In a shot across the bow to the digital payments industry, the U.S. Consumer Financial Protection Bureau (“Bureau”) has issued a proposed rule to expand its oversight authority to nonbank providers of consumer payment apps.[1] These apps include digital wallets, funds transfer services, and peer-to-peer apps—for both U.S. dollar payments and, surprisingly, also bitcoin and other crypto-asset payments. The Bureau anticipates that the proposal would cover about seventeen companies based on data from various sources, including information it has collected from Amazon, Apple, Facebook, and others with respect to their payment offerings.[2]
Under the proposed rule, if finalized, the Bureau would exercise the full plate of supervisory authority over “larger participants” in this market. On top of its existing rule-writing and enforcement powers, the Bureau would exercise examination powers under the Consumer Financial Protection Act (“CFPA”) over these larger participants, such as conducting on-site examinations, imposing reporting requirements, and conducting periodic monitoring.
These supervisory activities would impose new costs on nonbank providers. The more significant impact to the digital payments industry, however, is the broad line of sight that the Bureau would gain into the activities of leading market participants. Areas of potential scrutiny where the Bureau has strongly signaled interest include the novel ways that consumer financial data and behavior data are used together in “super apps” and in embedding payments within a social media feed.[3] This proposed rule comes hot on the heels of the Bureau’s proposed rule to accelerate open banking, as the Bureau is laying the groundwork for a greater role at the intersection of digital payments and data.[4]
Scope of the Proposed Rule
The proposed rule homes in on the “general-use” digital consumer payment apps market, in recognition of its tremendous growth in recent years.[5] However, the Bureau’s examination authority under the proposed rule would apply to only a subset of nonbank providers in this market—those that are deemed “larger participants.”
The CFPA grants the Bureau broad discretion to choose criteria for assessing whether a nonbank provider is a “larger participant.” Under its proposed criteria, a nonbank provider would be a “larger participant” if it satisfies the following two prongs:
- Payment transaction volume prong: The nonbank provider and its affiliates, in aggregate, have an annual “consumer payment transaction” volume of at least five million transactions, and
- Entity size prong: The nonbank entity would not be a small business concern as defined by the Small Business Administration size standards for its primary industry (the likely classification would be “Financial Transactions Processing, Reserve, and Clearinghouse Activities”).[6]
A key metric in determining whether a nonbank provider would be considered a “larger participant” for purposes of the proposed rule, therefore, is the volume of “consumer payment transactions” that it facilitates. To fall within that definition (and be counted toward the payment transaction volume prong of the proposed “larger participant” criteria), a transaction must be primarily for personal, family, or household purposes; purely commercial or business-to-business payments would be outside the definition.
The following table summarizes additional nuance from the proposed rule on the definition of “consumer payment transactions”:
What is a “consumer payment transaction” under the proposed rule? | |
What is covered? |
|
What is excluded? |
|
Examination Authority
Under the proposed rule, the Bureau would examine for compliance with federal consumer financial protection laws, such as the CFPA’s prohibition against unfair, deceptive, and abusive acts and practices; the privacy provisions of the Gramm-Leach-Bliley Act and its implementing Regulation P;[7] and the Electronic Fund Transfer Act and its implementing Regulation E.[8] Under the proposed rule, the Bureau would notify a nonbank provider when it intends to undertake supervisory activity, and the provider would then have an opportunity to claim that it is not a larger participant.
The Bureau’s examination authority would coexist with state oversight of money transmission. While holding a state license would not shield from Bureau oversight a money transmitter that also meets the “larger participant” criteria, the proposed rule notes that the Bureau’s prioritization of supervisory activity among nonbank providers would take into account the extent of relevant state oversight and that the Bureau would coordinate with appropriate state regulatory authorities in examining larger participants.
The Bureau is inviting public comment on the proposed rule through January 8, 2024.
Press Release, Consumer Fin. Prot. Bureau, CFPB Orders Tech Giants to Turn Over Information on Their Payment System Plans (Oct. 21, 2021). See also US consumer watchdog proposes rules for Big Tech payments, digital wallets, Reuters (Nov. 7, 2023). ↑
Consumer Fin. Prot. Bureau, The Convergence of Payments and Commerce: Implications for Consumers (Aug. 2022). ↑
CFPB Announces Proposed Rules to Accelerate Open Banking, Wilson Sonsini (Oct. 24, 2023). ↑
The Bureau characterizes “general use” by the absence of significant limitations. For example, a digital app whose payment functionality is used solely to purchase or lease a specific type of services, goods, or property (such as transportation, lodging, food, an automobile, real property, or consumer financial products and services) would not have “general use.” Similarly, a digital app that helps consumers split a bill for a specific type of goods or services (such as a restaurant) would not have “general use” for purposes of the rule. ↑
