Concept
Rent-a-bank is a structure in which a non-bank lender originates loans through a partner bank in order to leverage the bank's right to export the interest rate of its home state. The economic interest in the loan remains with the non-bank. This is the credit vertical of embedded finance.
The legal engine is DIDMCA 1980: a state-chartered bank with FDIC insurance may charge the interest rate of its home state to borrowers in any state ("rate exportation"). A non-bank without a bank charter is bound by the usury cap of the borrower's state. By routing origination through a bank, the non-bank attempts to inherit the exportation privilege.
How It Works
The typical structure is originate-and-assign: the partner bank formally originates the loan (it is the lender of record), then sells or assigns it or a participation interest to the non-bank program sponsor. The non-bank handles marketing, underwriting, servicing, and holds the economic interest. The bet is that the rate is locked in at origination by the bank and survives assignment (the valid-when-made doctrine).
In 2020, the OCC and FDIC codified the valid-when-made rule: an interest rate lawful when made remains lawful after sale of the loan. But valid-when-made does not answer the prior question—who was the lender at origination in the first place. That is answered by true-lender analysis, and it is that analysis that determines the fate of the structure.
What You Need to Launch
Minimum requirements: an issuing bank (state-chartered, FDIC) with appetite for the program; lending capital or a forward-flow debt purchaser; underwriting and servicing infrastructure; compliance with federal consumer-credit laws (TILA, ECOA, FCRA, UDAAP) and state laws. A lender license in some states can be avoided through the bank partner, but broker or servicer licenses in a number of states will still be required.
What the partner bank requires: control over credit policy and approval (formally the decision remains with the bank), alignment with its risk appetite, indemnity provisions, regular program audits, and the right to halt originations. The bank is accountable to its regulator for safety-and-soundness and for absence of consumer harm.
Compliance
Beyond federal consumer-credit laws, the key piece is compliance with state caps where true-lender risk is high. Required: monitoring the state map (where the model is challenged and where opt-outs have been enacted), origination segmentation by state, rate limits, reporting to the bank, and regular true-lender self-assessment on factors—predominant economic interest, who bears default risk, who controls the program.
How It's Done in the Market
The model lives in a zone of constant dispute. The NCLC and some states systematically attack it as evasion of caps. There is no single federal true-lender test, so courts look to the substance of the transaction: predominant economic interest (on this test the Supreme Court of Appeals of West Virginia held in 2014 that CashCall, not its partner bank, was the true lender), multi-factor analysis of the substance of the transaction, and in some cases—who is formally named as lender. Banks that run such programs partially overlap with the list of US sponsor banks.
The main structural risk is state opt-out from DIDMCA (§525): a state may refuse federal rate exportation on loans originated in its territory. Iowa and Puerto Rico did so long ago. Colorado opted out under HB23-1229 from July 1, 2024, but on a suit by industry associations a federal district court issued a preliminary injunction barring the opt-out from being applied to loans made to state residents by out-of-state banks. In November 2025 a Tenth Circuit panel reversed that injunction, but on April 2, 2026 the court granted rehearing en banc, vacated the panel judgment and stayed the mandate; the case was argued before the full court on August 18, 2026, and until the en banc decision the injunction remains in force. Oregon enacted HB 4116: signed April 7, 2026, effective June 5, 2026, a 36% cap on consumer loans up to $50,000. Minnesota, Nevada, Rhode Island, and the District of Columbia are discussing opt-outs next. Where an opt-out is in force, the partner bank's rate is no longer exportable, and the model ceases to work in those states.
Applicable Regulation
To put it together: DIDMCA 1980 grants rate exportation; valid-when-made (OCC and FDIC, 2020) preserves the rate after sale of the loan; the true lender doctrine tests the substance of the transaction; opt-out from DIDMCA (§525) switches off exportation in individual states, and the list keeps growing. The adjacent deposit-and-card model is covered in BaaS and sponsor banks.
| Pros | Cons and Risks |
|---|---|
| Access to rate exportation without own bank charter | True lender: loans may be recharacterized and deemed usurious |
| Fast launch of a credit product through partner bank | State opt-outs (CO, OR and more) disable the model in those states |
| Flexibility in products and geography | Pressure from courts and regulators (NCLC, state AGs) |
| Scaling through forward-flow debt sales | Reputational risk—association with predatory lending |
How Regulation Evolved
The model's roots are in Marquette (1978): the Supreme Court allowed a national bank to charge the interest rate of its home state to borrowers across the country. DIDMCA 1980 extended the same rate-exportation principle to state-chartered banks with FDIC insurance—and that created the ground for non-bank partnerships with banks from "convenient" states.
Confidence in the scheme was shaken by Madden v. Midland Funding (Second Circuit, 2015): after a loan is sold to a non-bank, protection of the exported rate may fall away. The regulators' answer was the valid-when-made rules: the OCC and FDIC codified them in 2020, and a federal court in California upheld their lawfulness in February 2022.
A separate attempt to bring clarity was the OCC's bright-line true-lender rule (October 2020): the true lender was the party named in the contract or funding the loan. Congress repealed this rule under the Congressional Review Act, and the President signed the repeal on June 30, 2021. The CRA bars the OCC from adopting a "substantially similar" rule without new legislation, so there is still no single federal true-lender test. The same logic of "rented" status appears in adjacent niches too—for example, license for rent.
Precedents and the State Map
In August 2020 Colorado settled its disputes with Avant and Marlette Funding and their partner banks WebBank and Cross River Bank: loans to state residents are capped at 36% a year, the non-bank partners hold Colorado licences, and the programmes meet conditions under which the bank remains the true lender—in effect a conditional safe harbor for partner banks. In the CashCall cases, courts treated the non-bank as the true lender despite the formal lender of record.
The recent turn is NAIB v. Weiser. On November 10, 2025 a Tenth Circuit panel read the phrase "loans made in such State" from §525 broadly—these are loans where either the lender or the borrower is located in an opt-out state, which would let Colorado apply its caps to loans to its own residents even from out-of-state banks. On April 2, 2026 the court vacated that judgment and granted rehearing en banc on precisely the meaning of "loans made in such State"; the case was argued on August 18, 2026, and until a new decision the district court's preliminary injunction applies. National banks meanwhile remain under National Bank Act §85, where there is no opt-out, so the question of parity between state and national charters persists.
Q/A
Is the rent-a-bank model lawful?
The transfer of loans between bank and non-bank is not prohibited per se, but lawfulness depends on true-lender analysis and on the state. Where the non-bank is deemed the true lender or where the state has opted out, the borrower's state cap applies.
What is a state opt-out from DIDMCA?
A state's right to refuse federal rate exportation on loans originated in its territory. Iowa, Puerto Rico, Colorado, and Oregon (for consumer loans up to $50,000) have exercised it, and in these states the partner bank's rate cannot be exported. The exception is loans to Colorado residents from out-of-state banks: the opt-out does not apply to them while a court injunction is in force, and the full Tenth Circuit is deciding how far the opt-out reaches.
How does true lender differ from valid-when-made?
Valid-when-made says that a rate lawful when made survives sale of the loan. True-lender answers the prior question: who was the lender at origination. If the non-bank—valid-when-made does not help.