An act of Congress (I believe it was Dodd-Frank) capped debit card fees at a very low amount (fractions of a precent). An exception was left in for small banks to continue to charge credit-card-like rates for debit cards, around 2%.
Since then, every fintech has had essentially the same business model:
- Come up with some kind of "innovative" thing to sell consumers on that results in them generating debit card transactions. (Online bank account, instant international money transfer, loan, etc.) - the trick is that to get the money, you swipe that debit card.
- Partner with some small bank so that they are one the one providing the debit card. The law essentially has a loophole on it allowing this.
- The fintech company sets up essentially everything, with all the small bank does is have automated accounts created for cardholders when the fintech's software says so. No money is kept in the customer account until the moment of that debit card swipe - then it is instantly transferred in and instantly transferred back out for the payment.
- This requires reserves, but the fintechs and small banks collaborate on how to get good interest on the reserves involved.
There are now fintechs which offer "fintech as a service" which will set all of this up for a tiny bank who can then offer this to any other fintech with almost no involvement from the tiny bank. All they have to do is sign a few papers.
The definition of a big or small bank is based on the amount on deposit, so they are careful to not actually have any money on deposit.
Congress needs to correct this abuse, immediately, and only allow the larger debit card fees for traditional checking accounts held by consumers where the money involved is held on deposit at that bank.
Edit: one of the major problems here is that small banks are often not staffed for adequate cybersecurity for global operations like these; they do just fine doing hometown community banking, but are very vulnerable to being cracked like this. Yet another reason small banks that are providing big-bank services should be regulated like big banks.