Newsletters
Weekly RoundUp
November 21, 2024

CFPB Issues Final Rule to Supervise the Largest Nonbank Companies Offering Digital Funds Transfer and Payment Wallet Apps

In this issue. The Consumer Financial Protection Bureau (CFPB) issued a final rule to supervise the largest nonbank companies offering digital funds transfer and payment wallet apps; the Financial Crimes Enforcement Network (FinCEN) issued an alert on fraud schemes involving deepfake media targeting financial institutions; the Board of Governors of the Federal Reserve System (Federal Reserve) released its semiannual report on supervision and regulation; a CFPB report detailed student borrower harms from servicing failures and program disruptions; the Federal Deposit Insurance Corporation (FDIC) extended the comment period for the proposed rule on custodial deposit accounts; CFPB Director Rohit Chopra issued a statement on the Federal Trade Commission’s (FTC) Click-to-Cancel Rule; and a CFPB pilot study found differential treatment in small business lending markets. These and other developments are discussed in more detail below.

Regulatory Developments

CFPB Issues Final Rule to Supervise the Largest Nonbank Companies Offering Digital Funds Transfer and Payment Wallet Apps
On November 21, the CFPB issued a final rule making nonbank companies subject to CFPB supervision (i.e., examination, as opposed to only enforcement) if they (1) provide general-use digital consumer payment applications with an annual volume of at least 50 million consumer payment transactions in U.S. dollars and (2) are not a small business concern per the applicable Small Business Administration’s size standard. Anyone who qualifies as a larger participant will remain a larger participant until two years from the first day of the tax year in which the person last met this larger-participant test. This rule is set to take effect 30 days after publication in the Federal Register.

FinCEN Issues Alert on Fraud Schemes Involving Deepfake Media Targeting Financial Institutions
On November 13, FinCEN issued an alert to help financial institutions identify fraud associated with deepfake tools used to falsify identification documents, biometrics, or other customer verification methods, noting that the widespread adoption of generative AI has increased the prevalence and sophistication of deepfakes used to target financial institutions. FinCEN identified the following red flags for deepfakes:

  • Inconsistent photos or identifying information presented by the customer.
  • The customer declining to verify their identity via a live call or multifactor authentication.
  • A reverse-image lookup or deepfake detection software flagging a customer’s image as created by generative AI.
  • A customer’s metadata (e.g., geographic data) not matching their identity documents.
  • A newly opened account with little prior transaction history and high volumes of payments to risky sources or repeat rejected payments.

FinCEN requests that financial institutions observing any of these red flags file a Suspicious Activity Report, with “FIN-2024-DEEPFAKEFRAUD” referenced in the commentary.

“Vigilance by financial institutions to the use of deepfakes, and reporting of related suspicious activity, will help safeguard the U.S. financial system and protect innocent Americans from the abuse of these tools.”
— Andrea Gacki, FinCEN Director

Federal Reserve Releases Semiannual Report on Supervision and Regulation
In November, the Federal Reserve released its latest semiannual report on supervision and regulation, reporting that the banking system remains sound and resilient overall, as evidenced by most banks continuing to report strong capital levels above applicable regulatory requirements, liquidity and funding conditions remaining stable compared to 2023, and asset quality generally remaining sound. The report also acknowledges continued signs of weakness in credit performance in commercial real estate lending and some consumer lending sectors. To protect against potential credit losses, banks are adding to credit loss reserves. The report also offers regulatory developments and supervisory updates.

CFPB Report Details Student Borrower Harms from Servicing Failures and Program Disruptions
On November 15, the CFPB released its annual report of the CFPB Student Loan Ombudsman covering the 2023-2024 award year. The report highlights several persistent problems that borrowers face when interacting with student loan servicers, including payment processing errors, inaccurate repayment information, and customer service grievances. The report also examines the ongoing litigation regarding the SAVE repayment plan implemented by the Biden Administration and its impact on borrowers. The report recommends several reforms for the federal student loan system, including holding borrowers harmless when a student loan servicer causes an error and extending accountability for those errors to the servicers. The CFPB also endorses broader reforms for the student loan system, including with respect to student loan debt cancellation, lowering the cost of college, and strengthening consumer protection laws in the private student loan marketplace.

FDIC Extends Comment Period for Proposed Rule on Custodial Deposit Accounts with Transactional Features and Prompt Payment of Deposit Insurance to Depositors
On November 18, the FDIC extended the comment period by 45 days for its proposed rule on recordkeeping for custodial accounts. The proposed rule is aimed at enhancing the FDIC’s ability to determine deposit insurance coverage and pay deposit insurance claims “as soon as possible” in the event of the failure of an insured depository institution holding custodial deposit accounts with transactional features. Comments must now be received by the FDIC on or before January 16, 2025.

Statement of CFPB Director Rohit Chopra on the FTC’s Click-to-Cancel Rule
On November 14, CFPB Director Rohit Chopra issued a statement praising the consumer protection aspects of the FTC’s Click-to-Cancel Rule, finalized by the FTC on October 16, and promising that the CFPB would take action against consumer financial firms and other covered entities that violate the Click-to-Cancel Rule. Among other requirements for subscription services, the Click-to-Cancel Rule requires that entities offering subscription services make it as easy to cancel the subscription as it was to enroll in the subscription. Chopra’s statement highlighted the numerous complaints that the CFPB has received from consumers regarding subscription services offered by financial institutions, including complaints related to unintentionally signing up for subscription services and the difficulty of cancelling those services.

CFPB Pilot Study Finds Differential Treatment in Small Business Lending Markets
The CFPB and US Department of Justice conducted matched-pair testing among trained testers to identify potential differential treatment among well-qualified Black and white small business owners seeking credit from large bank lenders. Using both objective and subjective measures, the study found statistically significant evidence that Black testers received less encouragement to apply for financing than their white counterparts. Black testers also received more information than their white counterparts about non-requested product types, including credit products typically targeted to higher credit-risk businesses, such as business credit cards and real estate-secured loans. The CFPB published its report of these findings, emphasizing the CFPB’s ongoing attention to Equal Credit Opportunity Act compliance in small business lending and suggesting that the new small business data collection rule is likely to result in increased supervisory and enforcement actions by the CFPB.


Check Out Goodwin's Latest Industry Insights

New Client Alert: Corporate Transparency Act: January 1 Deadline is Almost Here
The due date for Corporate Transparency Act (CTA) filings is rapidly approaching. For most companies formed or registered before January 1, 2024, the deadline to file is January 1, 2025. However, certain companies affected by recent hurricanes may qualify for a six-month extension, provided they meet specific criteria set by FinCEN. Companies formed or registered during 2024 have 90 days from formation or registration to file. To read the full alert, click here.

Corporate Transparency Act (CTA) Resource Center
Go-to resource and compliance toolkit.

Fintech Flash
The latest news and developments for the rapidly evolving fintech industry – which often can change in a flash.

Bank Failure Knowledge Center
Visit our knowledge center for timely updates and analysis on important developments related to bank failures.

Consumer Finance Insights (CFI) Blog
The latest on consumer finance regulation, litigation, and enforcement.

 

This informational piece, which may be considered advertising under the ethical rules of certain jurisdictions, is provided on the understanding that it does not constitute the rendering of legal advice or other professional advice by Goodwin or its lawyers. Prior results do not guarantee similar outcomes.