How fintech regulation actually works, license by license, MBA Training, MBA Training
1/4+150 XP
How fintech regulation actually works, license by license
# How fintech regulation actually works, license by license
In 2021, Revolut could let a customer in Lithuania open an account in minutes. That same customer, if they moved to the United States, would find Revolut operating under an entirely different rulebook, with different protections, different products, and a different company entity behind the app. Same brand, same blue app icon, completely different regulatory skeleton underneath. That skeleton, not the UX, is what determines whether a fintech can offer lending, hold deposits, or issue cards in a given country, and how fast it can expand.
This lesson breaks down why.
The core distinction: being licensed vs. renting a license
Every fintech faces the same fork in the road: get your own license, or partner with an institution that already has one.
Getting your own license means applying directly to a regulator for authorization to hold customer money, lend, or move funds. In the EU, this often means an EMI (Electronic Money Institution) license or a full banking license from a national regulator that "passports" across the EU/EEA under the Payment Services Directive 2 (PSD2). In the US, there is no single national fintech charter; companies typically need money transmitter licenses state by state (all 50, separately) or partner with a chartered bank.
Renting a license (the "bank-partnership model") means the fintech is the customer-facing brand, but a licensed bank sits behind it, actually holding the deposits and being accountable to regulators.
Chime is the clearest US example. Chime is not a bank. It is a financial technology company that partners with The Bancorp Bank and Stride Bank, both FDIC-insured institutions, to actually hold customer deposits. FDIC (Federal Deposit Insurance Corporation) insurance, up to $250,000 per depositor as of 2026 (estimate, verify current limit at
), applies because of those bank partners, not because of Chime itself.
Revolut took the harder, slower path in the EU and UK: it obtained its own European banking license (via Lithuania, passported across the EU) and separately pursued a UK banking license, granted in 2024 after a multi-year review. In the US, Revolut still operates on money transmitter licenses and a partner bank structure, because a US bank charter is a separate, much longer process.
Why the choice dictates the product line
This is the part that trips up non-specialists: the license is not paperwork, it is the product menu.
No banking license = no direct lending from your own balance sheet in most jurisdictions. That's why many fintechs originate loans through a partner bank and then sell or securitize the receivables.
No banking license = deposits aren't technically "yours." Chime cannot legally call customer funds "bank deposits" in its own name; the Bancorp/Stride relationship is what makes FDIC insurance possible.
EMI license (EU) lets you hold e-money and move payments, but not lend or pay interest like a bank. This is why some EU fintechs run both an EMI and, later, apply for a full banking license once they want savings products or credit.
A full banking license unlocks interest-bearing accounts, direct lending, and often cheaper regulatory capital treatment, but requires meeting capital adequacy rules (minimum capital a bank must hold against risk-weighted assets, set under the Basel III framework) and ongoing supervision.
This is why Revolut spent years and significant legal cost chasing full banking licenses across Europe: it wanted to sell mortgages, consumer credit, and interest-bearing savings, products an EMI license cannot support.
The regulators you actually need to know
US: no single fintech regulator. Relevant bodies include the OCC (Office of the Comptroller of the Currency, charters national banks), FDIC (deposit insurance), CFPB (Consumer Financial Protection Bureau, consumer protection enforcement), and state banking/money transmitter regulators.
EU: national competent authorities (e.g., Bank of Lithuania, BaFin in Germany) grant licenses, but PSD2 and, from 2025, the Digital Operational Resilience Act (DORA) (EU rules on cyber and IT-risk resilience for financial firms) set common standards. The European Banking Authority (EBA) coordinates.
UK: the FCA (Financial Conduct Authority) handles conduct and licensing, the PRA (Prudential Regulation Authority) handles bank-level prudential supervision post-Brexit, independent of EU passporting.
Passporting is the EU's biggest structural advantage: one license, in theory, opens 27 member states. The US has no equivalent, which is precisely why state-by-state money transmitter licensing is one of the most cited reasons US fintech scaling is slower and more legally expensive than EU scaling.
The main risks this structure creates
1. Counterparty/partner-bank risk. If a partner bank fails or gets shut down by regulators (this happened with Synapse, a banking-as-a-service middleware provider, whose 2024 collapse froze funds for customers of several fintechs including Yotta), end users can lose access to funds for weeks, even though FDIC insurance nominally applied. Learn more on the FDIC's own consumer alerts page: fdic.gov/consumer-resource-center.
2. Regulatory arbitrage risk. Operating via a lighter license (EMI vs. full bank) to avoid stricter capital rules can work until a regulator decides your activity actually requires the heavier license, forcing a costly restructuring.
3. Licensing lag risk. Expanding into a new country without local authorization (or before it's granted) can delay product launches by 12 to 24 months (estimate; varies heavily by jurisdiction and license type).
4. Compliance-cost risk. AML (Anti-Money Laundering) and KYC (Know Your Customer, the process of verifying customer identity) obligations scale with license type and geography; multi-license fintechs run parallel compliance stacks, which is expensive and a common source of fines.
Vérification des acquis
1. What is the fundamental difference between a fintech obtaining its own license versus using the 'bank-partnership model'?
2. Why does a company like Chime rely on partner banks for FDIC insurance rather than obtaining it directly?
3. A fintech wants to offer the same lending and deposit product across every EU/EEA member state as efficiently as possible. Based on the concept of 'passporting' under PSD2, what is the most relevant advantage of obtaining an EMI or banking license in one EU country?
CHOIX MULTIPLES
4. Select ALL correct answers about why US fintech licensing is structurally different from EU fintech licensing.
Sélectionnez toutes les réponses correctes.
CHOIX MULTIPLES
5. Select ALL correct answers about what determines a fintech's regulatory capabilities and expansion speed in a given country.
Sélectionnez toutes les réponses correctes.
The due-diligence checklist: how to read a fintech's regulatory footprint
If you're evaluating a fintech (as an investor, partner, or job candidate), these checks tell you more than the pitch deck:
Who actually holds the money? Check the terms of service or "who we work with" page. Look for the name of the partner bank, or confirmation of a direct banking license.
Which licenses does it hold, in which countries? A company claiming to be "live in 30 markets" might mean 30 markets of payments-only activity under one EMI license, not 30 full banking authorizations.
Is deposit insurance real and explicit? "FDIC-insured" claims must trace to a named partner bank; "up to $X insured" language without naming the bank is a red flag.
Regulatory enforcement history. Search the regulator's public enforcement database (e.g., FCA's public register, CFPB's consumer complaint database) for fines, consent orders, or license restrictions.
Capital position, if a bank. For fully licensed banks, check publicly disclosed capital ratios against Basel III minimums (a global bank must generally hold a Common Equity Tier 1 ratio of at least 4.5%, plus buffers, as of the current framework, estimate; confirm against current national implementation).
🎬 [VIDEO: "How Banking-as-a-Service Actually Works" - youtube.com/@BankingAsAService (search term) - a walkthrough of the fintech/bank-partner stack, useful for visualizing where liability sits]
Key Takeaways
A fintech's license type (full bank charter, EMI, money transmitter, or bank-partnership) directly determines what products it can legally sell, not just how it's branded.
Revolut's path (own banking licenses in EU/UK, partner model in the US) shows that even one company runs different regulatory structures per market.
Chime's FDIC insurance comes from partner banks (Bancorp, Stride), not from Chime itself, a distinction that matters enormously if a partner bank fails, as seen in the 2024 Synapse collapse.
The EU's passporting system under PSD2 gives a structural expansion speed advantage over the US's fragmented state-by-state licensing.
Real due diligence means tracing the money: identify the licensed entity actually holding deposits, check the regulator's enforcement record, and never take "insured" or "licensed" claims at face value without naming the institution behind them.