Operational Risk
1,155 Violations and $1.2 Billion in Restitution: What the FDIC's Spring 2026 Supervisory Highlights Say About Where Your Program Gets Tested
The FDIC's Spring 2026 Consumer Compliance Supervisory Highlights documented 1,155 violations from 2025 exams — with TILA/Reg Z alone accounting for 462, flood insurance violations generating $150 million in orders, and formal enforcement actions requiring $1.2 billion in restitution. Here's how to use the FDIC's own findings as a self-assessment checklist before your next examination.
Jul 8, 2026
Operational Risk
What the OCC's CFSB Consent Order Says About BSA/AML Risk in Fintech Payment Partnerships
On May 21, 2026, the OCC released a consent order against Community Federal Savings Bank—sponsor bank for Wise and Crypto.com—for BSA/AML failures tied directly to rapid payment processing growth. The core problem wasn't the fintech partners. It was that alert tuning, CDD, and staffing never scaled with transaction volume. Here's the operational risk lesson for every institution growing through fintech relationships.
Jul 7, 2026
Operational Risk
Liquidity Risk KRIs Beyond LCR and NSFR: The 12 Early Warning Metrics That Give You Days, Not Hours
LCR and NSFR tell regulators you're compliant. Liquidity KRIs tell you when you're three days from a crisis. Here are the 12 metrics every risk manager should be tracking — and what SVB's 31 open MRAs reveal about what happens when early warning breaks down.
Jul 2, 2026