Feature Regulatory Compliance
Why Fintechs Are Racing for Bank Charters in 2026 — And What It Means If You're Still Running on a Sponsor Bank
OCC received more de novo charter applications in 2025 than the previous four years combined. Mercury got conditional approval in April 2026. Here's what's driving the charter surge, what types of charters are in play, and how to assess your BaaS exposure if you're not on the charter path.
Table of Contents
If you’ve been watching the OCC’s licensing pipeline this year, the numbers are striking. In 2025, the agency received more de novo bank charter applications than in the previous four years combined. That pace has continued into 2026.
Mercury — which manages $20 billion in customer deposits and serves over 300,000 startups and founders — received conditional OCC approval for a national bank charter in April. Multiple digital asset firms are queued behind them. And the list of technology and payments companies exploring ILC charters is growing.
This isn’t a coincidence. Something structural shifted in the fintech model, and the charter wave is the industry’s response to it.
TL;DR
- OCC received more de novo charter applications in 2025 than the previous four years combined; the trend is accelerating in 2026
- Mercury got conditional OCC approval on April 27, 2026 — enabling direct Zelle, expanded lending, and controlled payment infrastructure on $20B in deposits
- Two structural drivers: regulatory crackdown on BaaS sponsor banks (12+ enforcement actions, 2023–2024) and the Synapse bankruptcy (April 2024, $160M frozen, 200k+ accounts affected)
- Many sponsor banks have exited the BaaS market, leaving fintechs scrambling for replacements
- If you’re still on a sponsor bank, here’s how to assess your exposure and what you should be doing about it now
What’s Behind the Charter Surge
The fintech bank charter wave isn’t primarily about product ambition. It’s about risk management — specifically, the institutional recognition that the BaaS sponsor bank model has become structurally fragile.
Two things broke the spell on BaaS in 2023–2024.
First, the regulatory crackdown. Starting in 2023, regulators escalated enforcement against sponsor banks. The OCC, FDIC, and Federal Reserve issued over a dozen enforcement actions against BaaS-focused institutions spanning financial crime compliance, third-party risk management, consumer protection, and board governance. The message was direct: banks that partner with fintechs at scale will be held to the same standards as banks doing that business themselves. Many sponsor banks concluded the compliance burden wasn’t worth the revenue and began exiting BaaS partnerships — sometimes with short notice, leaving fintech partners scrambling for replacements.
Second, Synapse. The April 22, 2024 bankruptcy of Synapse Financial Technologies — the middleware layer connecting fintechs like Yotta, Juno, and Copper to their sponsor banks — was a structural failure that the industry hadn’t fully priced in. More than 200,000 customer accounts were frozen. Approximately $160 million in deposits were locked. The bankruptcy trustee found the ledger couldn’t reconcile which customer was owed which dollars, with a reported shortfall of $65–$95 million. The FDIC scrambled to address the custodial deposit question. The legal and practical consequences are still playing out in 2026.
As we covered in last month’s analysis of California’s $1M Yotta fine, the downstream consequences of Synapse’s failure are still generating enforcement actions for the fintechs that depended on it. Synapse exposed a dependency that BaaS-dependent fintechs had systematically underweighted: the middleware and sponsor bank structure isn’t just a technical arrangement, it’s a financial intermediary chain. When any link in that chain fails, the fintechs’ customers are holding the exposure.
The combination — regulatory pressure forcing sponsor banks out of BaaS, plus a catastrophic middleware failure — created a clear-eyed calculation for larger fintechs: the BaaS model at scale is a structural risk. The charter is the way out.
The Regulatory Environment That Made Charters Viable Again
Pursuing a bank charter is hard, expensive, and time-consuming. Why now?
The short answer: regulators changed the math. Banking Dive’s reporting on the charter application explosion points to an explicit shift in posture from OCC Comptroller Jonathan Gould and FDIC Chair Travis Hill, both of whom have been vocal about the importance of de novo charters and the value of bringing fintechs under direct federal supervision.
Travis Hill’s view is explicit: ILC and de novo charters bring fintech companies into a direct supervisory relationship rather than the one-step-removed BaaS structure where the sponsor bank is the regulated entity and the fintech is a third party. Direct supervision is better for regulators — it creates clearer accountability — and the current FDIC chair has said so publicly.
In February 2026, the OCC issued a final rule amending 12 CFR Part 5 to clarify its authority to charter national banks limited to trust company operations, effective April 1. This opened a cleaner path for digital asset custodians, stablecoin issuers, and fintechs with trust or custody-focused business models that fit the limited-purpose charter mold without requiring the full national bank overhead.
The combination of an actively pro-charter regulatory posture and two years of demonstrated BaaS fragility created conditions for the current surge. As QED Investors analyzed, companies that need to move core activities — payments, custody, lending, or stablecoin issuance — inside a regulated banking perimeter, rather than routing through a third-party bank, are making that move now while the regulatory environment supports it.
Mercury: What Conditional Approval Actually Means
Mercury’s situation is worth understanding in detail because it represents the most prominent active BaaS-to-charter transition.
Mercury applied for a national bank charter from the OCC in December 2025 and received conditional approval on April 27, 2026. As PYMNTS reported, Mercury is establishing Mercury Bank, National Association, with its existing holding company (MTI) serving as the bank’s sponsoring organization and separately applying to the Federal Reserve to become a bank holding company.
Conditional approval means Mercury has passed the OCC’s initial review — the business plan, management team, capital plan, and regulatory framework are acceptable to the OCC at the preliminary stage. Multiple gates remain: satisfying outstanding OCC conditions, receiving FDIC deposit insurance approval, and receiving Federal Reserve approval of MTI as a bank holding company. None of these is a rubber stamp, and the process takes additional months.
The business case is straightforward. Mercury manages $20 billion in customer deposits. At that scale, the economics of a charter — the compliance investment, capital requirements, internal banking staff — are very different from what they’d be at $200 million. The charter enables direct Zelle integration, expanded lending capabilities, and direct control over payment infrastructure that the BaaS model routes through intermediaries and sponsor bank approval processes.
The charter also creates a direct regulatory relationship. Mercury will be examined directly by the OCC rather than relying on its sponsor banks to pass examination scrutiny, and then hoping those examinations don’t surface issues that cause sponsor banks to change their risk appetite for Mercury’s product mix. At Mercury’s scale, that direct regulatory relationship is a more stable long-term operating posture.
The Three Charter Types in Play
Not all charter applications look alike. Three primary structures are active in the 2026 market:
Full national bank charter (OCC): The broadest banking powers — deposits, lending, payments, trust services, Zelle participation. Also the highest bar: significant capital requirements (well above the $10M minimum), management depth with qualified banking experience, a viable multi-year business plan, and Bank Holding Company Act regulation at the parent level (requiring Fed approval). Mercury, SoFi, and Varo went this route.
Limited purpose national bank charter: Narrower powers, focused on specific activities — trust, custody, or payments. The OCC’s February 2026 rule clarified the legal basis for trust-only national banks operating under 12 CFR Part 5. Relevant for stablecoin issuers pursuing a payments or custody charter, digital asset custodians, and fintechs with narrower banking activities that don’t need full deposit-taking and lending powers.
Industrial Loan Company (ILC) charter: FDIC-insured deposits without the parent being subject to Bank Holding Company Act regulation. Historically controversial — Congress blocked large ILC applications in the 2000s — but FDIC Chair Travis Hill has signaled openness to ILC applications, particularly from nonbank financial companies that can benefit from FDIC insurance without needing full BHC oversight of a diversified corporate parent. Several large technology and payments companies are revisiting this option in 2026.
The right charter type depends on what the business actually needs to do. A fintech that needs national deposit-taking and lending at scale needs the full OCC charter. A company that needs custody or trust services nationally may have a narrower path at lower cost. A technology company that primarily wants FDIC insurance for a payments or lending subsidiary may find the ILC the most attractive structure.
What This Means If You’re Still on a Sponsor Bank
Most fintechs reading this won’t pursue a bank charter. The capital requirements, management depth requirements, and 18–36 month timeline make it impractical for early- and mid-stage companies. The economics don’t typically change until you’re managing several hundred million to billions in deposits, with the internal risk and compliance infrastructure to match what the OCC expects to see.
But the charter wave matters to BaaS-dependent fintechs anyway — because it reflects underlying structural instability that affects the whole ecosystem, not just the companies that can afford to exit it.
Here’s how to assess your exposure:
1. Understand your sponsor bank’s own situation.
The sponsor banks that remain active in BaaS after the 2023–2024 regulatory crackdown are a smaller, more selective pool. They have fewer competitors bidding for fintech partnerships, which gives them more leverage in contract negotiations and more latitude to change their risk appetite without losing business. Our guide on bank partner alignment and sponsor bank risk appetite covers the signals that a sponsor bank relationship is under stress: increased RFI volume, changes to approved use cases, exits from specific fintech categories, and open regulatory actions against the bank itself.
Before the next crisis, know your sponsor bank’s regulatory standing, the concentration of their BaaS book as a percentage of total assets, and whether they’ve signaled intent to consolidate their fintech partner roster.
2. Review your wind-down provisions — not when you need them.
Many early BaaS agreements were written before Synapse, when nobody stress-tested partner failure scenarios. The key questions: What’s your sponsor bank’s required notice period for terminating the relationship? What happens to customer funds during a 60 or 90-day wind-down? Do you have rights to customer data transfer? Can you migrate customer accounts to a replacement sponsor bank without customer consent being required?
These provisions determine whether a sponsor bank exit is survivable or catastrophic for your product. Read your current agreement now. If it has a 30-day termination clause and no data portability provision, that’s a material risk in your operating model.
3. Assess your concentration risk.
Concentration risk in BaaS relationships operates the same way it does for cloud providers — and the OCC’s guidance on critical third-party dependencies is directly applicable. Our coverage of cloud provider concentration risk and OCC examination expectations covers the examination framework, which applies to any single-point-of-failure third-party dependency. If your entire deposit product depends on one sponsor bank, you have the same concentration exposure Yotta and Juno had to Synapse. The stress test question is simple: if this relationship ends in 90 days, can your product survive?
4. Map your alternatives before you need them.
The BaaS market has consolidated since 2023. The pool of sponsor banks actively seeking new fintech partnerships is smaller and more expensive to access than it was five years ago. Knowing which alternative sponsor banks are active in your product category, what their risk appetite is, and how long an onboarding process takes — before you’re under pressure — changes your negotiating posture and your contingency planning timeline. A warm relationship with a backup sponsor bank is qualitatively different from starting a search from scratch with a 90-day clock.
5. Evaluate charter feasibility honestly — for your 3–5 year horizon.
For most fintechs, the honest current-state answer is: not yet. The OCC’s de novo standards require meaningful capital, qualified management with banking experience, and a viable multi-year business plan. Below $500M in managed assets, the compliance overhead of direct bank regulation typically exceeds the benefits.
But “not yet” is different from “never.” The calculation at $2 billion in deposits is fundamentally different from the calculation at $200 million. Building charter readiness into your long-term financial and operational plan — understanding what infrastructure, capital, and management experience you’d need — means you’re not starting from zero when the decision makes business sense. American Banker’s coverage of 2026 fintech charter activity makes clear that the fintechs moving now are the ones that had been building toward this decision for several years.
The Compliance Infrastructure That Charters Require
For fintechs that are actively pursuing or seriously evaluating a bank charter, one underappreciated implication is the compliance infrastructure the OCC expects to see before it grants approval.
Direct OCC examination means all the risk management programs the sponsor bank was previously responsible for are now your programs. The OCC’s examination framework for newly chartered banks includes:
- Model risk management — full model risk management program under OCC guidance (which replaced SR 11-7 in 2026), covering all credit models, pricing models, and AI systems
- Third-party risk management — TPRM program meeting interagency guidance standards, including critical vendor risk tiering, ongoing monitoring, and concentration risk assessment
- New product risk assessment — formal risk review process before any new product or material product change touches customers; the OCC scrutinizes new product governance for newly chartered institutions
- Capital adequacy — capital ratios and stress testing meeting OCC minimums
- Liquidity risk management — contingency funding plan with tested liquidity sources
Many fintechs pursuing charters underestimate how much of this infrastructure needs to be built and documented before the OCC is satisfied. The new product risk assessment process alone — which the OCC reviews as part of de novo examination — requires documented risk review for every new product across 12 risk categories before launch.
The New Product Risk Assessment template covers the framework the OCC expects to see: a 12-category risk questionnaire, pre-launch checklist, risk scoring matrix, and committee submission template. The four worked examples (BNPL, embedded finance, instant payments, stablecoins) are calibrated to exactly the product types under OCC scrutiny in 2026.
The View From Here
The charter surge in 2026 is both a signal and a structural shift. The signal: the BaaS sponsor bank model has reached a scale where its fragility is visible and quantified. The structural shift: the path from fintech operating under a sponsor bank to fintech operating as a bank is being taken by enough significant players that it’s no longer a niche strategic option.
Whether you’re on the charter path, evaluating it, or committed to the sponsor bank model for the foreseeable future — the risk management analysis is the same. Understand your concentration risk, know your wind-down provisions, map your alternatives, and stress-test what happens if your sponsor bank exits or your middleware fails.
Synapse was a warning. The industry learned from it. The charter wave is part of that learning. The fintechs that don’t pursue a charter still need to internalize the structural lesson: your operating model needs to be resilient to sponsor bank fragility, not just optimized for normal operating conditions.
The OCC’s examination framework for newly chartered banks, the interagency TPRM guidance for critical vendor relationships, and the BCP/DR requirements that apply to both chartered banks and their fintech partners — these aren’t just regulatory boxes to check. They’re the risk management infrastructure that distinguishes a fintech that survives a sponsor bank exit from one that doesn’t.
◆ Need the working template?
Start with the source guide.
These answer-first guides summarize the required fields, evidence, and implementation steps behind the templates practitioners search for.
◆ Related template
New Product Risk Assessment
Structured risk review process for new products, services, and business initiatives.
◆ Immaterial Findings · Weekly
Sharp risk & compliance insights. No fluff.
◆ FAQ
Frequently asked questions.
How many fintech bank charter applications did the OCC receive in 2025?
What happened with Mercury's bank charter application?
What types of bank charters are fintechs pursuing in 2026?
What does the Synapse bankruptcy have to do with the charter surge?
What does a fintech need to qualify for a de novo bank charter?
If I'm still on a sponsor bank, what should I be doing right now?
Author
Rebecca Leung
Rebecca Leung has 8+ years of risk and compliance experience across first and second line roles at commercial banks, asset managers, and fintechs. Former management consultant advising financial institutions on risk strategy. Founder of RiskTemplates.
◆ Related framework
New Product Risk Assessment
Structured risk review process for new products, services, and business initiatives.
◆ Keep reading
Related posts.
Regulatory Compliance
Effective Challenge in Model Risk Management: Document the Disagreement
Model risk management effective challenge needs a decision trail. Build a challenge memo that preserves evidence, responses, conditions, and escalation.
Jul 24, 2026
Regulatory Compliance
FinCEN's Student Aid Fraud Alert: The ACH Refund Pattern Banks Need to Tune Now
FinCEN's student aid fraud alert gives banks nine red flags, a SAR keyword, and a clear transaction-monitoring task for ACH refunds.
Jul 23, 2026
Regulatory Compliance
Magnolia Diagnostics False Claims Act Settlement: Why Investors Paid Part of the $24 Million
The Magnolia Diagnostics False Claims Act settlement reached investors, requisition controls, and $24M in payments. Here is what to fix.
Jul 23, 2026