The last few years had started to see a convergence between crypto and banking, with bitcoin appearing to rapidly grow mainstream. That momentum hit a wall with the spectacular crypto market failures of 2022, including the collapse of the crypto exchange FTX. In response to the significant volatility and exposure of vulnerabilities in the crypto sector that resulted, the federal prudential bank regulators (Board of Governors of the Federal Reserve System (Fed), the Federal Deposit Insurance Corporation (FDIC), and the Office of the Comptroller of the Currency (OCC)) have recently taken firmer, coordinated moves to delineate the types of risks related to the crypto sector that banks should be aware of and, in certain instances, that do not belong in the banking system at all, in their view.
The policy lines being drawn are critical because banks continue play a dominant role in mainstream, day-to-day financial activities. A bank's expansion into crypto activities or offerings underpinned by distributed ledger technology (DLT), particularly in partnership with a fintech company, could amplify adoption of these technologies. A fintech company may find its own scale, reach, and reputation in offering crypto services or DLT-based network augmented by partnering with a bank. If done carefully and cautiously, these partnerships could also help safely integrate certain crypto and DLT-based innovations into more mainstream uses. What that could look like and the supervisory expectations around it are starting to take shape, as reflected by recent actions by the federal prudential regulators. As the Biden Administration has emphasized, these actions reflect “the imperative of separating risky digital assets from the banking system.” Even still, not all crypto and DLT-based activities are off the table.
We are at an important turning point in the industry, with riskier crypto enterprises failing and banking regulators stepping up to make their expectations clearer. It is important for fintech companies that partner with or are looking to partner with banks to offer crypto or DLT-based services, investors in these companies, and their legal advisers to stay abreast of where the prudential overseers are beginning to draw a red line with respect to crypto activities and the opportunities for responsible innovation that remain.
Recent Crypto Developments
The Fed, FDIC, and OCC had jointly announced in November 2021 that they conducted a series of interagency “policy sprints” focused on crypto, but only recently have they started to paint clearer boundaries for the types of crypto activities that banks may engage in. These recent announcements include their joint statement on crypto-asset risks to banking organizations, issued January 3, 2023; the Fed’s policy statement to promote a level playing field for all banks with a federal supervisor, regardless of deposit insurance status, issued on January 27, 2023; and the Fed’s announcement of its denial of application by Custodia Bank, Inc. to become a member of the Federal Reserve System, also made on January 27, 2023.
Here are some practical takeaways for fintech companies that are partnering with or are looking to partner with banks in connection with crypto- or DLT-based offerings:
More generally, the prudential regulators’ crypto actions are a reminder that banks are a “special” type of entity, and the banking system is bounded by a shifting federal regulatory perimeter. That is, banks are supervised and highly regulated institutions, and there are important guardrails with respect to the crypto-related activities they can engage in.
Unique Aspects of Bank-Fintech Partnerships
As a threshold matter, banks are limited in the activities they can engage in by “legal permissibility”—that is, before a bank can engage in new activities of any kind, including crypto-related activities, it must ensure that the specific activity is permissible under applicable banking law and regulation. In addition, prudential oversight means that banks have to operate with safety and soundness in mind, as well as have appropriate measures and controls in place to manage risks. Banks must also ensure compliance with all relevant laws, including those related to anti-money laundering/countering the financing of terrorism, and consumer protection. The Fed, FDIC, and the OCC have each instructed their supervised banks to follow specific notice requirements if they are seeking to engage in crypto activities.
A bank-fintech partnership in offering crypto or DLT-based services can yield unique benefits when executed safely and within these guardrails. A fintech company that partners with a bank could leverage the bank’s resources, infrastructure, and regulatory compliance experience to safely offer crypto services to a larger audience. A bank might rely on the fintech company for back-end technology services or front-end user interfaces to support the crypto services it can offer to its banking customers. Robust integration of crypto functionality and DLT with traditional banking systems, with sound risk controls and consumer education, would also make it safer and easier for the general public to use these technologies.
We are entering a new chapter in the evolution of crypto, DLT, and the businesses around them. Crypto is not vanishing any time soon, and technologies like DLT continue to present unique and potentially promising opportunities for fintech companies and banks to collaboratively upgrade the outdated underpinnings of our financial system. Rather than keeping innovation out of the banking system, the industry and its regulators would do better to figure out the best way to integrate it safely and incrementally. The bank-fintech partnerships that are most advanced in addressing legal uncertainties, mitigating risk, and building strong compliance infrastructures will be best positioned for success. We at Wilson Sonsini Goodrich & Rosati advise fintech companies regarding the integration of these innovative technologies into financial activities and counsel our clients on how to intelligently navigate the novel and evolving legal issues raised by crypto and DLT. Please do not hesitate to contact Jess Cheng, Amy Caiazza, or any member of the firm’s fintech and financial services practice for more information.
 The Fed also noted that the OCC has gone so far as to require a national bank to divest crypto held as principal that it acquired through a merger with a state bank: “Specifically, the OCC conditioned its recent approval of the merger between Flagstar Bank, FSB and New York Community Bank into Flagstar Bank, NA on the divestiture of holdings of “Hash,” a crypto-asset, after a conformance period, as well as a commitment not to increase holdings of any crypto-related asset or token “unless and until the OCC determines that . . . Hash or other crypto-related holdings are permissible for a national bank.” OCC Conditional Approval Letter No. 1299, at 9 (October 27, 2022).