Concept
🔗 Related
own license and real substance
A license is the most expensive and slowest asset of a regulated business: years of approvals, millions in capital, and constant adequacy requirements. That's why the market has long learned to separate the license from the operation: the licensee rents out its regulatory permission, and the business operates under someone else's umbrella—legally, by contract, with distributed responsibility. The idea is old: London's Lloyd's has been built on it since the 17th century with underwriting by delegated authority, and correspondent banking has for centuries allowed one bank to operate in a foreign jurisdiction through another. Today the structure is the same in banking, insurance, funds, crypto, and gambling—only the names change. The same mechanics from the product side are examined in the adjacent framework—embedded finance, when a financial service under someone else's license is embedded into a non-financial brand.
The economics are simple: the host earns on commission and on retaining part of the risk or capital, the tenant—on speed and market access. The closer the tenant is to retail, the more it pays for someone else's regulatory status and the less it controls the rules of the game—so when growing seriously, the tenant almost always considers getting its own license and real substance.
One Model, Five Industries
Banking and Payments
🔗 Related
BaaS and sponsor bank · middleware layer and sponsor banks · in the US · BIN sponsorship · PayFac and ISO · neobank agents · rent-a-bank and true lender doctrine
BaaS and sponsor bank: banking product without a banking license, with middleware layer and sponsor banks in the US. Cards are issued through BIN sponsorship, acquiring is divided into PayFac and ISO, in Europe the institution of neobank agents operates, and lending under someone else's charter is rent-a-bank and the true lender doctrine.
Insurance
🔗 Related
Fronting and delegated authority · fronting carrier
Fronting and delegated authority: MGA sells and underwrites policies under the license of a fronting carrier, which retains minimal risk and a commission for "renting" the license and rating.
Funds and Asset Management
🔗 Related
regulatory hosting and appointed representative · host AIFM providers · third-party ManCo in Luxembourg and Ireland · fund manager license rental in Singapore · in ADGM/DIFC
A fund can be launched without its own management license: regulatory hosting and appointed representative in UK, host AIFM providers, third-party ManCo in Luxembourg and Ireland, fund manager license rental in Singapore and in ADGM/DIFC.
Crypto and Gambling
🔗 Related
White-label CASP under MiCA · white-label gambling · SFC Type 9, neobank and VASP under someone else's license
White-label CASP under MiCA—crypto service on someone else's European license; white-label gambling after the end of Curaçao master licenses is restructuring to direct permits. Also here—SFC Type 9, neobank and VASP under someone else's license in Hong Kong.
Where the Line of Responsibility Lies
🔗 Related
BaaS · appointed representative · master licenses
The legal essence is always the same: the licensee is responsible before the regulator, and no contract between it and the client changes that. That's why a good host is expensive and picky—its compliance protects its own license, and at the same time everyone working under it. A cheap and fast host sells you shared risk: if its license is revoked or its accounting fails, tenants stop all at once, and untangling client money has to be done in bankruptcy.
💡 A telling failure—the collapse of middleware provider Synapse in the US (Chapter 11, April 2024). It stood between fintechs and sponsor banks like Evolve and held client balances outside the banking charter. When accounting stopped reconciling, more than 100,000 accounts and about $265 million were frozen, and the shortfall between balances in banks and obligations to clients was $65–95 million. FDIC coverage didn't apply: insurance works at the bank level and doesn't extend to the fintech layer above it. License rental remained legal; what failed was control over other people's money.
⚠️ Regulatory trend—tightening supervision of "rental." In the US, sponsor banks receive consent orders, and the FDIC in September 2024 proposed a rule on daily reconciliation of custodial accounts (not finalized by mid-2026). In Britain, HM Treasury policy statement (August 2025) and February 2026 consultation lead to principals in the appointed representative regime needing separate FCA permission, and the agents themselves falling under SM&CR. In Curaçao, LOK (effective December 24, 2024) closed the era of master licenses: sub-licenses were annulled, the last expired January 31, 2025, and the transitional "orange seal" closed October 15, 2025—now only direct CGA permits with UBO disclosure. In the EU, PSD3/PSR are replacing PSD2: political agreement reached November 27, 2025, texts being finalized in 2026. The model remains legal, but discipline is growing; where the regulatory perimeter is moving—in a separate trends overview.
When Rental Stops Paying Off
Rental removes the entry barrier, but in return sets a ceiling. Every month the tenant pays the host a commission and part of the margin, coordinates the product under someone else's risk appetite, and accepts someone else's limits on clients and countries. While volumes are small, this is a profitable exchange. When the brand gains recognition and volume, the same dependency becomes a brake: the host becomes a single point of failure, and its caution limits your growth.
Transitioning to your own license means capital, local directors, a real office and compliance team, i.e. economic substance, which regulators and correspondent banks demand ever more strictly. In return, the business gets direct access to payment and settlement infrastructure, control over the rules, and resilience to others' problems. The typical trajectory is to start under rental and at reasonable volume build your own regulatory perimeter, sometimes immediately in a jurisdiction with a clear regime: ADGM or DIFC for asset managers, Singapore for funds.
🧭 Practical guideline: evaluate both the cost of rental and the cost of future switching right away. The deeper client money and data are tied to the host, the more expensive it is later to deploy your own license. Therefore source of funds, contracts and accounting should be maintained from day one so that exiting from under someone else's umbrella proceeds without upheaval.
FAQ
When is license rental better than owning one?
While economics are unproven and volumes are small: entry in weeks and fixed fee versus years and capital requirements. Outgrowing the host is a normal trajectory: first white-label, then your own license with a ready client book. The signal to transition is economics: when payment to the host for volume starts exceeding the cost of your own compliance, when the host limits your product or geography, or when an investor or bank demands a direct license. The reverse situation also happens: sometimes rental remains forever—for one-off deals or where direct access is unattainable, for example to someone else's payment scheme or to Lloyd's syndicate.
What to check in a host before signing?
Three things: the state of its relationship with the regulator (orders, consent orders), the concentration of its revenue on "tenants," and plan B in case of its demise—portability of clients, data, and contracts to another host. Add two more checks. Scope of delegated authority: which specific operations, products, and territories your contract actually covers—beyond its boundaries you operate without a license. And money safety: are client funds segregated and how often are balances reconciled (this is exactly what broke Synapse). Finally, find out if your host itself rents a license: a "license within a license" chain lengthens and slows any resolution.
Does the client see that the brand operates under someone else's license?
Must see: disclosure of the licensee in footer and contract is a standard requirement. If the brand hides this, it's a red flag for both the client and the host itself. At the product level, however, everything looks like your service: brand, app, and contract are yours, and that's the whole point of white-label. The specifics hide in the details: issuing bank name on the card, licensee and regulator in terms, fronting carrier in the policy. After stories like Synapse, regulators increasingly insist that the client understands who actually holds their money or risk and whom to turn to if something goes wrong.