SDBA eNews winter

March 5, 2026

News

SDBA Updates

SDBA Events

Online Education

Compliance Alliance


ABA Banking Journal: Fed decision grants crypto firm payment account creates risks for consumers

March 4, 2026

ABA files amicus brief urging Tenth Circuit to affirm dismissal of Custodia Bank’s lawsuit over master accountThe decision to grant a cryptocurrency firm a “limited-purpose” master account within the Federal Reserve System while crypto regulations are under consideration creates serious risk for consumers and the financial system, the American Bankers Association said.

Kraken Financial has been granted a one-year, limited-purpose account that includes restrictions and limitations tailored to the company’s business model, the Federal Reserve Bank of Kansas City announced today. The Wyoming-based crypto firm is a Tier 3 entity under Fed guidelines, which means it is not federally insured and not subject to supervision by a federal banking agency. It is the first crypto firm to be granted an account.
The Kansas City Fed said the decision to grant an account is based on particular facts and circumstances of each applicant, including a risk-based assessment of the institution’s business model. As for what limitations were applied to Kraken’s account, the Kansas City Fed said it does not disclose specific information about account holders’ access to Fed financial services.
The Federal Reserve Board of Governors is currently seeking comment on whether to create “skinny” master accounts that would provide basic payment services to legally eligible institutions but would lack many of the features of actual master accounts. Kraken was not granted a skinny account.
In a statement, ABA SVP Brooke Ybarra said the Fed’s decision is another example of agencies taking significant action while the rules are still a work in progress, “creating risk for the financial system, consumers and the economy.”
“With so many related issues still unsettled, including final Genius Act rules and the development of a ‘skinny’ master account framework, we have serious questions about why regulators are granting access to the Fed payment system and charters before completing the public notice and comment process that will inform any official guidance,” Ybarra said. “This action puts the cart so far ahead, that the horse will never be able to catch up.”

Full Article

Back to Top

ABA Banking Journal: House committee advances ABA-backed bill to overhaul bank regulation

March 4, 2026
ABA unveils key policy priorities for 2025

The House Financial Services Committee today advanced legislation to boost community banking by raising regulatory thresholds, revising agency supervisory practices, tailoring regulations further, encouraging de novo banks and strengthening community development financial institutions.

The Main Street Capital Access Act (H.R. 6955) brings together multiple legislative proposals that were previously proposed by members of Congress. The committee approved the legislation by a 26-16 vote.

The American Bankers Association submitted comments ahead of the hearing noting that the bill contained provisions that it has long supported, such as measures to spur new bank creation and promote transparency and fairness in supervision.

Full Article

Back to Top

ABA Banking Journal: ABA submits banker requests for 2026 Farm Bill

March 3, 2026

ABA outlines banker priorities for 2023 Farm BillThe American Bankers Association today presented a list of banker priorities to be included in the 2026 Farm Bill ahead of a House Agriculture Committee markup of the legislation.

In a letter to the committee, ABA noted that banks remain one of the primary sources of credit for U.S. agricultural producers. “Banks play a critical role in rural communities, and this bill includes meaningful policy reforms that will enhance lenders’ ability to serve their customers in the years ahead, as producers face ongoing economic challenges, rising input costs and volatile markets,” the association said.

Still, ABA recommended that lawmakers amend the bill to add several longstanding priorities in the agriculture lending space. They include:

  • Modernizing Farm Service Agency loan guarantee limits to meet rising input costs and real estate prices across the country;
  • Clarifying bona fide operator rules for beginning farmer programs, ensuring modern business structures have appropriate access;
  • Updating and modernizing the FSA Down Payment Assistance Program by removing the arbitrary cap on loan size and instead setting the limit at 45% of the lesser of the purchase price or appraised value;
  • Providing reliable risk management tools to help producers navigate unpredictable market and climate conditions;
  • Revising the Farmer Mac statute to replace outdated acreage limitations and enable all qualified farmers and ranchers to benefit from the competitive pricing and stability of Farmer Mac’s secondary market.

ABA also said it was concerned by language stipulating that the Farm Credit Administration shall be the sole, independent regulator of Farm Credit Services.

“This provision could create disparate compliance burdens among lenders in the market due to the uneven regulatory scrutiny of lenders by varying federal agencies,” ABA said.

The committee is scheduled to begin markup on the bill today.

Full Article

Back to Top

CISA News: OCCIP Flash Alert - Increased Claims and Rhetoric Related to Iranian-Aligned Cyber Threat Groups and Activities Targeting U.S. and Partner Critical Infrastructure

CISAOngoing claims and calls for cyber-attacks targeting U.S. entities by Iranian aligned groups could lead to an increase in malicious activity against the financial services sector. Since 28 February 2026, there has been an increase in public messaging by Iranian-aligned cyber actors about targeting U.S. critical infrastructure, to include the financial sector, in retaliation for recent U.S.-Israeli military action against Iran. As of 2 March 2026, no significant cyberattacks against U.S. critical infrastructure organizations have been observed.

Since 28 February 2026, there has been a sharp drop in internet activity in Iran due to a near-total internet blackout, with connectivity at 1 percent of ordinary levels. As of 2 March 2026, metrics from internet monitor NetBlocks show that the internet blackout remains in effect.

Reporting remains inconclusive as to whether the disruption is an Iranian government-imposed blackout or the result of cyberoperations, however, reporting notes that limited activity is ongoing. If this is a self-imposed blackout, this limited activity may be whitelisted traffic enabling Iranian cyber actors to conduct operations against targets of opportunity. Historically, the U.S. financial sector has been viewed as a priority target and a target of opportunity by Iranian-aligned cyber actors.1

Since 28 February 2026, activity on Telegram and other social media platforms indicates an increase in messaging from self-identified hacktivist collectives and state-aligned advanced persistent threat (APT) groups claiming responsibility for cyber operations targeting U.S. and Israeli institutions. While some posts assert direct involvement in cyber-attacks, others consist primarily of warnings, threats, or declarations of intent directed at U.S., Israeli, and other Middle Eastern government and private-sector entities. To date, no evidence exists to validate these claims. This behavior aligns with broader information warfare and psychological operations tactics, in which public claims, exaggerated impact statements, and threat narratives are used to create uncertainty, erode public confidence, and amplify geopolitical tensions irrespective of the underlying technical impact. [...]

If you or your security teams notice anything out of the ordinary – please feel free to report it.  https://myservices.cisa.gov/irf

Full Article

Back to Top

CISA News: Why scammers say nothing when they call - and how to respond safely

March 2, 2026 | Lance Whitney

scam callerHave you ever answered a call from an unknown number only to be greeted with silence? Sometimes, no one responds at all. Other times, there's a short delay before someone finally greets you. You may think the person on the other end is just confused or distracted, or possibly got the wrong number. But that's not the case, at least not with a scam call.

Yes, there is a method behind the madness. Just knowing that someone answered the call is validation that the phone is owned by a real person and that the number is active. That marks the intended victim and number as available for future scams.

'Automated reconnaissance' 

"Calls where no one responds are rarely accidental," Shane Barney, chief information security officer at cybersecurity provider Keeper Security, told ZDNET. "In many cases, they are automated reconnaissance events. Fraud operations run at industrial scale, and before they invest human effort in a target, they validate that a number is active and answered by a real person."

What do scammers then do with your number?

"In modern fraud ecosystems, verified contact data has value," Barney said. "It is bought, sold, and reused. A silent call can serve as a filtering mechanism, separating dormant numbers from reachable individuals. It is less about the conversation and more about confirming that there is someone on the other end."

In some cases, your confirmed number may lead to phishing calls or emails. In other instances, you might be the target of a more serious type of attack.

"Once that validation occurs, it strengthens the attacker's ability to execute more convincing follow-on attacks," Barney said. "A confirmed number can be paired with a breached email address, used to trigger password reset flows, or targeted for SIM swap fraud."

These types of scams are nothing new, though they were more prevalent years ago, Barney explained. They seemed to go out of style as email and SMS phishing attacks became more common. Seeing them resurface highlights an important aspect of cybercrime. Attackers will reuse tactics and techniques that work.

What about calls in which the person responds after a short delay? That speaks to the automated operations run by spammers and scammers.

"That pause is typically a function of predictive dialing infrastructure," Barney said. "These systems place high volumes of calls simultaneously and use algorithms to detect when a human answers. Once a voice is detected, the system routes the call to a live operator. The delay reflects the handoff process. From an operational standpoint, this model allows scammers to maximize efficiency while minimizing labor costs."

Is voice cloning a threat?

On the flip side, are you exposing yourself to any risks if you speak with the scammer, even just a few words? Voice cloning has always been a concern, especially with the advancements in AI. Could a scammer clone your voice and then use it to authorize purchases or run scams on your family and friends?

"Voice cloning is a real and evolving threat, but it's important not to let it drift into science fiction," Barney said. "Producing a convincing replica of someone's voice typically requires a clear and sustained audio sample, not just a quick 'hello.' A brief exchange is unlikely to give an attacker everything they need."

Rather, risk comes into play when a cloned voice is used as part of a broader scam, Barney explained. If a scammer already has some of your personal details from public sources or data breaches, that cloned voice can add some credibility to the scam. That's why you want to limit what you say to a scammer.

What to do next

With all this in mind, how should you handle these types of calls? Here are three tips.

Hang up. If it's an unknown number and no one responds to your greeting, just hang up. The only downside here is that some calls with that initial silence may be legitimate, perhaps from an office, business, or known company. In that case, they will call back and can let the call go to voicemail. If it's important, the person will leave a message.

Don't respond, but stay on the line. Another strategy is to pick up a call from an unknown or suspicious number, but don't say hello or anything else. If you hear nothing but silence, then just wait to see if the call disconnects. If the spammer or scammer doesn't detect a voice on the other end, they may then consider your number inactive and remove it from their call list.

Use spam call filtering. iPhones and Android phones do have built-in ways to block and identify spam calls. But a spam filtering app or service provides more granular control. In the US, the three major carriers -- Verizon, AT&T, and T-Mobile -- offer their own tools for dealing with spam calls. You'll also find a variety of third-party spam filtering apps. Some apps to consider are RoboKillerTruecaller, and Hiya.

But will these call filtering apps block you from all spammers and scammers?

The reality of call filtering

"Call filtering applications can significantly reduce the volume of nuisance calls, particularly those tied to large-scale spam campaigns," Barney said. "They are especially good at identifying numbers that have already been reported and flagged by others, however, they are not perfect. Fraud infrastructure changes quickly, and new numbers appear constantly. A highly targeted call can still get through. These tools are helpful in managing volume, but they are not a substitute for sound security practices."

To do their job, these apps also collect certain data from you, most notably your contact lists. Such information reveals who you speak with and how often. That's why you should review the security and privacy permissions of each app to learn what data is collected and how it's handled. 

"There is a tradeoff," Barney said. "Reducing spam exposure has clear benefits, but any application with deep visibility into your communications should be chosen deliberately. Filtering tools can reduce noise. Protecting accounts with strong authentication and unique credentials is what limits real damage if something slips through."

 Full Article

Back to Top

 

SDBA Updates

SDSU Extension Farm Real Estate Market Survey

 

Standards for Logos | South Dakota State UniversityYou are invited to participate in the 2026 SDSU Extension Farm Real Estate Market Survey, which examines South Dakota agricultural land markets. If you agree to participate, you will be asked to complete an online survey that includes questions about land values, cash rental rates, and current market conditions. The survey should take approximately 5–10 minutes to complete. You may skip any question or stop participating at any time.

Your participation is voluntary. There are no penalties or consequences if you choose not to participate, and there are no foreseeable risks associated with participation. The information collected will provide valuable insights for landowners, farmers, and other agricultural industry participants.

Your responses will be kept confidential. Results will be analyzed and reported only in aggregate form and shared through SDSU Extension publications and the SDSU Extension website. If you have questions about the study, please contact Hoanh Le at [email protected]. If you have any questions concerning your rights as a research subject, you may contact SDSU’s Research Integrity and Compliance Officer at 605-688-5642 or [email protected].

Deadline: March 10, 2026

Begin Survey

Back to Top

 

SDBA Events

2026 UBA Everyday GenAI for Bankers

March 25, 2026 | Virtual

The SDBA is partnering with the Utah Bankers Association to bring you an "Everyday GenAI for Bankers" webinar on March 25.

Generative AI is already showing up across banking, often quietly, through tools like Microsoft Copilot, ChatGPT, and other AI assistants. The real question is no longer whether bankers should use AI, but how to use it in ways that genuinely save time, improve decision-making, and fit real banking work, all done responsibly.

Led by Ben Udell, this session is designed for bankers at every level and in every role, from the front line to leadership. We focus on everyday, practical GenAI applications that can be used immediately, without technical expertise, major system changes, or access to sensitive data. You will see how to apply these tools in ways that respect privacy, avoid PII, and do not require connecting to internal systems.

Details & Registration

Back to Top

2026 Breaking Into Banking 201

March 25, 2026 | Zoom

Commercial banking can be intimidating because of its complexity and the risk-oriented nature of the work. This course is a clear and thorough introduction to the key concepts, terminology, and processes involved in credit and lending. It doesn’t assume much prior knowledge of the topic, so it’s ideal for those in their first year in the industry. Learners will walk away with a clear understanding of their job and how their specific role fits into the bank’s overall profitability goals.

LOAN MODULES

This 9-module online course is a “sequel” to the 101 course and is best taken after completion of that course, though it is not a prerequisite. The 201 course includes a case study and dives deeper into topics covered in modules 4, 6, and 8 of the 101 course: analyzing a borrower’s balance sheet, income statement, collateral, and risk ratings.  

THIS SEMINAR WILL COVER

1. Introduction and Overview
2. Balance Sheet Analysis, Part 1: Analyzing Liquidity
3. Balance Sheet Analysis, Part 2: Analyzing Leverage
4. Income Statement Analysis, Part 1: Revenues and Profit Margins
5. Income Statement Analysis, Part 2: Coverage Ratios
6. Collateral Analysis, Part 1: Non-current Assets
7. Collateral Analysis, Part 2: Trading Assets
8. Collateral Analysis, Part 3: Solving the Problems
9. Risk Ratings, Expected Loss and Provision for Credit Losses

Details & Registration

Back to Top

2026 SDBA "This is How We Roll" 

Roll 2026

ROLL 2026 is a whole new experience! We’ve flipped the script to create an event that’s interactive, engaging, and designed to work for you. This year, you won’t just sit back—you’ll jump in.

Meet us at one of four locations across South Dakota to:

  • See how you fit into the bigger SDBA picture
  • Connect with bankers from every corner of the state
  • Uncover meaningful ways to get involved with SDBA
  • Share ideas and perspectives with peers at all levels

Locations

Rapid City - April 14
Pierre - April 16
Aberdeen - April 21
Sioux Falls - April 22

Bankers of all roles and experience levels will benefit from attending! Better yet—bring a colleague who’s new to SDBA or someone who hasn’t attended before. You’ll both be entered to win a fun door prize, and it’s a great way to introduce others to the value of SDBA while building connections together.

✔️ FREE to attend
✔️ Open to ALL bank employees
✔️ Registration required to ensure accurate meal counts

Back to Top

2026 SDBA New Accounts Seminar

April 21, 2026 | Sioux Falls

Managing risk is the #1 priority for all financial institutions, starting at the new account desk. If a criminal cannot open a bank account, they cannot negotiate a stolen check, embezzle from their employer, or steal from your organization and community. Well-trained new account personnel and universal bankers who recognize and stop attempted fraudulent activity are the first lines of defense in protecting a financial institution from fraudsters. Unfortunately, new account personnel are often trained "on the job," which results in an environment of potential vulnerability and unnecessary losses.

Trust and business accounts continue to grow in popularity and complexity - LLCs owned by Revocable Trusts and businesses owned by other businesses… the need for ongoing compliance training is paramount to maintain diligence and update processes and procedures.

This full-day program is one of the country's most comprehensive seminars on opening deposit accounts. The session answers many of the complicated questions customers and employees ask. The 200+ page detailed manual, included in the registration and customized to your state law, has become an invaluable resource for banks across the state. These workshops are highly interactive. Come prepared to get your questions answered!

Details & Registration

Back to Top

2026 FDIC Directors College

May 28, 2026 | Sioux Falls

The FDIC, in partnership with the South Dakota Bankers Association, will hold the 2026 Bank Directors' College on Thursday, May 28th, at the Ramkota Hotel in Sioux Falls, SD. This one-day educational seminar was designed with outside directors in mind, but the presentations will include up-to-date information on various emerging issues relevant to all bank directors. The presentations will be delivered by a group of experienced FDIC speakers and subject matter experts. Please consider this unique opportunity to interact with your bank's regulators and enhance your board's experience and knowledge.

Breakouts

  • Accounting
  • Capital Markets
  • Consumer Protection
  • Cybersecurity/IT
  • Insider Abuse and Fraud Prevention 
  • Third-Party Relationships

Details & Registration

Back to Top

Online Education

online ed

Participating in learning opportunities outside the bank can be challenging. Take advantage of the SDBA's extensive selection of webinars and on-demand training to enhance your banking expertise directly from your computer.

GSB Online Seminars
OnCourse Learning
SBS Institute
ABA Training


Compliance Alliance logo

 

Question of the Week

Q: One of our business customers cashes payroll checks for its employees. Do they need to register as a Money Services Business?

A: Generally, no - a business that only cashes its own payroll checks for its employees likely doesn’t meet the definition of a Money Services Business under the BSA – specifically, in the capacity of a “check casher.”

Under 31 CFR 1010.100(ff)(2), a "check casher" money service business is defined as a person (i.e. any of the legal entities defined under 31 CFR 1010.100(mm)) that accepts checks / monetary instruments in return for currency (or a combination of currency and other monetary instruments) in an amount greater than $1,000 for any person on any day in one or more transactions.

However, the regulation goes on to state that whether a business is considered a "check casher" is "a matter of facts and circumstances" (aren’t all great BSA considerations?) and wouldn't include a company that only does one the following:

"(A) A person that sells prepaid access in exchange for a check (as defined in the Uniform Commercial Code), monetary instrument or other instrument;

(B) A person that solely accepts monetary instruments as payment for goods or services other than check cashing services;

(C) A person that engages in check cashing for the verified maker of the check who is a customer otherwise buying goods and services;

(D) A person that redeems its own checks; or

(E) A person that only holds a customer's check as collateral for repayment by the customer of a loan."

As touched upon above, a business that only cashes checks that it issues (payable to its own employees) likely doesn’t meet the definition of a check casher (and in turn, an MSB) because, based on the facts presented in the question, it is not offering check cashing as a service to the general public. FinCEN more directly stated this stance in its guidance:

"If a business only cashes its own employees’ payroll checks, is it a money services business?

As a service to its employees, Business A cashes employee payroll checks issued to the employees by Business A. It does not cash any other checks. These checks may be cashed in amounts exceeding $1,000 per person per day in one or more transactions, which is the threshold for the Bank Secrecy Act definition of a check casher that qualifies as a money services business. Is Business A money services business if it offers this service? Does it matter if Business A charges a fee for this service?

Answer: Business A does not meet the Bank Secrecy Act definition of a check casher if it only cashes its own employees’ payroll checks. If a business provides its employees with currency in exchange only for payroll checks issued by the business, we do not consider the business to be “engaged in the business of a check casher.” Consequently, to the extent that a business only cashes its own employees’ payroll checks it is not a money services business. Whether or not a business charges a fee for conducting these transactions is immaterial. However, if a business cashes checks other than its own business checks in an amount exceeding $1,000 for any person in one day in one or more transactions, the business would be defined as a check casher under the Bank Secrecy Act and be required to register as a money services business and be obligated to comply with all applicable Bank Secrecy Act programmatic, recordkeeping, and reporting requirements." FIN-2006-G005

Stop me if you’ve heard this before – but, as always, the bank should be sure to review any other relevant facts / factors specific to the business in question, as well as its own CDD, CIP, and BSA / AML policies and procedures, as applicable.

Learn how to put compliance management solutions from Compliance Alliance to work for your bank, by contacting (888) 353-3933 or [email protected] and ask for our Membership Team. For timely compliance updates, subscribe to Bankers Alliance’s email newsletters. 

Back to Top

SDBA eNews Archive
View past issues of the SDBA eNews

Advertising Opportunity
Learn more about sponsoring the SDBA eNews

Questions/Comments
Contact the SDBA at 605.224.1653 or via email