The New Global Banking Reality: A Guide to the Basel III Endgame, the Shift to Standardized Risk, and the 2028 Compliance Horizon

The short version: The U.S. banking system is undergoing its most significant capital overhaul in a decade, but the final rules are far more forgiving than initially feared. By July 2028, the largest U.S. banks must comply with the "Basel III Endgame," a regulatory framework designed to standardize how banks calculate the risk of their loans and investments. [7] After fierce industry pushback against a stringent 2023 draft, federal regulators issued a comprehensive rewrite in March 2026 that fundamentally changes the compliance landscape. [4] The new reality is a tiered system that targets the largest global institutions with strict standardized models while sparing regional banks from the heaviest capital burdens. [5]

For corporate treasurers, regional bank executives, and financial risk managers, the actionable takeaway is clear: the revised proposals lower overall common equity tier 1 (CET1) capital requirements by roughly $87.7 billion system-wide compared to the previous draft. [5] This pivot preserves the economics of traditional lending while forcing the largest global systemically important banks (GSIBs) to adopt a standardized, rather than internal, approach to risk modeling. [1] By abandoning the one-size-fits-all approach, the Federal Reserve, FDIC, and OCC have created a framework that balances systemic safety with the practical need for credit availability in the broader economy. [3]

The mechanism driving this regulatory shift is the Expanded Risk-Based Approach (ERBA). Under the original Basel III framework agreed upon by international standard-setters in 2017, regulators sought to eliminate the unwarranted variability that occurs when banks use their own proprietary models to assess credit and operational risk. [2] The U.S. implementation forces Category I and II banks—the largest and most complex institutions—onto this standardized ERBA framework. [4] This means that a corporate loan or a residential mortgage will carry a uniform risk weight regardless of which mega-bank holds the asset on its balance sheet. [2]

By removing internal models, regulators ensure that banks cannot artificially lower their capital costs by underestimating the riskiness of their portfolios. [2] However, the 2026 do-over significantly narrows the scope of these stringent rules. While the 2023 proposal would have applied the ERBA to all banks with over $100 billion in assets, the revised framework limits mandatory application to only the very largest GSIBs. [4] This concession addresses widespread concerns that applying global standards to domestic regional banks would unnecessarily restrict lending to small businesses and local communities. [2]

For regional and community banks falling into Category III and IV, a separate "Standardized Approach" applies. This tiered system reduces the compliance burden on smaller institutions, ensuring that local lending remains economically viable. [5] The treatment of mortgages is a prime example of the new framework's utility-first design. Both the ERBA and the Standardized Approach remove the punitive requirement to deduct mortgage servicing assets from regulatory capital. [3] Instead, these assets are assigned a 250 percent risk weight, a move specifically designed to promote mortgage origination and keep lending activity within the regulated banking sector rather than pushing it to nonbank shadow lenders. [4]

Corporate exposures also receive more favorable treatment under the revised rules. The risk weight for corporate loans has been reduced from 100 percent to 95 percent. [5] For businesses seeking credit, this marginal reduction translates into better borrowing terms, as banks are required to hold slightly less capital against these loans. [5] Additionally, the framework introduces a new loan-to-value based approach for residential real estate exposures, further easing the capital requirements for traditional mortgage lending compared to the 2023 draft. [5]

Operational risk—the threat of loss from inadequate internal processes, system failures, or external events—remains a major focus of the endgame rules. The framework introduces a standardized "business indicator" to measure operational risk, based on a bank's overall volume of lending, investing, and historical losses. [3] Because banking organizations with higher overall business volume are larger and more complex, they naturally face higher operational risk and must hold capital accordingly. [3] This replaces the previous patchwork of operational risk models with a single, transparent metric. [3]

While the overall package delivers capital relief, it does introduce new volatility for regional institutions. The rules require Category III and IV regional banks to include accumulated other comprehensive income (AOCI) in their regulatory capital. [5] This means unrealized gains and losses on certain securities will now directly impact a regional bank's capital ratios, forcing tighter asset-liability management. [5] Treasurers at these institutions must now actively hedge against interest rate movements to protect their capital buffers from sudden market shocks. [1]

The timeline for this transition is firmly set, providing the industry with the certainty needed for long-term planning. Banks will begin phasing in the new requirements on July 1, 2025, with full compliance mandated by July 1, 2028. [2] This multi-year runway gives institutions time to adjust their balance sheet strategies, raise capital if necessary, and upgrade their data reporting systems. [1] The phased approach ensures that the banking system can absorb the new rules without triggering a sudden contraction in credit availability. [3]

The uncertainty now lies in the operational execution. Treasury, risk, and finance teams must overhaul their reporting infrastructure to handle the new standardized calculations. [1] While the regulatory battle over the rules has largely concluded with the March 2026 compromise, the technical challenge of implementing the Expanded Risk-Based Approach across complex global portfolios is just beginning. [1] Banks that invest early in data quality and automated reporting will hold a distinct competitive advantage as the 2028 compliance horizon approaches. [7]

Beyond credit and operational risk, the Basel III Endgame fundamentally rewrites the rules for market risk—the risk of losses in on- and off-balance sheet positions arising from movements in market prices. [3] The new framework requires banks to apply more granular risk weights to their trading books, capturing the specific risks of complex derivatives and securitized assets. [1] For banks with significant trading operations, this means higher capital charges for holding illiquid or highly volatile securities, incentivizing a shift toward simpler, more transparent trading strategies. [1]

The package also includes a crucial revision to the GSIB surcharge framework. [4] For the largest banks, the Basel III proposal alone would modestly increase capital requirements by 1.4 percent, but this is more than offset by a 3.8 percent reduction from the revised GSIB surcharge proposal. [5] This recalibration addresses recent increases in the surcharge that had deviated from actual risk, ensuring that the largest institutions are not unfairly penalized simply for their size, provided their activities remain well-managed and transparent. [3]

The broader economic impact of this regulatory reset cannot be overstated. By lowering overall capital requirements and improving the economics of traditional lending, the 2026 package could pull significant financial activity back toward regulated banks. [1] Over the past decade, stringent capital rules had pushed a substantial portion of corporate lending and mortgage servicing into the unregulated shadow banking sector. [4] The revised Basel III Endgame reverses this trend, creating a more level playing field that benefits both consumers and the stability of the financial system. [7]