# Mapping the banking battlefield: incumbents, challengers and the pipes between them
A borrower opens a mortgage app called Better in the US, or Habito in the UK, taps through a few screens, and gets a rate in minutes. It feels like the app is the bank. It is not. That mortgage is often underwritten against someone else's balance sheet, funded by a third party, and eventually sold to an investor entirely. The slick interface owns the customer relationship. Almost everyone else in the chain owns a slice of the money.
This lesson follows that single mortgage through the plumbing, then zooms out to the full mapmapUsing software to automate repetitive marketing tasks and campaigns, enabling personalisation at scale across channels like email, web, and social.View full definition →: who fights whom, who supplies whom, and who quietly collects a toll no matter who wins.
Let's trace a real-world structure (simplified, but accurate to how the market works in 2026).
Step 1: The front end (the app). The customer thinks they are dealing with a mortgage company. They are dealing with an interface and a brand. This player owns *acquisition* and *experience*.
Step 2: The balance sheet (who actually lends). Many fintech mortgage brands do not hold the loan. They use a warehouse line: a short-term credit facility from a large bank that funds the loan for a few weeks. The fintech is a non-bank lender, sometimes called a non-QM or originator. In the US, non-bank lenders now originate a large share of mortgages. Rocket Mortgage, for example, is a non-bank that grew huge without being a deposit-taking bank.
Step 3: The white-label bank (Banking-as-a-Service). In many fintech products (less so mortgages, more so cards and accounts), the licensed bank sits invisibly behind the app. This is Banking-as-a-Service (BaaS): a chartered bank rents out its licence and rails so a fintech can offer regulated products. Think Chime (fintech) sitting on top of The Bancorp Bank and Stride Bank (the licensed banks). The fintech faces the customer; the bank holds the regulatory obligation and, often, the deposits.
Step 4: The secondary market (who ends up owning the loan). In the US, the mortgage is frequently sold to Fannie Mae or Freddie Mac (government-sponsored enterprises that buy conforming loans), bundled into a mortgage-backed security (MBS), and sold to investors. The originator books a fee and moves on. It never wanted to keep the loan.
Step 5: The servicer. Someone still has to collect the monthly payment. That is the servicer, which may be the original brand or a specialist that bought the servicing rights. This is a separate, tradable asset.
So a single mortgage touches an app, a warehouse lender, a GSE, an investor, and a servicer. The customer relationship and the credit risk are owned by completely different people.
Swipe a fintech debit card and the money runs through:
The card networks are the classic example of a player that rents access to everyone. Visa and Mastercard do not lend, do not take deposits, and do not own customers. They own the pipepipeAll active sales opportunities across the stages of the sales process, together with their combined potential value and probability of closing.View full definition →. Every issuer and every merchant needs them, which is why they earn some of the highest margins in the entire sector.
Everything in banking maps to five roles. A single company can play several.
Large licensed banks: JPMorgan Chase, Bank of America, Citi in the US; HSBC, BNP Paribas, Santander, Deutsche Bank in Europe. They own charters, deposits, distribution, and trust. Their weakness is legacy technology and slow product cycles.
Digital-first banks and fintechs: Revolut, Monzo, Starling, N26 in Europe; Chime, SoFi, Cash App in the US. Some hold their own banking licence (Starling, SoFi, Revolut in some markets). Others ride a BaaS partner. Owning a licence changes the power dynamic sharply, as we will see.
The infrastructure layer that sells to everyone: core banking providers (FIS, Fiserv, Jack Henry, Temenos), BaaS platforms (Solaris, Griffin, Column), and card networks (Visa, Mastercard). These players are often invisible to consumers and enormously powerful.
Whoever controls the point of customer contact: aggregators, comparison sites, brokers, and increasingly Big Tech (Apple Pay, Google Pay). When Apple launched Apple Card, the *bank* was Goldman Sachs, but the *customer* belonged to Apple. Goldman later exited the deal, a vivid lesson in who held the power.
In the US: the OCC (Office of the Comptroller of the Currency, charters national banks), the Federal Reserve, the FDIC (deposit insurance), and the CFPB (Consumer Financial Protection Bureau). In Europe: the ECB (European Central Bank) supervises large banks, plus national regulators, all under frameworks like PSD2 (the Payment Services Directive that forced banks to open data via APIs). Regulators decide who is allowed to touch money, which makes them the ultimate gatekeepers.
The core question in this module: who owns the customer versus who merely rents access?
The licence is power. A fintech on a BaaS partner does not control its own destiny. In 2024, the collapse of BaaS middleware provider Synapse froze funds for customers of several fintechs, exposing how fragile "rent a bank" arrangements can be. Read the CFPB's overview of Banking-as-a-Service risks for context on why regulators are tightening this. The lesson: if you do not hold the charter, someone can pull your rails.
The interface is also power. Apple, Revolut, and Cash App show that whoever owns the daily customer touchpoint can dictate terms to the balance-sheet provider behind them. Distribution has become as valuable as the licence.
The toll collectors win regardless. Visa and Mastercard extract value from every transaction no matter which bank or fintech wins the customer. This is why regulators (and merchants) keep attacking interchange fees: the per-transaction fee that flows to the card-issuing side.
Consider a hypothetical fintech debit transaction of $100 (illustrative, not a real fee schedule; actual interchange varies by card type, region, and regulation).
The point is not the exact split. It is that the fintech, the app the customer sees, may earn only a *fraction* of a fee that four other players also touch. Owning the customer does not automatically mean owning the margin.
Knowledge check
1. A fintech mortgage brand uses a warehouse line from a large bank to fund loans for a few weeks before selling them. What does this arrangement most fundamentally reveal about the fintech's business model?
2. In a Banking-as-a-Service (BaaS) arrangement, why does the licensed bank remain 'invisible' behind the fintech app?
3. A non-bank lender like Rocket Mortgage 'grew huge without being a deposit-taking bank.' What does this best demonstrate about the modern banking battlefield?
4. Select ALL correct answers about how value and risk are distributed along the mortgage chain described in the lesson.
Select all the correct answers.
5. Select ALL correct answers that correctly distinguish the roles in a fintech-fronted financial product.
Select all the correct answers.
Three tensions define the battlefield right now.
Incumbents are buying speed, challengers are buying stability. Large banks acquire or partner with fintechs to modernise. Challengers pursue their own licences to escape BaaS dependency and capture more margin. The two sides are converging.
Big Tech is the wild card. Apple, Google, and Amazon do not want to be regulated banks (regulation is expensive and slow). They want the interface and the data, and they let a bank carry the licence. This keeps them powerful but light.
Regulators are redrawing the lines. Post-Synapse, US regulators are scrutinising BaaS partnerships hard. In Europe, PSD3 and the emerging open finance rules extend data-sharing obligations further. Every regulatory shift reprices who holds power in the chain.