Mapping the banking battlefield: incumbents, challengers and the pipes between them

A borrower opens a mortgage app called Better in the US, or Habito in the UK, taps through a few screens, and gets a rate in minutes. It feels like the app is the bank. It is not. That mortgage is often underwritten against someone else's balance sheet, funded by a third party, and eventually sold to an investor entirely. The slick interface owns the customer relationship. Almost everyone else in the chain owns a slice of the money.

This lesson follows that single mortgage through the plumbing, then zooms out to the full mapmapUsing software to automate repetitive marketing tasks and campaigns, enabling personalisation at scale across channels like email, web, and social.View full definition →: who fights whom, who supplies whom, and who quietly collects a toll no matter who wins.

Follow one mortgage down the chain

Let's trace a real-world structure (simplified, but accurate to how the market works in 2026).

Step 1: The front end (the app). The customer thinks they are dealing with a mortgage company. They are dealing with an interface and a brand. This player owns *acquisition* and *experience*.

Step 2: The balance sheet (who actually lends). Many fintech mortgage brands do not hold the loan. They use a warehouse line: a short-term credit facility from a large bank that funds the loan for a few weeks. The fintech is a non-bank lender, sometimes called a non-QM or originator. In the US, non-bank lenders now originate a large share of mortgages. Rocket Mortgage, for example, is a non-bank that grew huge without being a deposit-taking bank.

Step 3: The white-label bank (Banking-as-a-Service). In many fintech products (less so mortgages, more so cards and accounts), the licensed bank sits invisibly behind the app. This is Banking-as-a-Service (BaaS): a chartered bank rents out its licence and rails so a fintech can offer regulated products. Think Chime (fintech) sitting on top of The Bancorp Bank and Stride Bank (the licensed banks). The fintech faces the customer; the bank holds the regulatory obligation and, often, the deposits.

Step 4: The secondary market (who ends up owning the loan). In the US, the mortgage is frequently sold to Fannie Mae or Freddie Mac (government-sponsored enterprises that buy conforming loans), bundled into a mortgage-backed security (MBS), and sold to investors. The originator books a fee and moves on. It never wanted to keep the loan.

Step 5: The servicer. Someone still has to collect the monthly payment. That is the servicer, which may be the original brand or a specialist that bought the servicing rights. This is a separate, tradable asset.

So a single mortgage touches an app, a warehouse lender, a GSE, an investor, and a servicer. The customer relationship and the credit risk are owned by completely different people.

Now do the same for a card payment

Swipe a fintech debit card and the money runs through:

• The fintech app (owns the customer).
• The BaaS sponsor bank (holds the funds, owns the regulatory licence).
• The card network (Visa or Mastercard): the toll road every transaction crosses.
• The acquiring bank and processor on the merchant side.

The card networks are the classic example of a player that rents access to everyone. Visa and Mastercard do not lend, do not take deposits, and do not own customers. They own the pipepipeAll active sales opportunities across the stages of the sales process, together with their combined potential value and probability of closing.View full definition →. Every issuer and every merchant needs them, which is why they earn some of the highest margins in the entire sector.

The five player types on the map

Everything in banking maps to five roles. A single company can play several.

1. Incumbents

Large licensed banks: JPMorgan Chase, Bank of America, Citi in the US; HSBC, BNP Paribas, Santander, Deutsche Bank in Europe. They own charters, deposits, distribution, and trust. Their weakness is legacy technology and slow product cycles.

2. Challengers

Digital-first banks and fintechs: Revolut, Monzo, Starling, N26 in Europe; Chime, SoFi, Cash App in the US. Some hold their own banking licence (Starling, SoFi, Revolut in some markets). Others ride a BaaS partner. Owning a licence changes the power dynamic sharply, as we will see.

3. Suppliers

The infrastructure layer that sells to everyone: core banking providers (FIS, Fiserv, Jack Henry, Temenos), BaaS platforms (Solaris, Griffin, Column), and card networks (Visa, Mastercard). These players are often invisible to consumers and enormously powerful.

4. Distributors

Whoever controls the point of customer contact: aggregators, comparison sites, brokers, and increasingly Big Tech (Apple Pay, Google Pay). When Apple launched Apple Card, the *bank* was Goldman Sachs, but the *customer* belonged to Apple. Goldman later exited the deal, a vivid lesson in who held the power.

5. Regulators

In the US: the OCC (Office of the Comptroller of the Currency, charters national banks), the Federal Reserve, the FDIC (deposit insurance), and the CFPB (Consumer Financial Protection Bureau). In Europe: the ECB (European Central Bank) supervises large banks, plus national regulators, all under frameworks like PSD2 (the Payment Services Directive that forced banks to open data via APIs). Regulators decide who is allowed to touch money, which makes them the ultimate gatekeepers.

Where the power actually sits

The core question in this module: who owns the customer versus who merely rents access?

The licence is power. A fintech on a BaaS partner does not control its own destiny. In 2024, the collapse of BaaS middleware provider Synapse froze funds for customers of several fintechs, exposing how fragile "rent a bank" arrangements can be. Read the CFPB's overview of Banking-as-a-Service risks for context on why regulators are tightening this. The lesson: if you do not hold the charter, someone can pull your rails.

The interface is also power. Apple, Revolut, and Cash App show that whoever owns the daily customer touchpoint can dictate terms to the balance-sheet provider behind them. Distribution has become as valuable as the licence.

The toll collectors win regardless. Visa and Mastercard extract value from every transaction no matter which bank or fintech wins the customer. This is why regulators (and merchants) keep attacking interchange fees: the per-transaction fee that flows to the card-issuing side.

A simple margin walk

Consider a hypothetical fintech debit transaction of $100 (illustrative, not a real fee schedule; actual interchange varies by card type, region, and regulation).

• Merchant pays roughly $1.50 to $2.00 in total card fees on many US credit transactions (estimate; debit is often lower and capped under the Durbin Amendment for large banks).
• Of that, a slice goes to the card network (Visa/Mastercard).
• A slice goes to the issuing bank / BaaS sponsor.
• The fintech takes a share of the interchange as its revenue.

The point is not the exact split. It is that the fintech, the app the customer sees, may earn only a *fraction* of a fee that four other players also touch. Owning the customer does not automatically mean owning the margin.

Competitive dynamics in 2026

Three tensions define the battlefield right now.

Incumbents are buying speed, challengers are buying stability. Large banks acquire or partner with fintechs to modernise. Challengers pursue their own licences to escape BaaS dependency and capture more margin. The two sides are converging.

Big Tech is the wild card. Apple, Google, and Amazon do not want to be regulated banks (regulation is expensive and slow). They want the interface and the data, and they let a bank carry the licence. This keeps them powerful but light.

Regulators are redrawing the lines. Post-Synapse, US regulators are scrutinising BaaS partnerships hard. In Europe, PSD3 and the emerging open finance rules extend data-sharing obligations further. Every regulatory shift reprices who holds power in the chain.

Key Takeaways

• The customer-owner and the risk-owner are usually different players. A fintech mortgage or card is a stack: interface, licensed balance sheet, network, and investors, each owning a different slice.
• Holding a banking licence is the deepest source of power. BaaS lets fintechs skip it, but the Synapse collapse showed that renting rails means someone else controls your survival.
• Card networks (Visa, Mastercard) are the toll collectors who profit from every transaction without owning customers or lending, which is why interchange fees stay under regulatory fire.
• Distribution now rivals the licence. Whoever owns the daily interface (Apple, Revolut, Cash App) can dictate terms to the bank behind them, as the Apple/Goldman split demonstrated.
• Regulators set the board. The OCC, FDIC, Fed, CFPB, ECB, and rules like PSD2/PSD3 decide who is allowed to touch money, making them the ultimate arbiters of power in the chain.