# The regulator as kingmaker: how licences and capital rules shape competition
In 2014, Metro Bank became the first company to receive a new high street banking licence in the UK in over 100 years. Think about that. For a century, no new challenger had cleared the regulatory bar to become a full bank. That single fact tells you almost everything about who really controls competition in banking: not the incumbents, not the customers, but the regulator holding the licence.
This lesson shows how three regulatory levers (the banking licence, ring-fencing, and open bankingopen bankingCadre réglementaire (PSD2 en Europe) obligeant les banques à partager les données clients via des API standardisées, avec consentement, transformant les données bancaires en actif compétitif.) simultaneously build a moatmoatA lasting edge over competitors: a resource, capability or position they cannot easily replicate, letting a firm earn above-average returns over time.Voir la définition complète → around incumbents and hand challengers a way in.
A banking licence is government permission to take deposits from the public and lend that money out. In the US, this comes from bodies like the Office of the Comptroller of the Currency (OCC) or state regulators, with the Federal Reserve and the FDIC (the Federal Deposit Insurance Corporation, which insures deposits) also involved. In the UK it comes from the PRA (Prudential Regulation Authority) and the FCA (Financial Conduct Authority). In the euro area, the ECB (European Central Bank) authorises the largest banks directly.
Why does this matter for competition? Because the licence is the single hardest thing to get in the industry. It requires large amounts of capital, experienced management, working IT, and a credible plan showing you will not collapse. That barrier is the incumbents' deepest moatmoatA lasting edge over competitors: a resource, capability or position they cannot easily replicate, letting a firm earn above-average returns over time.Voir la définition complète →. It is not their brand or their branches. It is the fact that starting a rival is extraordinarily hard.
Consider the practical asymmetry:
This is why so many "banks" you use are not banks at all.
Many US "neobanks" (digital-only banking brands) do not hold a licence. Chime, for example, is a technology company that partners with chartered banks such as The Bancorp Bank and Stride Bank to hold customer deposits. Chime owns the app and the customer relationship. The partner bank owns the licence and the regulatory risk.
This arrangement is called banking-as-a-service (BaaS): a licensed bank rents out its regulatory permissions to non-bank brands. It splits the value chain in a specific way:
The power balance here is fragile. In 2024, the collapse of the BaaS middleware provider Synapse froze customer funds and triggered heavy regulatory scrutiny of these partnerships in the US. Regulators reminded everyone that the licensed bank, not the app, remains legally responsible. When the regulator squeezes, value flows back toward whoever holds the licence.
The second lever reshapes competition inside the big banks themselves.
Ring-fencing is a rule that forces a large bank to legally separate its everyday retail operations (your current account, your mortgage) from its riskier investment banking and trading activities. The idea, born after the 2008 financial crisis, is that if the risky side blows up, ordinary depositors are protected.
The UK introduced ring-fencing under the Financial Services (Banking Reform) Act 2013, fully in force from 2019. It applies to banks with more than 25 billion pounds in retail deposits (as of the current threshold). So HSBC, Barclays, Lloyds and NatWest all had to build internal walls.
You can read the Bank of England's own explanation of ring-fencing here.
The US has a related but different rule: the Volcker Rule, part of the 2010 Dodd-Frank Act, which restricts banks from making certain speculative bets with their own money (proprietary trading).
Ring-fencing looks like a pure cost for incumbents, and it is expensive to run two separate structures. But look at the competitive effect.
The ring-fenced retail bank ends up holding a large, stable pool of cheap deposits that it cannot easily deploy in high-risk, high-return activities. So it looks for safe places to put that money: mortgages, government bonds, lending to other banks. This concentrates the incumbents' firepower in exactly the mass-market retail products a challenger wants to attack.
At the same time, the compliance cost of running a ring-fenced structure is trivial for a giant and impossible for a startup. The rule raises the cost of scale, which paradoxically protects the very giants it was meant to discipline. A challenger with 500,000 customers never has to think about ring-fencing. A challenger that succeeds and crosses the deposit threshold suddenly inherits a huge structural cost. The rule acts as a tax on growth.
If the licence and ring-fencing protect incumbents, the third lever deliberately helps challengers.
Open bankingOpen bankingCadre réglementaire (PSD2 en Europe) obligeant les banques à partager les données clients via des API standardisées, avec consentement, transformant les données bancaires en actif compétitif. is a set of rules forcing banks to share customer account data (with the customer's consent) through standardised digital connections called APIs (application programming interfaces: a way for one piece of software to request data from another).
In Europe, this came from PSD2 (the second Payment Services Directive), in force from 2018. In the UK, the Competition and Markets Authority (CMA) ordered the nine largest banks to build open bankingopen bankingCadre réglementaire (PSD2 en Europe) obligeant les banques à partager les données clients via des API standardisées, avec consentement, transformant les données bancaires en actif compétitif. infrastructure. The explicit goal was competition: let a customer's data leave the incumbent so a challenger can build better services on top of it.
Here is what an open bankingopen bankingCadre réglementaire (PSD2 en Europe) obligeant les banques à partager les données clients via des API standardisées, avec consentement, transformant les données bancaires en actif compétitif. data request looks like in simplified form:
GET /open-banking/v3.1/accounts/{accountId}/transactions
Authorization: Bearer {consent-token}That single authorised call lets a budgeting app or a lender pull a customer's transaction history from their bank, once the customer has approved it. Before open bankingopen bankingCadre réglementaire (PSD2 en Europe) obligeant les banques à partager les données clients via des API standardisées, avec consentement, transformant les données bancaires en actif compétitif., that data was locked inside the incumbent.
Open bankingOpen bankingCadre réglementaire (PSD2 en Europe) obligeant les banques à partager les données clients via des API standardisées, avec consentement, transformant les données bancaires en actif compétitif. turns the incumbent's biggest asset, customer data, into a shared resource. This is the wedge:
The US took a slower, market-led path, but in 2024 the Consumer Financial Protection Bureau (CFPB) finalised its rule under Section 1033 of Dodd-Frank, giving Americans a right to their financial data. As of 2026 this framework faces legal and political challenges, so treat its final shape as unsettled.
Vérification des acquis
1. The lesson argues that the banking licence, rather than brand or branches, is the incumbents' deepest competitive moat. What is the underlying reasoning for this claim?
2. A fintech company wants to offer customers accounts where they can deposit their salary and have it insured. Without its own banking licence, what must it do?
3. The lesson frames the regulator as a 'kingmaker' in banking competition. What does this framing primarily illustrate about market structure?
4. Select ALL correct answers. Why does holding a banking licence create a practical asymmetry between a licensed bank and an unlicensed fintech?
Sélectionnez toutes les réponses correctes.
5. Select ALL correct answers. According to the lesson, which of the following are among the requirements that make obtaining a banking licence a formidable barrier to entry?
Sélectionnez toutes les réponses correctes.
Put the three levers together and a clear picture of power emerges.
The regulator is the kingmaker. It decides, through the licence, who is even allowed to compete. It decides, through ring-fencing and capital rules, how expensive it is to be big. And it decides, through open bankingopen bankingCadre réglementaire (PSD2 en Europe) obligeant les banques à partager les données clients via des API standardisées, avec consentement, transformant les données bancaires en actif compétitif., whether the incumbents' data advantage stays locked or gets pried open.
Notice the deliberate balance. Regulators do not simply favour incumbents or challengers. They protect stability (licences, ring-fencing) while forcing competition (open bankingopen bankingCadre réglementaire (PSD2 en Europe) obligeant les banques à partager les données clients via des API standardisées, avec consentement, transformant les données bancaires en actif compétitif.). The two goals pull in opposite directions, and the regulator constantly retunes the dial.
Watch where the margin sits. In a pure incumbent world, the bank captures the customer relationship, the data, and the interest margin. Open bankingOpen bankingCadre réglementaire (PSD2 en Europe) obligeant les banques à partager les données clients via des API standardisées, avec consentement, transformant les données bancaires en actif compétitif. peels off the customer relationship and the data to challengers, but the licensed incumbent often still holds the deposits and the balance sheet underneath. That is why many challengers eventually apply for their own licence: Monzo and Starling in the UK did exactly this, moving from app to fully licensed bank to capture the whole chain rather than renting it.