The bank-fintech partnership model built to power the last decade of consumer fintech apps is being rewritten one enforcement action at a time. On July 31, 2026, the FDIC disclosed that Lineage Bank, a small Franklin, Tennessee lender that once served as a banking backbone for dozens of fintech apps, had agreed to a new consent order dated June 24, 2026, its second in a little over two years. The order lands as regulators continue working through the fallout from the 2024 collapse of Synapse, the banking-as-a-service middleware firm whose failure froze the funds of roughly 100 fintech platforms and hundreds of thousands of end users.
What the new order requires
Under the June 2026 order, Lineage agreed, without admitting or denying wrongdoing, to a set of structural fixes the FDIC has increasingly reached for when a bank’s growth has outrun its risk controls. The bank must submit a three-year business plan, a written profit plan and budget, a plan to reduce problem credits, and a capital plan, and it must keep its allowance for credit losses adequately funded. It cannot pay dividends or management fees without prior written consent from regulators, and it must formulate a brokered-deposit management plan and an interest-rate-risk mitigation plan. Lineage must also send quarterly progress reports to the FDIC’s regional director and forward a copy of the order to its parent holding company.
A second order, not a first offense
Lineage is a repeat subject of FDIC scrutiny. The bank’s first consent order, effective January 29, 2024, followed a period of rapid expansion: assets grew from roughly $27 million in 2020 to nearly $300 million by the end of 2023, fueled largely by partnerships with banking-as-a-service enablers Synctera and Synapse. That order required Lineage to build an enhanced, board-level risk management program, lift its tier 1 leverage ratio to at least 12.5% and its total risk-based capital ratio to at least 16%, produce a 60-day contingency plan for orderly termination of significant fintech partnerships, hire outside evaluators to assess its BaaS risk monitoring, and obtain FDIC approval before growing any business line by 10% or more in a year. Weeks after that order, Lineage brought in a new chairman and elevated its chief banking officer to CEO. In March 2026, Recap Financial Ventures acquired a majority stake in the bank’s holding company, a sign new owners saw a turnaround underway rather than a lender in terminal decline.
That the FDIC found grounds for a second order, this one focused on capital, earnings, credit quality and deposit concentration rather than solely on third-party oversight, suggests the 2024 remediation did not fully resolve the balance-sheet strain left behind by Lineage’s BaaS-fueled growth spurt and the Synapse collapse that followed it.
Why the bank-fintech model keeps drawing scrutiny
Lineage was never an isolated case. Synapse’s implosion exposed a structural weakness across the sector: small community banks took on fintech deposit programs at a pace that outstripped their own risk infrastructure, while the technology middleware sitting between the bank and the end user often kept the only reliable ledger of whose money was whose. When Synapse failed, that ledger problem became a legal and regulatory crisis that took regulators and courts more than a year to work through, and it left the partner banks, not the fintech apps or the middleware provider, holding most of the compliance liability.
Regulators have responded by tightening expectations on the bank side of these arrangements rather than on the fintech or middleware side, since banks are the chartered, insured entities they can directly examine and sanction. That has made third-party risk management, brokered deposit oversight and capital adequacy the recurring themes of BaaS-related enforcement actions since 2024, and Lineage’s second order fits that pattern closely.
What it means for the finance leader
For fintech operators that route deposits or card programs through a partner bank, the Lineage order is a reminder that a bank’s enforcement history does not end with its first consent order. A bank that has been through remediation once, changed leadership and even changed ownership can still be found short on capital, earnings or credit quality years later, and that exposure passes directly to the fintech programs sitting on top of it. Due diligence on a sponsor bank now needs to track not just current regulatory standing but the trajectory of prior orders, leadership turnover and ownership changes, since each of those was present at Lineage and none of them prevented a repeat order.
For bank leadership considering fintech partnerships as a growth strategy, the read is similarly direct: the FDIC is treating rapid, partnership-fueled asset growth as a risk factor in itself, one that invites a capital and earnings review even after a bank has already remediated its third-party oversight gaps. Banks pursuing this model should expect regulators to keep circling back until capital ratios, credit quality and deposit concentration all move in the right direction together, not just the governance processes that were the focus of the first round of enforcement.
What to do next
Fintechs with deposit or card programs at small partner banks should request current capital ratios and enforcement history directly, not rely solely on public FDIC databases that can lag real-time supervisory activity. Banks in BaaS partnerships should treat a first consent order as a signal to slow origination growth until capital and credit metrics stabilize, since the record now shows the FDIC will return for a second look if the underlying balance sheet stress persists. As the bank-charter rush toward owning the infrastructure layer outright continues, Lineage’s second order is a data point for why some fintechs are opting to become the bank rather than lease one.
Source: FDIC
