What changed in banking rules in 2026?

The short version: the biggest 2026 banking rule changes are cancellations and pauses, not new protections. The CFPB's $5 overdraft cap was killed by Congress last year, the open banking compliance date of April 1, 2026 passed with no enforcement, the 21 cent debit swipe fee cap is on appeal after a court struck it down, and the $8 credit card late fee cap was vacated. Overdraft fees still average about $27 at the banks that charge them. A few real changes did take effect, mostly for small business lending, broker deposits, and mortgage data privacy.

The $5 overdraft cap was overturned, and fees stayed near $27

In December 2024 the CFPB finalized a rule that would have capped overdraft fees at $5, or at a level covering actual institution costs, for banks and credit unions with more than $10 billion in assets. It was scheduled to take effect October 1, 2025. Congress nullified it before then using the Congressional Review Act, and the president signed the disapproval resolution on May 9, 2025, so the rule never applied anywhere and the CFPB cannot reissue a substantially similar rule without new law.

Where fees stand now: Bankrate's 2025 checking account survey, published in September 2025, put the average overdraft fee at $26.77, down only a dollar from the year before, and found about 94 percent of the account options it studied still charge some overdraft fee. The New York Times reported in July 2026 that fees average near $27 and run as high as $42 at some institutions. Roughly half of the transactions that trigger an overdraft fee are for $50 or less, according to research the Federal Reserve Bank of New York cited.

A researcher at the Pew Charitable Trusts told the New York Times that many banks still charge $34 to $39 per overdraft. Some of the biggest banks, including Capital One, Ally, and Citi, now charge nothing at all. Because the federal cap is gone, your posted fee schedule is the only limit that matters.

Open banking: the April 1, 2026 deadline passed without enforcement

The CFPB's personal financial data rights rule, implementing Section 1033 of the Dodd Frank Act, was finalized in October 2024. It was supposed to give you the right to share your transaction data with apps through secure developer interfaces, with the first compliance tier for banks holding $250 billion or more landing on April 1, 2026 and smaller institutions phased in through April 2030.

None of that became a binding trigger. A federal court in the Eastern District of Kentucky enjoined the CFPB from enforcing the rule, and the CFPB then opened an August 2025 reconsideration covering who can act as a consumer representative, whether banks may charge fees for data access, and how security and privacy are protected. As of mid 2026 the rule remains in the code but effectively unenforceable, and the CFPB is working on a substantially revised version that could allow banks to charge for data access after a free quota.

Debit card swipe fees: the 21 cent cap is on appeal

Since 2011, Regulation II has capped the interchange fee a big debit card issuer can collect at 21 cents plus 5 basis points of the transaction, with a 1 cent fraud prevention adjustment. The Fed proposed cutting that to 14.4 cents plus 4 basis points with annual updates, but the bigger development came in August 2025, when a North Dakota judge vacated Regulation II entirely in a case brought by Corner Post, Inc., a truck stop operator.

The judge stayed his own order so debit fees did not become unregulated overnight, and the 21 cent cap still applies while the Fed's appeal runs. The Eighth Circuit heard oral arguments on February 19, 2026, and a decision is expected later this year. If the appeals court affirms the vacatur, debit interchange fees could head back toward pre 2011 levels with no cap, which the ClearingPost notes could push merchants toward ACH and instant payment rails.

Credit card late fees: the $8 cap was vacated

The CFPB's March 2024 rule would have cut the late fee safe harbor for large issuers from about $30 and $41 down to $8, removed inflation adjustments, and capped fees at 25 percent of the required minimum payment. It never took effect. On April 15, 2025 a Texas federal court vacated the rule, with the CFPB itself agreeing it violated the CARD Act requirement that penalty fees be reasonable and proportional. The prior safe harbor levels remain in place.

In July 2026 the CFPB quietly sent a request for information on credit card late fees to the White House budget office for review, the first formal step toward any new rulemaking. Industry analysts quoted by American Banker called a new cap unlikely while the legal landscape stays the same, so do not prepay bills on the expectation that late fee caps are coming back.

Changes that did take effect in 2026

Small business lending data reporting was narrowed instead of expanded. The CFPB's revised Regulation B rule, effective June 30, 2026, raises the reporting threshold from 100 to 1,000 covered loans a year, excludes merchant cash advances, agricultural loans, and small dollar loans, and redefines a small business as one with $1 million or less in gross revenue. The first compliance date is now January 1, 2028. A separate Regulation B rule effective July 21, 2026 removed disparate impact, the so called effects test, from the Equal Credit Opportunity Act interpretation and tightened the definition of discouraged applications.

Banks got a bigger ceiling on reciprocal deposits. Section 902 of the 21st Century ROAD to Housing Act took effect July 11, 2026, and the FDIC's interim final rule, effective September 1, 2026, lets a bank treat more of its reciprocal deposit program as non brokered funding, up to a tiered cap of about $30 billion instead of the old $5 billion limit. Your own coverage does not change: the FDIC insurance limit is still $250,000 per depositor, per bank, per ownership category.

Mortgage shopping got a little quieter. The Homebuyers Privacy Protection Act, effective March 4, 2026, restricts credit bureaus from selling prescreen trigger leads after you apply for a mortgage unless you authorized that use. If you have noticed fewer calls and texts after a mortgage inquiry, this law is a big reason.

What did not change, and what to check anyway

Bank merger reviews got easier, which matters mainly at the institution level. The FDIC rescinded its 2024 merger policy and reinstated its pre 2024 approach effective August 4, 2025, and the OCC undid its 2024 merger rule, restoring expedited review that can approve qualifying applications in about 15 days. The Fed cleared the Capital One and Discover combination in April 2025, a sign regulators are more open to consolidation. The Justice Department still reviews bank deals under its 2023 merger guidelines.

Brokerage sweep cash is worth a look. Charles Schwab announced it is moving sweep cash in brokerage accounts from FDIC backed bank sweeps to SIPC protection between September 8 and December 7, 2026. SIPC caps cash claims at $250,000, while an FDIC bank sweep spread across partner banks can insure more. Check the sweep language in any brokerage account you hold cash in, not just Schwab.

1. Pull up your own overdraft fee schedule and compare it with the table above, and switch to a no fee bank if you overdraft more than rarely.
2. Turn on low balance alerts and use the grace periods some banks offer so a slip up does not cost $35.
3. If you hold more than $250,000 at one bank, confirm your coverage across ownership categories, and check whether brokerage cash is held under FDIC or SIPC.
4. Keep using your budgeting apps; data sharing is being renegotiated, not discontinued.
5. Revisit this page after the Eighth Circuit rules and the CFPB finishes its open banking rewrite.

The cleanest takeaway from 2026 so far is that nobody should wait for a federal fee cap to rescue their checking account. The levers that still move are the fee schedule your own bank publishes and the new rules that quietly took effect for mortgage data and business lending.

How we reported this

Every fact above was checked against a primary source dated 2025 or 2026: the Federal Register, Congressional Research Service insights, the FDIC, the CFPB, the Federal Reserve, and named reporting outlets. The legal status of each rule can change quickly, so everything carries a date and this page was last reviewed on September 7, 2026.

Related reading: What changed in US finance this week? and What are the best practices for bank account security?.