The number that should reset the debate is one in four. Roughly a quarter of all U.S. nonbank financial intermediation is conducted not by fintech upstarts or private-credit shops operating beyond the regulatory perimeter, but by subsidiaries whose parent already owns a supervised commercial bank. The nonbank activity policymakers have spent a decade trying to chase down outside the banking system has, in large measure, been sitting inside bank holding companies the whole time. That reframing matters because it changes who bears the cost of any tightening, and it points at names that are already inside the supervisory tent.
The Perimeter Was Drawn in the Wrong Place
The conventional map of nonbank finance places the risk outside the walls: money market funds, private credit vehicles, insurers, broker-dealers, fintech lenders. The implicit policy instinct that follows is to extend the perimeter outward, to reach activity that has escaped bank-style oversight.
The New York Fed work from Cetorelli and Kundu breaks that framing. Using regulatory filings linked through a database of holding-company structure, they estimate that nonbank subsidiaries account for roughly 20 to 30 percent of consolidated bank holding company assets in the post-2010 period, with broker-dealers the largest single component. Aggregate that up and about one in four dollars of nonbank intermediation runs through an entity whose parent owns a regulated bank. The share has grown steadily, not as a crisis artifact but as a structural feature.
The crisis does leave a fingerprint. The spike around 2008 reflects Goldman Sachs and Morgan Stanley converting to bank holding company status, which mechanically dumped two enormous broker-dealer complexes inside the perimeter overnight. Strip that episode out and the trend still rises. This is not a story about two firms. It is a story about how the modern banking organization is built.
Not Just the Giants
The instinct is to assume this is a top-four-banks phenomenon, and in raw dollar terms it is: the largest and most complex holding companies carry the biggest nonbank balances. But the structural point is broader. Roughly two-thirds of bank holding companies with between one billion and ten billion dollars in consolidated assets operate at least one nonbank subsidiary.
A nonbank footprint, in other words, is not an exotic feature of the megabanks. It is a normal component of a regional or mid-sized banking firm. That distribution matters for the policy read, because any rule that reaches nonbank subsidiaries reaches deep into the regional bank complex, not just a handful of globally systemic institutions with the compliance budgets to absorb it.
Ownership Is the Mechanism, Not a Detail
The reason this internal nonbank activity becomes a vehicle for regulatory arbitrage rather than a benign organizational quirk is control. These are not arm's-length affiliates. Seventy-three percent of nonbank subsidiary-quarters in the sample are wholly owned by the parent, and another 17 percent are majority-owned, so ninety percent sit under direct parental control.
That control is what makes the balance sheet fungible. When a nonbank subsidiary and a regulated bank share common ownership and integrated management, capital, funding, and risk can be positioned where the rules bite least. Activity that would attract a capital charge or a liquidity requirement inside the bank can be booked in a sibling entity that faces a lighter regime, while the economic exposure stays inside the same consolidated firm. The regulated bank supplies the funding franchise and the implicit backstop; the nonbank subsidiary supplies the lighter regulatory treatment. The arbitrage is not that the activity escapes the firm. It is that the activity stays in the firm while escaping the charge.
This is the second-order read the headline buries. A rule aimed at the bank entity, measured at the bank entity, can be satisfied at the bank entity while the underlying risk simply migrates one legal step sideways under the same roof. Consolidated supervision is supposed to close that gap. The scale documented here is the evidence that it has not fully closed it.
Who Is Forced to Act, and When
If the reframing is right, the policy pressure over the coming cycle does not fall on the shadow-banking universe outside the perimeter. It falls on the holding-company structures already supervised, and it forces a specific set of firms to respond.
The names most exposed are the ones running the largest nonbank complexes relative to their bank cores, and the two clearest cases remain the former pure broker-dealers, Goldman Sachs and Morgan Stanley, whose consolidated shape still carries the mark of their 2008 conversion. For the diversified money-center banks, the exposure is capital-markets and broker-dealer heavy and layered across many subsidiaries. For the regional tier, the exposure is smaller in dollars but wider in count, which means a larger number of firms with thinner compliance infrastructure would absorb the same rule.
The timeline is the part the market habitually mishandles. A staff report is not a rule. It is the analytical groundwork that precedes one, and this is the first of a three-part series, which signals a sustained supervisory research agenda rather than a one-off observation. Markets underweight this kind of slow catalyst because it looks like procedural noise, and it is easy to price a rule the day it is proposed and impossible to price a research note that merely establishes the scale of the problem. But the sequence from staff research to consultation to rulemaking is how consolidated-supervision tightening has historically arrived. The cost, when it lands, is a higher effective capital or liquidity charge on activity currently booked at a lighter rate, and it lands on the firms named above.
What Would Break This Read
The thesis has a clear failure mode. The scale of internal nonbank activity is documented; the regulatory consequence is inferred. If consolidated supervision already captures this activity adequately at the holding-company level, then the intra-firm arbitrage is a description of organizational form rather than a live regulatory gap, and no new charge follows. The remaining posts in the series will test exactly whether the balance-sheet features translate into a measurable arbitrage, and that link is the one to treat as unproven for now.
There is also a directional counterweight. Several years of deregulatory sentiment could mean the supervisory research documents a structure without any appetite to act on it. Analytical groundwork can sit unused for a long time. Scale is not destiny.
The condition that would confirm the read is straightforward to watch for: the point at which supervisory attention shifts from measuring nonbank subsidiary assets to proposing how they should be capitalized or funded on a consolidated basis. The first is where this research sits today. The second is where the cost gets assigned. Until the framing moves from documentation to charge, the firms carrying the largest nonbank complexes inside a bank parent are absorbing a risk the market is not yet pricing, precisely because it still looks like a staff note rather than a rule.
