OCC Intensifies Scrutiny of BaaS Banks Including Blue Ridge Bank
In September 2022, the OCC moved against Blue Ridge Bank for insufficient oversight of its fintech partnerships, representing a landmark moment for the BaaS industry. Blue Ridge Bank, which partnered with BaaS platform Unit, was cited for inadequate controls over its embedded finance programs. The enforcement action spotlighted the role of BaaS middleware platforms — including Synctera, Synapse, Bond, Treasury Prime, and Unit — that connect less sophisticated fintechs to bank charters.
The OCC's concern centered on whether partner banks maintained adequate risk management and compliance oversight when delegating operations to fintech intermediaries. More advanced fintechs that partner directly with banks were viewed as presenting different risk profiles. The action sent a clear signal to the broader BaaS ecosystem that regulators expected banks to maintain direct supervisory control regardless of middleware arrangements.
No financial penalties were disclosed in the reporting. The move was widely interpreted as a harbinger of further regulatory tightening across the bank-fintech partnership landscape.
- Regulatory scrutiny of BaaS sponsor banks escalated, forcing platforms and partner banks to invest in compliance infrastructure
- BaaS middleware providers faced pressure to demonstrate they support — rather than replace — bank-level oversight of fintech programs
- The action foreshadowed a wave of consent orders against BaaS banks, reshaping partnership economics and due diligence standards across the industry