Flood insurance compliance continues to draw examiner attention, and enforcement trends make clear the stakes for credit unions. Risk managers should benchmark their flood insurance procedures against current exam expectations now, before gaps become findings.
By mid-2025, regulators had recorded 11 enforcement actions related to flood insurance violations, continuing a longstanding trend. Flood Disaster Protection Act (FDPA) failures remain among the most frequently cited compliance issues across all federal banking regulators, including the National Credit Union Administration (NCUA). For credit unions originating mortgage loans, the key question is whether your current program can withstand regulatory scrutiny.
Why Flood Insurance Is a Persistent Compliance Problem
The FDPA has been in effect since 1973, yet violations persist in each examination cycle. This is not due to a lack of awareness, but rather the operational complexity of consistent execution across loan portfolios.
Under the FDPA and NCUA’s implementing regulation (12 C.F.R. Part 760), credit unions are prohibited from making, increasing, extending, or renewing any loan secured by improved real estate located in a Special Flood Hazard Area (SFHA) unless adequate flood insurance is in place. That obligation doesn’t end at closing. It follows the loan for its entire life.
Managing the loan lifecycle across loan officers, servicers, vendors, and evolving FEMA flood maps is where credit unions often encounter challenges. Credit union management should assign clear ownership to each stage, verify handoffs, and ensure monitoring continues after closing to promptly identify and address gaps.
What Examiners Are Finding
A recent review of Federal Reserve examinations, which follows FDPA standards consistent with those enforced by the NCUA, identified three primary categories of violations. Each highlights a specific operational breakdown and indicates the necessary remediation step(s).
Insufficient insurance at origination is the most common finding, often because borrowers purchase the wrong coverage amount. The FDPA requires flood insurance to equal the lesser of the outstanding principal balance or the maximum available under the National Flood Insurance Program ($250,000 for residential buildings; $500,000 for non-residential). Errors occur when loan officers miscalculate insurable value, use outdated replacement cost figures, or fail to adjust coverage when closing dates change. Loans closed before the policy’s effective date create coverage gaps that examiners will identify. To mitigate this risk, management should implement a secondary review of all flood insurance calculations before closing and confirm policy effective dates align with the settlement schedule.
Failure to notify borrowers is another common issue. Lenders must provide written notice when a property is in an SFHA, with regulators considering 10 calendar days before closing as the minimum standard. These violations usually result from inadequate staff training, failure to follow procedures, or weak internal controls. Credit union management should implement a standardized notice workflow that tracks delivery dates and verifies the completion before closing.
Failure to force-place insurance occurs when coverage lapses or is insufficient during the loan term. If the borrower does not secure adequate insurance within 45 days of notification, the credit union must purchase coverage on their behalf. Examiners have found institutions that either missed the lapse due to inadequate monitoring or failed to act within the required timeframe. Set automated lapse alerts, establish a force-placement timeline, and test the process to ensure it functions effectively before an actual lapse occurs.
The Stakes: Civil Money Penalties and Beyond
Flood insurance violations result in direct financial penalties. As of early 2025, civil money penalties are up to $709 per violation, with annual caps of $204,428. If regulators identify a pattern or practice of violations, mandatory penalties of $2,000 per violation apply, with no cap. These amounts can accumulate rapidly across portfolios with systemic issues.
Reputational and operational costs, while harder to quantify, are significant. Enforcement actions become public record, and consent orders require substantial remediation efforts. Underlying compliance failures, such as inadequate training, weak controls, and insufficient monitoring, often signal broader risk management weaknesses that examiners will investigate further.
Another area of exposure is third-party accountability. Credit unions that use vendors or servicers for flood zone determination and coverage monitoring remain responsible for those vendors’ failures. Regulators have penalized institutions whose policies allowed servicers to extend required timeframes beyond regulatory limits.
Building a Program That Holds Up
Most flood insurance violations stem from predictable causes: gaps in policies and procedures, insufficient staff training, lack of secondary reviews, and inadequate life-of-loan monitoring. Each of these issues can be addressed. Begin by identifying control gaps in your program, then assign responsibility and set deadlines for remediation.
Effective programs include detailed written procedures for every stage from determination through payoff, role-specific training that is regularly updated and documented, secondary reviews of all flood insurance calculations at origination, automated monitoring of policy renewal dates with alerts for potential lapses, and periodic audits tailored to the mortgage portfolio’s size and risk profile. Implement these controls, test them regularly, and document results to address issues promptly.
Credit unions that view flood compliance as a static checklist will continue to face examination findings. Those that integrate it into ongoing risk management—reviewing compliance when regulatory guidance changes, when FEMA remaps areas, and when internal audits reveal deficiencies—are more likely to achieve positive examination outcomes. Establish a recurring review schedule so updates, audits, and remediation occur proactively.
Flood risk and regulatory scrutiny will persist. Credit unions that prioritize flood compliance and proactively manage risk will be best positioned for long-term success.