MW: Hi everyone and welcome to our first Ask an Expert. I'm Michelle Wilkinson, Senior Advisor of Retail Banking at equipifi. To kick us off today is Fred Rubin to speak about the regulatory landscape for BNPL.

Fred is a consultant to banks conducting comprehensive analysis of credit risk functions. He was formerly the Chief Credit Officer at financial institutions (FIs) such as PenFed Credit Union, Pacific Mercantile Bank, and National Cooperative Bank. He has also served as the National Bank Examiner at the Office of the Comptroller of the Currency (OCC). Welcome Fred. 

FR: Great to be here.  

MW: As you know, in September 2022 the Consumer Financial Protection Bureau (CFPB) released their BNPL study after analyzing loan data from five fintech lenders. Many FIs are closely tracking these movements in the regulatory landscape to prepare for the impact that BNPL may have to them and their cardholders. Would you please give us some background on this report to set the stage? 

FR: Yes, of course. After the 2008 financial crisis in which nonbank companies played a pivotal role, Congress tasked the CFPB with supervising fintechs. CFPB’s September 2022 issuance focuses on BNPL loans outside of this space, where banks do not use information from credit bureaus, and don’t report their information to credit bureaus. In addition to the CFPB, the Office of the Comptroller of the Currency (OCC) which regulates National Banks recently announced its plans to establish an Office of Financial Technology. This is the OCC’s attempt to begin understanding how these new companies operate so that in the future, they can regulate them properly. 

MW: So Fred, given your regulatory expertise and time with the OCC, what are your thoughts on the recent rise of BNPL as a payment preference? Especially since this growth has been largely driven by third-party fintechs. 

FR: I think it was inevitable that BNPL would find its way into the modern, online world and especially into the fintech space. Historically, BNPL has been used more by those without access to traditional credit sources, and in many cases, BNPL was a service offered by local retailers. As a result, most of the older BNPL programs charged very high interest rates which gave the program a somewhat tarnished reputation. 

Fintechs have been really active in researching ways to profitably lend to new clients due to all the competition for assets in the traditional lending spaces. The traditional lending spaces are becoming crowded and competitive, so it was only natural that the fintechs would wade into BNPL. Even though most of these programs charge relatively modest rates, the expansion has reached the regulators’ radar. 

MW: The CFPB cites concerns surrounding loan stacking and overextension. Can you tell me more about why these are concerns? Traditionally, how are these concerns managed by FIs? 

FR: Let’s first define those terms. Stacking is caused when a consumer establishes more than one BNPL account. This stacking behavior can cause overextension, where the same consumer now has more BNPL monthly payment obligations  than their given income can afford, according to traditional credit measurements. Some fintechs have shied away from using these traditional measurements in order to find wider segments to lend to.   

The global market for BNPL has tripled over the last 3 years and is projected to reach $200 billion during 2022. I don’t think the CFPB has had the time or resources to analyze and understand the fintechs’ methods, and to ensure that these methods produce profitable and ethical mechanisms of granting credit over time. The OCC, Federal Reserve, and Federal Deposit Insurance Corporation (FDIC) are also displaying some anxiety about this method of granting credit due to their lack of history with BNPL. 

Banks and Credit Unions have traditionally used information from one or more of the large credit bureau companies, combined with Credit Scoring, to analyze the probability of loss on their lending portfolios, and to monitor their customers use of credit. They use the probability of loss to set their bad debt reserves, and the regulators monitor those reserves very closely to gauge the health of financial institutions. Anything that introduces change to these factors is a concern to both financial institutions and regulators. 

Fintech companies have been combining new research and new data that might not have been available to traditional FIs, such as insight to consumer shopping behaviors like the merchants they frequent and the products they purchase, to assure that a client can pay off these accounts on time. They are not using the 3 large credit bureaus to provide this information, nor are they reporting their loans to the credit bureaus. This lack of information can cause some angst among the financial institutions because it affects traditional measures of ability to pay and, in the extreme, could cause all lenders to lose money on individual loans without any warning. 

MW: How does a financial institution go about protecting and using consumer data and how does that compare against third party providers who collect similar consumer financial data? 

FR: Traditional FIs have literally invested billions in security to create safe data warehouse processes, and fight against hackers every minute of the day. This area of their business is heavily examined, with most large financial institutions having on-site examiners from one of the regulators in their offices every day. This security posture extends to their contracted third-party providers – for example credit bureau companies, FI vendors, partners, and contractors – all of which must assure the regulated financial institution that they have sufficiently secured systems to prevent breaches. We can see from the publicly announced data breaches that this is a constant and costly problem for them. 

Although there is some effort to breach fintechs’ systems, Banks remain the largest targets. As a result, fintechs generally rely on much simpler methods to secure their data. They are collecting and using similar consumer financial data but have not been subject to the regulators’ examinations to test these in the same way that traditional FIs have. 

Expert insights, industry updates, and next generation commentaries for all things Buy Now, Pay Later - in one easy read.