CFPB Proposes New Oversight of Big Tech and Other Consumer Payment App Providers

5 Min Read By: Jess Cheng

In a shot across the bow to the digital payments industry, the U.S. Consumer Financial Protection Bureau (“Bureau”) has issued a proposed rule to expand its oversight authority to nonbank providers of consumer payment apps.[1] These apps include digital wallets, funds transfer services, and peer-to-peer apps—for both U.S. dollar payments and, surprisingly, also bitcoin and other crypto-asset payments. The Bureau anticipates that the proposal would cover about seventeen companies based on data from various sources, including information it has collected from Amazon, Apple, Facebook, and others with respect to their payment offerings.[2]

Under the proposed rule, if finalized, the Bureau would exercise the full plate of supervisory authority over “larger participants” in this market. On top of its existing rule-writing and enforcement powers, the Bureau would exercise examination powers under the Consumer Financial Protection Act (“CFPA”) over these larger participants, such as conducting on-site examinations, imposing reporting requirements, and conducting periodic monitoring.

These supervisory activities would impose new costs on nonbank providers. The more significant impact to the digital payments industry, however, is the broad line of sight that the Bureau would gain into the activities of leading market participants. Areas of potential scrutiny where the Bureau has strongly signaled interest include the novel ways that consumer financial data and behavior data are used together in “super apps” and in embedding payments within a social media feed.[3] This proposed rule comes hot on the heels of the Bureau’s proposed rule to accelerate open banking, as the Bureau is laying the groundwork for a greater role at the intersection of digital payments and data.[4]

Scope of the Proposed Rule

The proposed rule homes in on the “general-use” digital consumer payment apps market, in recognition of its tremendous growth in recent years.[5] However, the Bureau’s examination authority under the proposed rule would apply to only a subset of nonbank providers in this market—those that are deemed “larger participants.”

The CFPA grants the Bureau broad discretion to choose criteria for assessing whether a nonbank provider is a “larger participant.” Under its proposed criteria, a nonbank provider would be a “larger participant” if it satisfies the following two prongs:

  1. Payment transaction volume prong: The nonbank provider and its affiliates, in aggregate, have an annual “consumer payment transaction” volume of at least five million transactions, and
  2. Entity size prong: The nonbank entity would not be a small business concern as defined by the Small Business Administration size standards for its primary industry (the likely classification would be “Financial Transactions Processing, Reserve, and Clearinghouse Activities”).[6]

A key metric in determining whether a nonbank provider would be considered a “larger participant” for purposes of the proposed rule, therefore, is the volume of “consumer payment transactions” that it facilitates. To fall within that definition (and be counted toward the payment transaction volume prong of the proposed “larger participant” criteria), a transaction must be primarily for personal, family, or household purposes; purely commercial or business-to-business payments would be outside the definition.

The following table summarizes additional nuance from the proposed rule on the definition of “consumer payment transactions”:

What is a “consumer payment transaction” under the proposed rule?

What is covered?

  • Any payment transaction that results in a transfer of funds by or on behalf of a consumer to a third party
    • Focus is on the sending of a payment, not the receipt
    • Encompasses a consumer’s transfer of the consumer’s own funds (such as where the nonbank provider transfers the consumer’s balance or instructs the consumer’s bank, on the consumer’s behalf, to make a funds transfer)
    • Also encompasses the use of a consumer’s account or payment credentials to make a payment (such as digital wallet functionality to hold and transmit the consumer’s credit card information)
  • Digital assets, including bitcoin, that are used to make a payment by or on behalf of a consumer to a third party

What is excluded?

  • International payments, such as remittances
  • Exchange transactions (such as conversions of U.S. dollars to a different foreign currency or purchases, sales, or exchanges of digital assets)
  • A consumer’s payment to a marketplace or merchant for the sale or lease of goods or services from that marketplace or merchant (such as by using payment credentials stored by an online marketplace)
  • Consumer lending activities, such as digital apps through which a nonbank lends money to consumers to buy goods or services

Examination Authority

Under the proposed rule, the Bureau would examine for compliance with federal consumer financial protection laws, such as the CFPA’s prohibition against unfair, deceptive, and abusive acts and practices; the privacy provisions of the Gramm-Leach-Bliley Act and its implementing Regulation P;[7] and the Electronic Fund Transfer Act and its implementing Regulation E.[8] Under the proposed rule, the Bureau would notify a nonbank provider when it intends to undertake supervisory activity, and the provider would then have an opportunity to claim that it is not a larger participant.

The Bureau’s examination authority would coexist with state oversight of money transmission. While holding a state license would not shield from Bureau oversight a money transmitter that also meets the “larger participant” criteria, the proposed rule notes that the Bureau’s prioritization of supervisory activity among nonbank providers would take into account the extent of relevant state oversight and that the Bureau would coordinate with appropriate state regulatory authorities in examining larger participants.

The Bureau is inviting public comment on the proposed rule through January 8, 2024.

  1. 88 Fed. Reg. 80,197 (Nov. 17, 2023).

  2. Press Release, Consumer Fin. Prot. Bureau, CFPB Orders Tech Giants to Turn Over Information on Their Payment System Plans (Oct. 21, 2021). See also US consumer watchdog proposes rules for Big Tech payments, digital wallets, Reuters (Nov. 7, 2023).

  3. Consumer Fin. Prot. Bureau, The Convergence of Payments and Commerce: Implications for Consumers (Aug. 2022).

  4. CFPB Announces Proposed Rules to Accelerate Open Banking, Wilson Sonsini (Oct. 24, 2023).

  5. The Bureau characterizes “general use” by the absence of significant limitations. For example, a digital app whose payment functionality is used solely to purchase or lease a specific type of services, goods, or property (such as transportation, lodging, food, an automobile, real property, or consumer financial products and services) would not have “general use.” Similarly, a digital app that helps consumers split a bill for a specific type of goods or services (such as a restaurant) would not have “general use” for purposes of the rule.

  6. 13 CFR pt. 121.

  7. 12 CFR pt. 1016.

  8. 12 CFR pt. 1005.

By: Jess Cheng


Connect with a global network of over 30,000 business law professionals


Login or Registration Required

You need to be logged in to complete that action.