Compliance bottlenecks limit BaaS scale

The core limit is that a tech forward bank still has to be a real bank, and that means every new fintech program adds both software load and regulated operational load. Cross River and Column can move faster than a traditional sponsor bank because they own more of the stack, but they still have finite compliance teams, finite risk appetite, and hard constraints around how many large programs they can safely onboard and supervise at once.

• The bottleneck is not just servers. In BaaS, scale means reviewing KYC flows, transaction patterns, disclosures, limits, fraud cases, and partner behavior. Synctera describes this as a matching problem, where not every bank wants every deal, and one high velocity fintech can already consume a meaningful share of a community bank's capacity.
  1 sacra
• Vertical banks reduce vendor sprawl by putting charter, ledger, payments, and compliance under one roof. That makes launches simpler, which is why Column won programs from fintechs like Brex and Mercury. But that same one roof model concentrates operational burden inside the bank, so growth tends to be selective rather than unlimited.
  2 sacra 4 sacra
• Regulation turns scale into a risk management problem, not just a sales problem. Cross River was placed under an FDIC consent order in March 2023 tied to fair lending controls, and Mercury later shifted customers toward Column and other partners after problems at Evolve. The market has rewarded banks that can add capacity without losing control.
  3 sacra 6 consumerfinancemonitor 7 americanbanker 8 sacra

The next phase of BaaS looks more networked. A few vertically integrated banks will keep winning the biggest flagship programs, but marketplaces and orchestration layers will matter more as fintech demand spreads across lending, deposits, cards, and niche verticals. The winners will be the banks and platforms that can add new programs without breaking compliance, underwriting discipline, or onboarding speed.