One of the main lessons learned from the current crisis is that not all investments, whether collateralized debt or mortgage obligations, are what they appear, despite claims and even ratings by a third party.

A related lesson, especially in light of the recent Madoff scandal that has impacted several large financial institutions, is that banks must exercise their own due diligence not only in selecting their investments but also with the third parties with whom they deal.

Recent regulatory releases have addressed these issues relative to Community Reinvestment Act investments. They have taken on new importance with the proposed expansion of CRA to nonbank financial institutions and others receiving government bailout funds.

Assuming this initiative moves forward under the increasingly pro-consumer climate in Washington, including the pro-CRA efforts of House Financial Services Committee Chairman Barney Frank, these newly covered companies would mainly meet their proposed CRA obligations via qualified investments.

The latest interagency Q&A on CRA ( reaffirms credit for indirect investments through a fund whose primary purpose is community development. Community development and related funds can represent excellent opportunities to comply with CRA's Investment Test and Community Development Test.

The recent regulatory discussion of meeting CRA's geographic requirements by investing in a national or regional fund raised for the first time the issue of "double counting" of the same investment for more than one investor. Community groups have been raising the double-counting issue for some time.

The regulators specifically state that " … a financial institution has not demonstrated that the investment meets the geographic requirements of the CRA regulation if the fund 'double-counts' investments, by earmarking the same dollars or the same portions of projects or investments in a particular geography to more than one investor."

It is important to note that none of the large number of national or regional funds that exist were named by the regulators, nor are any specific funds being directly or indirectly referenced here.

This regulatory statement adds a new dimension to banks' due diligence in CRA investing. Self-serving claims by funds or their managers that they have never practiced double-counting is not enough in the current Sarbanes-Oxley and financial crisis era, where investors need outside auditors to verify key information.

Banks and their examiners should require a certified and annually updated statement by an outside auditor that the subject fund has never engaged in any such double-counting.

As part of my recommendations to the regulators on this issue, I suggested that, in the event that even one such case of double-counting is found at any fund — going back to the very first allowed investment in it — the examiners should not only deny CRA credit and publicly report their findings, but also require the fund to inform current and past investors of this problem.

Outside auditors should likewise verify other CRA-credit-related claims by funds or their managers such as community development benefits. They may, for example, be overstated by claiming credit for an entire project rather than just the pro rata share from the fund's investment.

Also, current credit may be claimed for past investments that were sold or only temporarily held. Exaggerated community impact statements or double-counting results in CRA grade inflation, a mischievous malady that is not unlike bond rating inflation.

One way banks can help ensure they are getting the CRA or other investment promised is to perform their own due diligence when selecting a vendor. To help banks minimize risks when relying on third parties for such important products, the Federal Deposit Insurance Corp. recently issued "Guidance for Managing Third-Party Risk" (

The FDIC recommends ongoing comprehensive due diligence in what can be termed its Know Your Vendor program. As part of the "review of all available information" about third parties to minimize reputational and other risks, the FDIC recommends, among other things, checking for the "existence of any significant complaints or litigation, or regulatory actions against the company."

Suggested online resources include the Federal Financial Institutions Examination Council ( and the Securities and Exchange Commission ( or

For example, an "Investment Adviser Search" at the latter site under the Madoff firm's name would have revealed a 2005 regulatory action resulting in a censure and fine, which may have at least raised a red flag to inquiring investors.

A final lesson we have learned from the current crisis is that due diligence on investments and their vendors is important not only to protect the value of investments, including CRA credit where appropriate, but also the bank's reputation when dealing with vendors. Recent reports about some conflicted community groups and their role in the subprime crisis suggest that banks likewise consider that source of potential reputational risk.

CRA is being unfairly blamed for many of the problems associated with the subprime crisis, and it would add insult to injury if some funds and/or their managers are inflating CRA investment credit. Bankers and especially regulators must be vigilant to make sure this does not happen.

Subscribe Now

Access to authoritative analysis and perspective and our data-driven report series.

14-Day Free Trial

No credit card required. Complete access to articles, breaking news and industry data.