Compliance frameworks, security audits, and quality certifications this company maintains.
Wells Fargo complies with Sarbanes-Oxley Act requirements, with CEO Charlie Scharf and CFO Mike Santomassimo certifying internal controls over financial reporting in every quarterly 10-Q and annual 10-K submission to the SEC, supported by KPMG as the firm's external auditor.
Regulatory
Federal Reserve Consent Order
CompliantThe Federal Reserve lifted its 2018 asset cap consent order in February 2025, concluding the most significant regulatory restriction on Wells Fargo's growth following the unauthorized accounts scandal. Wells Fargo continues to operate under other consent orders from the OCC and CFPB focused on specific business line remediation.
Wells Fargo maintains PCI DSS compliance for its consumer credit and debit card operations, covering the Active Cash, Autograph, and Reflect credit card portfolios and the Wells Fargo debit card network, with annual third-party assessments by a Qualified Security Assessor.
Wells Fargo's information security management systems are certified to ISO 27001, covering the firm's technology infrastructure that processes millions of daily consumer banking transactions, supports the Fargo AI assistant, and connects 4,500 branches and 12,000 ATMs to core banking systems.
Wells Fargo meets Basel III capital adequacy standards with a CET1 ratio of 11.1% (2024), above regulatory minimums. As a U.S. Global Systemically Important Bank (G-SIB), Wells Fargo is subject to enhanced capital requirements and stress testing under the Federal Reserve's CCAR framework.
Wells Fargo operates an enterprise-wide Anti-Money Laundering program under the Bank Secrecy Act, including transaction monitoring for suspicious activity, Suspicious Activity Report filing with FinCEN, and Customer Due Diligence programs across retail banking, commercial banking, and mortgage operations.
Wells Fargo received an 'Outstanding' Community Reinvestment Act rating from the OCC, reflecting the firm's $535B+ in community lending and investment commitments, affordable housing finance activities, and banking services in low-to-moderate income communities across its 4,500-branch national footprint.
Wells Fargo complies with GDPR for its European operations, including corporate and investment banking activities conducted by Wells Fargo Securities International Ltd. and Wells Fargo Bank International, with dedicated Data Protection Officers and privacy-by-design standards applied to client data handling.
Wells Fargo Clearing Services and Wells Fargo Advisors Financial Network are FINRA-registered broker-dealers, complying with FINRA rules governing the suitability of investment recommendations, supervision of 12,000+ financial advisors, and trade reporting requirements across the Wealth & Investment Management division.
Wells Fargo aligns with TCFD disclosure recommendations in its annual ESG Report, publishing climate risk metrics, financed emissions data, and progress toward its $500B sustainable finance commitment for low-carbon and transitional energy lending and investment activities through 2030.