GAO: FDIC Falling Behind on Oversight as Crypto Risks Mount

Why It Matters

As the Federal Deposit Insurance Corporation faces mounting pressure to address critical gaps in its supervisory practices, a new Government Accountability Office (GAO) assessment identified three priority open recommendations that could reshape how the agency manages risks across the banking system, from internal oversight procedures to emerging threats posed by cryptocurrency and blockchain technologies.

The FDIC's ability to implement these recommendations directly affects its capacity to prevent the kind of regulatory failures that contributed to the 2023 bank collapse crisis. When federal banking regulators fail to act decisively on supervisory concerns, depositors and the financial system bear the consequences. The current backlog of FDIC open recommendations reflects a broader challenge: the agency is moving slower than the government-wide average on implementing oversight improvements, even as new financial risks emerge faster than regulators can coordinate responses.

The Big Picture

The Government Accountability Office released a priority open recommendations letter on June 15, addressed to FDIC Chairman Travis Hill. The letter, signed by Orice Williams Brown, Acting Comptroller General of the United States, documents three priority open recommendations that remain unresolved as of mid-2026.

As of June 2026, the FDIC has six total open recommendations across all categories. Three of those are priority recommendations, the most serious classification in GAO's oversight framework. These priority designations signal that the recommendations address systemic vulnerabilities or governance failures that require urgent attention.

The specific recommendations emerge from multiple GAO audit findings FDIC conducted over the past two years. One recommendation focuses on internal case manager rotation procedures. Another addresses the need for ongoing coordination among financial regulators to manage blockchain and cryptocurrency risks. Both areas have been flagged on GAO's High Risk List, a comprehensive inventory of government operations most vulnerable to waste, fraud, and mismanagement.

Implementation Progress

The FDIC's track record on implementing recommendations shows mixed results. Since May 2025, when GAO identified four priority recommendations, the agency has implemented only one. That single completed recommendation required FDIC managers to consult with examination teams and relevant stakeholders before making substantive changes to examination findings, a procedural safeguard intended to prevent unilateral decision-making that could undermine supervisory integrity.

The implementation rate matters because it reveals how quickly the agency can translate oversight findings into operational changes. As of January 2026, the FDIC had implemented 80 percent of GAO recommendations made five years prior. That figure exceeds the government-wide average of 77 percent, suggesting the FDIC generally performs better than most federal agencies at acting on GAO recommendations. Yet the current backlog of FDIC open recommendations indicates the agency is struggling with more recent audit findings, particularly those designated as priority items.

The gap between the FDIC's historical implementation rate and its current slowness on priority recommendations suggests the agency faces either resource constraints, institutional resistance, or competing priorities that delay action on the most critical issues.

The 2023 Crisis

The timing of these recommendations reflects lessons from the 2023 banking failures. The collapse of Silicon Valley Bank and Signature Bank exposed fundamental weaknesses in how federal regulators monitored financial institutions and responded to warning signs. GAO's subsequent investigations found that financial regulators lacked sufficient mechanisms to coordinate their responses to emerging risks and that supervisory procedures contained gaps that allowed concerns to be overlooked or deprioritized.

The 2023 bank failures raised questions about whether federal banking regulators took sufficient action to ensure financial institutions promptly addressed supervisory concerns. The FDIC, as the primary federal regulator for state-chartered banks, faced particular scrutiny over its examination processes and internal procedures.

One of the unresolved recommendations directly addresses a vulnerability identified in that post-crisis review. The FDIC lacks periodic rotation requirements for certain case managers, a governance practice designed to prevent conflicts of interest and ensure independence in supervisory decision-making. When the same examiner or manager oversees a bank's compliance for extended periods without rotation, personal relationships or institutional pressures can compromise objectivity. GAO recommends that the FDIC implement periodic rotation requirements for certain case managers to mitigate threats to independence.

Emerging Risks

The second major priority recommendation addresses a different but equally pressing challenge: the explosive growth of blockchain and cryptocurrency-based financial products. Blockchain-related financial products and services have grown substantially in recent years, yet federal regulators have struggled to develop coordinated oversight frameworks.

In 2023, GAO found that financial regulators lacked an ongoing coordination mechanism for addressing blockchain risks and recommended implementing one. That structural change would require agencies to move beyond ad hoc collaboration toward institutionalized information-sharing and policy alignment.

The urgency reflects a fundamental characteristic of the U.S. financial regulatory structure: it is fragmented among multiple regulators. The Federal Reserve, the Office of the Comptroller of the Currency, the Securities and Exchange Commission, and state banking authorities all exercise jurisdiction over different segments of the financial system. When new technologies like blockchain create financial products that cross traditional regulatory boundaries, the fragmented structure creates coordination gaps that bad actors can exploit.

Oversight Framework

The GAO's authority to conduct this work and report on priority recommendations derives from the James M. Inhofe National Defense Authorization Act for Fiscal Year 2023. That legislation specifically authorized GAO to help Congress identify oversight actions to implement priority recommendations, creating a formal mechanism for translating audit findings into congressional pressure for agency compliance.

The letter released in June 2026 represents the execution of that mandate. By publicly documenting which FDIC open recommendations remain unresolved and why they matter, GAO creates an official record that Congress can use to demand accountability and allocate resources toward implementation.

The work was conducted by GAO's Financial Markets and Community Investment team, led by Managing Director Daniel Garcia-Diaz, which specializes in federal financial regulation and oversight.

The Bottom Line

The FDIC faces a choice: accelerate implementation of the three priority open recommendations or risk escalating congressional scrutiny and potential legislative intervention. The agency has demonstrated it can implement recommendations when it prioritizes them, as evidenced by the single completed recommendation from the May 2025 batch. Whether the FDIC can replicate that pace across the remaining priority items will determine whether the agency can address the supervisory vulnerabilities exposed by the 2023 banking crisis before the next financial stress test arrives.

Access the Legis1 platform for comprehensive political news, data, and insights.

Spot something wrong? Report an issue with this article