Why Community Banks Are Turning to Cash Flow Underwriting for SMB Loans

The Limits of the Traditional Two-Factor Model

Community bank credit underwriting for small business loans has long rested on two primary data sources: the personal FICO score of the business owner and two to three years of business tax returns. That combination made sense when those were the most reliable data a credit officer could obtain within a reasonable review window. It still makes sense as a starting point. But over the last several years, a pattern has emerged that many lending officers will recognize immediately: the borrower who fails the score threshold but has demonstrably healthy cash flows.

The FDIC's Quarterly Banking Profile has consistently shown that community banks hold a disproportionately large share of small business loans relative to their total assets compared with larger institutions. That concentration reflects a relationship-banking model where credit officers exercise judgment, not just formula. Cash flow underwriting is not a departure from that model. It is, in many ways, a return to it — grounding credit decisions in observable business behavior rather than lagged credit bureau data.

We're not saying FICO scores are irrelevant. For predicting consumer credit behavior and as a consistent screening variable, the score has decades of statistical backing. What we're saying is that for a small business loan — especially one where repayment depends on the operating cash flows of the business, not the owner's personal budget — a 12-month bank statement record can tell a materially different story than a three-digit score compiled from personal tradelines.

What Cash Flow Underwriting Actually Examines

The phrase "cash flow underwriting" covers a range of practices. At the most basic level, it means computing the business's debt service coverage ratio using actual cash inflows and outflows rather than EBITDA derived from tax returns. A more complete analysis includes:

• Average daily balance and average monthly ending balance — a proxy for liquidity cushion and operating slack
• Revenue consistency — month-over-month revenue variance to distinguish seasonal businesses from unstable ones
• NSF and overdraft frequency — an operational stress indicator that credit scores don't capture well
• Largest single outflow events — identifying whether the business has recurring large obligations not visible on the tax return
• Deposit concentration — whether revenue comes from one customer or many, which affects both credit quality and fraud risk

Taken together, these variables produce a picture of how a business actually behaves at the operating level. A food distribution company with $80,000 in monthly inflows, consistent end-of-month balances, and no NSF events over 18 months presents a fundamentally different risk profile than a company with similar revenue but frequent overdrafts and a single large depositor.

A Representative Scenario: The Small Contractor in the Carolinas

Consider a plausible but illustrative example that lending officers in community banking will recognize. A residential electrical contractor in the Charlotte suburbs applies for a $175,000 term loan to purchase a service truck and diagnostic equipment. The owner's personal FICO is 609, pulled down by a 2019 medical collection that went to judgment — an event she was unaware was still reporting. The business itself is four years old, has no prior credit relationship with the bank, and filed two years of Schedule C returns showing modest net income after legitimate owner's compensation draws.

A strict FICO-gating approach at 625 or higher would end the review at intake. But a loan officer who pulls 14 months of business checking statements sees $68,000 to $82,000 in consistent monthly deposits, an average daily balance over $22,000, zero NSF events, and a debt service coverage ratio of approximately 1.38x on the proposed loan payment.

That is a creditworthy borrower by any reasonable standard. Under a cash flow underwriting framework, the loan goes forward with appropriate documentation in the credit file explaining the overriding factors. Under a FICO-only gate, that borrower walks across the street to an online lender charging 28% APR.

The Regulatory Context: 2024 Interagency Guidance

The 2024 interagency guidance on the use of alternative data in credit underwriting — issued jointly by the OCC, Federal Reserve, FDIC, CFPB, and NCUA — provides meaningful cover for community banks that want to expand their use of cash flow and bank statement data. The guidance does not mandate adoption of alternative data, but it explicitly states that use of alternative data in credit decisions is permissible when it is accurate, relevant, and does not result in disparate impact on protected classes under Regulation B (ECOA).

For cash flow data specifically, the guidance notes that bank statement and transaction-level data can improve credit access for borrowers with limited credit history, as long as the lender maintains documentation of how that data was used and can demonstrate its predictive validity. That means keeping a clear record in the loan file of which cash flow metrics were reviewed, what thresholds were applied, and how the ultimate credit decision was supported.

OCC Bulletin 2017-43, while primarily focused on third-party vendor management, is also relevant when a community bank uses an automated tool to extract and analyze bank statement data. The bulletin's model risk management expectations require that any analytical model used in credit decisioning be subject to ongoing validation and that the bank retain documentation of how the model was built and tested. Community banks procuring cash flow analysis tools should ask vendors directly how their outputs are designed to support examiner review under 2017-43.

The Underwriting Documentation Requirement

One reason community banks have been slow to formalize cash flow underwriting is documentation burden. It is not enough to look at bank statements and reach a judgment. The credit policy must specify which cash flow metrics are reviewed, what ranges are acceptable, how exceptions are flagged, and how the analysis is recorded in the loan file.

Best practice is to maintain a standardized cash flow summary worksheet in the origination file — whether the analysis is done manually or through an automated tool. The worksheet should show the analysis period (typically 12 to 24 months), the calculated DSCR, the average daily balance trend, the NSF count, and any qualitative notes about anomalies. When an examiner from the FDIC, OCC, or state banking regulator reviews the credit file, they need to see that the cash flow review was systematic, not ad hoc.

Credit policies that have not been updated to include cash flow underwriting procedures are increasingly out of step with the borrower population that community banks are competing to serve. Updating the policy, training the lending team, and building the documentation workflow are the preconditions for making cash flow underwriting a reliable part of the credit program — not a sporadic workaround used by individual loan officers.

Where Cash Flow Data Has Limits

Experienced credit officers will rightly note several limits of bank statement analysis. First, bank statements reflect cash flows through a single account. A business owner who manages cash across multiple accounts — or who uses personal accounts for business receipts — can present a misleading picture. Verification that the statement represents the primary operating account is essential.

Second, bank statement data is backward-looking. A business that was healthy for 12 months but lost a major contract two months ago will show a clean statement period that does not reflect current reality. Pairing cash flow analysis with recent accounts receivable data or an explanation of current backlog is important for businesses with concentration risk.

Third, and most importantly for community banks operating in agricultural or seasonal markets: cash flow patterns for seasonal businesses require interpretation within a seasonal context. A farm equipment retailer in western North Carolina may have perfectly healthy cash flows viewed annually but show three months of near-zero inflows during the off-season. A cash flow analysis tool or policy that flags low-balance periods without accounting for seasonality will produce false negatives.

None of these limitations are arguments against using cash flow data. They are arguments for using it carefully, with clear policy guidelines and trained loan officers who understand what the data does and does not show. The ICBA and ABA have both published practical guidance on SMB underwriting methodology that community banks can use as a starting framework for developing those policies internally.

For community banks that have already updated their credit decisioning process to incorporate cash flow analysis, the next question is typically how to scale that process without proportionally increasing loan officer time. That question is addressed in more detail in our piece on manual vs. automated bank statement analysis.