What CCAR exercises are and why banks do them

CCAR stands for Comprehensive Capital Analysis and Review. It is an annual stress test that the Federal Reserve requires large banks to run on themselves. The bank models what would happen to its capital — the money it holds as a cushion — if the economy fell into a severe recession, unemployment spiked, or credit markets froze. The point is to make sure the bank could survive a real crisis without collapsing.

Banks with more than $100 billion in assets must do this. Smaller banks do not. The exercise is not something you see as a customer; it happens inside the bank's risk and finance teams. But it directly affects whether your bank can keep lending, whether it stays solvent, and whether the Federal Reserve will let it pay dividends or buy back stock.

The Federal Reserve publishes the scenarios each year — usually in February — and banks have months to run the numbers. The results come back to the Fed by early summer, and the Fed announces which banks passed and which failed or need to resubmit.

Key Takeaways

  • CCAR is a mandatory Federal Reserve stress test that forces large banks to model their survival through severe economic downturns.
  • Banks must forecast losses on loans, changes in interest rates, and market shocks across multiple scenarios the Fed provides.
  • The test determines whether a bank can maintain minimum capital levels and continue operations without government support.
  • Banks that fail CCAR cannot increase dividends, buy back stock, or make large acquisitions until they resubmit and pass.
  • The exercise involves thousands of hours of modeling by risk teams, finance staff, and technology systems across the bank.

The three scenarios the Federal Reserve sets each year

The Fed publishes three economic scenarios: baseline, adverse, and severely adverse. Each one describes unemployment, GDP growth, interest rates, house prices, stock market performance, and credit spreads — the extra interest borrowers pay when risk is high.

The baseline scenario is roughly what economists expect to happen. The adverse scenario is a recession — unemployment rises, GDP falls, and credit spreads widen. The severely adverse scenario is a deep crisis: unemployment might hit 10 percent or higher, GDP contracts sharply, stock markets crash, and credit markets seize up. Banks must run their entire balance sheet through all three and show how capital would move under each one.

The Fed changes the numbers every year. A bank cannot just reuse last year's model. The scenarios are designed to be plausible but severe — not a prediction of what will happen, but a test of whether the bank can handle it if it does.

How banks model loan losses and revenue under stress

The core of CCAR is predicting losses. A bank takes every major category of loans it holds — mortgages, auto loans, credit cards, commercial real estate, business loans — and estimates how many will default under each scenario. In the severely adverse scenario, default rates are much higher than in the baseline.

The bank also models how much money it will recover on those defaults. A mortgage backed by a house is less risky than an unsecured credit card loan. The bank uses historical data, economic relationships, and its own portfolio characteristics to build these models. A bank with a lot of subprime auto loans will see bigger losses in a recession than a bank focused on prime borrowers.

At the same time, the bank forecasts its revenue. Interest income falls if rates drop. Trading revenue falls if markets are volatile. Fee income drops if customers stop using services. The bank also estimates operating costs — it cannot cut expenses instantly, so some costs stay fixed even in a downturn.

Capital calculations and the minimum thresholds the Fed enforces

Capital is the bank's own money — the equity shareholders own. The Fed requires banks to hold a minimum amount of capital relative to the size and risk of their assets. The main measure is the Common Equity Tier 1 (CET1) ratio: the bank's highest-quality capital divided by its risk-weighted assets.

In CCAR, the bank starts with its actual capital today, then subtracts projected losses and adds projected revenue under each scenario. It also subtracts any dividends or stock buybacks the bank plans to pay out. The result is the bank's capital level at the end of the stress period — usually nine quarters ahead.

The Fed sets a minimum CET1 ratio that banks must maintain even under the severely adverse scenario. This ratio varies by bank size and complexity, but it is typically around 4.5 percent. If a bank's projected capital falls below that level, it fails CCAR. The bank must then resubmit with a lower dividend or no buyback plan.

What happens when a bank fails or passes CCAR

If a bank passes, it can proceed with its planned capital actions — dividends, stock buybacks, acquisitions — as long as it stays above the minimum capital ratio under stress. If it fails, the Federal Reserve objects to the bank's capital plan. The bank cannot increase its dividend per share, cannot buy back stock, and cannot make large acquisitions until it resubmits and passes.

A failed CCAR is public information. The Fed announces results on its website, and investors and regulators see which banks passed and which did not. A failure can affect the bank's stock price and its reputation. It signals that the bank's risk models or capital buffers are weaker than the Fed thinks they should be.

Banks that fail usually resubmit within a few months with a revised capital plan — lower dividends, no buybacks, or both. The Fed then re-reviews the submission. Most banks pass on resubmission because they have cut their planned capital actions.

The teams and systems involved in running CCAR

CCAR is not a small project. A large bank's CCAR team includes risk managers, economists, credit analysts, market risk specialists, finance staff, and technology engineers. The bank must pull data from dozens of systems — loan databases, trading systems, deposit systems, accounting systems — and consolidate it into a single model.

The modeling itself is complex. The bank builds separate models for each loan type, each business line, and each risk factor. These feed into a master model that calculates capital under each scenario. The bank then runs sensitivity analysis: what if unemployment is even higher, or rates fall faster? What if the bank's assumptions about recovery rates are wrong?

The entire process takes four to six months. The bank must document every assumption, every data source, and every calculation. The Federal Reserve reviews the work and can ask the bank to explain or redo parts of it. Large banks often hire external consultants to help build or validate the models.

How CCAR differs from other stress tests

The Federal Reserve also runs its own stress test called the Dodd-Frank Act Stress Test (DFAST). In DFAST, the Fed uses the same scenarios but runs its own models of what would happen to each bank. The Fed publishes the results, and banks must disclose their own results too. DFAST is a check on whether banks' internal models are realistic.

CCAR is the bank's own test; DFAST is the Fed's test. If the two diverge sharply, the Fed may push back on the bank's assumptions. Some banks have failed CCAR but passed DFAST, or vice versa, because their models disagreed on how severe losses would be.

Smaller banks below the $100 billion threshold do not do CCAR, but they may still do other stress tests required by their regulators. Community banks and regional banks have lighter requirements.

Frequently Asked Questions

Can a bank's customers lose money if it fails CCAR?

No. CCAR is a forward-looking test; it does not mean the bank is failing now. A failed CCAR means the bank must cut dividends or buybacks, not that deposits are at risk. Deposits are insured by the FDIC up to $250,000 per account holder per bank.

Why does CCAR matter if I just have a checking account?

CCAR ensures your bank has enough capital to survive a crisis and keep lending. If banks were undercapitalized, a recession could force them to cut credit sharply, raise fees, or fail. CCAR is a preventive measure that protects the banking system's stability.

How often do banks fail CCAR?

Most large banks pass CCAR on the first submission. Failures are rare — usually one or two banks per year fail initially. Banks that fail almost always pass on resubmission after adjusting their capital plans. A repeated failure would be a serious red flag.

Can I see my bank's CCAR results?

Yes. The Federal Reserve publishes a list of which banks passed and failed on its website. Banks also disclose their own stress test results in quarterly earnings reports and investor presentations. You can search for your bank's name and "CCAR results" to find the details.

Does CCAR test for cyber attacks or other operational risks?

CCAR focuses on financial risks — credit losses, market losses, and funding stress. It does not model cyber attacks or operational failures. The Federal Reserve has separate frameworks for operational resilience, but CCAR is primarily about whether a bank can absorb financial shocks.