Chime buys the bank it rented — Weekly Digest, Sep 13, 2026

Week’s Lead Stories

CHIME · STRIDE BANK · SEP 8 · $590M CASH DEAL ANNOUNCED
Chime buys the bank it rented
Chime agreed Tuesday to buy Central Service Corporation, the parent of Stride Bank, for $590 million in cash. The fintech has held its deposits at Stride for seven years; it will now own the charter it rented. Chime called the purchase a faster and more proven path to full-stack ownership than applying for a charter of its own, and Chief Executive Chris Britt told Banking Dive the deal gives the company complete control of its destiny. Owning the bank strips out partner-bank fees, lowers the funding cost behind its lending build and takes a partner out of every product launch. Shares rose 11%. The read-across ran through sponsor-bank valuations all week: Coastal Financial fell 43% after a plaintiffs' firm flagged its banking-as-a-service credit risk. Sponsor banks whose earnings rest on a single large program now have a public price for what that program is worth, and a demonstration that the program can buy the charter rather than renew.

OCC · FED · FDIC · SEP 11 · COMMENT 60 DAYS AFTER FR PUBLICATION

▸

Core providers pulled inside the perimeter: For years the processors that run deposit systems, payments and loan servicing for community banks sat a contract away from examiners, who could fault the bank but not the vendor tying its hands. That changed on September 11, when four federal banking agencies proposed new third-party risk guidance and the OCC, Federal Reserve and FDIC issued a companion statement, OCC Bulletin 2026-47, giving examiners a documented basis to ask why a core contract lacks audit rights, incident-notification terms or exit provisions. The proposal replaces uniform vendor process with expectations sized to each relationship, and examiners can weigh it now. Read it as a negotiating document. The deployment clock is your next contract renewal, not your next exam. Comments run 60 days after Federal Register publication, which had not occurred as of Friday.

NYDFS · GUIDANCE ISSUED THIS MONTH

▸

Concentration is what the states want mapped: New York's Department of Financial Services told regulated firms to identify where several critical functions ride on a single provider, a question its earlier rules under 23 NYCRR Part 500 did not ask. The timing matters after this month's Jack Henry intrusion, where the core provider reported data tied to 10 of its roughly 7,200 client banks taken by an extortion group, with no platform outage and no ransom paid. Put tested restoration-time evidence in the file before the renewal conversation.

FED · FDIC · OCC · SEP 10 · EFFECTIVE ON FR PUBLICATION

▸

Exam relief for the smallest banks: The three banking agencies raised the asset ceiling for the 18-month examination cycle from $3 billion to $6 billion on September 10, and estimate as many as 188 community banks may now qualify. Eligibility requires a composite and management rating of 1 or 2, well-capitalized status, no formal enforcement proceeding and no change of control in the prior year. The relief is on-site frequency, not supervision. The OCC kept discretion to return any bank to a 12-month cycle. The interim final rule takes effect on Federal Register publication, with comments due 30 days after publication under the 21st Century ROAD to Housing Act.

OCC · FDIC · SEP 8 · FINAL

▸

A higher bar for supervisory criticism: The OCC and FDIC finalized uniform standards for matters requiring attention and for citing unsafe or unsound practices, narrowing when a nonmaterial weakness becomes a formal finding. The two rules land on the same institutions, and only exam frequency is reversible by the bank. Fewer examiner-supplied warnings arrive before a downgrade, so internal early-warning systems and documented self-correction now carry the weight both rules shed. Boards should ask what last quarter's monitoring caught that no examiner raised.

FINCEN · FED · FDIC · OCC · NCUA · SEP 8 · GUIDANCE ISSUED

▸

Digital IDs cleared for CIP: Five agencies jointly confirmed on September 8 that a state-issued mobile driver's license or other verifiable digital credential can serve as documentary verification under the Customer Identification Program rule at 31 CFR 1020.220, carried by the Fed as SR 26-6. The permission is conditional on capability: a bank must be able to extract the data, confirm the credential's authenticity and non-revocation, and retain records an examiner can test. This is a technology decision before it is a policy one. Institutions without that capability cannot accept the credential regardless of what their procedures say.

REVOLUT · SEP 12 · BREACH CONFIRMED

▸

The same control, from the other side: Revolut confirmed over the weekend a customer data breach in which staff surrendered identity documents, selfie images and transaction records to attackers impersonating a government channel. The permission and the breach turn on one question: whether the institution can verify the authenticity of a channel, not a document. Revolut holds conditional OCC approval for a national charter, so the incident sits in front of supervisors mid-application. Firms building mobile-ID acceptance should specify credential validation and inbound-request authentication in one policy, not two.

Regulatory Developments

SEC · Q1 2027 · RULEMAKING AGENDA

▸

SEC's Q1 2027 issuance deadline is a capacity problem for the reader, not the agency: Chairman Paul Atkins sent six proposals to the White House budget office in late August, and staff have been told to issue the remainder by the close of the first quarter of 2027. The list reaches shareholder voting — including a repeal of Rule 14a-8, the 80-year-old provision that lets shareholders put proposals on a company proxy — retail access to private equity and other alternatives, crypto custody, and executive pay disclosure. Overlapping comment windows through the winter mean no legal department files well on six at once. Pick the two that touch revenue — for most banks that is the private-markets access proposal and the crypto custody clarification — and assign owners this month. The Commission's proposed rescission of the pay-to-play rule, Rule 206(4)-5, which restricts political contributions by advisers seeking government business, is among the six; comments on that rescission close November 9. Bank-affiliated advisers that stood down contribution monitoring on the strength of a proposal still owe today's obligations. A rescission at proposal stage changes nothing.

FRB · SEP 8 · COMMENT WINDOW CLOSED

▸

Fed AML/CFT comment window closed; trade groups object to FinCEN's missing role: The Federal Reserve's comment window on anti-money-laundering and counter-terrorist-financing program requirements closed September 8. The Bank Policy Institute and The Clearing House filed comments before the window closed, objecting that the Fed's version departs from the FinCEN and interagency proposals by giving FinCEN no coordinating role in examination — which would leave Fed examiners free to set standards that conflict with the national priorities Congress assigned to Treasury, and, unlike the other agencies' proposals, offers a bank no route to raise that conflict with Treasury. The comment file is now closed; the argument moves to examination rooms, one bank at a time.

OFAC · SEP 8 & SEP 10 · DESIGNATIONS; FOUR GENERAL LICENSES SUSPENDED

▸

Iran sanctions campaign widens: OFAC designated 36 aviation-sector targets on September 8 under Operation Economic Outcast, tied by Treasury to firms still supporting Mahan Air, then added Kata'ib Hizballah commanders and Iraqi facilitators on September 10. A final rule the same week indefinitely suspended four general licenses under the Iranian Transactions and Sanctions Regulations, covering overflight, aircraft safety, bunkering and civil-aircraft reexportation, with no wind-down. Blocking attached the moment each listing took effect; the 10-business-day clock is only the deadline to file blocking reports. Correspondent desks with UAE, Türkiye and Oman intermediary exposure own the review, and desks that papered trades against the suspended licenses lost the legal basis on September 8.

IDSCAN.NET · SEP 8 · BREACH

▸

Identity-verification vendor breach reaches bank document stores: The 153 million US and Canadian driver's license scans traced to IDScan.net include the infrared and ultraviolet forensic images banks rely on to spot forged documents — precisely the data designed to defeat synthetic identity fraud. The vendor has taken down the public pages naming its bank and credit union integrations. Institutions that used it should obtain written confirmation of whether their scans sit in the set, and should expect third-party due diligence questions at the next examination. No regulator has announced an action.

TREASURY · IRS · FINAL RULE; FORM 6050AA

▸

Auto-loan interest deduction lands on lenders: Treasury finalized the rule letting individuals deduct up to $10,000 a year of interest on qualifying vehicle loans for 2025 through 2028, and the compliance weight falls on lenders, not borrowers. New Form 6050AA requires anyone receiving $600 or more in annual interest on a specified passenger vehicle loan to file with the IRS and furnish a payee statement. The awkward part is the look-back to calendar-year 2025 interest, on loans that must carry US final assembly, a test absent from most origination records. Servicing platforms need the field before year-end.

…and 5 further developments this week — the full log is at lexregpulse.com.

Market & Macro Signals

▸

A meeting that could hike: Wednesday's FOMC decision is the first this cycle where the market's base case is an increase, not a cut. August consumer prices rose 3.4% annually with core at 2.4%, and the odds of a September hike reached 79% by Friday. Markets now carry four hikes by July 2027; at the start of 2026 they priced four cuts. Chair Kevin Warsh has dropped forward guidance to read yields and commodities directly, so no speaker will soften the print before the vote.

▸

Energy pass-through argues against disinflation: Brent crossed $100 for the first time since July after US strikes on Iranian tankers near the Strait of Hormuz, with diesel above $6 a gallon, and Saudi Arabia shut its East-West pipeline after multiple attacks. The ISM services prices-paid index hit a four-year high. This is the input the Fed said it was watching. It points the wrong way for the doves.

▸

The refinancing wall behind the vote: The 10-year Treasury yield touched 4.99% Friday, its highest since November 2023, before reversing. Roughly $6.1 trillion of Treasury bills mature inside twelve months, repricing at whatever rate Wednesday sets. For bank treasurers the mark hits both sides: 2021-vintage securities take the hit while money-market yields set the floor under deposit competition.

▸

Canada's counter-tariffs in force: Canada's matching tariffs on $27.6 billion of US imports — at 15%, 25% and 50%, with steel at 50% alongside dairy, appliances, agricultural equipment and electronics — took effect at 12:01 a.m. September 8. The Department of Finance published the schedule on August 25; the US duties it answers took effect August 22. President Trump separately directed the General Services Administration and the US Trade Representative to begin removing Canadian-origin products from federal procurement. Banks with cross-border commercial books, trade finance lines, or steel and durable-goods borrowers should pull the exposure list against the tariff schedule, and should extend that review to borrowers selling into US federal contracts.

▸

Concentration in the balance sheet: Foreign investors hold a record $39 trillion in US assets at the lowest hedge ratio in a decade, and equities now make up 48.2% of household financial assets, a record. Collateral values, fee income and consumer balance-sheet strength now move with one asset class. A Wednesday repricing tests all three at once.

Industry Watch

▸

Charter routes multiply: Block, Inc. filed with the OCC to establish Builders Bank & Trust, a national trust bank that would custody bitcoin and settle stablecoins alongside its existing Square Financial Services, per Simon Taylor; the application is pending, no decision issued. Nubank went live in the United States through FDIC-insured Lead Bank while its own charter, conditionally approved in January, stays pending, and Checkout.com began direct acquiring under a Georgia merchant-acquirer charter. Mercury cleared FDIC conditional approval, the second for a digital bank in two weeks. Firms are assembling federal access in pieces rather than waiting for a single grant.

▸

FDIC keeps $1.71 billion from SVB creditors: The Second Circuit held that the FDIC need not have filed a claim to preserve its setoff against SVB Financial's deposits, and a federal judge found the holding company's management negligently prioritized yield over safety. The 2023 failure's estate loses the recovery. Holding-company treasury policies at banks with large uninsured deposits at their own subsidiaries are the read-across.

▸

Bank M&A keeps buying funding: The EverBank–WaFd merger announced Monday would create a $75 billion lender, moving WaFd off its thrift base while diversifying EverBank's higher-cost funding. First Citizens closed on 138 branches across 11 states, and John Marshall Bancorp agreed to buy Eagle Financial Services for $253 million. In a quarter where deposit cost decides margin, branch buyers are paying for funding, not real estate.

▸

Stablecoin rails move to production: U.S. Bank ran a live cross-border payment on its own USBDC token on Stellar, the largest US bank to put its own instrument into production. Coinbase and Moov agreed to supply stablecoin payment and custody to more than 1,000 community banks and credit unions, and Visa's stablecoin settlement reached a $20 billion annualized run rate. Issuer, partner, or tokenized deposit is now a live architecture choice.

▸

AI vendors enter the model-risk inventory: OpenAI launched ChatGPT for Financial Services the same day four agencies proposed vendor-risk guidance, and UBS now requires incoming junior bankers to demonstrate AI proficiency. A vendor's own benchmark is not validation evidence. Model-risk teams own that question independently.

Cross-Agency Patterns

▸

Reach in, burden off: The same three agencies that cut exam frequency for banks under $6 billion pushed examination attention down into core providers in the same week (Week's Lead Stories). The message is not less supervision but supervision aimed at concentration and vendor practice rather than headcount at the smallest banks.

▸

Proportionality is the shared vocabulary: Risk-calibrated vendor expectations, the narrower findings standard, and the trade groups' fight over tailored AML examination (Week's Lead Stories, Regulatory Developments) all turn on one principle: expectations sized to risk rather than uniform process. Banks that can document self-identification are the intended beneficiaries.

▸

Authentication is the through-line: The five-agency CIP permission, the Revolut breach, the IDScan.net driver's-license breach, and FinCEN's scam-market and health-care data (Week's Lead Stories, Regulatory Developments) all point at whether an institution can verify the authenticity of a channel, not just a document. The next examination cycle carries these typologies.

What to Watch

▸

FDIC exam-cycle rule publishes Sept 14: The interim final rule expanding the 18-month cycle is expected in the Federal Register September 14, which starts the 30-day comment clock and makes the relief operative. Banks between $3 billion and $6 billion should confirm with their examiner that rating, capital, absence of a proceeding and no change of control all hold. The eligibility test is continuous, not annual.

▸

CLARITY Act cloture, Sept 15: The Senate's procedural vote on the digital-asset market structure bill needs 60 votes, and House leaders have stripped September 21 and 28 from the calendar, leaving a Senate-amended text almost no correction path this Congress. A White House adviser called it the measure's last chance for years. Tokenized-deposit and stablecoin product planning turns on the outcome.

▸

FOMC decides Sept 16: The first meeting this cycle with an increase as the base case. Asset-liability committees should have the hike branch modeled before the vote, given the refinancing wall and the deposit-competition floor.

▸

Senate Banking markup, Sept 17: The committee marks up the Terrorism Risk Insurance Program reauthorization alongside the nomination of Brian Johnson to run the CFPB. Whoever takes the chair inherits the complaint backlog the bureau's Inspector General flagged this week.

▸

SEC electronic-delivery comments close Sept 21: Bank-affiliated broker-dealers and advisers that still default to paper for statements and prospectuses have until then to put the cost of the current regime on the record.

▸

Vendor-risk and upcoming comment clocks: The four-agency third-party risk guidance runs 60 days from Federal Register publication, which had not occurred as of Friday. The OCC's Violations of Laws or Regulations comment window closes October 1, the FDIC's reciprocal-deposits interim final rule comment deadline is October 1 — directly driving brokered-deposit classification and assessment rates for banks running deposit placement networks — and the FDIC's Disclosure of Information extension closes October 5. All three reach the same community banks the exam-relief package just freed.