When the Federal Reserve issued a consent order against Evolve Bank & Trust on June 14, 2024, for deficient risk management across its fintech partnerships, no fintech brand was named in the document. That is embedded finance's operating rule in one example: the software platform owns the customer experience, and the chartered sponsor bank answers to regulators for the money.
Nuv Media publishes information, not financial advice.
What Is Embedded Finance?
Embedded finance is the delivery of regulated financial products, such as deposit accounts, payment cards, lending or insurance, inside the interface of a non-financial software platform, connected through APIs rather than a bank branch. The customer stays in the platform's app; the banking happens behind it.
Familiar examples define the category. Shopify Balance puts business checking inside Shopify's commerce dashboard, powered by Stripe Treasury with partner banks, per Stripe's 2021 launch announcement. Affirm's pay-over-time option appears inside thousands of checkout flows, with loans originated by Cross River Bank under Affirm's SEC-filed program disclosures. In each case the host software company distributes the product; a bank or licensed lender actually provides it.
The platform's incentive is retention and take-rate. Financial features increase time in the product and add revenue per user, without the platform itself applying for a charter.
How Does the Sponsor-Bank Structure Work?
The platform contracts with a sponsor bank, sometimes through a banking-as-a-service middleware layer that supplies APIs, ledgers and compliance tooling. Customer funds sit in accounts at the bank, which holds the FDIC insurance, the KYC files, the BSA program and the card-issuing contracts with the networks.
| Layer | Typical owner | What it controls |
|---|---|---|
| Customer interface | Software platform | User experience, onboarding flow, branding |
| Program middleware | BaaS provider | APIs, ledger software, dashboards |
| Regulated core | Sponsor bank | Deposits, KYC and BSA, card issuing, compliance |
| Networks and rails | Card networks, ACH operators | Clearing, settlement, interchange rules |
Pass-through deposit insurance is the legal hinge. Funds held for end customers at the sponsor bank can be insured up to $250,000 per depositor under the FDIC's custodial-account rules at 12 CFR 330.10, provided the bank's records identify each beneficial owner. The Synapse failure in 2024 showed what happens when those records and the middleware ledger disagree.
How Is Revenue Split Between Platform and Bank?
Through negotiated contracts, generally across four streams: interchange on card activity, payment processing fees, interest margin on deposits and balances, and origination or servicing fees on credit. The sponsor bank earns the regulated margin; the platform takes a distribution share written into the program agreement.
Concrete split percentages are rarely public. What is documented is direction: platforms describe revenue-share arrangements in filings and product pages, banks report the fee income, and middleware vendors charge per-account and per-transaction platform fees. Revolut's US pricing page, for instance, shows how a distributor converts program economics into tiers, bundling higher yields and fee waivers into plans priced at $9.99 to $16.99 per month in 2025.
Credit changes the arithmetic. Klarna's longer-term US financing is issued by WebBank, per Klarna's product disclosures, and Affirm pays Cross River for origination capacity, per its filings. There the platform's share comes from merchant fees and servicing, not from deposit spread.
Who Holds Regulatory Responsibility When Something Fails?
The sponsor bank, first and always. The Fed, FDIC and OCC made that explicit in their final interagency guidance on third-party risk management issued in June 2023, which directs banks to oversee all third-party relationships that support bank functions, including fintech distributors and their subcontractors.
Enforcement follows the same line. The Fed's June 14, 2024 order required Evolve to remediate anti-money-laundering, risk-management and consumer-compliance deficiencies across its fintech programs, per the Federal Reserve's announcement. The FDIC's consent orders against Lineage Bank, effective January 29, 2024, Sutton Bank, issued February 1, 2024, and Piermont Bank, dated February 26, 2024, all cite weaknesses in fintech-partnership oversight, per the FDIC's published enforcement lists.
Platforms are not unregulated. They face FTC consumer-protection exposure for claims made in the interface, money-transmission licensing when customer funds move through their own entities, and contractual indemnities to the bank. But bank examiners arrive at the chartered institution, not the app.
What Did the Synapse Collapse Change in Practice?
It turned ledger reconciliation into a supervisory topic. Synapse, the middleware between fintech apps and partner banks, filed for bankruptcy in 2024 after a reconciliation dispute with Evolve froze roughly ten million end-customer accounts. Bankruptcy trustee Jelena McWilliams, a former FDIC chair, reported customers were owed $65 million to $96 million more than partner-bank records showed on account, per Banking Dive's reconstruction of court filings.
The market response was measurable. Metropolitan Commercial Bank disclosed in February 2024 it would exit its BaaS relationships, citing heightened regulatory standards in its annual filing. Five Star Bank announced in September 2024 it would wind down its BaaS business. Surviving programs added daily reconciliation rights, ledger data escrows and tested exit plans to their bank agreements.
What Should a Platform Verify Before Embedding Finance?
Five checks separate durable programs from headline risk, and each maps to a real enforcement action from 2024: which chartered bank holds funds, what the bank's own regulators have recently ordered, who reconciles the ledger and how often, how FDIC pass-through records identify each end user, and what the unwind plan does if the middleware or the bank exits.
- Confirm the sponsor bank's condition and enforcement history before signing, not after.
- Contract for read access to the bank-side ledger and define daily reconciliation.
- Keep beneficial-owner data clean enough to support FDIC pass-through insurance.
- Test the exit plan: customer notification, fund migration, regulator contacts.
- Review the platform's own licensing posture for any moment funds touch a platform entity.
For more context, read How FDIC and Fed Consent Orders Reshaped BaaS Banking After Synapse.
For more context, read revolut us bank charter.
For more context, read visa mastercard stablecoin platform.
