U.S. banking regulators have issued guidance directing banks to treat loans to undocumented immigrants as a potential source of heightened risk, according to The Wall Street Journal. The guidance stops short of banning such lending outright, but it instructs institutions to factor immigration status into their risk assessments. That signal will ripple through underwriting models—the formulas banks use to decide who qualifies for credit—and through fair-lending compliance frameworks and Community Reinvestment Act (CRA) examination prep across the industry.

This move follows a deliberate sequence. On January 12, 2026, the government withdrew a policy that had explicitly prohibited lending discrimination against immigrants, as Reuters reported. That withdrawal removed a specific anti-discrimination backstop regulators could previously cite. The newer guidance goes further by actively signaling caution on immigration status itself. Read together, the two actions trace a progression from removing a protection to installing a supervisory nudge in the opposite direction.

For compliance and risk teams at banks, the practical question is how "potentially risky" actually gets written into lending decisions. Regulatory guidance of this kind typically shapes examiner expectations well before any formal rule appears, and banks tend to over-comply to avoid safety-and-soundness criticism or fair-lending violations during exams. This dynamic—where supervisory language drives behavior faster than statute—is a known pattern in mortgage servicing and anti-money-laundering enforcement. The Journal's reporting frames this as regulators under the current administration seeking to discourage the lending activity rather than prohibit it, leaving banks to interpret the risk signal largely on their own.

Historically, undocumented immigrants have accessed credit through ITIN-based mortgage programs—loans underwritten using an Individual Taxpayer Identification Number rather than a Social Security number—and through community development financial institutions (CDFIs) and some regional banks willing to operate outside standard agency guidelines. Fair lending law under ECOA (the Equal Credit Opportunity Act) and Regulation B does not classify immigration status as a protected class in the way race or national origin are, but supervisory attention to adjacent proxies—national origin, language preference, documentation type—has long been contentious. The January withdrawal removes a specific enforcement tool regulators previously could point to; the new guidance now gives banks an affirmative reason to pull back rather than merely permission to do so.

The sequencing matters for how institutions will likely respond. A formal rule requires notice-and-comment rulemaking and a fixed compliance date. Guidance can be issued and rescinded with far less procedural friction, and it carries less legal weight if challenged in court. That makes it a faster policy lever, but also a less durable one—a consideration worth remembering given how quickly the January withdrawal was itself followed by this new directive. Institutions with meaningful ITIN lending portfolios, or CDFIs and regional banks serving immigrant-heavy communities, face an immediate decision: tighten underwriting now on a supervisory signal, or wait for something more binding.

There is also a portfolio-risk dimension examiners will be watching. If banks pull back on loans that were previously performing well in their books of undocumented borrowers, that could show up as reduced loan growth in specific geographic and demographic segments. Such a shift could affect CRA assessment scores—the regulatory grade banks receive for meeting community reinvestment obligations—for institutions that have relied on such lending to serve their communities. The Journal's reporting does not specify enforcement mechanisms or a compliance timeline, so how examiners will actually score this remains an open question institutions will need to track through upcoming guidance updates or interagency statements.

None of this yet amounts to a change in the law governing who can or cannot receive credit. What has changed is the supervisory signal bracketing that law—first by removing an explicit protection, then by adding an explicit caution. For risk and compliance functions, the near-term task is less about legal exposure and more about anticipating how examiners will read loan files in the next examination cycle.