Each week, Steve is breaking down what’s happening in fintech banking with the kind of clarity you get from someone who’s lived through board debates, pricing standoffs, and product launches that either scaled or crashed. This isn’t surface-level commentary. It’s the real story behind sponsor bank partnerships, embedded finance moves, and BaaS programs that most people only hear about after they’ve already succeeded or failed.
The OCC Just Issued the First Sponsor Banking Consent Order of 2026. Washington Spent the Same Week Telling Fintechs the Door Was Open Anyway.
For a decade, the answer to “how does a fintech move money” had one shape. Find a sponsor bank, sign the partnership agreement, accept the margin split, and live inside someone else’s compliance program. That model was never elegant, but it was the only door. This week was the week the federal government, the market, and the OCC examiner core all spoke at once, and they did not say the same thing. The OCC issued the first sponsor banking consent order of 2026 against Community Federal Savings Bank, one of the most prolific sponsor banks in the country, citing BSA/AML program failures tied to a payment processing line that grew faster than the controls around it. The order landed inside a week that otherwise pointed in exactly the opposite direction. Trump signed an executive order telling every federal financial regulator to clear the path for fintechs. The Fed proposed limited payment accounts the next morning. Mercury closed $200 million at a $5.2 billion valuation with a national bank charter already conditionally approved, and Chime’s CEO told a room of investors a charter is a calendar question, not a strategic one. NMI bought Dwolla and built a $700 billion white-label embedded payments stack. Steil held a hearing the same afternoon to make sure none of it slows down. Read together, the message is uncomfortable but clear. The door is opening wider and the examiner is still watching. The banks that get this week right are the ones that hear both messages at the same time.
Advertisement
The OCC Dropped the First Sponsor Banking Consent Order of 2026 the Same Week Washington Opened New Doors and the Market Priced the Charter Exit. The Week Sponsor Banks Got the Real Picture.
The OCC Just Made a Point.
The OCC Issued the First Sponsor Banking Consent Order of 2026 Against Community Federal Savings Bank, Citing BSA/AML Program Failures Inside a Payment Processing Line That Grew Faster Than Its Controls, and Sponsor Banks Reading the Findings Should Recognize Every Single One
The OCC dropped a public consent order against Community Federal Savings Bank on April 24, 2026, the first sponsor banking enforcement action of the year, and the findings read like a checklist of every concern examiners have voiced about the BaaS model for the last eighteen months. CFSB is one of the most prolific sponsor banks in the country, supervised by the OCC’s Novel Bank Supervision unit, and the order names exactly what went wrong. Since 2020 the bank significantly grew its payment processing line relative to its size, including substantial cross-border ACH and wire activity with foreign financial institutions, and failed to develop controls and risk management commensurate with that growth. The automated SAR alert system auto-closed a very high percentage of alerts due to flawed logic, data, and methodology. CDD was ineffective and the bank did not understand its payment processor customers or the purpose of their transactions. Independent testing failed to scope or identify the weaknesses. The OCC pointedly noted the concerns were largely unrelated to digital assets, which means examiners are flagging the core sponsor banking activity itself. Every sponsor bank should pull this order today and read it next to its own program documentation, because the findings are not specific to CFSB. They are specific to the model.
The order is signed by Aaron Liechenstein, Assistant Deputy Comptroller for Novel Bank Supervision, the OCC group that supervises the most fintech-heavy national banks and federal savings associations. When that office signs a public order naming payment processing line growth as the root cause, every other novel-bank-supervised institution in the country just received an unwritten message.
The OCC’s explicit carve-out that the concerns are “largely unrelated to customers involved in digital assets activities” is the loudest sentence in the order. It removes the easy excuse that this is a crypto enforcement story and squarely identifies traditional payment processing volume, BSA program design, and CDD as the failure points.
CFSB has ninety days to submit an Action Plan, must engage a third-party Program Consultant for an end-to-end BSA Program Assessment, and must engage a separate SAR Look-Back Consultant to determine whether previously unreported suspicious activity needs to be filed. Sponsor banks running similar payment processing programs should treat the look-back requirement as the most predictive part of the order, because the OCC reserves the right to expand its scope based on findings.
The auto-closing SAR alert finding is the one that should make every sponsor bank uncomfortable. Tuning alerts to manage volume is standard practice across BaaS programs, and the OCC just said publicly that doing it badly enough to auto-close “a very high percentage” of alerts is a Federal regulation violation. The line between efficient tuning and program failure is now visible.
The order arrived in the same week Washington argued sponsor banking should be easier. That contradiction is the actual story for sponsor bank boards and compliance officers, because the political signal and the supervisory signal are now moving in opposite directions and the bank operating in both rivers needs a defensible position on each one.
Meanwhile, Washington Was Telling a Different Story.
Trump Signed an Executive Order Directing Every Federal Financial Regulator to Make Room for Fintechs, the Fed Followed the Next Morning With a Proposed Limited Payment Account Category, and Sponsor Banks Have Ninety Days to Figure Out Which of Their Margin Levers Survive the Review
The federal government did not stagger this. The executive order signed May 19, 2026 directs the CFPB, SEC, NCUA, CFTC, FDIC, and OCC to review every regulation, guidance document, and supervisory practice that impedes fintech partnerships or charter applications, with results in ninety days and action steps in one hundred eighty. The order separately asks the Federal Reserve to evaluate direct access to Reserve Bank payment accounts for non-bank financial companies, and the Fed did not wait. It proposed a limited payment account category on May 20, with a sixty-day public comment period, that would let qualifying fintechs move money across Fedwire and FedNow without a full master account. Sponsor banks should pull their partnership economics this week and identify which line items exist because of a regulation that just got named in a federal review, because the answer determines whether the program survives the next twelve months at current pricing.
The executive order specifically calls out “overly burdensome and fragmented regulations and supervisory practices that form barriers to entry and primarily benefit incumbent financial services firms.” Sponsor banks should read that sentence twice and decide which side of it they sit on.
The Fed proposal explicitly excludes intraday credit, the discount window, and interest on reserves, which means the accounts are not master accounts and not a full replacement. But for any fintech using a sponsor bank solely for Fedwire or FedNow access, the math just changed.
Fed Governor Michael Barr dissented over illicit finance safeguards, which signals real internal disagreement and a path for banks to weigh in during the comment period if they want the guardrails tightened.
The Fed asked regional Reserve Banks to pause decisions on pending non-bank account requests during the comment period, which means every fintech currently in line for direct access just got told to wait. Sponsor banks have a short window to make their case before those decisions resume.
The combined ninety-day regulator clock and sixty-day comment window puts every sponsor bank inside the same planning quarter as the rule changes. Programs that do not have a defensible position by August will be reacting to whatever lands.
Washington Moved the Rules. The Market Moved the Money.
Mercury Raised $200 Million at a $5.2 Billion Valuation With a National Bank Charter Already in Hand, Chime’s CEO Told a JPMorgan Investor Conference a Charter Is “A When, Not If,” and the Market Just Priced the Sponsor Bank Exit at a Premium
The two largest sponsor-bank-dependent neobanks in the country both moved on the charter question inside the same five days. Mercury closed a $200 million Series D on May 20 at a $5.2 billion valuation, a forty-nine percent step-up from its March 2025 Series C, with TCV leading and Andreessen Horowitz, Coatue, Sequoia, and the rest of its existing cap table piling in. The OCC conditionally approved Mercury Bank, N.A. in April, five months after the application went in. Chime CEO Chris Britt told the JPMorgan Chase investor conference on May 18 that pursuing a charter is “to some degree, an inevitability” and that the only open question is timing. Sponsor banks should treat the same week that produced a forty-nine percent valuation premium for a chartered fintech and a public “when, not if” from the largest neobank as the market pricing the partnership exit, because that is what it is.
Mercury filed its OCC application in December 2025 and got conditional approval in April 2026. A five-month timeline is now the benchmark every other fintech will cite when their board asks how long this takes.
Mercury sells one in three U.S. startups and a growing share of AI companies, with two-and-a-half-times year-over-year application growth in Q1. The customer base most sponsor banks would love to serve is going to a competitor that no longer needs a sponsor.
Chime spent its entire existence on sponsor banking partnerships. Its CEO publicly framing the charter as a calendar question is the loudest signal the model is convertible, not permanent, and other sponsor partners in the room heard it.
Mercury also shipped a Model Context Protocol implementation and a CLI for AI agents to take banking actions directly, which means the next wave of AI-native fintechs is being built on a bank that runs its own charter. Sponsor banks selling on “we let your AI agent talk to a bank” just lost the comparable demo.
Mercury’s four consecutive years of GAAP and EBITDA profitability undercuts the lazy argument that fintechs only get charters when they are losing money and want bank protection. The profitable ones get charters too, and the market rewards them for it.
The Embedded Layer Built Its Own Door, and It Did Not Need a Sponsor Bank to Do It.
NMI Acquired Dwolla in a Deal That Creates a White-Label Embedded Payments Stack Processing $700 Billion in Annual Transaction Volume, and Sponsor Banks That Bundle Rails as Their Value Proposition Should Pull Their Pricing Models This Week
The vendor stack just consolidated against the sponsor bank model. NMI acquired Dwolla on May 19, combining card acceptance, channel distribution, onboarding, and merchant lifecycle management with Dwolla’s account-to-account infrastructure, FedNow connectivity, real-time payments, and open banking, all inside a single white-label embedded payments platform. The combined business processes close to seven hundred billion dollars in annual transaction volume, and more than four hundred Dwolla customers just landed inside NMI’s ecosystem. NMI’s CEO specifically called out agentic payments, stablecoin settlement, and remittances as the next set of use cases. Sponsor banks whose value to fintech partners depends on bundling ACH, card, FedNow, and onboarding should run the math this week on what happens when one API vendor sells all of that with no partnership agreement attached.
This is NMI’s sixth acquisition in recent years, and the stated strategy is explicitly to cover the full embedded payments lifecycle from sign-up to payout. The endgame is a sponsor-bank-shaped vendor, not a sponsor bank.
Approximately sixty Dwolla employees move to NMI, and Dwolla CEO Dave Glaser becomes NMI’s COO and joins the executive leadership team. That puts an A2A and FedNow operator inside the day-to-day of the combined embedded platform.
NMI’s roadmap call-outs around agentic payments and stablecoin settlement signal where the next wave of embedded volume is being built, and the answer is not on top of traditional sponsor bank rails.
Sponsor banks selling “we are your one-stop partner for all payment rails” need a new pitch by Monday. The differentiation argument now has to live in compliance, program management, and capital, not in the rails themselves.
Pay-by-bank and A2A growth has been the fastest segment in payments for two years. NMI just bought the most recognized API-first A2A provider in the country, which means the embedded payments tide is rising under a roof that does not include a sponsor bank.
And Congress Made Sure Everyone Knew the Door Stays Open. (On the same afternoon the Fed proposed the accounts.)
House Financial Services Subcommittee Chairman Bryan Steil Held a Hearing Framing Bank-Fintech Partnerships as a “Win-Win” the Same Afternoon the Fed Proposed Limited Payment Accounts, and Sponsor Banks Should Read Both Together Before Assuming Congress Is in Their Corner
The legislative branch picked the same afternoon as the Fed’s announcement to lock in its position. House Financial Services Subcommittee on Digital Assets, Financial Technology, and Artificial Intelligence Chairman Bryan Steil opened a hearing on May 20, 2026 titled around bank-fintech partnerships as a win-win for innovation, consumer access, and U.S. competitiveness. Steil specifically singled out community and regional banks as the partnership leaders, and warned federal regulators and examiners not to “stifle innovation simply because a product or technology is new or unfamiliar.” Sponsor banks reading the hearing as cover for the existing model should read it again next to the Fed proposal that landed the same day, because the political coordination is the message and the message is not “keep doing what you are doing.”
The hearing was held by the subcommittee that will draft any legislation following the ninety and one hundred eighty-day reviews ordered by the executive order. The chairman’s public framing now sets the boundaries for whatever comes out of those reviews.
Steil’s “community and regional banks leading the way” framing is a deliberate narrow target. Sponsor banks that are neither community nor regional, or that lack a publicly defensible compliance program, do not get the same political cover from this hearing.
The shot at examiners not stifling innovation is the clearest congressional signal yet that the eighteen months of elevated examiner scrutiny on BaaS is going to face political pushback. The pushback does not eliminate the scrutiny, it just adds a second set of expectations that sometimes contradict the first.
Coordination between the White House, the Fed, and the House subcommittee on the same forty-eight hours is not accidental. Sponsor banks planning around “this will get watered down” should plan around “this is the warm-up” instead.
The hearing’s framing of partnerships as innovation infrastructure means sponsor banks that cannot articulate their innovation value are also losing the political argument, not just the economic one. The bar moved on both sides at once.
The Door Is Open and the Examiner Is Still Watching
This was the week the federal government, the market, and the OCC examiner core all spoke at the same time and did not agree. The executive order opened a regulatory door. The Fed proposal opened a payment-rail door. Mercury and Chime walked toward the charter door. NMI and Dwolla built a vendor door that bypasses the sponsor bank entirely. Congress held a hearing to make sure all the doors stay open. And the OCC dropped the first sponsor banking consent order of 2026 against one of the most prolific BaaS banks in the country, naming payment processing line growth, weak SAR alert tuning, ineffective CDD, and weak independent testing as the failures. The political message is that sponsor banking should be easier. The supervisory message is that the way it is being done today is not safe enough. Sponsor banks that hear only one of those messages are setting up the next consent order. Sponsor banks that hear both have ninety days to pick a defensible position. Read the CFSB order this week. Read it next to your own program documentation. Decide which of the findings would be true of your bank if the OCC walked in tomorrow, and fix those first. Then deal with the rest of the door problem. The cost of doing nothing went up on both sides at once.
Takeaway:
Six federal moves in forty-eight hours just put sponsor banks on a ninety-day clock to defend a model the White House, the Fed, the largest neobanks, and the embedded payments layer all stopped treating as the default.
From The Source
For those of you wanting a more in-depth look at the articles (and the links to them…)
The Office of the Comptroller of the Currency publicly released its May 2026 enforcement actions on May 21, 2026, with the consent order against Community Federal Savings Bank of Woodhaven, New York as the only bank enforcement action in the month's docket, citing deficiencies in CFSB's Bank Secrecy Act and Anti-Money Laundering compliance program that resulted in violations of 12 CFR 21.21, 12 CFR 163.180(d), and 31 CFR 1010.520(b)(3), making CFSB the headline of the OCC's May enforcement release and the only sponsor banking consent order in the agency's monthly announcement.
The Office of the Comptroller of the Currency issued a public cease and desist consent order against Community Federal Savings Bank of Woodhaven, New York on April 24, 2026 for Bank Secrecy Act and Anti-Money Laundering compliance program deficiencies that resulted in violations of 12 C.F.R. 21.21, 12 C.F.R. 163.180(d), and 31 C.F.R. 1010.520(b)(3), with the OCC finding that CFSB significantly grew its payment processing line including cross-border activity with foreign financial institutions since 2020 without developing commensurate controls, that its automated SAR alert system auto-closed a very high percentage of alerts due to flawed logic and methodology, that its customer due diligence program was ineffective for payment processor customers, and that its independent BSA/AML testing failed to identify the program weaknesses, requiring CFSB to engage a third-party Program Consultant for an end-to-end BSA Program Assessment and a separate SAR Look-Back Consultant within ninety days, with the OCC explicitly noting the concerns were largely unrelated to digital assets activities, making this the first public OCC sponsor banking consent order of 2026.
President Trump signed an executive order on May 19, 2026 directing every federal financial regulator to review existing rules, guidance, and supervisory practices that impede fintech partnerships, charters, and access to federal licenses, with regulator reviews due in ninety days and action steps in one hundred eighty days, while separately requesting the Federal Reserve to evaluate direct access to Reserve Bank payment accounts for non-bank financial companies within one hundred twenty days and to decide complete applications within ninety days once procedures are in place.
The Federal Reserve proposed a new limited payment account category on May 20, 2026 that would allow qualifying fintech and non-bank firms to move money directly across Fedwire and FedNow without access to intraday credit, the discount window, or interest on reserves, opening a sixty-day public comment period one day after President Trump’s executive order on fintech innovation, with Fed Governor Michael Barr dissenting over illicit finance safeguards and the Fed asking regional Reserve Banks to pause pending non-bank account requests during the comment period.
Mercury announced a $200 million Series D on May 20, 2026 at a $5.2 billion valuation led by TCV with participation from Andreessen Horowitz, Coatue, CRV, Sapphire Ventures, Sequoia Capital, and Spark Capital, marking a forty-nine percent valuation increase from its March 2025 Series C and coming one month after the OCC granted conditional approval for Mercury Bank, N.A., the fintech’s national bank charter, with the company reporting $650 million in annualized revenue, four consecutive years of GAAP and EBITDA profitability, and more than 300,000 customers.
Chime CEO Chris Britt told the JPMorgan Chase investor conference on May 18, 2026 that pursuing a national bank charter is “a when, not if” for the company, citing regulator openness to new charter applications and confirming Chime evaluates the question annually, signaling that the largest U.S. neobank is preparing to move beyond its longstanding sponsor banking partnership model.
NMI acquired Dwolla on May 19, 2026 in a deal combining card acceptance, channel distribution, onboarding, and merchant lifecycle management with Dwolla’s account-to-account infrastructure, FedNow connectivity, real-time payments, and open banking inside a single white-label embedded payments platform, creating a combined business that processes close to $700 billion in annual transaction volume, brings more than 400 Dwolla customers into NMI’s ecosystem, moves approximately 60 Dwolla employees to NMI, and installs Dwolla CEO Dave Glaser as NMI’s Chief Operating Officer.
House Financial Services Subcommittee on Digital Assets, Financial Technology, and Artificial Intelligence Chairman Bryan Steil held a hearing on May 20, 2026 framing bank-fintech partnerships as essential to U.S. financial innovation leadership, naming community and regional banks as the partnership leaders, and warning federal regulators and examiners not to stifle innovation simply because a product or technology is new or unfamiliar, with the hearing landing the same afternoon the Federal Reserve proposed limited payment accounts.
Subscribe now to get the first episodes as soon as they drop and stay ahead of the next wave of bank-fintech moves.
Listen on your favorite podcast platform: listen.frominsidethevault.com
Watch full conversations and clips: watch.frominsidethevault.com
Get email recaps and future drops: subscribe.frominsidethevault.com
