This article is a work in progress. If you have any questions, thoughts, or corrections, contact us.

Playbooks

True lender / bank partnership

True lender / bank partnership

Bank partnership models let fintech originators access federal preemption without obtaining a bank charter. The bank originates loans on paper, sells them to the fintech almost immediately, and collects a fee. The fintech gets national reach at rates above state caps. The bank gets volume-based revenue without balance sheet risk.

This arrangement works until regulators decide the fintech is the “true lender” and federal preemption evaporates. When that happens, you’re retroactively operating an unlicensed lending business in multiple states with unenforceable loans.

If you’re an originator evaluating this model, or a capital provider financing one, you need to understand both the mechanics and the regulatory fault lines.


What is a bank partnership model?

The basic mechanics

The bank originates the loan using its charter. The loan appears on the bank’s books for hours or days. Then the bank sells the loan to the fintech partner, typically at par. The fintech services the loan and bears credit risk. The bank collects an origination fee and moves on.

The consumer sees the bank’s name on disclosures. The bank files the regulatory reports. But economically, the fintech owns the entire program.

Why originators use this model

Federal preemption. The National Bank Act and similar state-chartered bank laws preempt state usury caps. A Utah industrial bank can originate a 36% APR consumer loan to a California borrower, even though California’s rate cap is lower. Without the bank partner, that loan would be usurious.

Single regulatory regime. Instead of obtaining licenses in 50 states (plus D.C. and territories), the originator operates under one bank’s compliance umbrella. Licensing takes 12-24 months and costs $500K-$2M. A bank partnership can launch in 3-6 months.

Speed to market. For a startup with limited capital, waiting two years for licenses isn’t viable. The bank partnership is often the only path to rapid national scale.

The economic split

The fintech pays for access to the charter. Typical structures:

ComponentTypical Range
Bank origination fee25-100 bps per loan
Bank credit retention1-5% of each loan
Compliance oversight fee$10K-$50K monthly
Volume minimum$5M-$25M monthly
Volume maximumVaries by bank capital

A consumer lender originating $50M monthly at 75 bps pays the bank $375K per month, or $4.5M annually. That’s the cost of regulatory access. If unit economics don’t support this fee, the model breaks down.

Note: When modeling bank partnership economics, include not just the direct fee but also the compliance burden. The bank will require specific servicing standards, audit rights, and reporting that add operational cost.


The leading bank partners

Fewer than a dozen banks run significant fintech lending programs. Most commercial banks won’t touch this business because of regulatory and reputational risk.

Cross river bank

Cross River is the largest fintech partner bank by origination volume. Major programs include Affirm (buy-now-pay-later), Upstart (AI-underwritten consumer), and Best Egg (prime unsecured). The bank has built sophisticated compliance infrastructure specifically for this model.

In 2023, the FDIC issued a consent order citing fair lending violations and compliance deficiencies. Cross River remains operational but under enhanced supervision. If you’re financing an originator that uses Cross River, request the current regulatory status, not the 2021 press releases.

Webbank

WebBank operates under a Utah industrial bank charter. Partners have included Prosper, LendingClub (before LendingClub bought Radius Bank), and Avant. The bank is smaller and more selective than Cross River. Expect longer onboarding timelines and stricter credit box requirements.

Other active partners

BankFocus AreasNotes
Celtic BankSBA lending, equipment financeConservative credit boxes
FinWise BankHigher-risk consumer segmentsHigher fees, less scale
Coastal Community BankSMB, paymentsNewer to fintech partnerships
Choice Financial GroupVarious programsRegional focus

What banks look for

Before approving a partnership, banks evaluate:

  • Compliance infrastructure. Can you produce audit trails, handle complaints, and manage state-specific requirements the bank can’t preempt (like marketing rules)?
  • Unit economics. Can your product support the bank fee and still be profitable? Banks won’t partner with programs destined to fail.
  • Volume commitments. Minimums ensure the bank’s infrastructure investment pays off. Maximums protect bank capital ratios.
  • Exit provisions. What happens if the relationship sours? Banks want clean termination rights.

The true lender doctrine: regulatory risk Explained

The core question

When a bank originates a loan and immediately sells it to a fintech, who is the “lender” for regulatory purposes? If it’s the bank, federal preemption applies. If it’s the fintech, state laws apply retroactively, and every high-rate loan may be unenforceable.

This isn’t an academic question. State attorneys general and regulators actively litigate this issue. If they win, the consequences are severe:

  • Loans above state rate caps become unenforceable
  • The originator faces state-by-state licensing violations
  • Capital providers holding the collateral face impaired assets

Factors courts and regulators consider

No single factor controls, but the analysis typically weighs:

FactorSupports Bank as True LenderSupports Fintech as True Lender
Economic interestBank retains meaningful credit riskFintech bears all losses
Credit decisionBank underwrites with its own criteriaFintech dictates credit box
FundingBank funds from depositsFintech provides capital
MarketingBank’s brand prominentFintech’s brand dominant
Loan holding periodBank holds 3+ daysSame-day sale
ServicingBank services or controls servicingFintech services exclusively

Most bank partnerships look problematic under this analysis. The fintech bears economic risk, dictates terms, and services loans. The bank is a conduit.

Regulatory history

Madden v. Midland (2015). The Second Circuit ruled that a non-bank debt buyer couldn’t claim federal preemption for interest rates above state caps. This wasn’t about bank partnerships directly, but it signaled that preemption doesn’t automatically transfer to assignees.

OCC True Lender Rule (2020). The OCC tried to clarify that the bank on the note is the true lender if it’s listed as lender or funds the loan. Congress repealed this rule in 2021 using the Congressional Review Act.

State enforcement actions. California’s DFPI has targeted specific bank partnership programs. Colorado challenged several high-rate consumer lenders. These actions often settle confidentially, but they signal active enforcement.

CFPB scrutiny. The CFPB has called rent-a-bank arrangements “evasion” of state consumer protections. Expect continued pressure regardless of administration.

Current state of play

There is no definitive federal resolution. The legal landscape looks like this:

  • In the Second Circuit (New York), Madden creates heightened risk
  • In other circuits, the question remains open
  • State AGs have independent enforcement authority
  • Settlement pressure often forces compliance changes before court resolution

For practical purposes, assume true lender risk is material and ongoing. Structure accordingly.

Important: The true lender doctrine remains unsettled. An originator using a bank partnership model today may face state enforcement action tomorrow. Capital providers should treat this as a material risk factor and require disclosure of all regulatory correspondence in facility representations.


Structuring considerations and best practices

Mitigating true lender risk

No structure eliminates true lender risk, but you can reduce exposure:

Meaningful bank involvement in underwriting. The bank should have genuine authority to decline loans, not rubber-stamp fintech decisions. Document this in policy and practice.

Hold period. Same-day loan sales look like a pass-through. A 3-5 day hold period on the bank’s books creates a stronger argument for bank involvement. Some programs hold 10+ days.

Credit risk retention. If the bank sells 100% of loans, it has no economic interest. Retaining 2-5% of credit risk (first-loss or pro-rata) demonstrates skin in the game.

Marketing controls. Consumer-facing materials should reference the bank relationship. The bank’s name should appear prominently, not buried in disclosures.

Genuine compliance oversight. The bank must actually review complaints, audit servicing, and enforce credit box compliance. Documentation of this oversight matters in litigation.

Program agreement key terms

The program agreement governs the relationship. Critical provisions:

TermWhat to Negotiate
Volume commitmentsRealistic minimums you can hit; headroom on maximums
Credit boxFlexibility to adjust underwriting as you learn
State exclusionsClarity on which states the bank won’t originate into
Compliance responsibilitiesClear allocation of obligations
Audit rightsBank can audit, but with reasonable notice
IndemnificationCoverage for regulatory actions (both directions)
TerminationReasonable notice periods; clear wind-down mechanics
ExclusivityAvoid if possible; maintain optionality

Capital provider considerations

If you’re financing an originator that uses a bank partnership, the structure creates tail risks:

  • Partnership termination. If the bank relationship ends, the originator may stop originating. Your flow is cut off. Require backup plan disclosure and termination notice provisions.
  • Consent requirements. Some program agreements require bank consent for securitization or facility transfers. Confirm the bank has consented or will consent.
  • Collateral enforceability. If loans are later deemed usurious, they may be unenforceable. Your collateral is impaired. Consider state-by-state analysis of rate exposure.
  • Reps and warranties. Require representations about regulatory standing, compliance with program agreement, and disclosure of any state AG inquiries.

Due diligence questions for capital providers

For the originator

Before financing a bank partnership originator, ask:

  1. How long has the bank partnership been in place?

    • New partnerships (under 2 years) haven’t been stress-tested
  2. What is the termination notice period?

    • 90 days is standard; shorter periods create sudden disruption risk
  3. Has the originator received any regulatory inquiries?

    • Request copies of all state AG correspondence, CFPB inquiries, or bank examination findings
  4. What states are excluded from the program?

    • Some banks won’t originate in certain states; this limits your market
  5. What is the backup plan if the partnership ends?

    • Direct licensing timeline? Alternative bank partner? Orderly wind-down?
  6. What is the APR distribution of the portfolio?

    • If 60% of loans exceed 36% APR, true lender risk is concentrated there

For the bank partner

  1. What is the bank’s current regulatory standing?

    • Request recent exam results and any MRAs (matters requiring attention)
  2. Has the bank received consent orders related to lending programs?

    • Cross River’s 2023 consent order is public; other banks may have undisclosed issues
  3. What is the bank’s concentration in this originator?

    • If your originator is 50% of the bank’s program, termination risk is lower but regulatory scrutiny is higher
  4. Does the bank have adequate capital for projected volume?

    • Check the bank’s call reports; compare capital to commitments

Documentation review

Request and review:

  • Program agreement (full text, not summary or redacted version)
  • Bank’s most recent call reports (quarterly, available at FFIEC)
  • Regulatory correspondence (any letters from OCC, FDIC, state regulators)
  • Marketing materials (how is the bank relationship disclosed to consumers?)
  • Credit policy (does the bank have genuine override authority?)

Note: When evaluating a bank partnership originator, ask for the program agreement and confirm the bank’s current regulatory standing. A consent order against the partner bank can disrupt the entire origination program.


Alternatives to bank partnership

Bank partnership isn’t the only path. Consider alternatives based on your timeline and product:

Direct licensing (50-state)

Obtain state licenses in all jurisdictions where you’ll originate. This takes 12-24 months and costs $500K-$2M (legal fees, application costs, compliance build-out). Ongoing costs include license renewals, exam fees, and state-specific compliance.

Advantages:

  • No true lender risk
  • No bank fee (25-100 bps savings)
  • Full control over product and pricing
  • No dependency on third-party partner

Disadvantages:

  • Long time to market
  • High upfront cost
  • Ongoing state-by-state compliance burden
  • Rate caps apply (can’t exceed state maximums)

This path makes sense for scale operators with a 5+ year time horizon and unit economics that work within state rate caps.

Single-state or limited-state operations

If your product works at lower APRs, consider originating only in states with favorable rate caps or no caps. California, Texas, and New York together represent significant market share. Add a dozen more states and you cover 70% of the U.S. population.

Advantages:

  • Faster than 50-state licensing
  • No bank partner dependency
  • Simpler compliance

Disadvantages:

  • Limited market
  • Geographic concentration risk
  • Some states are essential (California) but have complex requirements

Hybrid approaches

Some originators use direct licensing in major states and a bank partnership for the rest. This reduces dependency on any single bank while maintaining national reach.

Operationally, this is complex. You’re running two compliance regimes, two pricing engines (potentially), and two sets of reps and warranties for capital providers.

Decision framework

FactorFavor Bank PartnershipFavor Direct Licensing
Time to marketUnder 12 monthsOver 18 months acceptable
Product APRAbove state caps (30%+)Below 36%
VolumeUnder $500M annuallyOver $1B annually
Regulatory risk toleranceAcceptableMust minimize
Long-term ownershipMay exit in 3-5 yearsBuilding for 10+ years

Cross-references