2020 FRB/OCC Consent Orders and 2024 Civil Money Penalty Orders
Regulatory Exposure
Consent orders require extensive remediation investments through 2026 and beyond; OCC prior approval required for significant new acquisitions; possible future penalties and limits on dividends.
Relevance 95·Dependency 85·Confidence 95
Source evidence
“the OCC Consent Order requires Citibank to obtain prior approval of any significant new acquisition, including any portfolio or business acquisition, excluding ordinary course transactions.”
FRB and OCC Consent Orders (Oct 7, 2020)
Legal Exposure
2020 consent orders require extensive action plans and quarterly progress reports on risk management, compliance, data quality and internal controls; 2024 civil money penalties of ~$61M (FRB) and $75M (OCC) for data quality deficiencies; OCC requires prior approval of significant new acquisitions.
Relevance 90·Dependency 85·Confidence 95
Source evidence
“The 2020 OCC Consent Order requires Citibank to obtain prior approval of any significant new acquisition, including any portfolio or business acquisition, excluding ordinary course transactions.”
FRB and OCC Consent Orders
Regulatory Exposure
Consent orders drive Citi's Multiyear Transformation and compliance risk management improvements; failure to execute is a material strategic risk.
Relevance 90·Dependency 80·Confidence 95
Source evidence
“Citi is working to address the FRB and OCC Consent Orders, which include improvements to Citi’s CRM Framework and its enterprise-wide application”
lower interest rates
Revenue Exposure
Lower interest rates are explicitly cited as a factor that could adversely impact Citi's results during 2026.
Relevance 85·Dependency 70·Confidence 88
Source evidence
“changes in U.S. laws or policies, including those related to trade and tariffs; and lower interest rates”
Generative AI
Technology Dependency
Citi broadly deploying Generative AI across systems, businesses and functions; improper deployment creates accuracy, bias, IP, data-exfiltration and competitive risks.
Relevance 85·Dependency 60·Confidence 90
Source evidence
“Citi has used AI and machine learning tools for many years and has more recently begun to broadly deploy Generative AI, including within its technology platforms and services.”
Corporate clients
Customer Exposure
Citi's corporate credit strategy targets multinational corporations needing multiple products across its global network; corporate credit portfolio totaled $817B at Dec 31, 2025.
Relevance 80·Dependency 75·Confidence 90
Source evidence
“Citi aims to establish relationships with these clients whose needs encompass multiple products, including cash management and trade services, foreign exchange, lending, capital markets and M&A advisory.”
Third-party service providers (incl. cloud)
Supplier Dependency
Operational incidents can arise from third-party failures (e.g., cloud providers) and downstream providers; concentration of providers across financial services exacerbates risk.
Relevance 80·Dependency 70·Confidence 90
Source evidence
“operational or execution failures or deficiencies by third parties that provide products or services to Citi (e.g., cloud service providers), including such third parties’ downstream service providers”
geopolitical risk
Demand Driver
Geopolitical tensions, conflicts and U.S. trade/tariff policy changes could hurt clients, funding costs, provisions and 2026 results.
Relevance 80·Dependency 60·Confidence 90
Source evidence
“Various macroeconomic, geopolitical and regulatory factors have contributed to economic uncertainties in the U.S. and globally, including, but not limited to, those related to various geopolitical challenges, tensions and conflicts”
United States
Revenue Exposure
The U.S. combined with the top 25 country exposures represents 93% of total country exposure; adverse U.S. inflation and interest rates are a monitored strategic risk.
Relevance 75·Dependency 60·Confidence 90
Source evidence
“the impacts of adverse changes in inflation and interest rates in the U.S.”
economic growth / market conditions (M&A and capital markets wallet)
Revenue Exposure
Banking revenue growth driven by larger overall investment banking market wallet and wallet share gains; Advisory fees +53% on higher sponsor-led activity; favorable equity market conditions drove ECM.
Relevance 75·Dependency 60·Confidence 88
Source evidence
“Advisory fees increased 53%, with growth across several sectors and higher sponsor-led activity. DCM fees were up 5%, driven by growth in leveraged finance and investment-grade debt”
United States (North America)
Revenue Exposure
North America comprises 58% of the corporate credit portfolio at Dec 31, 2025, up from 56% at Dec 31, 2024.
Relevance 75·Dependency 60·Confidence 90
Source evidence
“North America58 %57 %56 %”
Russia
Geopolitical Exposure
Citi fully exited Russia in February 2026 by selling AO Citibank to RenCap, with an estimated ~$4B CET1 benefit in Q1 2026 including release of associated $1.6B CTA loss.
Relevance 75·Dependency 40·Confidence 95
Source evidence
“The transaction resulted in Citi’s full exit from its operations in Russia and included all remaining businesses, as well as approximately 800 employees.”
Mexico (Mexico Consumer/SBMM)
Geopolitical Exposure
Mexico Consumer/SBMM growth (including Mexican peso appreciation impact) was the primary driver of All Other's 13% loan increase, while Asia Consumer is being wound down.
Relevance 70·Dependency 55·Confidence 85
Source evidence
“driven by growth in Mexico Consumer/SBMM (including the impact of Mexican peso appreciation)”
corporate and institutional clients (Corporate Lending, ultra-high net worth)
Customer Exposure
Banking's Corporate Lending serves corporate and commercial banking clients as conduit for Citi's product suite; Wealth serves ultra-high net worth clients via Private Bank with tailored lending including mortgages and margin lending.
Relevance 70·Dependency 55·Confidence 85
Source evidence
“Corporate Lending consists of corporate and commercial banking, serving as the conduit for Citi’s product suite to clients.”
Cross-border data movement / privacy laws
Regulatory Exposure
Data localization/protection and privacy laws limiting cross-border data movement can conflict with AML laws, increasing compliance complexity and costs.
Relevance 70·Dependency 50·Confidence 90
Source evidence
“various laws relating to the limitation of cross-border data movement and/or collection and use of customer information, including data localization and protection and privacy laws, which also can conflict with or increase compliance complexity with respect to other laws, including anti-money laundering laws.”
artificial intelligence / transformation technology investment
Cost Driver
Transformation expenses of ~$3.3B in 2025 (+14%), driven by data and controls spending; AI leveraged for regulatory data governance; expected to remain significant in 2026 though declining over time.
Relevance 70·Dependency 50·Confidence 85
Source evidence
“In 2025, Citi’s transformation-related expenses increased 14% from the prior year to approximately $3.3 billion, largely driven by increased spending on data, as well as on controls.”
AI (competitors' adoption)
Competitive Exposure
Competitors faster in developing/deploying AI could improve processes, productivity, products and services and gain competitive advantages over Citi.
Relevance 70·Dependency 45·Confidence 90
Source evidence
“Citi also faces competition risks to the extent that competitors may be faster and more successful in developing and deploying AI technologies to improve processes, productivity, efficiency, products and services, and thereby gain competitive advantages over Citi”
Customer demand for funded loans
Demand Driver
Banking segment loans fell 6% due to lower aggregate customer demand for funded loans.
Relevance 65·Dependency 50·Confidence 90
Source evidence
“Banking decreased 6%, due to lower aggregate customer demand for funded loans.”
Energy transition / sustainability
Demand Driver
Citi's sustainable finance activity supports client transition to low-carbon business models and energy security, underpinning its $1 Trillion Sustainable Finance Goal.
Relevance 65·Dependency 40·Confidence 85
Source evidence
“Citi’s net zero approach and sustainable finance activity include the Company’s work to support clients in financing their transition to low-carbon business models, as well as broader energy security priorities, including access to affordable energy in emerging markets.”
Branded Cards
Customer Exposure
Growth in Branded Cards was a driver of USPB's 5% loan increase.
Relevance 60·Dependency 50·Confidence 90
Source evidence
“as well as growth in Branded Cards.”
Geopolitical risk
Geopolitical Exposure
Geopolitical issues are a material strategic risk factor and country risk exposure arises from conditions in jurisdictions where Citi operates.
Relevance 60·Dependency 25·Confidence 85
Source evidence
“the economic environment, geopolitical/political landscape, industry/competitive landscape, environmental, customer/client behavior, regulatory/legislative environment and trends related to investors/shareholders”
United Kingdom
Revenue Exposure
United Kingdom cluster represents 6% of the corporate credit portfolio at Dec 31, 2025 (stable across the three periods shown).
Relevance 55·Dependency 45·Confidence 90
Source evidence
“United Kingdom6 6 6”
Russia–Ukraine war
Geopolitical Exposure
War could further hurt macro conditions, markets and commodities prices, adversely impacting Citi and its customers, clients or employees.
Relevance 55·Dependency 35·Confidence 90
Source evidence
“the Russia–Ukraine war could have further negative impacts on macroeconomic conditions, financial markets and commodities prices, adversely impacting Citi and its customers, clients or employees.”
United Kingdom
Revenue Exposure
UK is the largest international Banking revenue cluster ($1,088M in 2025, +59%) and a significant Wealth cluster ($419M, +24%).
Relevance 55·Dependency 30·Confidence 90
Source evidence
“United Kingdom$1,088 $686 $637 59 %8 %”
Artificial Intelligence
Competitive Exposure
AI adds competitive pressure, and slower-than-expected AI productivity gains or unforeseen upfront investment are a strategic risk.
Relevance 55·Dependency 25·Confidence 90
Source evidence
“AI has added competitive pressure while productivity assumptions tied to AI-driven operation model changes may materialize more slowly than expected or require additional unforeseen upfront investment.”
Tariffs are cited as a macroeconomic uncertainty driving material strategic risk to Citi's operating environment.
Relevance 55·Dependency 20·Confidence 85
Source evidence
“macroeconomic uncertainties driven by weak global growth, tariffs, geopolitical issues and changing regulatory requirements”
Japan (JANA cluster)
Revenue Exposure
Japan, Asia North and Australia (JANA) cluster holds 6% of the corporate credit portfolio at Dec 31, 2025.
Relevance 50·Dependency 40·Confidence 85
Source evidence
“Japan, Asia North and Australia (JANA)6 6 6”
Climate/transition risk
Commodity Exposure
Transition risk affects client selection and credit profiles; Citi embeds climate assessments in underwriting for higher climate-risk sectors and applies ESRM approaches to thermal coal mining and power.
Relevance 50·Dependency 20·Confidence 80
Source evidence
“strategic risks if Citi fails to consider transition risk in client selection, reputational risk from increased stakeholder concerns about financing or failing to finance high-carbon industries”