Citigroup is moving to close a difficult chapter in its recent history. According to a Reuters report, the bank plans to submit a comprehensive, end-to-end audit to the Federal Reserve and the Office of the Comptroller of the Currency (OCC) before the end of the year or early in the first quarter. The audit is designed to show that the bank has fixed the data and risk-management weaknesses that led to its 2020 consent orders.
Consent orders are formal regulatory directives that require a bank to correct specific problems. In Citi's case, the orders were issued after the bank mistakenly wired $900 million to lenders of Revlon in 2020. The error exposed serious flaws in the bank's internal controls and data governance, prompting regulators to step in.
What the audit is really testing
The audit Citi is preparing is not just a paperwork exercise. It is meant to test whether the new processes the bank has built actually work across the entire organization—not just on paper. Regulators want to see evidence that the fixes hold up in day-to-day operations, from how data is managed to how risk is monitored.
This kind of regulator-facing proof is crucial. If the Fed and OCC are satisfied, they could decide to lift the consent orders, freeing Citi from the strict oversight that has weighed on the bank for years. But Citi cannot control the timeline. Supervisors can ask for more work if they see uneven results, and they have shown they are willing to penalize the bank for slow progress.
Reuters noted that in 2024, the OCC imposed a penalty on Citi related to delays in fixing data issues. That penalty is a reminder that regulators care as much about execution as they do about plans. Even with a comprehensive audit, the outcome is far from guaranteed.
Why this matters for investors
For investors, the audit is a key event because it could change Citi's cost story. If regulators are satisfied, the bank could begin unwinding some of the remediation structure it built to manage the cleanup. That would lower ongoing expenses and reduce what analysts call “regulatory overhang”—the valuation discount investors often apply to a company facing open-ended supervisory risk.
On the other hand, if the audit reveals weaknesses or if regulators ask for more work, costs could stay elevated, and the uncertainty around Citi's profitability could persist. The 2024 penalty shows the lopsided trade-off: delays can lead to further fines and prolong the period when Citi's returns lag those of its peers.
Citi has been working to improve its financial performance, but the consent orders have been a persistent drag. Investors have watched the bank's progress closely, and any sign that the orders might be lifted has been seen as a positive catalyst. The audit is the latest step in that process, but it is not the final word.
What to watch next
The key dates to watch are the end of this year and the first quarter of next year, when Citi hopes to submit the audit. After that, the ball is in the regulators' court. They will review the results and decide whether to lift the orders, modify them, or demand more work.
Investors should also keep an eye on any regulatory announcements from the Fed or the OCC. A decision to lift the orders would be a major milestone for Citi, potentially boosting its stock and improving its earnings outlook. Conversely, any indication of further delays or penalties could weigh on the shares.
For context, Citi's situation is not unique. Many large banks have faced consent orders over the years, and the process of getting them lifted can be lengthy and unpredictable. The broader banking sector has also been under scrutiny for risk management, as highlighted by a recent warning from the Financial Stability Board about emergency funding plans.
In the meantime, Citi continues to operate under the shadow of the orders, and its profitability remains below what many investors would like. The audit is a chance to change that narrative, but it is not a guarantee. As with any regulatory process, the outcome depends on the details, and those details are still being worked out.
For everyday investors, the takeaway is simple: Citi's progress on these consent orders is a story worth following, because it could have a real impact on the bank's costs, its stock price, and ultimately the returns in your portfolio. But it is also a reminder that regulatory risk is a fact of life for banks, and it can take years to resolve.
