InfoBytes Blog
Filter
Subscribe to our InfoBytes Blog weekly newsletter and other publications for news affecting the financial services industry.
House fintech task force examines buy now/pay later industry
On November 2, the House Financial Services Committee’s Task Force on Financial Technology held a hearing titled “Buy Now, Pay More Later? Investigating Risks and Benefits of BNPL and Other Emerging Fintech Cash Flow Products,” urging regulators to examine the BNPL industry. The committee memorandum highlighted the rise in consumers products offered by fintechs, such as BNPL, earned wage access, and overdraft avoidance products, and warned that while these products may help consumers manage their personal cash flow, they also have the potential to create unsustainable levels of debt. FSC staff noted that many lending disclosure requirements, including those under TILA, may not apply to several of these products, thus creating concerns regarding consumers’ understanding of the associated risks. Pointing out that payments made on many of these products are not reported to credit bureaus, FSC staff raised the issue of whether consumers are missing out on opportunities to build credit.
The task force heard from several industry witnesses who discussed, among other things, current federal and state consumer protection regulations that apply to BNPL products. One witness stressed the importance of “balanced and thoughtful regulation” that benefits consumers and merchants using these new payment solutions, and noted that the industry is actively working with credit bureaus on ways to share repayment data. House Financial Services Chair Maxine Waters (D-CA) also urged the CFPB to “look[ ] deeply” at these emerging products to gain a better understanding of how they may impact low- and moderate-income consumers and borrowers of color. Representative Blaine Luetkemeyer (R-MO) noted, however, that these products “allow[] people to purchase products, [and] pay for them in a timely manner as they can afford them.” Representative Warren Davidson (R-OH) agreed, stressing that policymakers need to “avoid punishing new products for not fitting within regulatory buckets that were already built” and “should avoid overly impairing consumer choices on how they spend money.”
FATF updates virtual assets and service provider guidance
On October 28, the Financial Action Task Force (FATF) updated pre-existing guidance on its risk-based approach to virtual assets (VAs) and virtual asset service providers (VASPs). The updated guidance revises guidance originally released in 2019. According to FATF standards, countries are required to “assess and mitigate their risks associated with virtual asset financial activities and providers; license or register providers and subject them to supervision or monitoring by competent national authorities.” The guidance includes updates on certain key areas, such as: (i) expanding the definitions of VAs and VASPs; (ii) applying FAFT standards to stablecoins; (iii) adding guidance regarding the risks and the tools available to countries for the purpose of addressing money laundering and terrorist financing risks for peer-to-peer transactions; (iv) revising VASP licensing and registration guidance; (v) adding guidance for the public and private sectors on the implementation of the “travel rule”; and (vi) adding a section for principles of information-sharing and co-operation amongst VASP Supervisors. FATF also noted that the “guidance addresses the areas identified in the FATF’s 12-Month Review of the Revised FATF Standards on virtual assets and VASPs requiring further clarification and also reflects input from a public consultation in March - April 2021.”
OCC says synthetic banking providers require supervision
On November 3, acting Comptroller of the Currency Michael J. Hsu spoke before the American Fintech Council’s Fintech Policy Summit 2021 and warned that “[t]he rebundling of banking services by fintechs and the fragmented supervision of universal crypto firms pose significant medium- to long-term risks to consumers, businesses, and financial stability.” Hsu also noted that large “universal” cryptocurrency firms interested in offering a wide range of financial services should “embrace comprehensive, consolidated supervision” like that given to banks. “Crypto firms today are regulated at most only partially and selectively, with no single regulator having a comprehensive view of the firm as a whole,” Hsu stated, adding “[t]his warrants greater attention as crypto firms, especially the universals, get bigger, engage in a wider range of activities and risk-taking, and deepen their interconnectedness within the crypto ecosystem and with traditional finance.” Warning that these “synthetic banking providers” (SBPs) could create a “run risk” and regulatory arbitrage, Hsu stressed the importance of removing “the disparity between the rights and obligations of banks and the rights and obligations of synthetic banking providers by holding SBPs to banking standards.” He further warned that customers’ needs must be met in a way that is reliable, consistently safe, sound, and fair, and discussed several reasons why more SBPs have not sought to become banks, including that “regulators have been unpredictable with regards to chartering new banks and approving fintech acquisitions of banks.” Establishing a clear, shared approach to the bank regulatory perimeter related to emerging technologies can address this challenge, he advised.
Hsu also announced that the OCC concluded its review of recent bank charter applications and cryptocurrency-related interpretive letters and stated that the agency will communicate its determinations and feedback to bank charter applicants in the coming weeks. Findings from a “crypto sprint” done in conjunction with the FDIC and Federal Reserve will also be communicated shortly. “The content of these communications—on the chartering decisions, interpretive letters, and the crypto sprint—will be broadly aligned with the vision for the bank regulatory perimeter laid out here today,” Hsu stated.Chopra testifies on CFPB direction
On October 27, newly sworn in CFPB Director Rohit Chopra appeared for the first time before the House Financial Services Committee to offer some of the first insights into his priorities at the Bureau. Chopra’s opening remarks focused on concerns regarding “Big Tech” and its control over the flow of money in the economy (these comments followed the issuance of information requests to six technology companies, covered by InfoBytes here). Chopra also focused on a need to ensure robust competition in financial markets and listen to local financial institutions and nascent players about obstacles they face when seeking to challenge dominant incumbents. Chopra also stressed the importance of holding “repeat offenders” accountable, highlighted an intent to coordinate efforts with federal and state regulators, and indicated a preference for scrutinizing larger market participants over smaller entities. He noted, however, potential leniency for companies that self-identify their own issues and violations. Additional highlights of the hearing include the following:
Enforcement. Chopra noted that “markets work well when rules are easy to follow and easy to enforce.” He also expressed his view that the CFPB should focus its resources on larger industry participants and “repeat offenders” rather than “strong-arming” small businesses into settlements to create law. Chopra also expressed a preference for setting regulatory guidelines through enforcement, indicating that “markets work well when rules are easy to follow, and easy to enforce.”
Section 1033 of Dodd-Frank. With respect to implementing this set of requirements, which deals with consumers’ rights to access information about their financial accounts, Chopra indicated a desire to “unlock more competition,” but warned that there also needs to be assurance that “banks and nonbanks are operating under the same set of rules” and that there is “not regulatory arbitrage.” While Chopra did not specify a timeline for promulgating the final rule implementing this section, he noted that the process is underway and that the Bureau is consulting with various experts. (Issuance of the ANPR was covered by InfoBytes here.)
Abusive acts and practices. Chopra said that he agreed with former acting Director Dave Uejio’s decision to rescind a policy statement on “abusive” conduct issued by former Director Kathy Kraninger. Chopra stated he has “huge aspirations to create durable jurisprudence” regarding the definition of “abusive” in Dodd-Frank. He noted that “it could be a mix” of judicial decisions and “how the CFPB may use rules and guidance to help articulate those standards.”
Cryptocurrency and stablecoins. Chopra expressed concerns about the potential for big payment platforms to process stablecoins—cryptocurrencies pegged to stable commodities or currencies like the dollar. However, Chopra clarified that it is not his intention to use his regulatory authority to ban or limit the use of cryptocurrency or blockchain technology. Regarding the CFPB’s role in cryptocurrency, Chopra claimed that depending on the laws implicated, there is a “fact-based determination as to any sort of law that cryptocurrencies or digital currencies have to comply with.” He further described that this is “something that the CFPB is working with the other regulators on,” and emphasized that “where digital payments [are] involved, the Electronic Fund Transfer Act is a key law with key consumer protections.”
QM Rule. When asked about the postponement of the mandatory compliance date of the General Qualified Mortgage final rule to October 2022 (covered by InfoBytes here), Chopra said he is eager “to hear of places where it needs to be changed” but emphasized that the postponement was before his time and that the rule has gone into effect. He also stated that “QM is a key part of the mortgage market and the mortgage regulatory guidelines.” Therefore, he wants to ensure that the CFPB is always looking at it to make sure the objectives that Congress laid forward in Dodd-Frank are being carried out. When asked about his support of the proposed change in the QM rule, Chopra said he did not know but wants “to make sure he understands the full basis of it.”
Chopra echoed such sentiments in his October 28 testimony before the Senate Banking Committee.
FATF advances work on virtual assets, beneficial ownership transparency, and illicit finance risks
On October 22, the Financial Action Task Force (FATF) announced that it concluded its October plenary, which is the sixth session since the beginning of the Covid-19 pandemic. According to the announcement, utilizing a hybrid approach of both virtually and in-person participation, FATF “advanced its core work on virtual assets, beneficial ownership transparency, and illicit finance risks.” Among other things, the FATF: (i) approved an updated version of its Guidance on a Risk-Based Approach to Virtual Assets and Virtual Asset Service Providers for publication; (ii) proposed changes to beneficial ownership standards; (iii) approved the commencement of a study on Illicit Proceeds Generated from the Fentanyl and Related Synthetic Opioids Supply Chain; (iv) adopted an update to its 2016 confidential report on terrorist financing risk indicators; and (v) issued a statement regarding Afghanistan that reaffirmed the “United Nations Security Council Resolutions that Afghanistan should not be used to plan or finance terrorist acts, emphasiz[ing] the importance of supporting the work of non-governmental organizations in the country and maintaining the flow of humanitarian assistance to the Afghan people, and for governments to facilitate information sharing with their financial institutions on any emerging illicit finance risks related to Afghanistan.”
North Carolina creates regulatory sandbox
On October 15, the North Carolina governor signed HB 624, which creates a regulatory sandbox program and establishes the North Carolina Innovation Council (Council). Under the North Carolina Regulatory Sandbox Act of 2021, participants will have 24 months from the date an application is approved (unless granted an extension) to test an innovative product or service on consumers in the state without being subject to state laws and regulations that normally would regulate such products or services. The waiver “shall be no broader than necessary to accomplish the purposes” established under the Act. The Act notes that legislative findings determined that existing legal and regulatory frameworks restrict innovation because they “were established largely at a time when technology was not a fundamental component of industry ecosystems, including banking and insurance,” and that innovators would benefit from a flexible regulatory regimen to test new products, services, and emerging technologies. In addition, the Council will provide support for innovation, encourage participation in the regulatory sandbox, and set standards, principles, guidelines, and policy priorities for the types of innovations supported by the regulatory sandbox. The Council will also be responsible for admission into the regulatory sandbox and for assigning selected participants to the appropriate state agency. The program stipulates that innovative products or services may only be offered to state residents, with the exception of products and services associated with a money transmitter, “in which case only the physical presence of the consumer in the [s]tate at the time of the transaction may be required.” The program also allows participants and the applicable state agency to mutually agree to an extension or an increase in the numbers of consumers or dollar limits for a particular product or service. Among other things, participants may also request an extension of not more than 12 months to obtain a license or other authorization required by law to continue to market the product or service. The Act is effective immediately.
New York takes action on cryptocurrency lending platforms
On October 18, the New York attorney general ordered two unregistered cryptocurrency lending platforms to immediately cease their activities in the state and directed three additional platforms to provide information about their activities and products. The AG clarified that most virtual currency lending products “fall squarely within any of several categories of ‘security’ under the Martin Act,” and therefore platforms must comply with the Martin Act’s registration requirements unless exempt. According to the AG, the virtual currency lending products identified in these actions “promise a fixed or variable rate of return to investors, and claim to deliver those returns by, among other things, trading with, or further lending those virtual assets.” As such, the products are securities under the Martin Act, particularly those that accept virtual currencies in exchange for a rate of return. The press release provided a redacted version of a cease letter sent to one of the two unregistered platforms, which stated that platforms engaging in unregistered activity have committed a fraudulent practice under the Martin Act and may face civil remedies. The platform is ordered to cease the alleged activity within 10 days or explain why the AG should not take further action. A different redacted letter requested information about the recipient’s products, where it operates, how the platform uses deposited virtual currency, whether U.S. dollars can be deposited or withdrawn from the platform, all financial institutions that are used, and whether the companies accept tethers, among other things. The letter also requested examples of agreements, contracts, and risk disclosures, as well as due diligence policies and procedures. These letters follow other actions taken recently by the AG against cryptocurrency trading platforms and token issuers (see e.g. InfoBytes here and here).
OCC releases bank supervision operating plan for FY 2022
On October 15, the OCC’s Committee on Bank Supervision released its bank supervision operating plan for fiscal year 2022. The plan outlines the agency’s supervision priorities and highlights several supervisory focus areas including: (i) strategic and operational planning; (ii) credit risk management, including allowances for loan and lease losses and credit losses; (iii) cybersecurity and operational resiliency; (iv) third-party oversight; (v) Bank Secrecy Act/anti-money laundering compliance; (vi) consumer compliance management systems and fair lending risk assessments; (vii) Community Reinvestment Act performance; (viii) LIBOR phase-out preparations; (ix) payment systems products and services; (x) fintech partnerships involving potential cryptocurrency-related activities and other services; and (xi) climate-change risk management. The plan will be used by OCC staff members to guide the development of supervisory strategies for individual national banks, federal savings associations, federal branches, federal agencies, and technology service providers.
The OCC will provide updates about these priorities in its Semiannual Risk Perspective, as InfoBytes has previously covered.
SEC chair discusses digital analytics in finance
On October 12, SEC Chair Gary Gensler stated that the agency is reviewing conflicts of interest and other risk concerns that may be associated with digital engagement practices (DEPs) employed by online brokerages and advisers. Speaking before the Practising Law Institute’s SEC Speaks conference, Gensler discussed the use of digital analytics in finance and warned attendees that DEPs used by finance platforms to tailor products to individual investors could be “transformative” and may increase access and choice, but may also introduce conflicts of interest, bias, and systemic risks if they are not closely monitored. “These modern features go beyond game-like elements, or what is sometimes called ‘gamification,’” Gensler stated. “They encompass the underlying predictive data analytics, as well as a variety of differential marketing practices, pricing, and behavioral prompts.” Use of predictive data analytics by finance platforms could raise issues with those platforms’ legal duties, he added, noting that finance platforms have an obligation “to comply with investor protections through specific duties—things like fiduciary duty, duty of care, duty of loyalty, best execution and best interest.” Using DEPs in a way that optimizes a platform’s own revenue may present a potential conflict of interest, Gensler emphasized. Gensler’s remarks follow a recent SEC request for information and public comments on the use of DEPs. As previously covered by InfoBytes, the SEC is seeking comments to better understand “what conflicts of interest may arise from optimization practices and whether those optimization practices affect the determination of whether DEPs are making a recommendation or providing investment advice.”
DOJ team to address cryptocurrency
On October 6, the DOJ announced the launch of the National Cryptocurrency Enforcement Team (NCET), which will focus on addressing “complex investigations and prosecutions of criminal misuses of cryptocurrency, particularly crimes committed by virtual currency exchanges, mixing and tumbling services, and money laundering infrastructure actors.” According to the DOJ, the NCET will combine “the expertise of the Department of Justice Criminal Division’s Money Laundering and Asset Recovery Section (MLARS), Computer Crime and Intellectual Property Section (CCIPS) and other sections in the division, with experts detailed from U.S. Attorneys’ Offices.” Among other things, the NCET will: (i) develop strategic priorities for investigations and prosecutions involving cryptocurrency; (ii) identify areas for increased investigative and prosecutorial focus; (iii) develop and maintain relationships with federal, state, local, and international law enforcement agencies involved in cryptocurrency cases; (iv) train federal prosecutors and law enforcement agencies in investigative and prosecutorial strategies; and (v) coordinate with private sector actors in cryptocurrency matters. In announcing the program, Deputy Attorney General Lisa Monaco stated that “[a]s the technology advances, so too must the Department evolve with it so that we’re poised to root out abuse on these platforms and ensure user confidence in these systems.”