The 300% rule for CRE Construction Lending: What Your Bank Actually Needs to Know

Most bankers have heard of the 300% CRE concentration threshold. Fewer understand what it actually triggers, and what it doesn’t. Exceeding it isn’t a violation, but it means your next exam will look very different.

The 300% benchmark comes from the 2006 Interagency Guidance on Concentrations in Commercial Real Estate Lending, issued jointly by the FDIC, OCC, and Federal Reserve. It was reaffirmed in the FDIC’s 2023 advisory (FIL-23064a). As of Q4 2024, 30% of community banks were CRE-concentrated, according to the FDIC’s 2025 Risk Review.

This article breaks down the regulatory framework, what examiners actually care about, the stress scenarios a chief credit officer needs to model, and how to build a portfolio that holds up when regulators arrive.

The Regulatory Framework Behind the 300% Threshold

The 2006 Interagency Guidance established three supervisory benchmarks that remain in effect today, including Construction and Development (C&D) loans exceeding 100% of Tier 1 Capital plus the Allowance for Credit Losses (ACL), total CRE loans exceeding 300% of Tier 1 Capital plus ACL, and CRE portfolio growth exceeding 50% over the prior 36 months.

The critical nuance is that these are supervisory triggers, not hard caps. Exceeding them invites scrutiny, but It doesn’t trigger automatic enforcement action.

The FDIC’s 2023 advisory restated these thresholds verbatim, confirming they remain active supervisory criteria. The OCC’s Fiscal 2023 Bank Supervision Operating Plan highlighted CRE credit risk and portfolios representing concentrations as a heightened focus area. A May 2026 Federal Reserve FEDS Note found that construction loan portfolios experienced high loss rates, with signs of stabilization emerging as of 2025.

Banks don’t always cross these thresholds through organic growth. Mergers and acquisitions can accelerate CRE concentration overnight. A bank at 200% of capital that acquires a CRE-heavy portfolio can find itself above 300% before a single new loan is originated. Examiners know this, and they look at how the bank plans for it.

Despite a deregulatory tilt at the federal level, scrutiny of CRE-heavy portfolios hasn’t eased. The GAO designated CRE as an area requiring enhanced regulatory scrutiny in a September 2024 report (GAO-24-107282). Three of four regional banks report commercial mortgages for nearly half their portfolios, according to the Wharton Initiative on Financial Policy and Regulation.

Why Concentration Risk Isn’t Created Equal

CRE spans construction, stabilized assets, multifamily, industrial, office, retail, hospitality, and land development. Each segment carries a different risk profile, and examiners evaluate them accordingly.

Construction lending carries specific risks that stabilized assets don’t, such as speculative projects with no pre-leasing, lease-up risk on completed properties, cost overruns that erode sponsor equity, sponsor liquidity problems mid-project, and market absorption that doesn’t meet pro forma assumptions. A bank with 300% CRE concentration split across stabilized multifamily and industrial carries a fundamentally different risk profile than a bank at 250% concentrated in speculative office construction.

Examiner focus is shifting. It’s no longer enough to demonstrate strong loan-level underwriting. Regulators now expect portfolio-level analysis, including how CRE concentration fits into the bank’s strategic plan and capital planning framework. Banks with aggressive CRE growth in their strategic plans will face questions they haven’t faced before, particularly about how they stress their entire CRE book under correlated downside scenarios.

The Invictus Group, which advises banks on regulatory strategy, has noted that examiners are moving from tactical loan-by-loan review to strategic-level analysis of how CRE concentration risk integrates with capital adequacy and board-level governance.

What a Chief Credit Officer Actually Worries About

If CRE represents 300% of capital, a market correction erodes the capital buffer that supports the entire institution. That’s the math a chief credit officer lives with.

The stress scenarios a CCO must model go beyond standard sensitivity testing. They include the following:

• Cap rate expansion of 150 basis points or more
• Occupancy declines of 15% across the portfolio
• Construction cost increases of 10% on active projects
• Interest rates remaining elevated for 24 months beyond current projections
• Refinance proceeds falling 20% below original underwriting assumptions

Run-of-the-mill NOI and cap rate shocks no longer satisfy examiners. They want to see how loan-level stress tests roll up into portfolio-level impact, how that portfolio impact flows through to the capital plan, and how the capital plan connects to the bank’s CECL framework. This is the shift from tactical stress testing to strategic planning integration.

A CCO at a community bank with a lean risk team faces a capacity problem. Running these scenarios manually across hundreds of loans, aggregating results, and presenting them in a format that satisfies both the board and examiners takes significant time. Many banks can produce the analysis. Fewer can produce it in real time when examiners ask for an updated view mid-exam.

Historical precedent makes the stakes concrete. Federal Reserve studies showed that banks with CRE concentrations were more likely to fail during the 2008 Global Financial Crisis. The FDIC’s own analysis confirmed that CRE lending concentrations combined with weak risk management practices contributed significantly to bank failures during both the 2008 crisis and the banking and thrift crisis of the 1980s and early 1990s.

Defending Your Portfolio When Regulators Arrive

A bank at 400% CRE concentration with excellent controls may be viewed more favorably than a bank at 250% with weak risk management. The ratio opens the door. Risk management quality determines what examiners find when they walk through it.

Examiners want to see the following:

• Strong underwriting discipline with documented exceptions and policy adherence
• Meaningful sponsor equity, not just minimum skin-in-the-game requirements
• Robust ongoing monitoring of active construction projects
• Current appraisals and market data supporting collateral values
• Portfolio-level stress testing that integrates with capital plans
• Well-defined concentration limits approved by the board, with clear escalation protocols when limits are approached

The Invictus Group outlines ten questions that banks with high CRE concentrations should be prepared to answer. They span everything from how the bank defines its risk appetite for CRE to how it monitors adherence to internal concentration limits. The common thread is that examiners are looking for evidence that the bank understands and actively manages risks.

The challenge is that this evidence must be current. An annual stress test completed six months ago doesn’t answer an examiner’s question about today’s portfolio position. A quarterly board report based on manually assembled data doesn’t demonstrate the proactive visibility regulators expect.

How Built Helps Banks Manage CRE Concentration Risk

Built is a purpose-built platform for real estate and construction finance that gives banks real-time portfolio visibility across the full construction lending lifecycle. Its approach addresses the gap between what examiners expect and what most banks can produce manually.

For banks managing CRE concentration risk, Built delivers the following:

• Real-time portfolio visibility: Live data across every active construction loan, including completion versus funding pacing, budget variance, and inspection status, which means no more monthly manual pulls to understand portfolio position. Built’s risk dashboards give lenders a single view of concentration exposure across the entire book.
• Proactive risk monitoring: Risk surfaces automatically through the platform rather than waiting for manual review cycles, giving risk teams the ability to identify and respond to emerging issues before examiners find them. This is the kind of real-time risk management that regulators increasingly expect from CRE-concentrated banks.
• Stress testing and reporting: Portfolio-level analytics that integrate with capital planning, providing the strategic-level analysis examiners now expect. Its CRE portfolio reporting capabilities connect loan-level data to the board-level views regulators want to see.
• Audit-ready documentation: Complete audit trails and automated file delivery that replace the manual assembly process most banks rely on for year-end audits and regulatory exams

More than 300 lenders, including 17 of the top 25 U.S. lenders and 45 of the top 100 U.S. banks, manage over $317 billion in real estate dollars on the platform.

The concentration threshold isn’t going away. The banks that navigate it successfully will be the ones that can demonstrate, in real time, that they understand their exposure and have the systems to manage it.

Book a demo today.

CRE Concentration Risk FAQs

Does exceeding the 300% CRE concentration threshold mean my bank is in violation?

No. The 300% threshold is a supervisory trigger established by the 2006 Interagency Guidance, not a regulatory limit. Exceeding it means your bank will face heightened scrutiny during examinations, but it doesn’t constitute a violation. What matters is whether your bank can demonstrate strong risk management practices, including robust underwriting, active monitoring, portfolio stress testing, and well-defined concentration limits.

What triggers heightened regulatory scrutiny for CRE-concentrated banks?

Three benchmarks from the 2006 Interagency Guidance trigger heightened scrutiny. The first is C&D loans exceeding 100% of Tier 1 Capital plus ACL, then total CRE loans exceeding 300% of Tier 1 Capital plus ACL, and finally CRE portfolio growth exceeding 50% over the prior 36 months. Meeting any one of these criteria can result in additional examiner attention. The FDIC reaffirmed these criteria in its 2023 advisory.

How should community banks stress test their CRE portfolios?

Examiners expect stress testing that goes beyond loan-level sensitivity analysis. Banks should model scenarios including cap rate expansion, occupancy declines, construction cost increases, prolonged elevated interest rates, and reduced refinance proceeds. Critically, these loan-level results should aggregate into portfolio-level impact analysis and connect to the bank’s capital plan and CECL framework.

What is the difference between the 100% C&D threshold and the 300% total CRE threshold?

The 100% threshold applies specifically to Construction and Development loans as a percentage of Tier 1 Capital plus ACL. The 300% threshold applies to total CRE loans, which includes C&D plus all other commercial real estate categories. A bank can exceed one threshold without exceeding the other, but both invite heightened regulatory scrutiny independently.

How can banks defend their CRE portfolio during a regulatory examination?

Examiners look for evidence that the bank understands and actively manages concentration risk. This includes documented underwriting policies, meaningful sponsor equity requirements, current appraisals, ongoing construction monitoring, portfolio-level stress testing tied to capital plans, and board-approved concentration limits with escalation protocols. The quality of risk management matters more than the concentration ratio itself.