Comprehensive Capital Analysis and Review (CCAR): A 2026 Bank Overview

The Comprehensive Capital Analysis and Review (CCAR) is a mandatory regulatory framework established by the Federal Reserve to ensure that large Bank Holding Companies (BHCs) operating in the United States maintain sufficient capital to withstand intense economic financial stress. By evaluating capital adequacy, internal risk management, and planned capital distributions, CCAR safeguards the stability of the broader U.S. financial ecosystem.

The Strategic Importance of CCAR in 2026

As of 2026, CCAR remains the cornerstone of the Federal Reserve’s supervisory toolkit. While the fundamental goal—preventing a repeat of the 2008 financial crisis—remains unchanged, the process has evolved into a sophisticated, data-driven exercise that dictates how much money the nation’s largest banks can return to shareholders through dividends and share repurchases.

CCAR is not merely a "check-the-box" compliance exercise. It is a rigorous assessment of a bank’s forward-looking capital planning process. For a bank, passing or failing the CCAR process has immediate consequences for its stock price, its reputation among institutional investors, and its operational flexibility. The Federal Reserve uses this process to ensure that even in a "severely adverse" economic scenario—characterized by high unemployment, crashing equity markets, and extreme volatility—banks can still lend to households and businesses.

The Two Pillars of CCAR: Quantitative and Qualitative Assessments

The CCAR framework is traditionally understood through two distinct but interrelated lenses: the quantitative assessment and the qualitative evaluation.

1. The Quantitative Assessment

The quantitative pillar focuses on the numbers. The Federal Reserve projects a bank's financial performance over a nine-quarter planning horizon under various stress scenarios. The goal is to determine if the bank’s Common Equity Tier 1 (CET1) ratio remains above the required regulatory minimums throughout the entire stress period.

Banks must submit detailed data regarding their loan portfolios, trading positions, and projected income. The Fed then applies its own proprietary models to estimate potential losses. If a bank’s projected capital levels fall below the threshold in the Fed’s models, the bank may be restricted from increasing its dividends or conducting share buybacks.

2. The Qualitative Assessment

Although the Federal Reserve transitioned the qualitative "pass/fail" component to the normal supervisory process for most firms a few years ago, the qualitative assessment remains vital. This involves evaluating the integrity of the bank's capital planning process.

Regulators look at:

• Data Quality: Is the data used for stress testing accurate and granular?
• Model Risk Management: Does the bank understand the limitations of its own mathematical models?
• Governance: Does the Board of Directors actively oversee the stress testing process, or is it outsourced to a siloed risk department?
• Internal Controls: Are there sufficient checks and balances to prevent errors in capital reporting?

For the largest and most complex banks (Global Systemically Important Banks or G-SIBs), these qualitative expectations remain the most difficult hurdle to clear.

Understanding the Stress Capital Buffer (SCB)

In the current 2026 regulatory environment, the results of CCAR are directly integrated into a bank’s daily capital requirements through the Stress Capital Buffer (SCB). The SCB replaced the static 2.5% capital conservation buffer for large banks, making capital requirements more "risk-sensitive."

The SCB is calculated as the difference between a bank’s starting CET1 ratio and its lowest projected CET1 ratio under the Fed’s "severely adverse" stress scenario, plus four quarters of planned common stock dividends. Because the SCB is updated annually based on CCAR results, a bank that performs poorly in one year’s stress test will see its capital requirements rise immediately for the following year. This mechanism ensures that banks with riskier portfolios are forced to hold more of a "rainy day" fund.

CCAR vs. DFAST: Distinguishing the Frameworks

It is common to confuse CCAR with the Dodd-Frank Act Stress Testing (DFAST), but they serve different roles within the Federal Reserve’s oversight.

The Three Fed Scenarios

Every year, the Federal Reserve releases the hypothetical scenarios that banks must use for their submissions. For the 2026 cycle, these scenarios generally fall into three categories:

1. Baseline Scenario: This reflects the consensus view of economists regarding the trajectory of the U.S. and global economy. It assumes steady growth and moderate inflation.
2. Adverse Scenario: A more challenging economic environment that involves a moderate recession or a period of prolonged "stagflation" (high inflation and low growth).
3. Severely Adverse Scenario: The "stress" in stress testing. This scenario typically involves a massive spike in the unemployment rate (often 3-5 percentage points), a 30-50% drop in equity prices, and a significant contraction in Real Gross Domestic Product (GDP).

Banks must demonstrate that even if the "Severely Adverse" scenario occurs, they will not require a taxpayer-funded bailout and can continue to function as viable financial intermediaries.

Participant Categories and Tailoring

Not all banks are treated the same under CCAR. The Federal Reserve uses a "tailoring" rule to ensure that the intensity of the supervision matches the systemic risk posed by the institution.

• Category I (G-SIBs): These are the largest, most complex banks (e.g., JPMorgan Chase, Citigroup, Bank of America). They face the most stringent quantitative and qualitative requirements.
• Category II & III: Large banks with significant assets or international activity. They generally participate in CCAR annually.
• Category IV: Regional banks with assets between $100 billion and $250 billion. These banks typically undergo the supervisory stress test every two years rather than every year, though they must still maintain robust internal capital planning.

The Reporting Process: FR Y-14 Forms

To participate in CCAR, banks must submit massive amounts of data through the FR Y-14 series of reports. These reports are the "engine room" of the CCAR process and are divided into three parts:

• FR Y-14A (Annual): This report captures the bank's capital plan and the results of its internal stress tests. It includes detailed projections of P&L (Profit and Loss) and balance sheet changes over the nine-quarter horizon.
• FR Y-14Q (Quarterly): This report provides granular data on various asset classes, such as commercial real estate loans, credit cards, and securities. The Fed uses this to run its own independent models.
• FR Y-14M (Monthly): Only required for the largest firms, this provides loan-level data for retail portfolios, such as mortgages and auto loans.

The sheer volume of data required for these filings means that CCAR-eligible banks must employ hundreds, sometimes thousands, of data analysts and risk professionals to ensure accuracy. Mistakes in these filings can lead to "Matters Requiring Attention" (MRAs) from the Federal Reserve, which can ultimately impact the bank's ability to pay dividends.

Common Challenges and Pitfalls in CCAR Compliance

Despite having over a decade of experience with CCAR, many banks still face significant hurdles during the annual cycle.

Data Aggregation and Lineage

The most common point of failure is not the math, but the data. Regulators expect "data lineage," meaning the bank must be able to prove exactly where a number on a stress test report came from—all the way back to the original loan document. If a bank cannot prove its data is accurate, the Fed will likely apply a "conservative overlay," essentially assuming the worst-case scenario for that data point, which makes it harder to pass.

PPNR Modeling

Pre-Provision Net Revenue (PPNR) modeling is one of the most complex parts of the quantitative submission. Banks must predict how much they will earn from fees, interest spreads, and trading during a recession. Because interest rates and consumer behavior change rapidly under stress, these models are notoriously difficult to calibrate.

Scenario Sensitivity

Banks often struggle to identify "idiosyncratic risks"—risks that are unique to their specific business model. While the Fed provides the main scenarios, banks are also expected to develop their own internal scenarios that target their specific vulnerabilities. If a bank’s internal scenarios are too weak, regulators will view their capital planning as insufficient.

The Future of CCAR: Beyond 2026

Looking past 2026, the industry expects CCAR to incorporate more "climate-related financial risks" and "cyber-risk scenarios." While these are not yet the primary drivers of the Stress Capital Buffer, the Federal Reserve has begun pilot programs to see how extreme weather events or massive cyber-attacks on the payment system would impact bank capital.

Furthermore, the integration of Artificial Intelligence (AI) in modeling is a double-edged sword. While AI can process FR Y-14 data more quickly, the "black box" nature of some AI models conflicts with the Fed’s requirement for model transparency and explainability.

Summary of Key CCAR Requirements for 2026

• Capital Ratios: Maintain CET1, Tier 1 Capital, and Total Capital ratios above regulatory minimums.
• Post-Stress Survival: Prove the ability to survive a nine-quarter economic downturn.
• SCB Integration: Use CCAR results to calculate the Stress Capital Buffer for the next four quarters.
• Board Oversight: Demonstrate that the bank’s board understands and approves the risk-taking involved in the capital plan.
• Public Disclosure: Summary results of the Fed’s projections are made public, usually in June, providing transparency to the markets.

Frequently Asked Questions (FAQ)

What happens if a bank fails CCAR?

If a bank's projected capital ratios fall below the required minimums (including its SCB), it faces automatic restrictions on capital distributions. This means the bank may have to reduce its planned dividends, cancel share buybacks, or submit a revised capital plan. In severe cases of qualitative failure, the Federal Reserve can issue enforcement actions that require the bank to overhaul its entire risk management department.

Can a bank choose not to participate in CCAR?

No. Participation is mandatory for all Bank Holding Companies (BHCs) and Intermediate Holding Companies (IHCs) that meet the asset thresholds (generally $100 billion or more) as defined by the Dodd-Frank Act and subsequent tailoring rules.

How does CCAR affect the average bank customer?

While CCAR is a "behind-the-scenes" regulatory process, it protects customers by ensuring their bank won't collapse during a recession. A bank that passes CCAR is more likely to have the funds available to continue offering mortgages and business loans even when the economy is struggling.

What is the difference between CCAR and the "Basel III" requirements?

Basel III provides the international standards for how much capital banks should hold. CCAR is a specific U.S. framework that uses stress testing to determine if those capital levels are actually sufficient for the specific risks within the U.S. banking system. CCAR often results in higher capital requirements for U.S. banks than the baseline Basel III standards would require.

How often do the CCAR stress scenarios change?

The Federal Reserve releases new scenarios every year, usually in February. These scenarios are updated to reflect the current risks in the global economy, such as changing interest rate environments, geopolitical tensions, or shifts in the real estate market.

Practical Next Action for Banking Professionals

For those involved in bank risk management or financial reporting, the primary next action is to conduct a Gap Analysis between current internal stress testing results and the most recent Federal Reserve "Severely Adverse" scenario. Focus specifically on data lineage for FR Y-14 reporting, as this remains the area most scrutinized by examiners during the 2026 cycle. Ensure that PPNR models are validated by an independent third party to satisfy qualitative supervisory expectations.