Lender Licensing & Bank Partnerships

A bank lends under its charter. Everyone else needs permission state by state, or a bank. A nonbank that wants to make consumer loans across the country has three ways to do it: hold a license in every state where it lends (and price within each state's caps), partner with a bank that makes the loans under its own charter and sells them or their economics to the nonbank, or become a bank. Most large nonbank lenders run the first two at once, and the largest are moving to the third. The choice decides which rate a loan may carry, which regulator examines whom, and, if a court later decides the partner bank wasn't really the lender, whether the loans were legal at all.

For the system, licensing is a check that runs before every offer: is this lender, for this activity, licensed in this borrower's state today, and if the loan is made by a partner bank, does the record show the bank was the lender in substance as well as on the note. This chapter covers how lenders split the routes, NMLS and state licenses, what holding a license obliges, the trade between partnership and charter, true lender exposure with the OppFi case as the current example, and the charter trend. Rate exportation, state usury and the doctrine of true lender as law belong to APR, Finance Charges & Rate Caps; sponsor banks' oversight of their programs is Sponsor Bank Oversight; money transmission licenses, which payment businesses need, are in Holding Other People's Money.

How the Platforms Do It#

As of October 2026, from filings and agency decisions:

Lender	Route	What the record shows
Affirm	Partner banks for most US loans; its own licenses for the rest; a bank planned	Celtic Bank and Lead Bank "generally allow" rates up to 36% and Cross River up to 30%; Affirm also originates "under our lending, servicing, and brokering licenses across various jurisdictions in the U.S., Canada, U.K., and Australia"; its 10-K lists "the plan for the establishment of Affirm Bank"
Enova	Its own state licenses plus five bank partner programs; buying a bank	Bank partner programs were 31.6% of 2025 originations and purchases; the Grasshopper Bank acquisition agreed in December 2025 was still described as planned on October 22, 2026
Happen (formerly LendingClub)	Its own national bank	Completed the acquisition of Radius Bancorp on February 1, 2021, becoming the parent of LendingClub Bank, National Association
OppFi	Bank partners only	"Exclusively utilized a bank partner model" in 2025 with FinWise Bank, First Electronic Bank and Capital Community Bank, reaching 40 states; won a California true lender case at trial in 2026, now on appeal
SoFi	Its own national bank	Bought Golden Pacific Bancorp with OCC and Federal Reserve approval in January 2022 (Fintechs That Chartered)
Upstart	Bank and credit union partners; a national bank conditionally approved	More than 100 lending partners set the credit criteria; the OCC conditionally approved its national bank on July 23, 2026

Three patterns. Partnerships and licenses coexist. Affirm and Enova each lend directly under their own licenses in some places and through banks in others, so the route is chosen per loan, by state and product, not once per company. The partnership is a risk the lender names. Affirm warns that if the structure "was successfully challenged, we may be found to be in violation of state licensing requirements," and would then need another bank, "existing or new state licenses, or a federal charter." The exit is a charter. Happen and SoFi bought banks, Enova is buying one, Upstart has a conditional approval and Affirm has applied.

NMLS and State Licenses#

The Nationwide Multistate Licensing System (NMLS), run by the Conference of State Bank Supervisors with state regulators, is where nonbank financial companies and individuals apply for, hold and renew state licenses for mortgage, money transmission, debt collection and consumer financial services. Each company, branch and individual gets an NMLS ID that follows it across states and appears on consumer-facing disclosures and the public NMLS Consumer Access lookup. Renewal opens on November 1 and in most states runs to December 31; for 2026 licenses, CSBS counted more than 850,000 state licenses held by mortgage loan originators and mortgage companies eligible for renewal, with individual licenses up 8% and company licenses up 4% from a year earlier.

Mortgage licensing has a federal floor. Under the SAFE Act, "an individual may not engage in the business of a loan originator without first" obtaining and maintaining an annual registration as a registered loan originator or a license and registration as a state-licensed loan originator, and a unique identifier (12 USC 5103). Employees of depository institutions, of subsidiaries a depository institution owns and controls that a federal banking agency regulates, and of Farm Credit institutions register through the Nationwide Mortgage Licensing System and Registry (12 USC 5106); everyone else who originates is licensed by each state. Mortgages & Home Equity covers the originator's compensation and assignment; the license is a fact the origination system checks for the individual and the company before a loan officer takes an application from a borrower in a state.

Consumer and commercial lending licenses are state law, each with its own trigger. Two examples show the range:

• California Financing Law. Requires licensing of finance lenders and brokers making or brokering consumer and commercial loans, "except as specified"; applications go through NMLS, and licensees file an annual report through the DFPI's own portal (the 2025 report was due March 15, 2026). The licensed lender is then subject to the rate limits of the California Financing Law and AB 539 (State Rate Caps as Data).
• New York Banking Law Article 9. Requires a license to make loans of $25,000 or less for personal, family, household or investment purposes, or $50,000 or less for business and commercial purposes, at a rate greater than an unlicensed lender could charge; the license is managed through NMLS.

So the trigger can be the product (consumer, commercial, mortgage), the amount, the rate, the activity (making, brokering, servicing, collecting) and whether the lender is exempt as a bank. A lender building a licensing map gets a matrix of state by activity by product by threshold, each cell with its statute, its license type and the date counsel last reviewed it. The same lender often needs separate licenses to service or collect loans it originated through a bank partner, because servicing and collection licenses attach to the activity, not the origination.

Holding a License#

A license is an ongoing relationship with each state, and every obligation is a scheduled task:

• Renewal each year through NMLS by the state's deadline, with the fee and any updated information; a license not renewed lapses, and lending under it stops that day.
• Reports: annual reports to the state (California's through its own portal), and the periodic reports NMLS collects for mortgage licensees.
• Examinations by each state on its own cycle, which ask for loan files, complaints, advertising and the records each statute names; OppFi notes it is subject to examination "in each state in which OppFi is licensed."
• Changes: new branches, officers, control persons and ownership changes are filed before or after the fact as each state requires, and some changes need approval before they take effect.
• Conditions: surety bonds, minimum net worth and other requirements each statute sets, monitored against the lender's financials.

The licensing record is also the evidence a partner bank, a warehouse lender and an acquirer each ask for, so it has to be current and producible as of any date.

Partnership or Charter#

	Own state licenses	Bank partnership	Own charter
Who is the lender of record	The nonbank	The bank	The nonbank's bank
Rate the loan may carry	Each state's cap for that license and product	The bank's home-state rate, exported (national banks under the National Bank Act, state banks under DIDMCA section 521, subject to state opt-outs)	The bank's home-state rate, exported
Who examines	Each state, the CFPB where it has authority	The bank's prudential regulator examines the bank and, through it, the program; states license the nonbank's own activities	The OCC, FDIC or state and the Federal Reserve as holding company supervisor
Funding	Capital markets (Funding the Book)	The bank funds for days, then sells loans or participations to the nonbank or its investors	Deposits, plus loan sales
What it costs	Fifty sets of licenses and rules	A share of revenue to the bank, its oversight, reserves, and true lender risk	Capital, supervision, an approved business plan, and above $10 billion the debit interchange cap

The partnership is the fastest way to a national product, and the most fragile. The bank must control the program it lends through, and the regulators who examine it expect that control to be real: the oversight framework is in Sponsor Bank Oversight, the economics of who earns what in The Lending Business, and the preemption that lets a bank's rate travel, with its limits, in Preemption. A charter removes the partner and adds the full weight of bank supervision, capital and, for lenders that also take deposits, everything in the Deposits part of this volume.

True Lender Exposure#

A true lender challenge asks whether the bank named on the note was the real lender or a front for the nonbank, and if the nonbank was the lender, the loan was made by an unlicensed lender at a rate the state's law didn't allow. The OCC's 2020 rule that would have settled it for national banks was disapproved by Congress in 2021, so the question is decided case by case under state law, and courts and statutes look at who holds the economic risk and benefit (True Lender has the rule's history and the doctrine). Some states have written their own tests into statute.

The current example is California's. The Department of Financial Protection and Innovation argued that OppFi, not its partner FinWise Bank (a Utah-chartered bank), was the true lender on loans to Californians above the 36% cap AB 539 sets for California Financing Law loans. In Opportunity Financial, LLC v. Hewlett, the Los Angeles County Superior Court denied the DFPI a preliminary injunction on October 30, 2023, issued a tentative ruling on February 24, 2026, and on May 19, 2026 issued its final statement of decision granting OppFi summary judgment. The facts the court relied on are a checklist for any partnership's records:

• FinWise was named as the lender on the promissory notes.
• FinWise independently underwrote and approved the loans.
• FinWise funded the loans with its own money, and retained ownership interests in the receivables.
• FinWise bore economic risk and received financial benefits from the program.
• FinWise controlled marketing approvals and compliance oversight, and audited and supervised OppFi on an ongoing basis.

The court asked whether FinWise was a "dummy lender" in a sham to evade usury limits, applied the principle that a loan "not usurious in its inception does not become usurious by subsequent events," relied on the FDIC's rule that the permissibility of interest is determined when the loan is made (12 CFR 331.4(e)), and rejected the DFPI's argument from OppFi's acquisition of a substantial participation interest shortly after origination: because FinWise validly originated the loans, the later purchase didn't make OppFi the lender. It didn't reach OppFi's argument that the California Financing Law's bank exemption applied. The DFPI filed a notice of appeal on July 21, 2026, to the Second Appellate District, where whether OppFi's purchase of a 95% participation interest matters is a likely issue; as of October 2026 the appeal is pending, and a trial court decision binds no other court. OppFi's 10-K describes the structure the case examined: partner banks "use their own capital to originate loans" and "generally hold them for about two to three days" before OppFi acquires participation rights.

For the system, true lender exposure is a records question before it is a legal one. Each fact the court weighed is something a program either can or can't prove loan by loan: whose credit policy decided, whose money funded, what the bank kept and for how long, who carried the losses, who approved the marketing. A program that can't produce those facts for a sample of loans from three years ago has a weaker answer than one that can. The rate side of the question, including the Colorado and Oregon opt-outs and valid-when-made, is in Opt-Outs and the Colorado Case and Madden and Valid When Made.

The Charter Trend#

The lenders that became banks did it by buying one or applying for one, and each move changes the systems as much as the regulation:

• Happen completed its acquisition of Radius Bancorp on February 1, 2021, and became the parent of LendingClub Bank, National Association; the bank now funds the loans Happen keeps with deposits and sells the rest (The Lending Business).
• SoFi bought Golden Pacific Bancorp in January 2022 and committed $750 million of capital to what became SoFi Bank, N.A. (Fintechs That Chartered).
• Enova agreed in December 2025 to buy Grasshopper Bank, giving lower-cost funding and regulatory simplicity as reasons; Enova's October 22, 2026 results still described the acquisition as planned, with transaction costs recorded each quarter of 2026.
• Upstart received the OCC's conditional approval for a national bank on July 23, 2026, with its FDIC and Federal Reserve applications pending in August (Fintechs That Chartered).
• Affirm lists the planned Affirm Bank in its fiscal 2026 10-K; press coverage reports applications filed in January 2026 to the Nevada Financial Institutions Division and the FDIC for a Nevada-chartered industrial loan company.

What changes in the data when a lender becomes a bank: a new institutions row; new products under that institution; loans originated after the cutover with accounts.institution_id pointing at the lender's own bank, while the partner-originated book stays with its originating bank as the lender of record forever; state licenses surrendered where the bank no longer needs them and kept where an affiliate still lends, services or collects; and the partner programs wound down as program migrations (Moving Between Sponsor Banks). The first year runs both routes at once, and the licensing check has to know which route each loan took.

How to Build It#

These are deltas against The Core Data Model: institutions (the partner bank or the lender's own bank), programs (a bank partnership is a program at the bank), products (versioned, per institution), applications and credit_decisions. The state law a charter is or isn't subject to is already data in Charters & Regulators (state_law_applicability); the money a program posts as collateral is program_reserves in Banking as a Service; the bank's hold and sale of each loan are loan_transfers in Funding the Book. This chapter adds what a lender is licensed to do, what each state requires, the check at origination, and the individual originators' licenses:

CREATE TABLE license_requirements (        -- what each state requires, for which activity
  id                  UUID PRIMARY KEY DEFAULT uuidv7(),
  state               CHAR(2) NOT NULL,
  activity            TEXT NOT NULL CHECK (activity IN ('lending', 'brokering', 'servicing',
                        'collecting', 'mortgage_lending', 'mortgage_brokering',
                        'mortgage_servicing', 'loan_origination_individual')),
  product_scope       TEXT NOT NULL CHECK (product_scope IN ('consumer', 'commercial',
                        'residential_mortgage', 'all')),
  trigger             JSONB NOT NULL,        -- {"max_amount": 2500000, "rate_above_bps": ...}
  license_type        TEXT NOT NULL,         -- 'CA CFL finance lender', 'NY licensed lender', ...
  exempt_charters     TEXT[] NOT NULL DEFAULT '{}',  -- institutions.charter_type values exempt
  authority           TEXT NOT NULL,         -- statute and section
  reviewed_at         DATE NOT NULL,
  valid_during        DATERANGE NOT NULL
);

CREATE TABLE lender_licenses (             -- what each legal entity holds
  id                  UUID PRIMARY KEY DEFAULT uuidv7(),
  legal_entity        TEXT NOT NULL,         -- the licensee, which may be a subsidiary
  nmls_id             TEXT,
  state               CHAR(2) NOT NULL,
  license_type        TEXT NOT NULL,
  license_number      TEXT NOT NULL,
  activities          TEXT[] NOT NULL,       -- the license_requirements.activity values it covers
  status              TEXT NOT NULL CHECK (status IN ('pending', 'approved', 'conditional',
                        'inactive', 'surrendered', 'revoked', 'expired')),
  conditions          JSONB,                 -- bond, net worth, approval conditions
  renewal_due         DATE,
  valid_during        DATERANGE NOT NULL,
  UNIQUE (state, license_type, license_number)
);

CREATE TABLE originator_registrations (     -- SAFE Act: each individual, by state or federal
  id                  UUID PRIMARY KEY DEFAULT uuidv7(),
  party_id            UUID NOT NULL REFERENCES parties (id),
  nmls_id             TEXT NOT NULL,
  kind                TEXT NOT NULL CHECK (kind IN ('state_license', 'federal_registration')),
  state               CHAR(2),               -- null for a federal registration
  sponsoring_entity   TEXT NOT NULL,         -- the employer that sponsors the license
  status              TEXT NOT NULL CHECK (status IN ('approved', 'inactive', 'expired',
                        'revoked')),
  valid_during        DATERANGE NOT NULL,
  CHECK (kind = 'federal_registration' OR state IS NOT NULL)
);

CREATE TABLE license_checks (              -- the check before an offer, recorded
  id                  UUID PRIMARY KEY DEFAULT uuidv7(),
  application_id      UUID NOT NULL REFERENCES applications (id),
  borrower_state      CHAR(2) NOT NULL,
  route               TEXT NOT NULL CHECK (route IN ('own_license', 'bank_partner',
                        'own_bank')),
  lender_institution_id UUID REFERENCES institutions (id),  -- the bank, for the bank routes
  requirements        UUID[] NOT NULL,       -- license_requirements rows that applied
  licenses            UUID[] NOT NULL,       -- lender_licenses rows relied on
  originator_registration_id UUID REFERENCES originator_registrations (id),
  outcome             TEXT NOT NULL CHECK (outcome IN ('permitted', 'not_offered',
                        'blocked')),
  checked_at          TIMESTAMPTZ NOT NULL DEFAULT NOW()
);

The true lender evidence for a partner-originated loan isn't a new table; it's a view over records other chapters already keep, and it should return a complete row for every loan in a sample:

CREATE VIEW partner_loan_evidence AS
SELECT a.id                          AS account_id,
       i.legal_name                  AS lender_of_record,
       cd.policy_version             AS credit_policy,   -- whose criteria decided
       cd.decided_at,
       je.institution_id             AS funded_by,       -- whose books the money left
       d.disbursed_at,
       t.settlement_date - d.disbursed_at::date AS days_bank_held,
       10000 - COALESCE(t.share_bps, 0)          AS bank_retained_bps,
       t.price                       AS sale_price,
       r.kind                        AS program_collateral
FROM accounts a
JOIN institutions i        ON i.id = a.institution_id
JOIN applications ap       ON ap.account_id = a.id
JOIN credit_decisions cd   ON cd.application_id = ap.id AND cd.kind = 'origination'
                              AND cd.outcome = 'approved'
JOIN loan_disbursements d  ON d.account_id = a.id AND d.kind = 'to_borrower'
JOIN journal_entries je    ON je.id = d.journal_entry_id
LEFT JOIN loan_transfers t ON t.account_id = a.id AND t.kind IN ('sale', 'participation_sale')
LEFT JOIN program_reserves r ON r.program_id = a.program_id
                              AND r.kind IN ('credit_enhancement', 'cash_collateral')
WHERE a.program_id IS NOT NULL AND a.account_kind = 'loan';

loan_disbursements is from Personal & Installment Loans, and its journal entry shows whose general ledger funded the loan. Marketing approvals and the bank's audits of the program are its program_reviews (Sponsor Bank Oversight) and join by program and date.

Design notes:

• Check the route before the price. The license check runs when the borrower's state is known and before the offer: it picks the route (own license, partner bank, own bank), and the route decides the institution, the product version and the rate cap the pricing grid must respect (State Rate Caps as Data). not_offered is a valid outcome, as Enova's states without consumer loans show.
• Requirements cite statutes and review dates, like state_law_applicability, because a court decision or a new statute changes a cell, and the lender must show which version it relied on for a loan made under the old one (Record Which Rule Decided).
• Licenses belong to legal entities. A group often holds lending licenses in one subsidiary, servicing in another and money transmission in a third (Affirm Payments, LLC holds Affirm's money transmitter licenses); the check names the entity that will perform each activity.
• Renewals are deadlines. renewal_due feeds the same deadline machinery as any regulatory clock (Deadlines Are Computed and Stored); a lapsed license blocks new applications in that state the next day.
• The lender of record never changes. A loan a partner bank made stays the bank's loan in accounts.institution_id after the nonbank charters; only new loans go to the new bank.

Auditing#

State examiners, partner banks, warehouse lenders, acquirers and courts each ask the same question a different way, "were you allowed to make this loan":

• Every license held, by entity and state, with its status history, conditions, renewals and the reports filed under it.
• Every licensing requirement relied on, with its authority and review date, as of each loan's decision date.
• The license check for every application: route, requirements, licenses and the individual originator's registration, with the outcome.
• True lender evidence per partner loan: whose credit policy decided, whose money funded, how long the bank held, what it kept, the price it sold at, the collateral the program posted, and the marketing approvals in force.
• Route changes: when a lender moved a state or product from partner to license to its own bank, and which loans went which way.

Record mechanics are in Audit Trails.

What This Means for the System You Build#

• Run a license check before every offer, recording the route, the requirements and the licenses relied on.
• Keep licensing requirements as cited, reviewed data by state, activity, product and threshold.
• Model licenses per legal entity, with renewals as computed deadlines and lapses that block lending immediately.
• Register individual originators and check them per application for mortgages.
• Make true lender evidence a query, from decisions, disbursements, transfers and reserves already in the ledger, complete for any loan.
• Never move the lender of record on existing loans when the route changes; route new loans by date.

References#

Law and regulation

• Cornell LII: 12 USC 5103, SAFE Act licensing and registration, the requirement to be licensed or registered and to hold a unique identifier before acting as a loan originator
• Cornell LII: 12 USC 5106, federal registration of loan originators, registration of depository institution, regulated subsidiary and Farm Credit employees through NMLS

Regulators

• CSBS: State supervisors urge licensees to prepare early for NMLS annual renewal (October 23, 2025), the November 1 to December 31 renewal period, more than 850,000 mortgage licenses eligible and the license types NMLS manages
• California DFPI: California Financing Law, who needs a license, applications through NMLS and the annual report deadline
• New York DFS: Licensed lenders, the $25,000 consumer and $50,000 commercial thresholds, Banking Law Article 9 and NMLS management

Courts

• Consumer Finance Monitor: California court issues final statement of decision rejecting DFPI true lender theory against OppFi (May 29, 2026), the case, the dates, the facts relied on, the sham lender test, 12 CFR 331.4(e) and what the court didn't reach
• Consumer Finance Monitor: California DFPI appeals trial court decision rejecting its true lender theory in OppFi case (July 31, 2026), the July 21, 2026 notice of appeal, the Second Appellate District, the participation-interest argument and the 95% participation as an issue on appeal

Filings

• Affirm Holdings: Form 10-K for fiscal 2026, partner bank rate limits under the FDIC rule, its own lending, servicing and brokering licenses, Affirm Payments' money transmitter licenses, the partnership challenge risk and the planned Affirm Bank
• Enova International: Form 10-K for 2025, five bank partner programs at 31.6% of originations and the Grasshopper acquisition and its reasons
• Enova International: Third quarter 2026 results (October 22, 2026), the planned Grasshopper acquisition and its 2026 transaction costs
• LendingClub: Completion of the Radius Bancorp acquisition (Form 8-K exhibit 99.1, February 1, 2021), the completion and LendingClub Bank, National Association
• OppFi: Form 10-K for 2025, the exclusive bank partner model, the three banks, 40 states, the two-to-three-day hold and participation rights, and state examinations
• Upstart: Form 10-K for 2025, more than 100 lending partners and their credit criteria