Lead scoring for financial services: how to score banks, credit unions, and lenders
Selling to financial institutions means a finite, public list of buyers, long reviews, and large buying groups. Here is how to score fit, timing, and coverage for banks, credit unions, and lenders.
Lead scoring for financial services is the practice of ranking banks, credit unions, lenders, and other financial institutions by how well they match the customers you win and how ready they are to buy. It works differently here than in most industries: the list of institutions is finite and public, fit data is unusually complete, and timing depends on events such as mergers, core conversions, and regulatory deadlines.
To be clear, this article is about B2B companies scoring the institutions they sell to. It is not about credit scoring of consumers, and nothing here is financial or regulatory advice.
Why generic lead scoring fails in financial services
Most scoring templates give points for company size, a senior title, and a burst of website activity. Pointed at a bank or credit union, that template misfires for six reasons.
| What is different | What it does to a generic score | What to do instead |
|---|---|---|
| Regulated buyers | A keen champion cannot buy alone | Score the institution and the buying group first |
| Vendor due diligence and security reviews | Early activity overstates readiness | Score risk, security, and compliance engagement as a late-stage signal |
| Long cycles | Activity decays to nothing before a decision | Use slower decay |
| Committees | One contact’s clicks say little | Score how many buying functions you have reached |
| Core-system dependencies | Good fit on paper, no integration path | Make the core or loan origination system a fit factor |
| A finite, listed universe | Waiting for inbound leaves most of the market unscored | Load and score every in-market institution |
The due diligence point is written into supervisory guidance. The 2023 interagency guidance on third-party relationships from the FDIC, the Federal Reserve, and the OCC covers a vendor relationship from planning and due diligence through termination. The full text lists due diligence topics that include financial condition, information security, and operational resilience. Your buyer reviews you on each one, and that work involves people who never visit your pricing page.
The universe is also small enough to count. The NCUA reported 4,214 federally insured credit unions in the second quarter of 2026, down from 4,370 a year earlier, each one listed by name. Scoring here is less about filtering unknown inbound leads and more about ranking a known list of accounts.
Fit factors for financial institutions, and where the data comes from
Most CRMs hold thin fit data: Validity reports that 76% of CRM users say less than half their data is accurate and complete. Financial services is the exception, because institutions report detailed data to their regulators every quarter and the regulators publish it.
| Fit factor | Why it matters | Where the data comes from |
|---|---|---|
| Institution type (bank, credit union, non-bank lender, wealth manager, fintech) | Each type buys differently and answers to different regulators | FDIC for banks, NCUA for credit unions; your own research for the rest |
| Asset size | The best single proxy for budget, team depth, and complexity | Quarterly call reports: FDIC and FFIEC for banks, NCUA for credit unions |
| Charter and regulator | Sets the rules the institution follows and who examines it | FDIC and FFIEC records; NCUA data separates federal and state-chartered credit unions |
| Number of branches | Operating footprint, and how much a rollout touches | FDIC BankFind branch locations; the institution’s own site |
| Geography | State rules, your coverage, and nearby reference customers | Headquarters and branch data from the same sources |
| Lines of business | A mortgage product needs a mortgage lender | Call report loan and deposit categories; HMDA data at the lender level |
| Core banking or loan origination system | Decides whether you can integrate | Not in regulatory data. Discovery calls, job postings, vendor announcements, or a technographic provider |
| Growth | Growing institutions outgrow manual processes | Compare assets, loans, or members across quarters |
The public sources:
- FDIC BankFind Suite. The FDIC calls it its primary tool for searching historical and current data on insured institutions. Its data tools show branches, mergers and acquisitions, and financial reports back to 1992, and an API exposes more than 1,100 call report variables.
- FFIEC. The Central Data Repository publishes call reports and Uniform Bank Performance Reports for most FDIC-insured institutions. The National Information Center shows which holding company owns which bank.
- NCUA. Credit union call report data covers all federally insured credit unions, with quarterly files to download.
- HMDA. The FFIEC reports that 4,782 financial institutions filed 2025 mortgage lending data, which shows who is active in mortgage.
Two cautions. Public data stops at depository institutions and reporting lenders, so fit data for wealth managers and fintechs is as patchy as anywhere else. And the system an institution runs is in no regulatory file. Core platforms come from vendors such as Jack Henry, which describes separate divisions for banks and for credit unions. List the systems you integrate with and score against that list.
Which of these call report fields deserves the most weight depends on your ideal customer profile. Our five-step framework for building an ICP scoring model shows how to turn that profile into weighted factors for banks and credit unions.
Timing and buying signals in financial services
Call report data settles which institutions are worth pursuing. Events settle when, and many of those events are public.
| Signal | What it usually means | Where to find it |
|---|---|---|
| Merger or acquisition | The acquirer consolidates systems and vendors | Press releases, FDIC BankFind history |
| Core system conversion | Connected systems are re-evaluated | Announcements, job postings, discovery calls |
| New CIO, COO, chief lending officer, or chief risk officer | New leaders review vendors early | Press releases, professional networks |
| Regulatory change with a deadline | Budget appears for a named problem | Regulator announcements, trade press |
| Public enforcement action or consent order | The institution has committed to fix a named issue | Regulator enforcement pages |
| New branch, product, or line of business | New operations need new tooling | Announcements, changes in call report data |
| Crossing an asset-size threshold | New supervision or rules apply | Call report asset trend |
| Conference attendance | Active evaluation | Event lists, meetings booked |
| RFP issued | A formal buying process has started | Inbound, procurement portals, partners |
Enforcement actions are public. The OCC’s enforcement actions search covers national banks and federal savings associations, and actions issued since 2012 can be filtered by subject matter. The NCUA publishes its administrative orders in a searchable table. Treat these with care. An order tells you a topic is a priority, not that the institution wants to hear from vendors about it. Use it to raise priority and to prepare, not as an opening line. The OCC notes its lists are not guaranteed to be comprehensive or current.
On thresholds, the clearest example is $10 billion in assets. The CFPB has described the depository institutions it supervises as those with over $10 billion in assets and their depository affiliates. Other thresholds exist and change, so confirm any you score against on the regulator’s own site.
Bank and credit union buying cycles run long, so let signals fade slowly. A merger announced nine months ago still shapes vendor decisions. Each event in the table above has an entry in our buying signals glossary.
Scoring the buying group
Forrester’s count for B2B as a whole is that 95% of B2B purchases involve three or more people. At a bank, credit union, or lender, the group is larger and more formal.
| Role | What their engagement tells you |
|---|---|
| Line-of-business owner (lending, deposits, payments, wealth) | A lending, deposits, or payments leader has a problem and may champion you |
| Operations | Back-office staff are working out how it would run |
| IT | The core integration is being tested |
| Information security | The institution has opened its formal vendor review |
| Compliance and risk | Due diligence has started |
| Procurement or vendor management | Paperwork for a purchase is moving |
| Executive sponsor | The decision has budget and an owner at the executive level |
Make coverage a factor of its own: count how many distinct functions at the institution have an engaged contact. Five people from lending is one function. One person each from lending, IT, and information security is three.
Next, give weight to which function is engaging. In most industries a security questionnaire is paperwork. Here, a contact from information security, compliance, or vendor management joining a deal means the institution is spending scarce review time on you. Score a first engagement from one of these functions well above another visit from your champion.
Disqualifiers specific to financial services
- Below your minimum asset size.
- A core or loan origination system you cannot integrate with.
- A line of business you do not serve, such as a commercial lending product at an institution with almost no commercial loans.
- A charter type or state where you cannot operate.
- The institution being acquired. After a merger, the surviving institution picks the vendors. Score the acquirer.
- A recent multi-year contract with a competitor. Move it to a renewal-date list.
- Consumers and members who fill in a vendor form while looking for a loan.
- Consultants, other vendors, and students researching the market.
A worked example: scoring a demo credit union
Here is a demo credit union account scored on fit by a vendor that sells lending software. One factor subtracts: a three-year contract signed with a competitor last year.
- Asset size ($1.2 billion) 30% 8.6
- Lines of business (consumer and mortgage lending) 25% 7.8
- Institution type and charter 20% 9.2
- Core system you integrate with 20% 6.4
- Recent contract with a competitor 5% -4.2
The math: 8.6 at 30% is 2.58, 7.8 at 25% is 1.95, 9.2 at 20% is 1.84, and 6.4 at 20% is 1.28, which adds to 7.65. The disqualifying factor subtracts 4.2 at 5%, or 0.21, for a fit score of 7.4. Three of the four fit factors came from public call report data.
Here is who has engaged at that credit union, by function:
| Signal (last 180 days) | Function | Counts toward engagement |
|---|---|---|
| VP of lending attended a product demo | Line of business | Strongly |
| Two IT contacts read the core integration documentation | IT | Moderately |
| Information security manager requested security documentation | Information security | Very strongly |
| Merger with a smaller credit union announced four months ago | Institution event | Strongly |
| Booth scan at a conference seven months ago | Line of business | Slightly |
The account has a 7.4 fit, three functions engaged, and a live event. The competitor contract is a reason to ask about timing, and a rep can see all of it on the record.
Plays by score band
Treat these bands as a first draft for a bank and credit union list. Move the cutoffs to where your own conversion clearly rises.
| Engagement 6.0 and up | Engagement 3.0 to 5.9 | Engagement under 3.0 | |
|---|---|---|---|
| Fit 7.0 and up | The account owner calls within the week. Name a contact in each buying function and have the due diligence packet ready | Open with a public event: the merger, the core conversion, or the new executive | Hold the institution on the target list and find contacts in lending, IT, and risk |
| Fit 4.0 to 6.9 | Qualify the core system and line of business on a short call | Nurture by institution type and rescore when each quarter’s call reports post | Hold rep time for now |
| Fit under 4.0 | Recheck the asset size and charter on file. If they hold, answer the question and move on | Newsletter and content only | Leave it alone |
Whatever the band, an institution that sends an RFP or asks directly gets an answer.
How to measure and tune the model
The model passes one test or it fails: do your highest-scoring banks, credit unions, and lenders turn into pipeline and revenue more often than the rest? A decision can sit a year out, so also check early stages such as meetings held and due diligence started.
| What you see | What it usually means | What to do |
|---|---|---|
| Conversion looks flat across bands | Asset size is carrying the model | Add lines of business and core system, then reweight |
| High-scoring accounts stall in security review | Fit ignores integration | Add the core system factor |
| Wins cluster in one institution type | Your real ICP is narrower | Run separate models for banks and credit unions |
| Institutions you know are good score low | A weighted field is blank | Fill it from call report data or discovery notes. A blank field adds 0 to the score |
Move one or two weights per pass, so you can tell which change mattered. The usual failure patterns are covered in our guide to where teams get ICP scoring wrong, and our account scoring worksheet has a blank grid for your own institution factors.
Handle the data responsibly
Score institutions and the business contacts who work there. Keep consumer, member, and borrower data out of a sales scoring model, and use loan-level public datasets such as HMDA only when aggregated to the lender. Honor opt-outs, follow your legal team’s guidance, and expect buyers to ask how you handle data.
Where BoostIdeal fits
BoostIdeal is a scoring engine for teams that sell to financial institutions from HubSpot, and it suits this institution-first model.
- Your team builds the model. A person decides how much asset size, charter, and core system count. AI helps analyze your data and draft a first version.
- Scoring covers every record type: accounts, contacts, leads, and custom objects. One record can be scored on another’s data, such as a credit union on how many buying functions its contacts cover.
- Regulator data loads through HubSpot or a CSV you upload, so FDIC, FFIEC, and NCUA call report fields become properties you can score on.
- Each score explains itself. It is out of 10, and the factors behind it write back to HubSpot properties, where your workflows, lists, and agents can act on them and a rep can read them before a vendor review.
- Run one model for banks and another for credit unions, side by side.
- Scores keep pace with new call report data and new contacts: they recalculate hourly by default, and in near real time with webhook sync.
When it is not the right fit. BoostIdeal is not the right fit if your institution and contact data is not in HubSpot and you do not want to load call report files as CSV uploads, or if you want a vendor to hand over a number you never question.
Frequently asked questions
What is lead scoring for financial services?
It is how companies that sell to banks, credit unions, and lenders rank those institutions and their contacts by fit and buying readiness. Fit comes mostly from public regulatory data such as asset size and charter. Readiness comes from events and from how much of the buying group is engaged.
Is this the same as credit scoring?
No. Credit scoring rates how likely a borrower is to repay a loan. Lead scoring for financial services is a B2B sales and marketing practice that ranks institutions as potential customers, and it uses no consumer credit data.
Should I score the institution or the contact?
Both, but the institution first. Financial institutions buy by committee and after formal review, so account fit and buying group coverage tell you more than one person’s activity. Use contact scores to decide who to call inside a strong account.
Where can I get data on banks and credit unions for scoring?
For banks, the FDIC’s BankFind Suite and the FFIEC’s Central Data Repository publish quarterly call report data. For credit unions, the NCUA publishes call report data for all federally insured credit unions. The system an institution runs is not in those files and needs separate research.
What are the strongest buying signals when selling to banks and credit unions?
Mergers and acquisitions, core system conversions, new executives, regulatory deadlines, and RFPs. Inside an active deal, a first engagement from information security, compliance, or vendor management is one of the strongest signs that the institution is serious.
Does asset size alone work as a fit score?
It is the best single factor, but two institutions of the same size can run different systems and lines of business. Add both before you trust the ranking.
The takeaway
Every bank and credit union you could sell to is already on a regulator’s list, with its call report beside it. Start fit with asset size, charter, and lines of business from those filings, then add the core or loan origination system from your own research. Time outreach to mergers, core conversions, and new executives, and take a first contact from information security or compliance as a sign of real intent. Show the factors and weights on the record, so the rep walking into a vendor due diligence review can say why this institution leads the list.