This is the operating playbook for banks, broker-dealers, asset managers, insurers, fintech firms, and the broader financial services category through the modern crisis arc.
What makes financial services crisis communications different
The regulator is the dominant audience. SEC, OCC, FDIC, Federal Reserve, FINRA, CFPB, state banking and insurance regulators, FinCEN. A communications response that satisfies the press but creates regulatory exposure has produced a second crisis on top of the first.
Securities disclosure is statutory. 8-K within four business days of material events. Form ADV updates. Trading desk and proprietary position disclosure obligations. The communications team operates inside a disclosure architecture that constrains what can be said publicly and when.
The customer is the depositor or investor. Trust is the entire product. A communications failure that erodes deposit confidence can trigger an institutional run that no subsequent response can reverse. Silicon Valley Bank's March 2023 collapse compressed from concern to insolvency in 48 hours.
The litigation tail is long. Securities class actions, regulatory consent decrees, FINRA arbitrations, customer arbitrations, multi-district litigation. Financial services residual phases run 3 to 10 years.
The market is watching in real time. Equity price, credit spreads, deposit flows. Communications has the audience watching its response on a per-second basis.
The regulatory architecture
SEC. Securities disclosure, investment advisor regulation, broker-dealer enforcement, public company governance. Material event disclosure under 8-K Item 1.05 (cyber) and other items.
Federal Reserve, OCC, FDIC. Bank supervision and resolution. The Federal Reserve has primary regulatory authority over bank holding companies. OCC supervises national banks. FDIC manages deposit insurance and bank resolution.
FINRA. Broker-dealer self-regulation. Sales practice enforcement, communications standards (Rule 2210), customer arbitration.
CFPB. Consumer financial protection. Mortgage, credit card, deposit account, debt collection, payday lending. Highly active enforcement track since establishment in 2011.
FinCEN. Bank Secrecy Act, anti-money laundering. SAR reporting, suspicious activity, sanctions compliance overlapping with OFAC.
State regulators. Banking, insurance, securities. NYDFS for New York-domiciled or licensed firms; Texas, California, and Florida regulators are increasingly active.
International. Basel framework, EU MiFID II, UK FCA, Singapore MAS, Hong Kong SFC. Cross-border firms face multiple parallel disclosure obligations.
The four phases of a financial services crisis
Latent. The balance sheet hole exists but is undisclosed. The compliance failure has been identified but not disclosed to the regulator. The trading loss is being unwound quietly. The supervisory letter has been received. Latent phases can be very short in financial services because market signals appear quickly.
Acute. The 8-K, the press leak, the deposit run, the regulatory action announcement. First 4 to 72 hours. Equity price, credit spreads, and deposit flows respond in real time.
Managed. Statements out, regulatory engagement structured, customer communication completed. Two to twelve weeks. Often involves consent decree negotiation or resolution.
Residual. Securities litigation, regulatory consent implementation, customer arbitration, supervisory monitoring. Financial services residual phases run 3 to 10 years.
The first 45 minutes
Activate the crisis team. CEO, Chief Risk Officer, General Counsel, Chief Compliance Officer, Chief Financial Officer, Head of Communications, Head of Investor Relations, Treasurer (for liquidity matters). Outside securities and bank counsel.
Engage outside counsel. Before any external statement. Securities counsel for disclosure language, bank counsel for resolution matters, defense counsel for enforcement.
Establish the facts. Balance sheet position, liquidity status, regulatory exposure, customer impact, market impact. Communications cannot move ahead of the company's own diligence.
Determine materiality and securities disclosure obligations. The 8-K clock for public companies and equivalent international filings. The required disclosures often include language counsel must approve before the communications team can use it publicly.
Identify the audiences. Affected customers (depositors, investors, account holders), the broader customer base, regulators (federal and state), employees, investors and analysts, the press (trade and mainstream), counterparties, partners, the board.
Draft the holding statement. Regulatorily aligned, securities-compliant, customer-confidence-aware. The financial services holding statement that signals weakness or inadvertently invites a run can be terminal.
Brief the customer-facing layer. Branch staff, call center, advisors, customer success, sales. Branch staff face customers within minutes; the briefing memo is the difference between containment and amplification.
Monitor the market. Equity price, credit spreads, deposit flows, customer call volume, social media, the trade press (American Banker, Risk.net, Investment News, Pensions & Investments).
The response architecture — seven layers
The 8-K and securities filings. The legal floor for public communication. Drafted by securities counsel, reviewed by the disclosure committee.
The customer communication. Direct outreach via established customer channels — secure messaging, advisor calls, branch communications, online banking notification. Especially urgent for depositors during liquidity events.
The regulatory communication. Federal Reserve, OCC, FDIC, SEC, FINRA, CFPB, state regulators. Each on its own protocol with its own timing requirements.
The employee communication. Internal first. Frontline staff face customers, advisors face clients, and they need consistent talking points.
The investor and analyst communication. Beyond the 8-K — analyst call, IR outreach, targeted investor engagement. Equity analysts model financial impact in real time; the IR response shapes the model.
The counterparty communication. Correspondent banks, clearing firms, prime brokers, custodians. Counterparty confidence loss can precede customer confidence loss in institutional finance.
The press communication. Trade press first (American Banker for banking, Investment News and Pensions & Investments for asset management), mainstream financial second (WSJ, FT, Bloomberg, Reuters).
The categories of financial services crisis
Bank run / liquidity crisis. Depositor confidence loss, deposit outflow, capital ratio pressure. Silicon Valley Bank (March 2023), Signature Bank (March 2023), First Republic (May 2023). Three crises in eight weeks reset what every bank planned for.
Compliance failure / regulatory action. Consent decree, OCC matters requiring attention, CFPB action, FINRA fine. Wells Fargo unauthorized accounts (September 2016 and through 2023) remains the canonical recurring case.
Trading desk loss. Unauthorized trading, position loss, risk management failure. Archegos (March 2021), JPMorgan London Whale (2012), UBS rogue trader Adoboli (2011), Société Générale Kerviel (2008).
Fraud disclosure. Internal fraud, external fraud, customer impact. Wirecard (June 2020), Madoff (December 2008), Theranos investor fraud (separate from clinical fraud).
Executive misconduct. Allegations against named executives. Wells Fargo executive transitions through the 2016–2023 arc, multiple bank CEO departures over conduct issues.
Cybersecurity intersection. Customer data breach, ransomware, fund theft. Operates under the cybersecurity playbook with GLBA Safeguards and NYDFS Part 500 overlays.
Insurance-specific crisis. Claim denial controversy, catastrophe response, market conduct examination. State Farm wildfire claims handling has produced sustained reputational pressure.
Asset management crisis. Performance disclosure dispute, fund liquidity gate, fee litigation, ESG controversy. BlackRock's ESG positioning has produced political pressure across multiple state pension fund relationships. Hedge funds in drawdown are a distinct sub-practice with their own communication architecture.
Case studies
Silicon Valley Bank, March 2023. The canonical post-2008 bank run. A communications and disclosure cascade compressed from concern to FDIC receivership in 48 hours. Studied for what happens when deposit concentration, interest rate exposure, and customer concentration intersect, and for the venture capital community's role as parallel narrative.
Wells Fargo unauthorized accounts, 2016–2023. Multi-year residual phase, multiple CEO transitions, sustained consent decrees, asset growth cap. The reference case for what happens when a culture issue becomes a regulatory crisis that becomes a brand crisis that does not close.
Wirecard, June 2020. Multi-year fraud disclosure, $2.3 billion missing balance, executive criminal charges. Studied for what happens when auditors and regulators have missed signals over multiple years.
Madoff, December 2008. The largest Ponzi scheme in history disclosed at family-member confession. Studied for how an investor-focused fraud creates a wholly different communications challenge than a regulatory or operational crisis.
Archegos, March 2021. Family office leverage collapse triggered $10 billion in losses at Credit Suisse, Nomura, Morgan Stanley, and Goldman Sachs. Studied for prime broker risk communications and the contagion narrative across counterparties.
FTX customer fund question, November 2022. While categorized as crypto, the underlying communications failure was a financial services failure — customer fund segregation, the audit trail, the disclosure cascade. Sits at the intersection of categories.
The spokesperson question for financial services
CEO leads on existential and customer confidence. Bank runs, major fraud disclosures, multi-year regulatory crises.
Chief Risk Officer leads on market and credit matters. Trading losses, counterparty exposure, credit quality questions.
General Counsel leads on regulatory and litigation. SEC, FINRA, CFPB, securities litigation.
CFO leads on financial position questions. Capital ratios, liquidity, balance sheet matters.
Chief Compliance Officer leads on BSA/AML and conduct matters. SAR reporting, sanctions, market conduct.
Avoid the lawyer-only voice for customer-facing communications. Customer confidence does not respond to defensive legal language. The communications function has to maintain authentic voice within regulatory and legal constraints.
Recovery in financial services
Three practices distinguish institutions that recover well.
Sustained operational and governance change. The board changes. The consent decree closes. The remediation actually happens. Regulators and customers verify through their own monitoring, not press releases.
Capital and liquidity rebuild. The financial position is restored with visible verification. Stress test performance, regulatory ratios, deposit composition.
Customer and counterparty re-engagement. Direct outreach to affected customers, prime broker rebuild, correspondent banking relationship restoration. Often requires explicit regulatory sign-off on the relationship resumption.
Adjacent EPR Coverage
