Who Regulates Banks, Insurance, and Investments in the United States

Ask “who regulates my bank” and “who regulates my insurance company” and you get two structurally different answers, and that difference is not a technicality. A bank’s safety is backstopped by a federal deposit insurer no matter which state it operates in. An insurance company’s solvency is backstopped by a state guaranty association whose payout limit depends on which state you happen to live in.

A brokerage account failure is covered by a private, congressionally chartered nonprofit that is not a government agency at all. None of this is arranged for the reader’s convenience — it is the product of a regulatory system built in layers, mostly in response to specific crises, over roughly 160 years, and the layers were never fully rationalized into one coherent structure.

This guide maps that structure directly: which government body regulates which financial activity, which statute gives that body its authority, what a consumer can actually do — file a complaint, demand arbitration, sue, wait for a regulator to act — when something goes wrong, and what happens, concretely, when a bank, an insurer, or a brokerage fails. It focuses on the United States, covers banking, insurance, and investment regulation as three related but legally distinct systems, and flags where the picture has materially changed heading into late 2026, particularly at the Consumer Financial Protection Bureau.

Banking is federal; insurance is state-by-state. The Federal Reserve, the OCC, the FDIC, and the NCUA regulate banking nationally, while insurance is regulated by fifty-plus separate state Departments of Insurance — a structural split rooted in the McCarran-Ferguson Act of 1945, not an oversight.

Securities regulation has four layers at once. The SEC (federal rulemaking and enforcement), FINRA (a private self-regulator for broker-dealers), the CFTC (derivatives), and state securities regulators under Blue Sky laws all have real, simultaneous jurisdiction.

FDIC and SIPC protect different things. FDIC deposit insurance ($250,000 per depositor/bank/ownership category) and SIPC brokerage protection ($500,000, including $250,000 in cash) both exist, but SIPC never protects against an investment simply losing value — only against a brokerage firm’s custodial failure.

The CFPB has shrunk dramatically since early 2025. Proposed staff reductions of roughly two-thirds, a much smaller examination and enforcement footprint, and ongoing federal litigation over its funding — while the Bureau remains, as a legal matter, open as of this writing.

No federal program insures against an insurer’s failure. Every state maintains its own guaranty association, commonly protecting around $300,000 of a life insurance death benefit and $250,000 of an annuity, though both figures vary by state and there is no federal backstop of any kind.

Most disputes have more than one possible path to a remedy. A regulatory complaint, FINRA arbitration, a state guaranty claim, small claims court, or a class action can all apply to the same underlying problem — and the fastest path is rarely the one most consumers try first.

Key Numbers to Know

The Regulatory Landscape at a Glance

The Three Layers of American Financial Oversight

American financial regulation is easiest to understand as three overlapping layers rather than one pyramid with a single body at the top.

The first layer is federal prudential regulation — agencies whose job is to keep individual institutions solvent and the financial system stable. The Federal Reserve, the OCC, the FDIC, and the NCUA all sit in this layer for banking; the SEC and CFTC sit in a parallel version of it for securities and derivatives markets.

The second layer is state regulation, which is dominant in insurance and still meaningful in banking and securities. Every state charters and supervises its own state-chartered banks and credit unions alongside the federal system, licenses insurance companies and agents, and maintains its own securities regulator with authority over smaller investment advisers and broker-dealer conduct within its borders.

The third layer is self-regulation: private organizations, created and empowered by federal statute, that regulate their own industry’s members subject to SEC or CFTC oversight. FINRA (broker-dealers) and the NFA (futures commission merchants) are the two most consequential examples — neither is a government agency, but both write binding rules, run licensing exams, and operate the arbitration systems most investors actually use when something goes wrong.

A fourth, cross-cutting layer exists specifically for consumers: the CFPB and the FTC at the federal level, and every state’s attorney general at the state level, all have some authority to act against unfair or deceptive financial practices regardless of which prudential regulator oversees the underlying institution. This is the layer most readers will actually interact with when filing a complaint, and it is covered in its own section below.

Banking Regulation in the United States

Banking is the most federally centralized of the three sectors covered in this guide, split among four main federal regulators whose jurisdiction depends on how a specific bank is chartered.

The Federal Reserve System

The Federal Reserve — created by the Federal Reserve Act of 1913 in direct response to recurring 19th- and early-20th-century banking panics — is the United States’ central bank and the primary regulator of state-chartered banks that choose to join the Federal Reserve System (“state member banks”), all bank holding companies, and financial holding companies. Its regulatory mandate sits alongside, and is often overshadowed by, its monetary policy role (setting the federal funds rate, managing the money supply), but the two functions are legally and operationally distinct.

What the Fed Actually Supervises

The Fed examines state member banks for safety and soundness, sets capital and liquidity requirements for the largest bank holding companies, runs the annual stress tests known as CCAR (Comprehensive Capital Analysis and Review) and DFAST (Dodd-Frank Act Stress Testing) for the biggest institutions, and has consolidated supervisory authority over any company that owns a bank, even if the bank itself is chartered and examined day-to-day by the OCC or a state regulator.

Governance Structure

The Fed’s unusual structure — a Washington-based Board of Governors plus twelve regional Federal Reserve Banks — reflects a 1913 political compromise between advocates of a single powerful central bank and advocates of regional control, and that structure still shapes which regional Fed bank examines which bank holding companies today.

The Office of the Comptroller of the Currency (OCC)

The OCC, a bureau of the U.S. Department of the Treasury created by the National Bank Act of 1864, charters and supervises national banks and federal savings associations (thrifts) — meaning any bank with “National Association” or “N.A.” in its name, and most large, multi-state banks, fall under the OCC rather than the Fed or a state regulator. The OCC’s authority also extends to federal branches and agencies of foreign banks operating in the U.S.

Chartering Authority and Preemption

Because the OCC charters national banks under federal law, national banks generally operate under a single federal rulebook rather than fifty different state banking codes, a legal doctrine known as federal preemption. This is a genuine, ongoing source of friction between federal and state regulators, since it can limit a state’s ability to apply its own consumer-protection statutes to a nationally chartered bank operating within its borders.

The Federal Deposit Insurance Corporation (FDIC)

The FDIC, created by the Banking Act of 1933 after roughly 9,000 bank failures between 1930 and 1933, has two distinct jobs that are easy to conflate: it insures deposits at virtually every U.S. bank up to $250,000 per depositor, per insured bank, per ownership category, and it directly supervises state-chartered banks that are not members of the Federal Reserve System (“state non-member banks”) — typically smaller community banks.

Resolution Authority

Beyond deposit insurance and supervision, the FDIC also acts as the receiver for any failed bank, federally insured or not, meaning it is the FDIC — not a bankruptcy court in the ordinary sense — that steps in when a bank fails, sells its assets, pays out insured deposits, and winds down or transfers the institution, usually over a single weekend to minimize disruption to depositors.

The National Credit Union Administration (NCUA)

The NCUA is the credit union analogue of the FDIC: an independent federal agency that charters and supervises federal credit unions and insures deposits at virtually all U.S. credit unions, federal and state-chartered alike, through the National Credit Union Share Insurance Fund (NCUSIF). NCUSIF coverage mirrors FDIC coverage almost exactly — $250,000 per depositor, per insured credit union, per ownership category — a deliberate statutory parallel so that a credit union member and a bank customer get functionally identical protection.

State Banking Departments

Every state maintains its own banking department or division of financial institutions, which charters and supervises state-chartered banks, state-chartered credit unions, and a range of non-bank financial businesses operating within that state — money transmitters, check cashers, payday lenders, and mortgage companies, depending on the state’s specific licensing statutes. A state-chartered bank is typically examined jointly by its state regulator and either the Federal Reserve (if it is a state member bank) or the FDIC (if it is not), rather than by the state alone.

Key Federal Banking Laws

The Federal Reserve Act (1913)

The founding statute of the Federal Reserve System, establishing the Fed’s structure, its role as lender of last resort to the banking system, and its dual mandate (later clarified by Congress) of maximum employment and stable prices.

The Glass-Steagall Act (1933) and Its Partial Repeal

Glass-Steagall separated commercial banking from investment banking in direct response to the bank failures and speculative excesses that preceded the Great Depression, and it created the FDIC. The Gramm-Leach-Bliley Act of 1999 repealed the core provision separating commercial and investment banking, permitting the modern financial holding company structure in which the same corporate parent can own a bank, a securities broker-dealer, and an insurance underwriter — a structural change many economists and regulators later cited as a contributing factor in the 2008 financial crisis, though that causal claim remains genuinely disputed among specialists.

The Bank Secrecy Act (1970) and the USA PATRIOT Act (2001)

The Bank Secrecy Act requires banks to keep records and file reports — Currency Transaction Reports for cash transactions over $10,000, Suspicious Activity Reports for potentially illicit activity — that assist law enforcement in detecting money laundering and other financial crimes. The USA PATRIOT Act, passed weeks after the September 11 attacks, substantially expanded these anti-money-laundering (AML) obligations and added the Customer Identification Program (CIP) requirement that every bank verify a new customer’s identity before opening an account. FinCEN (the Financial Crimes Enforcement Network, a Treasury bureau) administers this framework and receives the reports banks file under it.

Truth in Lending Act (1968) / Regulation Z

Requires lenders to disclose the annual percentage rate (APR), finance charges, and other standardized loan terms so borrowers can compare offers on an apples-to-apples basis, and gives borrowers a three-business-day right of rescission on most home-equity loans and refinances (though not on a purchase-money mortgage).

Truth in Savings Act (1991) / Regulation DD

The deposit-account counterpart to Truth in Lending: requires banks to disclose annual percentage yield (APY), fees, and minimum-balance requirements on savings and checking products in a standardized format.

Electronic Fund Transfer Act (1978) / Regulation E

Governs ATM transactions, debit card purchases, and other electronic transfers, including the consumer liability limits for unauthorized transactions ($50 if reported within two business days, up to $500 if reported within 60 days, potentially unlimited after that) and the specific requirement that a bank obtain affirmative opt-in consent before charging an overdraft fee on a one-time debit card or ATM transaction.

Equal Credit Opportunity Act (1974) / Regulation B

Prohibits credit discrimination on the basis of race, color, religion, national origin, sex, marital status, age, or receipt of public assistance income, and requires lenders to notify applicants of the specific reasons for a credit denial (an “adverse action notice”) rather than a vague refusal.

Fair Credit Reporting Act (1970)

Regulates the credit reporting agencies (Equifax, Experian, TransUnion) and anyone who uses a credit report to make a lending, employment, insurance, or housing decision, giving consumers the right to see their own file, dispute inaccuracies, and receive notice when adverse information is used against them.

Fair Debt Collection Practices Act (1977)

Restricts abusive, deceptive, and unfair practices by third-party debt collectors specifically — it generally does not apply to a creditor collecting its own original debt — including limits on when and how often a collector may call and a required validation notice for any disputed debt.

Community Reinvestment Act (1977)

Requires federally insured banks to meet the credit needs of the entire communities they serve, including low- and moderate-income neighborhoods, and ties a bank’s CRA rating to approval of its merger and expansion applications — one of the few statutes that gives regulators direct leverage over where and to whom a bank actually lends, not merely how it discloses terms.

The Dodd-Frank Wall Street Reform and Consumer Protection Act (2010)

The dominant post-2008 financial reform statute, and the single largest source of the modern regulatory architecture described throughout this guide. Among its major provisions: it created the CFPB (Title X); it created the Financial Stability Oversight Council (FSOC) to identify systemic risk across the financial system; it imposed the Volcker Rule, restricting banks from proprietary trading and certain hedge fund and private equity investments; it required mandatory clearing and reporting for many derivatives (Title VII), bringing much of the swaps market under CFTC and SEC jurisdiction for the first time; and it raised the FDIC/NCUA deposit insurance limit to $250,000 permanently.

The 2018 Economic Growth, Regulatory Relief, and Consumer Protection Act later scaled back several Dodd-Frank provisions for smaller and mid-size banks, most notably raising the asset threshold for automatic “systemically important” designation and enhanced Fed supervision from $50 billion to $250 billion.

The Volcker Rule

Named for former Fed Chair Paul Volcker, this Dodd-Frank provision generally bars banks and their affiliates from proprietary trading (trading for the firm’s own account rather than on behalf of clients) and from owning or sponsoring hedge funds and private equity funds above defined thresholds, on the theory that a federally insured deposit-taking institution should not be making speculative bets with the same balance sheet that backstops ordinary checking and savings accounts.

Systemically Important Financial Institution (SIFI) Designation

Bank holding companies above the statutory asset threshold face enhanced Federal Reserve supervision, mandatory stress testing, and higher capital and liquidity requirements, on the reasoning that the failure of an institution this large could threaten the broader financial system, not just its own depositors and shareholders.

Current Developments in Bank Capital Regulation

Bank capital requirements remain a live rulemaking area rather than a settled one. Federal banking agencies re-proposed a revised version of the international “Basel III Endgame” capital framework in 2026, after an earlier, more stringent 2023 proposal drew heavy industry pushback; the 2026 re-proposal moves in the direction of reducing certain regulatory capital requirements rather than the increases originally contemplated, reflecting a broader deregulatory posture across federal banking agencies in this period. Readers evaluating a specific bank’s capital strength should treat any such figures as a moving target and confirm current requirements directly with the relevant regulator’s published rules rather than a secondary summary, including this one.

The Consumer Financial Protection Bureau: Cross-Cutting Authority Over Consumer Finance

The CFPB occupies a different position than the four prudential bank regulators above: rather than supervising a specific type of charter, it has consumer-protection authority that cuts across nearly every category of consumer financial product — mortgages, credit cards, student loans, auto loans, debt collection, credit reporting, and payday and installment lending — regardless of which prudential regulator supervises the underlying bank or nonbank company.

What the CFPB Was Built to Do

Created by Title X of the Dodd-Frank Act in 2010 and formally launched in 2011, the CFPB consolidated consumer-protection rulemaking authority that had previously been split across seven different federal agencies, on the theory that fragmented rulemaking made it too easy for a specific product or lender type to fall into a regulatory gap. Its statutory tools include rulemaking under a range of consumer-protection statutes (many listed above — TILA, ECOA, FCRA, FDCPA, EFTA among them), supervisory examinations of large banks and many nonbank financial companies, enforcement actions including civil money penalties, and operation of a public consumer-complaint database and complaint-handling process.

Current Status: A Bureau in Significant Transition (as of late 2026)

The CFPB’s practical footprint has changed more dramatically since early 2025 than at any point since its creation, and any description of the agency risks going stale within months, so the specifics below should be read as a snapshot rather than a permanent description.

Funding and Litigation

The CFPB is funded outside the normal congressional appropriations process, through transfers from the Federal Reserve — a structure the Supreme Court upheld against a broader constitutional challenge in 2024, but which became a live operational flashpoint in 2025 when the Bureau’s leadership elected not to request the Fed funding transfer it had historically drawn, instead planning around a sharply reduced budget (reported at roughly $279.5 million through September 2026, itself less than half of prior-year funding levels).

That decision, and an associated attempt to terminate a large share of CFPB staff, triggered multiple federal lawsuits, including from the CFPB employees’ union; as of early 2026, a preliminary injunction remained in place blocking the most sweeping proposed staff reductions while the litigation continued in the D.C. Circuit.

Reduced Supervision and Enforcement

Independent of the staffing litigation, the Bureau’s own reported activity fell substantially through 2025 and into 2026: publicly announced enforcement matters were closed or abandoned, several nonpublic investigations were discontinued, remaining litigation was transferred to the Department of Justice, and the number of supervisory examinations conducted dropped well below prior-year levels, with a stated shift in focus toward depository institutions and away from nonbank lenders.

What This Means for a Consumer Right Now

The CFPB’s complaint portal and complaint-database function continue to operate, and its underlying consumer-protection statutes remain in force regardless of the Bureau’s staffing level, since those laws were passed by Congress and are not erased by a change in how actively one enforcement agency polices them. In practice, though, a consumer with a live dispute in this environment should not assume a CFPB complaint alone will move quickly, and should treat the other channels covered later in this guide — a state attorney general, the FTC, small claims court, or, for a covered product, FINRA arbitration — as active alternatives rather than a fallback to try only if the CFPB doesn’t respond.

How to File a CFPB Complaint

A complaint can be filed directly through the CFPB’s online complaint portal (consumerfinance.gov/complaint) against a bank, nonbank lender, credit reporting agency, or debt collector on a covered product. The company generally has 15 days to respond, and complaint data (with personal information removed) becomes part of the Bureau’s public Consumer Complaint Database, which is itself a useful research tool for checking a company’s complaint history before doing business with it.

Securities and Investment Regulation

Securities and investment regulation splits federal authority between two agencies with genuinely different jurisdictions — the SEC for securities, the CFTC for derivatives — layered with a private self-regulatory structure and a surviving, meaningful state role.

The Securities and Exchange Commission (SEC)

The SEC was created by the Securities Exchange Act of 1934, in the aftermath of the 1929 crash and the years of unregulated securities speculation that preceded it, and its founding mission — full and fair disclosure so investors can make informed decisions, rather than a government guarantee that any given investment will perform well — still defines the agency’s approach today. The SEC regulates securities exchanges, publicly traded companies, broker-dealers, investment advisers above a statutory size threshold, mutual funds and ETFs, and securities offerings generally.

What Falls Under SEC Jurisdiction

Stock and bond markets, initial public offerings and other securities issuances, investment company products (mutual funds, ETFs, closed-end funds), investment advisers managing roughly $100 million or more in assets (smaller advisers are generally state-regulated instead), and the ongoing disclosure obligations of public companies, including required quarterly and annual financial reports.

Key Securities Laws

The Securities Act of 1933

Often called the “truth in securities” law, it requires most public securities offerings to be registered with the SEC and accompanied by a prospectus disclosing material information about the issuer and the offering, and it created liability for material misstatements or omissions in that registration process.

The Securities Exchange Act of 1934

Created the SEC itself and established ongoing disclosure and reporting requirements for public companies and the exchanges and broker-dealers that trade their securities, along with antifraud provisions — most famously Rule 10b-5 — that remain the primary legal basis for securities fraud claims today.

The Investment Company Act of 1940

Regulates mutual funds, closed-end funds, and other pooled investment vehicles, governing how they are structured, how they must value and disclose their holdings, and restricting transactions that could favor fund insiders over ordinary investors.

The Investment Advisers Act of 1940

Requires investment advisers above the SEC’s jurisdictional threshold to register with the SEC, imposes a fiduciary duty to act in the client’s best interest, and requires specific disclosures (via Form ADV) about the adviser’s fees, conflicts of interest, and disciplinary history.

The Sarbanes-Oxley Act (2002)

Passed after the Enron and WorldCom accounting scandals, it imposed strict new corporate governance and financial-disclosure controls on public companies, created the Public Company Accounting Oversight Board (PCAOB) to oversee the auditors of public companies, and made CEOs and CFOs personally certify the accuracy of their company’s financial statements under threat of criminal liability.

Regulation Best Interest (Reg BI, 2019)

Requires broker-dealers to act in a retail customer’s best interest when recommending a securities transaction or investment strategy, replacing the older, more permissive “suitability” standard — though Reg BI’s best-interest duty is generally understood to be narrower in scope than the fiduciary duty investment advisers owe their clients under the Investment Advisers Act, a distinction worth understanding before assuming a broker and an adviser owe you the identical legal obligation.

The JOBS Act (2012)

Eased securities-registration requirements for smaller companies and created the modern framework for equity crowdfunding, allowing ordinary retail investors to buy small stakes in early-stage private companies through SEC-registered crowdfunding portals — a meaningful expansion of who can legally invest in private securities, previously limited mostly to wealthier “accredited investors.”

The Financial Industry Regulatory Authority (FINRA)

FINRA is not a government agency — it is a private, non-profit self-regulatory organization (SRO), overseen by the SEC, that virtually every broker-dealer operating in the United States must join. FINRA writes and enforces rules governing broker-dealer conduct, licenses individual brokers through qualification exams (the Series 7, Series 63, and related exams), and examines member firms for compliance.

BrokerCheck

FINRA’s free public BrokerCheck tool (brokercheck.finra.org) lets anyone look up a specific broker’s or brokerage firm’s registration status, employment history, and disciplinary record, including customer complaints and regulatory actions — one of the single most useful, underused tools available to an ordinary investor vetting a financial professional before opening an account.

FINRA Dispute Resolution and Mandatory Arbitration

Most brokerage account agreements require customers to resolve disputes with their broker through FINRA’s arbitration forum rather than in court, a mandatory pre-dispute arbitration clause that is legal and broadly enforceable, and that most investors agree to, often without realizing it, when they sign standard account-opening paperwork. FINRA arbitration is generally faster and less formal than litigation, but it also generally waives the right to a jury trial and to appeal on the merits, a trade-off worth understanding before, not after, a dispute arises.

The Commodity Futures Trading Commission (CFTC)

The CFTC, created in 1974, regulates futures, options on futures, swaps, and other derivatives markets, a jurisdiction that Dodd-Frank substantially expanded in 2010 by bringing most of the previously unregulated over-the-counter swaps market under mandatory clearing, reporting, and margin requirements. The CFTC also has primary jurisdiction over most spot commodity fraud involving retail investors, including a meaningful share of cryptocurrency-related enforcement, since the CFTC has taken the position that Bitcoin and certain other digital assets qualify as commodities under its statute.

The National Futures Association (NFA)

The CFTC’s self-regulatory counterpart to FINRA: a private organization that registers and examines futures commission merchants, commodity trading advisors, and commodity pool operators, and that maintains its own public disciplinary-record lookup (NFA BASIC) analogous to FINRA BrokerCheck.

State Securities Regulators and NASAA

Every state maintains its own securities regulator — often a division within the secretary of state’s office or a dedicated state securities commission — with authority that predates federal securities law entirely. State securities statutes are still commonly called “Blue Sky laws,” a term dating to early-20th-century concerns about promoters selling investors nothing more than a piece of the blue sky, and every state had one before the federal Securities Act of 1933 existed.

What States Still Regulate Directly

State securities regulators register and examine investment advisers below the SEC’s roughly $100 million jurisdictional threshold (the large majority of individual financial advisers, by headcount, fall into this state-regulated tier), license broker-dealer agents operating within the state, and retain independent authority to investigate and prosecute securities fraud under state law, in addition to and separate from any federal case the SEC might bring on the same facts.

NASAA

The North American Securities Administrators Association coordinates among state (and Canadian provincial) securities regulators, similar in spirit to the NAIC’s role in insurance discussed below — it is a coordinating and standard-setting body, not itself a regulator with direct legal authority over any individual firm.

The Securities Investor Protection Corporation (SIPC)

SIPC is a private, non-profit, congressionally chartered corporation — not a government agency, and not insurance against investment losses of any kind. When a SIPC-member brokerage firm fails and customer securities or cash go missing from the firm’s custody (through fraud, error, or the firm’s own insolvency, not through the securities simply losing market value), SIPC steps in to restore what should have been there, up to a $500,000 limit per customer, of which no more than $250,000 can be cash.

What SIPC Explicitly Does Not Cover

A declining stock price, a bad investment recommendation, an unregistered security, most commodity futures contracts, and most cryptocurrency holdings all fall outside SIPC’s protection — its function is narrowly to make a customer whole for custody failures at a failed brokerage, not to insure against the ordinary risk of investing.

Insurance Regulation in the United States

Insurance is the one major sector covered in this guide that has no primary federal regulator at all — a structural fact that surprises many consumers who assume every financial product works the way federally insured banking does.

Why Insurance Is Regulated by States, Not Washington

The McCarran-Ferguson Act (1945)

Insurance regulation’s state-based structure traces to a specific, deliberate act of Congress: the McCarran-Ferguson Act of 1945, passed after a 1944 Supreme Court decision (United States v. South-Eastern Underwriters Association) held, for the first time, that insurance was interstate commerce subject to federal antitrust law.

McCarran-Ferguson responded by affirming that the “business of insurance” would continue to be regulated by the states, and that federal law would generally not preempt state insurance law unless a federal statute specifically says it applies to insurance. That single 1945 statute is the reason a health insurer, an auto insurer, and a life insurer in the same state answer to a state insurance commissioner rather than to any federal counterpart to the FDIC or SEC.

What This Means in Practice

An insurance company that wants to sell policies in all fifty states must generally obtain a license in each state individually, comply with each state’s specific rate-approval process, policy-form requirements, and consumer-protection rules, and answer to each state’s insurance department for conduct within that state — a genuinely more fragmented system than federal bank or securities regulation, and one insurers themselves have periodically lobbied Congress to partially federalize, without success to date.

State Departments of Insurance

Every state (plus D.C. and the territories) has its own insurance department or division, typically headed by an insurance commissioner who is either elected directly or appointed by the governor, depending on the state. These departments perform several distinct functions.

Licensing Insurers and Agents

No company can lawfully sell insurance in a state without a certificate of authority from that state’s insurance department, and no individual can lawfully sell or advise on insurance products without an individual producer (agent/broker) license, which typically requires pre-licensing education, a state exam, and a background check.

Rate and Form Approval

Most states require an insurer to file its policy forms and, for many lines of insurance (especially auto and homeowners), its actual premium rates with the state insurance department before use, and many states require affirmative approval — meaning the state can reject a proposed rate increase it considers excessive, inadequate, or unfairly discriminatory — rather than merely accepting a filing on notice.

Market Conduct Examinations

Separate from financial solvency exams, state insurance departments periodically conduct market conduct examinations that review how an insurer actually treats policyholders in practice: claims-handling timeliness and fairness, underwriting practices, complaint-handling, and advertising accuracy.

Financial Solvency Regulation

State insurance departments also monitor each licensed insurer’s financial condition on an ongoing basis — required statutory reporting, risk-based capital calculations, and periodic financial examinations — precisely because there is no FDIC-equivalent federal backstop if an insurer becomes insolvent; catching a weakening insurer early, before it fails, matters more in this system than in banking, where depositors are protected regardless.

The National Association of Insurance Commissioners (NAIC)

The NAIC is not a regulator — it is a standard-setting and coordinating organization made up of the insurance commissioners of all fifty states, D.C., and the U.S. territories. It develops model laws and regulations that individual state legislatures can choose to adopt, coordinates multi-state financial examinations of large insurers, maintains shared databases used by state regulators, and accredits state insurance departments against a common set of financial-regulation standards. A NAIC model law has no legal force anywhere until a specific state legislature actually enacts it — a distinction worth understanding, since NAIC guidance is sometimes mistakenly described as binding federal-style regulation.

State Insurance Guaranty Associations

If a licensed insurer becomes insolvent, no federal agency comparable to the FDIC steps in. Instead, every state operates its own guaranty association — a legally mandated, industry-funded mechanism, separate for life/health insurance and property/casualty insurance in most states — that pays covered claims up to statutory limits when a member insurer fails.

Typical Coverage Limits (Vary by State)

For life and health insurance, the common (though not universal) model limit is $300,000 for a life insurance death benefit, $100,000 for a life insurance policy’s cash surrender value, and $250,000 for an annuity’s present value, with several states — including Connecticut, Minnesota, New York, Utah, and Washington among others — setting meaningfully higher limits, up to $500,000 in some categories. Property and casualty guaranty limits vary even more by state and by line of coverage. Because these limits are set state by state rather than federally, a consumer holding a policy near these thresholds should confirm the specific limit in their own state directly with that state’s guaranty association rather than assuming the common model figures apply.

How a Guaranty Association Claim Actually Works

When a state regulator determines an insurer is insolvent and places it into liquidation (a court-supervised process, with the state insurance commissioner typically acting as receiver), the relevant guaranty association or associations in every state where the insurer sold covered policies step in to continue paying claims and, where possible, to arrange for another insurer to assume the failed company’s policies — a process most policyholders experience as a transfer of their policy to a new carrier rather than a lump-sum payout, except where the guaranty limit caps the amount actually protected.

Where Federal Authority Does Touch Insurance

McCarran-Ferguson’s state-primacy framework has real federal exceptions and overlaps.

The Affordable Care Act (2010)

Imposed federal minimum standards on individual and small-group health insurance markets nationwide — guaranteed issue regardless of preexisting conditions, essential health benefits, medical loss ratio requirements, and the structure of the ACA marketplaces — layered on top of, rather than replacing, state health insurance regulation, and enforced through a combination of the Department of Health and Human Services and state insurance departments.

The Federal Insurance Office (FIO)

Created within the U.S. Treasury Department by Dodd-Frank in 2010, FIO monitors the insurance industry for systemic risk, represents the United States in international insurance regulatory discussions, and can recommend that a specific insurer be designated systemically important, but it has no general licensing, rate-approval, or solvency-enforcement authority over individual insurers — a deliberately narrow federal role that leaves the McCarran-Ferguson framework intact.

The National Flood Insurance Program (NFIP)

Administered by FEMA rather than a financial regulator, the NFIP is the primary source of flood insurance for most U.S. homeowners, since most standard homeowners policies exclude flood damage entirely — a federal program filling a gap the private and state-regulated insurance market has historically been unwilling to cover at scale in high-risk areas.

Retirement and Employee Benefit Plans

Retirement savings sit under a regulatory framework distinct from both banking and general securities law, built around the specific policy goal of protecting workers’ pension and benefit expectations.

ERISA and the Department of Labor

The Employee Retirement Income Security Act of 1974 (ERISA) sets minimum standards for most private-sector retirement and health benefit plans, including participation, vesting, funding, and fiduciary-responsibility rules. ERISA does not require any employer to offer a retirement plan, but once a plan exists, ERISA imposes a fiduciary duty — a legal obligation to act solely in participants’ interest — on the plan’s sponsors and administrators. The Department of Labor’s Employee Benefits Security Administration (EBSA) is the primary federal regulator enforcing ERISA’s fiduciary and disclosure requirements.

401(k) and 403(b) Plan Oversight

Employer-sponsored defined-contribution plans fall under ERISA’s fiduciary framework, meaning the employer (or a plan committee acting for it) has a legal duty to select and monitor plan investment options prudently and to ensure plan fees are reasonable — a duty that has generated a substantial and growing body of ERISA excessive-fee litigation against large employers in recent years.

The Pension Benefit Guaranty Corporation (PBGC)

The PBGC is the closest retirement-sector analogue to the FDIC, but with a much narrower scope: it insures traditional defined-benefit pension plans (the kind that promise a fixed monthly payment for life) against the sponsoring employer’s insolvency, up to statutory limits that depend on the participant’s age at the time of the plan’s termination. The PBGC does not insure defined-contribution plans like 401(k)s at all, since a 401(k) holds each participant’s own individually directed account balance rather than a pooled employer promise, and there is no equivalent insolvency risk to insure against.

The IRS and Tax-Qualified Retirement Accounts

The Internal Revenue Service does not regulate retirement plan investment conduct the way the DOL does under ERISA, but it sets and enforces the tax-qualification rules that give 401(k)s, IRAs, and similar accounts their tax-advantaged status — contribution limits, required minimum distribution rules, and the penalties for early withdrawal or a disqualifying plan failure all originate from the Internal Revenue Code rather than from ERISA’s fiduciary provisions.

Mortgage and Housing Finance Oversight

Mortgage lending draws on banking law, consumer-protection law, and a distinct secondary-market regulatory structure specific to housing finance.

The Federal Housing Finance Agency (FHFA)

Created in 2008 amid the housing crisis, the FHFA regulates Fannie Mae and Freddie Mac (the government-sponsored enterprises that buy and securitize the large majority of U.S. conventional mortgages) and the Federal Home Loan Bank System, and has served as Fannie Mae’s and Freddie Mac’s federal conservator since September 2008 — a conservatorship that, as of this writing, remains ongoing, more than a decade and a half after it began, with periodic political discussion of ending it that has not yet resulted in action.

HUD and the Fair Housing Act

The Department of Housing and Urban Development enforces the Fair Housing Act of 1968, which prohibits discrimination in housing-related lending and transactions on the basis of race, color, national origin, religion, sex, familial status, or disability — a broader and independently enforced set of protected categories than the Equal Credit Opportunity Act’s, and one that applies to the housing transaction itself, not only to the extension of credit.

RESPA and the TILA-RESPA Integrated Disclosure

The Real Estate Settlement Procedures Act (1974) regulates the mortgage closing process specifically — requiring disclosure of closing costs, restricting kickbacks between settlement service providers, and governing mortgage servicing and escrow account practices. Since 2015, RESPA’s disclosure requirements have been merged with Truth in Lending Act disclosures into a single set of forms (the Loan Estimate and Closing Disclosure) under the CFPB’s TILA-RESPA Integrated Disclosure (TRID) rule, replacing what had previously been separate and sometimes inconsistent federal disclosure forms.

Cross-Cutting Consumer Protection Bodies

A handful of authorities have jurisdiction that runs across banking, insurance, and investing simultaneously, rather than being tied to one sector’s charter or license.

The Federal Trade Commission (FTC)

The FTC’s general mandate under the FTC Act of 1914 — prohibiting “unfair or deceptive acts or practices” in commerce — predates and extends well beyond financial services, but it remains an active financial regulator in areas the CFPB does not fully occupy: identity theft, many auto lending and buy-here-pay-here dealer practices, non-bank debt collectors and debt relief companies, and, jointly with the CFPB, enforcement of the Fair Credit Reporting Act. The FTC also operates IdentityTheft.gov, the federal government’s central identity-theft reporting and recovery-plan resource.

State Attorneys General

Every state attorney general has independent authority to enforce that state’s own consumer-protection statute (often modeled on, but not identical to, the FTC Act’s unfair-or-deceptive-practices standard) against companies operating in the state, regardless of what any federal regulator does or does not do. State AGs frequently coordinate multi-state investigations and settlements — the 2012 National Mortgage Settlement and the more recent multi-state actions against several large banks and student loan servicers are examples — and a state AG’s office is often meaningfully more responsive to an individual complaint than an overloaded federal agency, particularly in periods when federal enforcement capacity is constrained.

The Financial Crimes Enforcement Network (FinCEN)

A Treasury bureau rather than a consumer-facing regulator, FinCEN administers the Bank Secrecy Act framework described earlier, collects and analyzes the Suspicious Activity Reports and Currency Transaction Reports banks and other financial institutions file, and increasingly regulates money services businesses, and since 2024, beneficial-ownership reporting for many small companies under the Corporate Transparency Act — a role most consumers never interact with directly, but one whose reporting requirements sit behind a large share of the “why does my bank need this document” questions ordinary customers encounter.

How These Agencies Actually Enforce the Law

Knowing which agency has jurisdiction is only useful once you also understand what that agency can actually do about a specific problem — and enforcement authority varies more than most consumers expect.

Routine Supervision and Examinations

The everyday mechanism through which most prudential regulators (the Fed, OCC, FDIC, NCUA, state insurance departments) oversee the institutions they charter is not enforcement in a dramatic sense at all — it is the periodic examination: teams of examiners reviewing an institution’s books, lending practices, capital position, and compliance systems on a recurring cycle, then issuing findings that the institution is typically required to remediate, often before any problem becomes visible to the public or generates an enforcement action.

Enforcement Actions, Consent Orders, and Civil Money Penalties

When examination findings are serious enough, or a violation of law is significant enough, a regulator can escalate to a formal enforcement action: a cease-and-desist order requiring specific corrective steps, a consent order (a negotiated settlement in which the institution typically neither admits nor denies wrongdoing but agrees to specific remedies), or a civil money penalty — a fine, which for the largest banks and in the largest cases can run into the hundreds of millions or billions of dollars. These actions are generally public and searchable on the relevant regulator’s website, another underused research tool for evaluating an institution’s regulatory history before doing business with it.

Criminal Referrals and the Department of Justice

Most financial regulators have civil, not criminal, enforcement authority. When examination or investigation findings suggest actual criminal conduct — fraud, embezzlement, money laundering — the regulator typically refers the matter to the Department of Justice or, for securities fraud specifically, works in parallel with the SEC’s civil case and a separate DOJ criminal prosecution, which is why some major financial scandals produce both an SEC settlement and a separate criminal case against the same individuals.

Private Rights of Action and Class Actions

Many of the consumer-protection statutes covered in this guide — the Fair Credit Reporting Act, the Fair Debt Collection Practices Act, the Truth in Lending Act, and others — give consumers a private right of action, meaning an individual can sue directly for statutory damages without waiting for any regulator to act at all, and many such claims are brought as class actions on behalf of a large group of similarly affected consumers. This path does not depend on a regulator’s current staffing level or enforcement priorities, which makes it an especially relevant option during a period of reduced federal enforcement capacity like the one described above at the CFPB.

Mandatory Arbitration Clauses

A significant complication across banking, brokerage, and even some insurance contracts: many customer agreements include a mandatory pre-dispute arbitration clause requiring individual disputes to go through private arbitration (frequently, though not always, with a class-action waiver attached) rather than to court. These clauses are broadly enforceable under the Federal Arbitration Act, and a 2017 CFPB rule that would have restricted mandatory arbitration clauses in many consumer financial contracts was itself overturned by a Congressional Review Act resolution that same year — meaning the clauses remain widely enforceable today. Reading the dispute-resolution section of any account agreement before signing is the only reliable way to know in advance whether a future dispute will go to court or to private arbitration.

Whistleblower Programs: An Underused Action Option

Beyond filing a complaint about your own situation, several regulators also offer formal whistleblower programs for reporting someone else’s securities, commodities, or tax violations, with a genuine financial incentive attached — a meaningful “action option” many consumers never learn about because it isn’t advertised the way a complaint portal is.

The SEC Whistleblower Program

Created by Dodd-Frank in 2010, this program allows anyone with original, non-public information about a securities-law violation to report it to the SEC and, if the information leads to a successful enforcement action with sanctions over $1 million, receive an award of between 10% and 30% of the amount collected — a structure specifically designed to make reporting worthwhile even for an insider risking their career to do it.

The CFTC Whistleblower Program

A close statutory parallel to the SEC’s program, covering violations of the Commodity Exchange Act, including derivatives and, in a growing share of recent cases, cryptocurrency-related fraud that falls under CFTC jurisdiction.

The IRS Whistleblower Program

Covers tax fraud and underpayment specifically, with awards generally between 15% and 30% of additional tax, penalties, and interest collected as a result, for cases involving more than $2 million in dispute.

FinCEN’s Whistleblower Program

Expanded significantly by the Anti-Money Laundering Act of 2020, this program rewards reporting of Bank Secrecy Act and sanctions violations, reflecting Congress’s judgment that anti-money-laundering enforcement benefits from the same financial-incentive structure that has driven a substantial share of major securities cases in the past decade.

Where to File a Complaint, by Topic

What Actually Happens When an Institution Fails

The regulatory map above is abstract until an institution actually collapses. The mechanics differ meaningfully across banks, credit unions, brokerages, and insurers.

When a Bank Fails

The FDIC almost always arranges for a failed bank’s insured deposits and, frequently, most of its branches and performing loans to be assumed by a healthy acquiring bank, a transaction typically arranged and announced over a single weekend so that the bank reopens under new ownership on the next business day with insured depositors experiencing no interruption in access to their money. Uninsured deposits — balances above $250,000 in the same ownership category — are not automatically made whole; depositors with uninsured balances become general creditors of the failed bank’s receivership estate and may eventually recover some or all of the excess, but only after the resolution process runs its course, which can take years for a full accounting.

When a Credit Union Fails

The NCUA follows a substantially parallel process for credit unions, most commonly arranging a merger with a healthy credit union so that insured shares (deposits) transfer without interruption, backed by the NCUSIF exactly as FDIC insurance backs bank deposits.

When a Brokerage Firm Fails

If a SIPC-member brokerage fails and customer assets are missing or unaccounted for, a federal court appoints a trustee to liquidate the firm under the Securities Investor Protection Act, and SIPC advances funds as needed to return customers’ securities and cash up to the $500,000/$250,000-cash limits described earlier. In the large majority of brokerage failures, most customer securities are simply transferred intact to another brokerage firm, since brokerages are required to keep customer securities segregated from the firm’s own assets — meaning a total loss of customer holdings, while it has happened in cases involving outright fraud (most notoriously the Bernard Madoff Ponzi scheme, which was a fraud rather than an ordinary brokerage failure), is not the typical outcome.

When an Insurance Company Becomes Insolvent

A state insurance commissioner, acting through that state’s courts, places a failing insurer into rehabilitation (an attempt to restore solvency) or, if that fails, liquidation. The guaranty associations in every state where the insurer sold covered policies then step in, most commonly by arranging for another solvent insurer to assume the failed company’s policies going forward, with the guaranty association covering any gap up to the state’s statutory limits.

Because this entire process runs through state courts and state-specific guaranty funds rather than a single federal resolution authority, the timeline and ultimate outcome for a policyholder can vary meaningfully depending on which state’s guaranty system applies and how many other states are simultaneously handling claims against the same failed insurer.

Real-World Examples (Regulates Banks)

A depositor with $310,000 at one bank, one ownership category. If the bank fails, $250,000 is immediately protected and available; the remaining $60,000 becomes an unsecured claim against the receivership estate, recoverable, if at all, only through the multi-year resolution process — a concrete illustration of why the FDIC’s own guidance recommends structuring large balances across ownership categories or institutions rather than assuming a single account title covers everything.

An investor whose brokerage firm collapses holding $700,000 in stock and $50,000 in uninvested cash. SIPC would cover the full $50,000 cash (under the $250,000 cash sublimit) and up to $450,000 of the $700,000 in securities (since the combined $500,000 overall limit has been reached), leaving $250,000 of securities value uncovered by SIPC — though in most real brokerage failures, segregated customer securities are transferred to a solvent firm intact rather than lost, making a shortfall of this kind the exception rather than the rule.

A policyholder with a $450,000 life insurance death benefit in a state with the common $300,000 guaranty limit. If the insurer becomes insolvent before another carrier assumes the policy, $150,000 of the death benefit sits outside the guaranty association’s protection — a gap with no federal backstop of any kind, unlike the FDIC/SIPC examples above, and one of the clearest illustrations in this entire guide of how differently insurance failure risk is actually structured compared to banking or brokerage failure risk.

A consumer disputing a $4,000 unauthorized charge in 2026. Filing simultaneously with the bank’s own dispute process (required under Regulation E), the CFPB complaint portal, and the state attorney general’s consumer-protection division costs nothing and takes under an hour combined, and given the CFPB’s reduced current enforcement capacity described earlier, pursuing more than one channel at once is a reasonable response to genuine uncertainty about how quickly any single one will act.

An employee who reports securities fraud at their own company. If that report leads to an SEC enforcement action collecting $10 million in sanctions, the whistleblower could receive an award of $1 million to $3 million under the SEC’s whistleblower program — a concrete illustration of why the program exists specifically to make reporting worthwhile even when it carries real personal and professional risk.

How to Verify a Regulator’s Communication Is Actually Legitimate

Every agency named in this guide is also routinely impersonated by scammers, precisely because their names carry authority — a call claiming to be from the IRS, the SEC, or a bank’s “fraud department” is one of the most common scam formats in the country, and knowing how these agencies actually communicate is a genuine protective skill.

What Real Regulators Do

A real federal regulator does not demand immediate payment by gift card, wire transfer, or cryptocurrency, does not threaten immediate arrest over the phone, and does not ask you to verify your full Social Security number or account passwords over an unsolicited call or text. The CFPB, SEC, FDIC, and IRS all primarily communicate by official mail for anything requiring action, and any phone number or link should be independently verified against the agency’s own official website (a .gov domain) rather than one provided in the message you received.

A Simple Verification Habit

If you receive a call, email, or text claiming to be from a bank, broker, insurer, or regulator, hang up or close the message, then independently look up that institution’s official contact information yourself and call or write to that number or address directly — never the one provided in the original contact. This single habit defeats the large majority of financial impersonation scams regardless of how convincing the original message appeared.

Common Misconceptions About Who Regulates What

Recent and Ongoing Changes Worth Watching

The regulatory landscape mapped in this guide is not static, and several developments active as of late 2026 are worth monitoring directly rather than assuming today’s description will hold indefinitely.

The CFPB’s Trajectory Remains Unresolved

The litigation over CFPB staffing and funding described earlier was still working through the D.C. Circuit as of early 2026, and the outcome — whether the Bureau returns to something closer to its pre-2025 scale, settles into a permanently smaller footprint, or something in between — will materially affect how quickly a federal consumer complaint gets meaningful attention for years to come.

Bank Capital Rules Are Being Rewritten Again

The 2026 Basel III Endgame re-proposal, discussed earlier in the banking section, remains an active rulemaking rather than a finalized rule as of this writing, and its ultimate direction will affect how much capital the largest U.S. banks are required to hold against various categories of risk.

State-Level Insurance Reform Continues Unevenly

Several states have moved to reform property insurance markets strained by increased catastrophe losses in recent years — some tightening rate-approval processes further, others loosening them to attract insurers back into high-risk markets — meaning the practical experience of being an insurance consumer in, say, Florida, California, or Louisiana has diverged further from the experience in lower-risk states, independent of any federal-level change.

Bank Merger Review Is Getting Faster

The Bank Merger Act requires the relevant federal regulator (the Fed, OCC, or FDIC, depending on the surviving institution’s charter) to approve any bank merger in advance, weighing factors including competitive effects, financial and managerial resources, and the resulting bank’s Community Reinvestment Act record. Through 2025 and into 2026, the OCC and FDIC each moved to streamline this review process, including an OCC interim final rule expanding the category of mergers eligible for expedited, largely automatic approval — a shift toward faster consolidation review after a period, earlier in the 2020s, when regulators had moved in the opposite direction and slowed merger approvals amid concerns about banking-sector concentration.

Digital Assets Remain a Jurisdictional Gray Zone

Whether a specific cryptocurrency or digital-asset product falls under SEC jurisdiction (as a security), CFTC jurisdiction (as a commodity), both, or a gap between them remains genuinely unsettled in a meaningful share of cases, and Congress has considered, without yet enacting as of this writing, comprehensive legislation that would assign clearer jurisdictional lines between the two agencies for digital assets specifically.

Precise Legal Citations: Where Each Rule Actually Lives in the Code (Regulates Banks)

Statute names (“Truth in Lending Act,” “Dodd-Frank”) are how these laws are known in conversation, but each one has a specific location in the United States Code, and the implementing regulations that actually spell out compliance detail sit in the Code of Federal Regulations under a specific part number administered by a specific agency. Knowing the citation is what lets you, or an attorney, go read the actual binding text rather than a secondary summary.

Why Your State Matters More in Some Areas Than Others

A theme running through this entire guide is worth stating directly: the amount of protection and the specific complaint process available to you depends heavily on which sector you’re dealing with, and in some sectors, on which state you live in — two genuinely different sources of variation that are easy to conflate.

Where Geography Barely Matters

Federal deposit insurance is identical in every state — $250,000 per depositor, per bank, per ownership category, whether the bank is in Alaska or Florida. SEC-registered securities and SIPC brokerage protection likewise apply uniformly nationwide, since securities regulation at the federal level was specifically designed to create one national market rather than fifty different ones.

Where Geography Determines Your Protection Entirely

Insurance guaranty association limits are set state by state, meaning the exact same life insurance policy, sold by the exact same insurer, can carry meaningfully different insolvency protection depending on where the policyholder lives. State banking department responsiveness, state attorney general enforcement priorities, and the availability of a state-level securities regulator’s help with a smaller investment adviser all vary by the specific state’s resources and statutory authority as well.

A Practical Implication

Before assuming any protection figure in this guide applies to your exact situation, identify whether it’s a federal figure (safe to assume it’s uniform nationwide) or a state-administered figure (insurance guaranty limits, state securities enforcement, state banking supervision) — and if it’s the latter, confirm the specific number with your own state’s regulator rather than relying on the common or model figure cited here.

Key Terminology

Frequently Asked Questions (Regulates Banks)

Is there one single agency that regulates all US financial companies?

No. Banking, securities, and insurance each have separate primary regulators, and insurance in particular has no federal prudential regulator at all — it is regulated state by state under authority Congress deliberately preserved in the McCarran-Ferguson Act of 1945.

What’s the difference between the FDIC and SIPC?

The FDIC insures bank deposits up to $250,000 against a bank’s failure. SIPC protects brokerage customers, up to $500,000 (including $250,000 in cash), against a brokerage firm’s custodial failure — but SIPC never protects against an investment simply losing value, which the FDIC’s deposit insurance has no equivalent exposure to in the first place.

Who do I contact if my bank treats me unfairly?

Start with the bank’s own complaint process, then file with the CFPB’s complaint portal and, depending on the bank’s charter, the OCC (national banks), the FDIC (state non-member banks), the Federal Reserve (state member banks), or your state banking department (state-chartered banks generally).

Is my insurance company federally regulated?

Generally no. With narrow federal exceptions (the Affordable Care Act’s health-insurance rules and FEMA’s flood insurance program among them), insurance companies are licensed, rate-regulated, and examined by the insurance department of every state in which they do business, not by any single federal insurance regulator.

What happens to my money if my insurance company goes bankrupt?

Your state’s guaranty association typically arranges for a solvent insurer to assume your policy, with the guaranty association covering any gap up to state-specific statutory limits — commonly around $300,000 for a life insurance death benefit and $250,000 for an annuity, though the exact figures vary by state.

Is the CFPB still operating in 2026?

Yes, as a legal matter it remains open and its complaint portal continues to function, but its staffing, examination activity, and enforcement caseload have all fallen substantially since early 2025 amid ongoing litigation over its funding and workforce, and the outcome of that litigation was still unresolved as of this writing.

What’s the difference between a broker and a registered investment adviser?

A registered investment adviser owes clients an ongoing fiduciary duty under the Investment Advisers Act of 1940. A broker-dealer’s representative owes a “best interest” standard under Regulation Best Interest that applies specifically at the point of a recommendation and is generally understood to be a narrower legal duty than a full fiduciary standard.

How do I check if my financial advisor or broker has a disciplinary history?

FINRA’s free BrokerCheck tool (brokercheck.finra.org) covers broker-dealers and their registered representatives; the SEC’s Investment Adviser Public Disclosure database covers registered investment advisers; both let you search by name before opening an account.

Does the government insure my 401(k)?

No. Only traditional defined-benefit pension plans are insured, by the PBGC, against the sponsoring employer’s insolvency. A 401(k) or similar defined-contribution account holds your own individually directed investments, which carry ordinary market risk with no insolvency-style insurance behind them.

Can I sue a bank or insurance company myself, or do I have to wait for a regulator?

Many of the consumer-protection statutes covered in this guide — including the Fair Credit Reporting Act, the Fair Debt Collection Practices Act, and the Truth in Lending Act — give you a private right of action to sue directly, independent of whether any regulator has acted, though a brokerage or bank account agreement’s mandatory arbitration clause may route that dispute to arbitration rather than court.

What is a Blue Sky law?

A state securities law predating the federal Securities Act of 1933, so named for early-20th-century concerns about promoters selling investors nothing more than a piece of the blue sky; every state still maintains its own version, which is why state securities regulators retain independent jurisdiction alongside the SEC today.

Who regulates cryptocurrency in the United States?

Jurisdiction splits by asset type and activity: the SEC asserts jurisdiction over digital assets it considers securities, the CFTC over those it considers commodities (including Bitcoin), and FinCEN over anti-money-laundering compliance by crypto exchanges — with a meaningful gray zone between SEC and CFTC jurisdiction that comprehensive federal legislation has not yet fully resolved as of this writing. States add a further layer on top of the federal picture: most require a crypto exchange doing business within their borders to hold a state money transmitter license, and New York’s BitLicense regime is widely regarded as the strictest and most demanding in the country.

If a bank and a credit union offer the same product, is my money protected the same way?

Functionally yes: FDIC deposit insurance and NCUA share insurance both cover up to $250,000 per depositor, per institution, per ownership category, under closely parallel statutory frameworks, even though they are administered by two different federal agencies.

Why do some states protect insurance policyholders more than others?

Because each state’s guaranty association limits are set by that state’s own legislature, not by any federal standard, so a benefit amount that is fully protected in one state can exceed the protected limit in another, even for functionally identical policies.

Is there a financial reward for reporting fraud to a regulator?

Yes, in several cases. The SEC, CFTC, IRS, and FinCEN each run a formal whistleblower program that pays a percentage of the money ultimately collected — commonly 10% to 30% for SEC and CFTC cases above $1 million, and 15% to 30% for IRS cases above $2 million — specifically to incentivize reporting that might otherwise never surface.

What’s the fastest way to escalate a financial complaint that isn’t getting a response?

Filing with your state attorney general’s consumer-protection division alongside the relevant federal regulator, rather than waiting for one channel to respond before trying another, since state AGs generally retain independent authority and have not experienced the same enforcement-capacity reductions as some federal agencies in this period.

Sources

• Consumer Financial Services Law Monitor — GAO Details CFPB Reorganization, Funding Cuts, and Litigation (Feb. 2026)
• Covington & Burling — Funding Haze and Deregulatory Pursuits: The CFPB in 2026
• Consumer Finance Monitor — CFPB Workforce Restructuring Plan (April 2026)
• U.S. GAO — Consumer Financial Protection Bureau: Status of Reorganization Efforts
• SIPC — What SIPC Protects
• SEC.gov — Paul S. Atkins, Chairman
• NOLHGA — How You’re Protected
• Holland & Knight — U.S. Banking Agencies Propose New Rules to Reduce Regulatory Capital Requirements (2026)
• Cornell Legal Information Institute — Economic Growth, Regulatory Relief, and Consumer Protection Act
• FINRA — Regulation Best Interest
• Checking Account: How It Works, What It Costs, and What to Check