Why fintechs can’t wait for Washington: how a former Citi CCO turned 24‑month US licenses into a 3‑month hack

de Risk Partners
Why fintechs can’t wait for Washington: how a former Citi CCO turned 24‑month US licenses into a 3‑month hack
Why fintechs can’t wait for Washington: how a former Citi CCO turned 24‑month US licenses into a 3‑month hack
Brie Carter
Written by Brie Carter
Share

How the sponsor-bank model offers a faster, fully supervised path to the US market - and why compliance is the price of admission.

For a non-US fintech, the US banking licence process is the regulatory equivalent of dial-up internet: slow, expensive, and completely out of sync with how the rest of your business moves.

A new full-service bank charter typically takes at least one year - and frequently longer. 

The OCC’s own licensing manual describes a multi-stage process: pre-filing meetings, a detailed business plan, capital adequacy reviews, background investigations, and public notice periods before any approval. 

For a venture-backed fintech with a 24-to-30-month runway, that timeline is the whole ball game.

Those 12-plus months are not just a calendar problem - they are a capital problem. 

A charter application demands serious legal spend, specialist consultants, and a compliance and financial crime build-out that looks more like a mid-tier bank than a Series B startup, all before a single US customer is onboarded.

Meanwhile, your product cycle does not pause. 

Competitors who chose lighter-weight go-to-market paths are already live with US partners, gathering data, refining pricing, and building brand equity. 

The opportunity cost is brutal: in fintech, categories are won by the player with the fastest compliant route to market, not necessarily the most elegant code.

Investors see this clearly. 

Tighter follow-on funding and more conservative term sheets mean founders cannot assume they can “raise through” a multi-year regulatory holding pattern. 

You can’t A/B test your way out of a charter backlog.

Enter the sponsor-bank model, which has quietly become the preferred on-ramp for ambitious non-US fintechs that want US access this quarter, not next political cycle.

Rather than spending 12-plus months chasing your own licence, you partner with a regulated US bank that already holds one - plugging into their ability to hold deposits, issue cards, and move money nationwide under their charter and regulatory umbrella.

Done properly, this is not a regulatory dodge. 

It is an accepted structure that US regulators have supervised for years. 

The OCC, Federal Reserve, and FDIC have all issued guidance on bank-fintech partnerships - while making clear that the sponsoring bank retains ultimate accountability for compliance.

The catch, of course, is compliance. 

The regulatory environment around BaaS hardened sharply in 2024: enforcement actions against sponsor-bank programmes accounted for 35% of all combined enforcement notices from the Federal Reserve, FDIC, and OCC in Q1 2024 alone - up from just 10% in the same quarter a year earlier, according to Klaros Group. 

The collapse of middleware provider Synapse in April 2024 only intensified scrutiny further.

In July 2024, the three agencies issued a Joint Statement making clear that partnering with a third party does not diminish a bank’s legal compliance obligations. 

A survey of compliance professionals found that 90% of sponsor banks struggle with compliance - citing gaps in oversight, inconsistent controls, and unclear regulatory expectations. 

If you treat your sponsor bank as a logo and not a prudential partner, you will earn the wrong kind of attention very quickly.

That is where firms like de Risk Partners have carved out a niche: bringing institutional-grade compliance frameworks - AML/KYC, BSA programmes, sanctions, financial crime - and embedding them into fintechs from day one, via fractional Chief Compliance Officer models.

Instead of building a full-time Wall Street-calibre compliance team on a startup budget, you access the experience of executives who have already survived the exam room - including practitioners with backgrounds at Citigroup, JPMorgan Chase, and American Express. 

de Risk Partners’ advisory team includes Mark Carawan, former Global CCO at Citigroup.

The result is a different equation entirely: a credible, supervised path to the US market via a sponsor-bank framework and pre-built compliance infrastructure - aligned to what regulators are actively examining. 

That does not eliminate scrutiny. 

If anything, it professionalises it.

For non-US fintechs caught between “move fast and break things” and “move slowly and go broke,” that alignment is not a luxury. 

It is the difference between building a US business and writing a very long, very expensive regulatory case study for someone else.


Sources: OCC Comptroller’s Licensing Manual; Goodwin Law (2025); Klaros Group / BAI (April 2024); OCC/Fed/FDIC Joint Statement on Bank-Fintech Arrangements (July 2024); Wolters Kluwer Compliance Survey (2025); Banking Dive BaaS Enforcement Tracker (2024).


Perguntas frequentes

Conecte-se conosco

A Grafa não é um consultor financeiro. Você deve buscar aconselhamento independente, jurídico, financeiro, tributário ou de outra natureza que se relacione às suas circunstâncias únicas.

A Grafa não se responsabiliza por qualquer perda causada, seja por negligência ou de outra forma, decorrente do uso ou da confiança nas informações fornecidas direta ou indiretamente pelo uso desta plataforma.