The sponsor bank takes the hit

Banking-as-a-service was sold to small institutions as a way to acquire deposits and fee income without building a consumer business. What a number of them acquired instead was responsibility for compliance programs operating inside companies they did not control.

The structure is simple enough. A chartered bank holds the deposits and the regulatory relationship; a technology partner owns the customer, the interface, and usually the systems that monitor transactions. The contract allocates duties between them in detail.

Regulators do not read that contract as dispositive. Counsel summarizing the enforcement pattern note that the chartered institution bears the regulatory consequence of anti-money-laundering and fair lending failures, whatever the partnership agreement says about who performs the work.

The enforcement record has accumulated accordingly. Federal banking agencies have issued a series of consent orders against sponsor institutions, and lawyers tracking them describe a clear warning to community banks that expanded faster than their compliance functions.

The recurring findings are unglamorous and consistent: transaction monitoring that did not detect what it should have, suspicious activity reporting that lagged, and governance in which the bank could not demonstrate it understood what its partners' customers were doing.

The economics explain how institutions arrived there. A small bank adding several programs multiplies its transaction volume and its customer count by an order of magnitude while the compliance department grows by a person or two, because the revenue arrives immediately and the risk arrives later.

That asymmetry runs through the whole model. The partner books customers, the bank books the obligation, and the obligation only becomes visible in an examination that happens after the growth has already been recorded and celebrated.

The market has adjusted in ways that fall hardest on new entrants. Sponsor banks have raised diligence requirements, narrowed the programs they will accept, and in some cases exited relationships, which has made a compliant sponsor a genuinely scarce input for an early-stage fintech.

That scarcity has consequences beyond deal terms. A startup whose sponsor exits does not simply switch vendors; it re-papers its entire product, migrates customer funds, and explains to those customers why their account numbers changed.

Banks that run these programs well describe the discipline as owning the monitoring rather than reviewing it. The bank's own staff see the transactions, on the bank's systems, on a schedule the bank sets, and the partner supplies data rather than conclusions.

That costs more than the model was originally priced for, which is the honest lesson of the enforcement cycle. Sponsorship is a banking business with a technology distribution channel, and the institutions in trouble were the ones that treated it as a technology business with a charter attached.