Skip to content
RiskTemplates · The Daily Brief Friday, July 31, 2026
Wire The Exodus OFAC Settlement: What a $3.1M Crypto Wallet Enforcement Action Teaches About Sanctions Compliance Programs JUL 30

Feature Compliance Strategy

Bank Holding Company Source-of-Strength: What Fintechs Getting Bank Charters Haven't Accounted For

When a fintech gets a bank charter and forms a bank holding company, it inherits the source-of-strength obligation — a capital backstop requirement most fintech BHC playbooks don't address. The TS Banking Group July 2026 written agreement shows what happens when this surfaces at exam time.

By Rebecca Leung · July 30, 2026 ·
Table of Contents

TL;DR

  • Bank holding companies are required by federal law to serve as a “source of financial strength” to their subsidiary banks — this is codified in Dodd-Frank Section 616(a) and enforced by the Federal Reserve
  • A July 2026 written agreement with TS Banking Group required the BHC to submit a capital plan within 60 days and imposed dividend restrictions — the standard enforcement playbook for BHC deficiencies
  • Fintechs getting bank charters in 2026 are forming BHCs and inheriting this obligation, but most fintech risk programs are designed around OCC or FDIC bank-level examination — not Federal Reserve BHC supervision
  • The capital plan requirement, dividend restrictions, and Federal Reserve examination cycle are a fundamentally different operating environment than anything a fintech has dealt with before

The Obligation Nobody Told the Fintech Risk Team About

The 2026 fintech bank charter surge produced a wave of approval announcements and press releases. Mercury conditional approval. OCC de novo applications from multiple digital-first banks. A pipeline of ILC applications and state charter pursuits. The business case for each was compelling: own the banking relationship, stop paying the sponsor bank’s margin, control the product roadmap.

What the charter applications didn’t emphasize — and what the fintech risk teams working through the approval process often discovered only at the last stage — is that getting a bank charter means forming a bank holding company. And a bank holding company brings the Federal Reserve into your regulatory structure as a primary supervisor of the parent entity.

The Federal Reserve doesn’t regulate banks the way the OCC and FDIC do. It regulates the organizations that control banks. That’s a different examination, different capital standards, and a different set of obligations — including one that was codified into federal law fifteen years ago but that most fintech teams have never encountered before: the source-of-strength doctrine.

The TS Banking Group written agreement, dated July 6, 2026 and announced by the Federal Reserve on July 9, 2026, is the most recent demonstration of what this obligation looks like when it’s enforced. The BHC was required to submit a capital plan within 60 days and is subject to dividend and distribution restrictions until the plan is approved and the organization’s financial condition meets Federal Reserve standards. These are standard remediation requirements for a BHC source-of-strength deficiency — and they’re exactly what fintechs forming BHCs are inheriting when they get their charter approvals.

What “Source of Financial Strength” Actually Means

The source-of-strength obligation isn’t a principle — it’s a legal requirement. Section 616(a) of the Dodd-Frank Wall Street Reform and Consumer Protection Act (12 U.S.C. § 1831o-1) codified what had previously been Federal Reserve policy into statute:

“A bank holding company shall serve as a source of financial strength for its subsidiary depository institutions and shall not conduct its operations in an unsafe or unsound manner.”

The Federal Reserve implements this through Regulation Y, specifically 12 CFR § 225.4(a), which states that the Federal Reserve expects each BHC to act as a source of financial and managerial strength to its subsidiary banks — including providing financial assistance to a subsidiary bank when it is in financial distress.

In operational terms, this means the BHC parent must:

  • Maintain sufficient capital at the holding company level to absorb losses in the subsidiary bank and still have resources to support the bank’s continued operation
  • Demonstrate that it has access to capital sources — equity, credit facilities, liquid assets — that could be deployed to the subsidiary in stress conditions
  • Avoid distributions (dividends, share buybacks, management fees) that would deplete the holding company’s ability to fulfill this obligation
  • Have a documented capital plan showing how it will maintain this capability over a forward planning horizon

The Federal Reserve examines BHCs specifically for compliance with this obligation. The examination considers the BHC’s financial condition separate from the subsidiary bank’s condition — because the whole point is that the BHC should be able to support the bank, which requires the BHC to have its own resources.

The TS Banking Group Enforcement: What the Written Agreement Covers

Written agreements between the Federal Reserve and BHCs aren’t common in the sense that they make headlines — but they’re a routine enforcement tool when examiners find deficiencies in BHC financial condition or its ability to meet source-of-strength obligations.

The TS Banking Group written agreement from July 2026 follows the standard structure for this type of enforcement action. The core requirements:

Capital plan submission. The BHC was required to submit a capital plan within 60 days of the agreement’s effective date. The capital plan must address the BHC’s own capital adequacy, its capital maintenance commitments to its subsidiary banks, and the sources of capital it would use to support those subsidiaries under stress conditions. The plan must be approved by the Federal Reserve Bank before the BHC can implement material changes to its capital strategy.

Dividend and distribution restrictions. The BHC may not declare or pay dividends or make other capital distributions without prior Federal Reserve approval. This restriction applies to distributions from the BHC to shareholders — but the practical implication is that the entire consolidated entity’s capital allocation decisions are now subject to Federal Reserve oversight until the agreement is terminated.

Ongoing reporting and supervisory oversight. The written agreement establishes reporting requirements for the BHC to demonstrate progress on the capital plan and financial condition.

These are the components of a BHC written agreement that focuses on capital adequacy and source-of-strength concerns. For TS Banking Group, with subsidiary banks including First National Bank & Trust in Tioga, North Dakota, and Bank of Tioga — both community bank institutions — the Federal Reserve’s concern is ensuring the holding company can actually fulfill its backstop role if those subsidiaries need support.

Why Fintechs Forming BHCs Are Especially Exposed

A traditional BHC — a bank that evolved into a holding company structure over decades — has Federal Reserve relationship management embedded in its culture. There’s a BHC capital planning team. There’s an established Fed relationship. The source-of-strength obligation is something institutional memory carries.

A fintech forming a BHC for the first time to satisfy charter application requirements starts from zero on all of this.

Specifically, four things most fintech risk programs don’t have when they become BHCs:

1. A separate BHC capital framework. Fintech risk programs are typically built around the bank subsidiary’s regulatory capital requirements — OCC or FDIC minimum capital ratios, the prompt corrective action framework, the bank’s own stress testing. The BHC capital framework is a separate layer. The Federal Reserve looks at the holding company’s capital independent of the bank’s, and requires the BHC to have capital commitments to the bank that the bank can rely on. Fintechs that model capital requirements only for the bank entity will discover a gap here.

2. Federal Reserve examination readiness. OCC and FDIC examination preparation — CAMELS ratings, examination response, MRA remediation — doesn’t map directly to Federal Reserve BHC examination. The Fed’s RFI/C(D) rating system evaluates the BHC on Risk Management, Financial Condition, Impact on the subsidiary institution, and Depository institution composite rating. A fintech may have strong MRA response protocols for OCC examiners and zero preparation for a Federal Reserve BHC examination.

3. Distribution approval processes. Fintechs that are pre-charter frequently have no restrictions on how the parent company distributes capital to investors. Post-BHC formation, those distributions are subject to Federal Reserve oversight. Venture-backed fintechs that anticipate returning capital to investors through dividends, secondary transactions, or buybacks after charter approval may find that the Federal Reserve restricts those distributions pending capital plan approval.

4. Consolidated reporting. BHCs must file FR Y-9C (for large BHCs) or FR Y-9SP (smaller BHCs) on a quarterly or semi-annual basis. These are Federal Reserve financial data reporting forms. A fintech that hasn’t gone through the BHC formation process won’t have a team configured to produce this reporting on schedule.

The Capital Planning Obligation: It’s Not Your Bank’s Capital Plan

This distinction trips up even experienced BHC compliance teams: the BHC capital plan and the bank subsidiary capital plan are not the same document.

The bank subsidiary’s capital plan (driven by DFAST requirements, if applicable, or the institution’s internal capital adequacy assessment) is primarily about the bank’s own capital adequacy and stress resilience. The DFAST 2026 cycle illustrated how bank-level stress testing frameworks work.

The BHC capital plan is about the holding company’s capacity to support the bank. The Federal Reserve, in reviewing a BHC capital plan, is specifically asking: if this bank subsidiary runs into capital trouble, can the parent actually do something about it?

That requires a different set of answers:

  • What are the BHC’s own liquid assets and how quickly can they be deployed to the subsidiary?
  • Does the BHC have undrawn credit facilities or equity issuance capability?
  • At what point would the BHC’s own capital be exhausted by supporting the subsidiary?
  • What commitments is the BHC making to maintain the subsidiary’s capital ratios?

For a fintech BHC that was recently a technology company, the honest answer to some of these questions may be uncomfortable. Venture-backed fintechs don’t typically carry large liquid asset buffers at the parent level — that capital is deployed in the business. Post-BHC formation, the Federal Reserve will scrutinize whether the BHC’s financial structure actually allows it to fulfill source-of-strength obligations.

What to Build Before (or Immediately After) BHC Formation

For fintechs currently in the charter application process or recently approved, the BHC compliance buildout needs to happen in parallel with the bank’s own compliance infrastructure. Four things to address:

Stand up BHC capital reporting separately from bank subsidiary reporting. The Federal Reserve’s FR Y-9SP (for BHCs with total assets under $3 billion) is filed semi-annually. Configure the reporting capability before the first due date. Missing the initial filing after BHC formation starts the Federal Reserve relationship badly.

Build a BHC capital plan that is separate from the bank’s ICAAP. The BHC capital plan should specifically address the parent’s resources, stress capacity, and distribution policy in terms of the source-of-strength obligation. Have a bank regulatory attorney review it against Federal Reserve BHC capital planning guidance before the first Federal Reserve examination.

Establish a Federal Reserve relationship management function. The BHC’s Federal Reserve relationship is separate from the bank subsidiary’s OCC or FDIC relationship. Assign a primary point of contact for Federal Reserve examination and supervisory interaction at the BHC level. This person needs to understand what the Federal Reserve is looking for — RFI/C(D) ratings, source-of-strength compliance — rather than just CAMELS.

Address distribution policy before it’s restricted. If investor return expectations involve distributions from the BHC parent, confirm those are compatible with Federal Reserve distribution expectations for a newly formed BHC. The Federal Reserve is skeptical of BHCs that distribute capital to shareholders while simultaneously claiming they’re positioned to provide financial support to subsidiary banks under stress.

The BaaS Path Didn’t Have This Problem

One reason the BHC source-of-strength obligation catches fintechs off guard: the previous generation of fintechs that built on sponsor bank relationships never formed BHCs. The sponsor bank structure — where the fintech operates as a third party of a bank rather than as a bank or BHC itself — explicitly keeps the fintech outside the federal banking regulatory perimeter.

The BaaS consent order landscape generated its own compliance challenges, but the Federal Reserve BHC examination framework wasn’t one of them. A fintech working with a sponsor bank under a program agreement is examined by the sponsor bank’s primary regulator as a third party to the bank, not as a holding company subject to Federal Reserve oversight.

Getting a bank charter eliminates that structural buffer. The fintech is no longer a third party — it’s the BHC that owns the bank, and the Federal Reserve is now its primary consolidated supervisor.

So What?

Every fintech in the 2026 charter application pipeline is going to become a bank holding company. The Federal Reserve oversight that comes with BHC status isn’t a minor administrative addition — it’s a new primary regulator with its own examination framework, capital requirements, reporting obligations, and enforcement tools, of which the written agreement with dividend restrictions is the standard first step.

The TS Banking Group written agreement in July 2026 is a useful signal of what Federal Reserve examiner attention looks like at a BHC where source-of-strength compliance isn’t established. The specific requirements — capital plan within 60 days, restricted distributions — are not particularly unusual. They’re the baseline remediation the Federal Reserve requires when a BHC’s financial condition or compliance posture doesn’t demonstrate the ability to support its subsidiary banks.

For fintechs in the charter process right now: the BHC capital planning framework needs to be built alongside the bank’s compliance infrastructure, not treated as a post-approval to-do. By the time the Federal Reserve conducts its first examination of the newly formed BHC, the capital plan should already exist, the FR Y-series reporting should already be configured, and the distribution policy should already reflect Federal Reserve expectations for a BHC with its specific financial profile.

Charter approval doesn’t mean the oversight work is done. For a fintech BHC, it means a new oversight framework is beginning.


The Financial Risk Management Kit includes capital planning frameworks and risk documentation templates designed for financial services institutions navigating multi-regulator environments.

◆ Need the working template?

Start with the source guide.

These answer-first guides summarize the required fields, evidence, and implementation steps behind the templates practitioners search for.

◆ Immaterial Findings · Weekly

Sharp risk & compliance insights. No fluff.

◆ FAQ

Frequently asked questions.

What is the source-of-strength doctrine under U.S. banking law?
The source-of-strength doctrine requires bank holding companies to serve as a source of financial and managerial strength to their subsidiary depository institutions. Codified in Section 616(a) of the Dodd-Frank Act (12 U.S.C. § 1831o-1) and implemented through Regulation Y (12 CFR § 225.4), it means the BHC parent must be able to provide financial support to subsidiary banks when needed — not just stand by while a subsidiary deteriorates. The Federal Reserve enforces this requirement. For fintechs that obtain bank charters and form BHCs, the parent fintech entity becomes subject to Federal Reserve oversight and examination of whether it can fulfill this obligation.
Does a fintech that owns a bank become a bank holding company subject to Federal Reserve oversight?
Yes. Under the Bank Holding Company Act (12 U.S.C. § 1841 et seq.), any company that controls a bank must register as a bank holding company and become subject to Federal Reserve oversight. 'Control' is broadly defined — ownership of 25% or more of voting shares creates a rebuttable presumption of control, and the Fed can find control at lower thresholds depending on other factors. For fintechs getting de novo bank charters through the OCC or state banking departments, the parent fintech entity that applies for the charter is typically required to form or register as a BHC before the charter is approved. This puts the fintech parent directly under Federal Reserve supervision, separate from the OCC or FDIC oversight of the bank subsidiary itself.
What does a BHC capital plan need to include, and what is the timeline if a written agreement requires one?
A BHC capital plan must address: the BHC's own capital adequacy, not just the bank subsidiary's; capital maintenance commitments to the subsidiary, including minimum capital ratios the BHC will maintain at the bank level; sources of capital the BHC could access to support the subsidiary (cash, liquid assets, credit facilities, equity issuance capability); stress scenarios showing the BHC's ability to maintain support under adverse conditions; and a capital distribution policy (dividends, share buybacks) that is consistent with maintaining the subsidiary's capital ratios. When a written agreement or formal agreement requires submission of a capital plan, the timeline is typically 60-90 days and the plan must be approved by the Federal Reserve Bank before implementation. The BHC cannot restore dividend payments or distributions until the plan is approved and the BHC has demonstrated sustained financial condition.
What triggers dividend and distribution restrictions for a bank holding company?
BHC dividends and distributions become restricted when the Federal Reserve issues a written agreement, consent order, or formal agreement; when the BHC's financial condition deteriorates (capital ratios below well-capitalized minimums, sustained losses, or earnings insufficient to service dividends); when the bank subsidiary's condition deteriorates to a point where the BHC's distributions would impair the subsidiary's capital; or when the BHC fails to submit or receive approval for a required capital plan. Under 12 CFR § 225.14 and the Fed's capital framework, BHCs rated 3, 4, or 5 under the RFI/C(D) rating system face heightened restrictions on distributions. Dividend restrictions are typically one of the first requirements in a written agreement, because allowing capital to leave the consolidated entity while the subsidiary is struggling is directly inconsistent with the source-of-strength obligation.
How does Federal Reserve supervision of a BHC differ from OCC or FDIC examination of the bank subsidiary?
The OCC examines national banks for safety and soundness, compliance, and fiduciary risk at the bank level. The FDIC examines state non-member banks. The Federal Reserve supervises BHCs — the parent organizations that control banks — with a focus on the consolidated organization's capital adequacy, risk management, governance, and the BHC's ability to support its subsidiary banks. For a fintech BHC, this means the fintech parent entity (not just the bank subsidiary) is examined by the Federal Reserve on its own financial condition, its capital allocation to the bank, its risk appetite framework, and its operational capability to serve as a source of strength. A fintech can receive a clean OCC examination for the bank subsidiary while simultaneously receiving a written agreement from the Federal Reserve for BHC-level deficiencies — they are separate examinations of different entities.
Rebecca Leung

Author

Rebecca Leung

Rebecca Leung has 8+ years of risk and compliance experience across first and second line roles at commercial banks, asset managers, and fintechs. Former management consultant advising financial institutions on risk strategy. Founder of RiskTemplates.

◆ Related framework

Financial Risk Management Kit

Credit risk, liquidity, concentration, and capital adequacy templates built for fintechs.

Immaterial Findings · Newsletter

The brief, in your inbox.

Enforcement of the week, a framework breakdown, and the prompts that are actually worth running. Delivered to your inbox. Free.