KEYCORP /NEW/

The following discussion provides a summary of recent regulatory developments and should be read in conjunction with the disclosure included in our 2024 Form 10-K under the heading “Supervision and Regulation” in Item 1. Business and under the heading “V. Compliance Risk” in Item 1A. Risk Factors as well as the disclosure included in Part II, Item 1A. "Risk Factors" of this report.

Regulatory capital requirements

KeyCorp and KeyBank are subject to regulatory capital requirements that are based largely on the Basel III international capital framework (“Basel III”). The Basel III capital framework and the U.S. implementation of the Basel III capital framework (“Regulatory Capital Rules”) are discussed in more detail in Item 1. Business of our 2024 Form 10-K under the heading “Supervision and Regulation — Regulatory capital requirements.”

Under the Regulatory Capital Rules, standardized approach banking organizations, such as KeyCorp and KeyBank, are required to meet the minimum capital and leverage ratios set forth in Figure 1 below. At March 31, 2025, KeyCorp’s ratios under the fully phased-in Regulatory Capital Rules were as set forth in Figure 1.

Figure 1. Minimum Capital Ratios and KeyCorp Ratios Under the Regulatory Capital Rules

(a)As a standardized approach banking organization, KeyCorp is not subject to the 3% supplementary leverage ratio requirement. However, KeyCorp will be subject to the supplementary leverage ratio if proposed revisions to the Regulatory Capital Rules discussed below are adopted.

(b)Stress capital buffer must consist of Common Equity Tier 1 capital. As a standardized approach banking organization, KeyCorp is not subject to the countercyclical capital buffer of up to 2.5% imposed upon an advanced approaches banking organization under the Regulatory Capital Rules. However, KeyCorp will be subject to the countercyclical capital buffer if proposed revisions to the Regulatory Capital Rules discussed below are adopted.

(c)March 31, 2025 capital ratios are estimates

Revised prompt corrective action framework

The federal Prompt Corrective Action (“PCA”) framework under the FDIA groups FDIC-insured depository institutions into one of five prompt corrective action capital categories: “well capitalized,” “adequately capitalized,” “undercapitalized,” “significantly undercapitalized,” and “critically undercapitalized.” In addition to implementing the Basel III capital framework in the United States, the Regulatory Capital Rules also revised the PCA capital category threshold ratios applicable to FDIC-insured depository institutions such as KeyBank. The revised PCA framework table in Figure 2 identifies the capital category threshold ratios for a “well capitalized” and an “adequately capitalized” institution under the PCA Framework.

Figure 2. "Well Capitalized" and "Adequately Capitalized" Capital Category Ratios under Revised Prompt Corrective Action Framework

(a)A “well capitalized” institution also must not be subject to any written agreement, order, or directive to meet and maintain a specific capital level for any capital measure.

(b)As a “standardized approach” banking organization, KeyBank is not subject to the 3% supplementary leverage ratio requirement, which became effective January 1, 2018. However, KeyCorp will be subject to the supplementary leverage ratio if proposed revisions to the Regulatory Capital Rules discussed below are adopted.

As of March 31, 2025, KeyBank (consolidated) satisfied the risk-based and leverage capital requirements necessary to be considered “well capitalized” for purposes of the revised prompt corrective action framework. However, investors should not regard this determination as a representation of the overall financial condition or prospects of

KeyBank because the PCA framework is intended to serve a limited supervisory function. Moreover, it is important to note that the PCA framework does not apply to BHCs, like KeyCorp.

Capital planning and stress testing

KeyCorp is a Category IV banking organization subject to a supervisory stress test every other year. On June 26, 2024, the Federal Reserve announced the results of the supervisory stress test that it conducted of 31 BHCs having more than $100 billion in total consolidated assets (including KeyCorp). The Federal Reserve indicated that all BHCs subject to the stress test maintained capital ratios above the minimum required levels under the severely adverse scenario. The stress test results for individual BHCs (including KeyCorp) were used by the Federal Reserve to determine a BHC’s updated stress capital buffer requirement. The Federal Reserve published the updated stress capital buffer requirements on August 28, 2024. KeyCorp’s updated stress capital buffer is 3.1%. This stress capital buffer became effective on October 1, 2024 and will remain in effect until September 30, 2025, unless KeyCorp later receives an updated stress capital buffer requirement from the Federal Reserve.

See Item 1. Business of our 2024 Form 10-K under the heading “Supervision and Regulation - Regulatory capital requirements - Capital planning and stress testing” for a discussion of other developments concerning capital planning and stress testing requirements.

Deposit insurance and assessments

The DIF provides insurance coverage for domestic deposits funded through assessments on insured depository institutions like KeyBank. The amount of deposit insurance coverage for each depositor’s deposits is $250,000 per depository.

The FDIC must assess the premium based on an insured depository institution’s assessment base, calculated as its average consolidated total assets minus its average tangible equity. KeyBank’s current annualized premium assessments can range from $.025 to $.45 for each $100 of its assessment base. The rate charged depends on KeyBank’s performance on the FDIC’s “large and highly complex institution” risk-assessment scorecard, which includes factors such as KeyBank’s regulatory rating, its ability to withstand asset and funding-related stress, and the relative magnitude of potential losses to the FDIC in the event of KeyBank’s failure.

On October 18, 2022, the FDIC adopted a final rule, applicable to all insured depository institutions (including KeyBank), to increase the initial base deposit insurance assessment rate schedules uniformly by two basis points consistent with the Amended Restoration Plan approved by the FDIC on June 21, 2022. The FDIC indicated that it was taking this action in order to restore the DIF reserve ratio to the required statutory minimum of 1.35% by the statutory deadline of September 30, 2028. Under the final rule, the increase in rates began with the first quarterly assessment period of 2023 and will remain in effect unless and until the reserve ratio meets or exceeds 2% in order to support growth in the DIF in progressing toward the FDIC’s long-term goal of a 2% reserve ratio.

On March 10, 2023, and March 12, 2023, Silicon Valley Bank (“SVB”) and Signature Bank (“Signature”) were closed by the state banking authorities in California and New York, respectively, and the FDIC was appointed as receiver of SVB and Signature. All deposits of SVB and Signature were transferred to bridge banks established by the FDIC under the systemic risk exception to the least cost test in the FDIA so that the uninsured deposits as well as the insured deposits of both banks were protected by the FDIC. Under the FDIA, the loss to the DIF arising from the use of the systemic risk exception must be recovered through one or more special assessments.

On November 16, 2023, the FDIC issued a final rule to impose a special assessment on IDIs to recover the loss to the DIF resulting from the use of the systemic risk exception to protect the uninsured depositors of SVB and Signature. Under the final rule, the FDIC would collect a special assessment from IDIs at an annual rate of approximately 13.4 basis points over eight quarterly assessment periods, starting with the first quarterly assessment period of 2024. The assessment base for the proposed special assessment is equal to an IDI’s estimated uninsured deposits reported as of December 31, 2022, adjusted to exclude the first $5 billion in estimated uninsured deposits held by the IDI. Because the estimated loss to the DIF from the use of the systemic risk exception will be periodically adjusted and because the total assessments collected may change due to corrective amendments filed by covered IDIs regarding the reported amount of uninsured deposits for the December 31, 2022 reporting period, the FDIC may cease collection of the special assessment early, extend the special assessment collection period, or impose a final shortfall special assessment.

In the final rule, the FDIC indicated that the special assessment is a tax-deductible operating expense for IDIs, and that it assumed that the effect on income of the entire amount of the special assessment would occur in one quarter for the IDIs subject to the assessment. The initial impact of the special assessment to Key was approximately $190 million in pre-tax expense, which was recognized upon issuance of the final rule in the fourth quarter of 2023.

The FDIC has indicated that the loss estimates to be recovered by the special assessment will be periodically adjusted as the FDIC (as receiver of the failed banks) sells assets, satisfies liabilities, and incurs receivership expenses. The FDIC said that it will provide any updates regarding the amount and collection period for the special assessment when it sends the quarterly deposit insurance assessment invoices to the IDIs subject to the special assessment. In the first quarter of 2024, the FDIC announced an increase in its estimate of losses from protecting the uninsured depositors of SVB and Signature and, therefore, increased the amount that it would collect through the special assessment. For more information regarding the impacts of the special assessment, see Part II, Item 2. Management’s Discussion & Analysis of Financial Condition & Result of Operations under the heading “Results of Operations” in this report.

The FDIC’s final rule for a special assessment discussed above was not intended to recover the loss to the DIF from the failure of First Republic Bank in May 2023 (initially estimated as a $13 billion loss) or to the DIF from the failures of SVB and Signature that was not related to the protection of uninsured depositors (initially estimated as a $2.7 billion loss). The FDIC indicated that no further adjustments to assessments are contemplated at this time to recover those losses but that it will re-evaluate this issue in the future when it updates projections for the DIF balance and the reserve ratio in connection with its periodic review of the DIF Restoration Plan that was adopted in 2022. The FDIC updates these projections at least semiannually.

See Item 1. Business of our 2024 Form 10-K under the heading “Supervision and Regulation – FDIA, Resolution Authority and Financial Stability - Deposit insurance and assessments” for a discussion of other developments concerning deposit insurance and assessments.

Community Reinvestment Act

On October 24, 2023, the federal banking agencies adopted a final rule to substantially revise their regulations implementing the Community Reinvestment Act (“CRA”). Various trade associations filed a lawsuit in the United States District Court for the Northern District of Texas seeking to invalidate the CRA final rule. On March 29, 2024, the court in that case issued a preliminary injunction barring the federal banking agencies from enforcing the CRA final rule pending the resolution of that lawsuit. The court’s decision is on appeal to the United States Court of Appeals for the Fifth Circuit. Because the agencies plan to undertake new rulemaking, they asked the Fifth Circuit to stay further proceedings in the case challenging the rule that was issued in October 2023. On March 28, 2025, the federal banking agencies issued a statement announcing their intent to issue a proposal to rescind the rule that was issued in October of 2023 and to reinstate the CRA framework in place prior to the issuance of that rule. The agencies indicated that they would work together to promote a consistent regulatory approach for implementation of the CRA. KeyBank will be subject to any changes that are made to the CRA regulations.

Consumer Financial Protection Bureau

The CFPB, which was created by the Dodd-Frank Act in 2010, was given the authority by that statute to regulate the offer and sale of consumer financial products and services, enforce federal consumer protection laws, and supervise certain providers of consumer financial products and services, including banks with over $10 billion in assets (such as KeyBank). The Trump administration has announced its intention to close the CFPB and has taken various actions to accomplish that objective, including issuing a stop work order to CFPB employees, terminating many CFPB employees, and placing other CFPB employees on administrative leave. A union representing the CFPB’s employees and other interested parties brought a lawsuit in the United States District Court for District of Columbia, seeking a court order to stop the Trump administration from dismantling the CFPB. On March 25, 2025, the court in that case issued a preliminary injunction, which enjoined the Trump administration from taking actions to dismantle the CFPB. The Trump administration has appealed this court order. On April 11, 2025, the United States Court of Appeals for the District of Columbia Circuit denied, in large part, a request by the Trump administration to stay the preliminary injunction while the appeal is pending, but the court ruled that the administration would be allowed to terminate some CFPB employees before the appeal is resolved by making particularized assessments that those employees are not necessary to carry out the agency’s statutory duties. Key is monitoring developments in this case.

Data Collection and Reporting for Small Business Loans

On March 30, 2023, the CFPB issued a final rule to require certain lenders (including depository institutions such as KeyBank) to report detailed data on applications for credit submitted by small businesses, including those owned by women and minorities. This rule was issued to implement Section 1071 of the Dodd-Frank Act. Various lawsuits were brought to challenge this rule. In one of these lawsuits, the CFPB, on April 3, 2025, asked the court to hold the lawsuit in abeyance because the CFPB planned to issue a new proposed rulemaking on this subject. Key is monitoring developments in this case.