Playbooks
True lender / bank partnership
True lender / bank partnership
Bank partnership models let fintech originators access federal preemption without obtaining a bank charter. The bank originates loans on paper, sells them to the fintech almost immediately, and collects a fee. The fintech gets national reach at rates above state caps. The bank gets volume-based revenue without balance sheet risk.
This arrangement works until regulators decide the fintech is the “true lender” and federal preemption evaporates. When that happens, you’re retroactively operating an unlicensed lending business in multiple states with unenforceable loans.
If you’re an originator evaluating this model, or a capital provider financing one, you need to understand both the mechanics and the regulatory fault lines.
What is a bank partnership model?
The basic mechanics
The bank originates the loan using its charter. The loan appears on the bank’s books for hours or days. Then the bank sells the loan to the fintech partner, typically at par. The fintech services the loan and bears credit risk. The bank collects an origination fee and moves on.
The consumer sees the bank’s name on disclosures. The bank files the regulatory reports. But economically, the fintech owns the entire program.
Why originators use this model
Federal preemption. The National Bank Act and similar state-chartered bank laws preempt state usury caps. A Utah industrial bank can originate a 36% APR consumer loan to a California borrower, even though California’s rate cap is lower. Without the bank partner, that loan would be usurious.
Single regulatory regime. Instead of obtaining licenses in 50 states (plus D.C. and territories), the originator operates under one bank’s compliance umbrella. Licensing takes 12-24 months and costs $500K-$2M. A bank partnership can launch in 3-6 months.
Speed to market. For a startup with limited capital, waiting two years for licenses isn’t viable. The bank partnership is often the only path to rapid national scale.
The economic split
The fintech pays for access to the charter. Typical structures:
| Component | Typical Range |
|---|---|
| Bank origination fee | 25-100 bps per loan |
| Bank credit retention | 1-5% of each loan |
| Compliance oversight fee | $10K-$50K monthly |
| Volume minimum | $5M-$25M monthly |
| Volume maximum | Varies by bank capital |
A consumer lender originating $50M monthly at 75 bps pays the bank $375K per month, or $4.5M annually. That’s the cost of regulatory access. If unit economics don’t support this fee, the model breaks down.
Note: When modeling bank partnership economics, include not just the direct fee but also the compliance burden. The bank will require specific servicing standards, audit rights, and reporting that add operational cost.
The leading bank partners
Fewer than a dozen banks run significant fintech lending programs. Most commercial banks won’t touch this business because of regulatory and reputational risk.
Cross river bank
Cross River is the largest fintech partner bank by origination volume. Major programs include Affirm (buy-now-pay-later), Upstart (AI-underwritten consumer), and Best Egg (prime unsecured). The bank has built sophisticated compliance infrastructure specifically for this model.
In 2023, the FDIC issued a consent order citing fair lending violations and compliance deficiencies. Cross River remains operational but under enhanced supervision. If you’re financing an originator that uses Cross River, request the current regulatory status, not the 2021 press releases.
Webbank
WebBank operates under a Utah industrial bank charter. Partners have included Prosper, LendingClub (before LendingClub bought Radius Bank), and Avant. The bank is smaller and more selective than Cross River. Expect longer onboarding timelines and stricter credit box requirements.
Other active partners
| Bank | Focus Areas | Notes |
|---|---|---|
| Celtic Bank | SBA lending, equipment finance | Conservative credit boxes |
| FinWise Bank | Higher-risk consumer segments | Higher fees, less scale |
| Coastal Community Bank | SMB, payments | Newer to fintech partnerships |
| Choice Financial Group | Various programs | Regional focus |
What banks look for
Before approving a partnership, banks evaluate:
- Compliance infrastructure. Can you produce audit trails, handle complaints, and manage state-specific requirements the bank can’t preempt (like marketing rules)?
- Unit economics. Can your product support the bank fee and still be profitable? Banks won’t partner with programs destined to fail.
- Volume commitments. Minimums ensure the bank’s infrastructure investment pays off. Maximums protect bank capital ratios.
- Exit provisions. What happens if the relationship sours? Banks want clean termination rights.
The true lender doctrine: regulatory risk Explained
The core question
When a bank originates a loan and immediately sells it to a fintech, who is the “lender” for regulatory purposes? If it’s the bank, federal preemption applies. If it’s the fintech, state laws apply retroactively, and every high-rate loan may be unenforceable.
This isn’t an academic question. State attorneys general and regulators actively litigate this issue. If they win, the consequences are severe:
- Loans above state rate caps become unenforceable
- The originator faces state-by-state licensing violations
- Capital providers holding the collateral face impaired assets
Factors courts and regulators consider
No single factor controls, but the analysis typically weighs:
| Factor | Supports Bank as True Lender | Supports Fintech as True Lender |
|---|---|---|
| Economic interest | Bank retains meaningful credit risk | Fintech bears all losses |
| Credit decision | Bank underwrites with its own criteria | Fintech dictates credit box |
| Funding | Bank funds from deposits | Fintech provides capital |
| Marketing | Bank’s brand prominent | Fintech’s brand dominant |
| Loan holding period | Bank holds 3+ days | Same-day sale |
| Servicing | Bank services or controls servicing | Fintech services exclusively |
Most bank partnerships look problematic under this analysis. The fintech bears economic risk, dictates terms, and services loans. The bank is a conduit.
Regulatory history
Madden v. Midland (2015). The Second Circuit ruled that a non-bank debt buyer couldn’t claim federal preemption for interest rates above state caps. This wasn’t about bank partnerships directly, but it signaled that preemption doesn’t automatically transfer to assignees.
OCC True Lender Rule (2020). The OCC tried to clarify that the bank on the note is the true lender if it’s listed as lender or funds the loan. Congress repealed this rule in 2021 using the Congressional Review Act.
State enforcement actions. California’s DFPI has targeted specific bank partnership programs. Colorado challenged several high-rate consumer lenders. These actions often settle confidentially, but they signal active enforcement.
CFPB scrutiny. The CFPB has called rent-a-bank arrangements “evasion” of state consumer protections. Expect continued pressure regardless of administration.
Current state of play
There is no definitive federal resolution. The legal landscape looks like this:
- In the Second Circuit (New York), Madden creates heightened risk
- In other circuits, the question remains open
- State AGs have independent enforcement authority
- Settlement pressure often forces compliance changes before court resolution
For practical purposes, assume true lender risk is material and ongoing. Structure accordingly.
Important: The true lender doctrine remains unsettled. An originator using a bank partnership model today may face state enforcement action tomorrow. Capital providers should treat this as a material risk factor and require disclosure of all regulatory correspondence in facility representations.
Structuring considerations and best practices
Mitigating true lender risk
No structure eliminates true lender risk, but you can reduce exposure:
Meaningful bank involvement in underwriting. The bank should have genuine authority to decline loans, not rubber-stamp fintech decisions. Document this in policy and practice.
Hold period. Same-day loan sales look like a pass-through. A 3-5 day hold period on the bank’s books creates a stronger argument for bank involvement. Some programs hold 10+ days.
Credit risk retention. If the bank sells 100% of loans, it has no economic interest. Retaining 2-5% of credit risk (first-loss or pro-rata) demonstrates skin in the game.
Marketing controls. Consumer-facing materials should reference the bank relationship. The bank’s name should appear prominently, not buried in disclosures.
Genuine compliance oversight. The bank must actually review complaints, audit servicing, and enforce credit box compliance. Documentation of this oversight matters in litigation.
Program agreement key terms
The program agreement governs the relationship. Critical provisions:
| Term | What to Negotiate |
|---|---|
| Volume commitments | Realistic minimums you can hit; headroom on maximums |
| Credit box | Flexibility to adjust underwriting as you learn |
| State exclusions | Clarity on which states the bank won’t originate into |
| Compliance responsibilities | Clear allocation of obligations |
| Audit rights | Bank can audit, but with reasonable notice |
| Indemnification | Coverage for regulatory actions (both directions) |
| Termination | Reasonable notice periods; clear wind-down mechanics |
| Exclusivity | Avoid if possible; maintain optionality |
Capital provider considerations
If you’re financing an originator that uses a bank partnership, the structure creates tail risks:
- Partnership termination. If the bank relationship ends, the originator may stop originating. Your flow is cut off. Require backup plan disclosure and termination notice provisions.
- Consent requirements. Some program agreements require bank consent for securitization or facility transfers. Confirm the bank has consented or will consent.
- Collateral enforceability. If loans are later deemed usurious, they may be unenforceable. Your collateral is impaired. Consider state-by-state analysis of rate exposure.
- Reps and warranties. Require representations about regulatory standing, compliance with program agreement, and disclosure of any state AG inquiries.
Due diligence questions for capital providers
For the originator
Before financing a bank partnership originator, ask:
-
How long has the bank partnership been in place?
- New partnerships (under 2 years) haven’t been stress-tested
-
What is the termination notice period?
- 90 days is standard; shorter periods create sudden disruption risk
-
Has the originator received any regulatory inquiries?
- Request copies of all state AG correspondence, CFPB inquiries, or bank examination findings
-
What states are excluded from the program?
- Some banks won’t originate in certain states; this limits your market
-
What is the backup plan if the partnership ends?
- Direct licensing timeline? Alternative bank partner? Orderly wind-down?
-
What is the APR distribution of the portfolio?
- If 60% of loans exceed 36% APR, true lender risk is concentrated there
For the bank partner
-
What is the bank’s current regulatory standing?
- Request recent exam results and any MRAs (matters requiring attention)
-
Has the bank received consent orders related to lending programs?
- Cross River’s 2023 consent order is public; other banks may have undisclosed issues
-
What is the bank’s concentration in this originator?
- If your originator is 50% of the bank’s program, termination risk is lower but regulatory scrutiny is higher
-
Does the bank have adequate capital for projected volume?
- Check the bank’s call reports; compare capital to commitments
Documentation review
Request and review:
- Program agreement (full text, not summary or redacted version)
- Bank’s most recent call reports (quarterly, available at FFIEC)
- Regulatory correspondence (any letters from OCC, FDIC, state regulators)
- Marketing materials (how is the bank relationship disclosed to consumers?)
- Credit policy (does the bank have genuine override authority?)
Note: When evaluating a bank partnership originator, ask for the program agreement and confirm the bank’s current regulatory standing. A consent order against the partner bank can disrupt the entire origination program.
Alternatives to bank partnership
Bank partnership isn’t the only path. Consider alternatives based on your timeline and product:
Direct licensing (50-state)
Obtain state licenses in all jurisdictions where you’ll originate. This takes 12-24 months and costs $500K-$2M (legal fees, application costs, compliance build-out). Ongoing costs include license renewals, exam fees, and state-specific compliance.
Advantages:
- No true lender risk
- No bank fee (25-100 bps savings)
- Full control over product and pricing
- No dependency on third-party partner
Disadvantages:
- Long time to market
- High upfront cost
- Ongoing state-by-state compliance burden
- Rate caps apply (can’t exceed state maximums)
This path makes sense for scale operators with a 5+ year time horizon and unit economics that work within state rate caps.
Single-state or limited-state operations
If your product works at lower APRs, consider originating only in states with favorable rate caps or no caps. California, Texas, and New York together represent significant market share. Add a dozen more states and you cover 70% of the U.S. population.
Advantages:
- Faster than 50-state licensing
- No bank partner dependency
- Simpler compliance
Disadvantages:
- Limited market
- Geographic concentration risk
- Some states are essential (California) but have complex requirements
Hybrid approaches
Some originators use direct licensing in major states and a bank partnership for the rest. This reduces dependency on any single bank while maintaining national reach.
Operationally, this is complex. You’re running two compliance regimes, two pricing engines (potentially), and two sets of reps and warranties for capital providers.
Decision framework
| Factor | Favor Bank Partnership | Favor Direct Licensing |
|---|---|---|
| Time to market | Under 12 months | Over 18 months acceptable |
| Product APR | Above state caps (30%+) | Below 36% |
| Volume | Under $500M annually | Over $1B annually |
| Regulatory risk tolerance | Acceptable | Must minimize |
| Long-term ownership | May exit in 3-5 years | Building for 10+ years |
Cross-references
- The Originator’s Readiness Assessment — Where originators fit in the ABF ecosystem
- Originator Mistakes — Regulatory mistakes that kill deals
- Diligence Question Bank — Servicing and compliance diligence requirements regardless of origination model
- Term Sheet Anatomy — How bank partnership is represented in deal terms