BaaS middleware: Unit, Treasury Prime, Synctera

Concept

Between a sponsor bank and a fintech brand there is almost always a technology intermediary—a BaaS platform, or middleware. The bank holds the charter, accounts, and answers to the regulator; the fintech owns the product and customer; and the middleware connects them via API: account opening, card issuance, payment flows, end-customer ledgers, and compliance infrastructure.

For anyone building embedded finance, middleware is what you actually integrate with: the sponsor bank often remains behind the scenes. Platforms grew on the promise of launching a neobank in weeks, not years. After 2024, the model was reassembled—the collapse of Synapse and tightened supervision showed that the most vulnerable point in the scheme is the integrity of the ledger and reconciliation, which the middleware itself maintains.

🍓 Middleware does not hold a license. The charter, FDIC insurance, and responsibility to the regulator remain with the sponsor bank—the intermediary only services the flow. That's why supervision increasingly demands that the bank control end customers directly, not through a "layer."

How It Works

There are three participants in the scheme, and end customers' funds sit in a pooled FBO account on the bank's balance sheet. Who owes whom how much inside the pool is known by the middleware ledger. When the ledger diverges from what the bank sees, a crisis begins.

• Sponsor bank — holds the charter and accounts, runs the BSA/AML program, is responsible for partner actions (third-party risk management).
• Middleware / BaaS platform — API between the bank and fintech; maintains the end-customer ledger, orchestrates KYC/KYB and monitoring, reconciles pooled FBO accounts with bank balances.
• Fintech / brand — product, customer experience, marketing, and onboarding of end users.

Key Providers

• Unit — broad API platform: accounts, cards, payments, lending. After 2024, it raised the bar for fintech selection because banks narrowed their risk appetite.
• Treasury Prime — in February 2024, cut about half its staff and pivoted from selling to fintechs to selling software directly to banks (Bank-Direct product). The logic: regulators want the bank itself to control the partner, without an intermediary seller.
• Synctera — end-to-end platform: infrastructure, compliance, and a network of community banks. Bet on post-2024 tightening—enhanced reconciliation, fraud and BSA tools; also offers direct "bank ↔ fintech" contracts.

The Synapse Lesson

Synapse was a middleware intermediary between dozens of fintechs and partner banks. In April 2024, the company filed for bankruptcy. Its ledger diverged from bank balances: of US$219M frozen in May 2024, banks returned most, but a shortfall of US$65–95M remained between what was in the accounts and what was recorded in Synapse's system. The money was in pooled FBO accounts, and all reconciliation relied on Synapse's own accounting system.

In November 2025, the court dismissed the bankruptcy case: there were no funds to settle, and no buyers for the assets. In parallel, the CFPB allocated US$46M from its penalty fund to compensate victims—about half the shortfall and the first time the fund was used for a fintech incident.

Takeaway for operators: the main risk of a program is the intermediary's accounting system. The integrity of the middleware ledger and the bank's ability to independently reconcile balances determine whether end customers get their money.

The Shift to "Direct"

After Synapse and the interagency guidance of 2023 on managing third-party risks, banks demand direct control over end customers. Middleware is going "direct": selling software to banks, not fintechs (Treasury Prime case), and contractual schemes increasingly link the bank and fintech directly, leaving the platform only the technology. For anyone building a program, this means: the sponsor bank will look more closely and demand demonstrable control over end-customer onboarding.

What to Check When Choosing Middleware

• Who holds the ledger and how is FBO reconciled — daily independent reconciliation on the bank's side, not trust in the platform's system.
• Which sponsor banks stand behind the platform and what condition they're in — bank overview, consent orders, risk appetite.
• Whose compliance is it — BSA/AML program at the bank, platform is just tooling; who is contractually responsible for CIP/CDD of end customers.
• Readiness for the direct model — will the program survive if the bank wants to contract the fintech directly.

Applicable Regulation

Middleware has no separate license—it operates under the sponsor bank's charter. Key points:

• Interagency Guidance on Third-Party Relationships (2023) — the bank is responsible for fintech partners and intermediaries: you can outsource activity, not responsibility. More on the trend—regulatory perimeter.
• FDIC custodial accounts (NPRM, Oct 2024) — proposes named recordkeeping of beneficiaries and daily reconciliation for pooled accounts; as of 2026 this is a proposal, not finalized (status should be verified).

Key factual claims

• In November 2025, the court dismissed the bankruptcy case: there were no funds to settle, and no buyers for the assets.
• After Synapse and the interagency guidance of 2023 on managing third-party risks, banks demand direct control over end customers.