Fintech Deposit Program: FDIC Claims, Rate Advertising, and Contractual Abdication
Summit Bank ($4.2 billion) supplies deposit accounts to a fintech app called SavingsHub under a program agreement. SavingsHub runs paid social ads: 'Earn 5.10% APY - 10x the national average. FDIC insured. No fees. No risk.' The 5.10% rate applies only to balances under $5,000 and is variable; above $5,000 the rate is 0.40%. The same landing page promotes 'SmartGrowth,' which sweeps idle balances into a money market mutual fund managed by an unaffiliated adviser, and displays the FDIC sign with the tagline 'Your money is protected.' Summit's name appears only in the terms of service. Marketing is run entirely by SavingsHub; the contract says SavingsHub is responsible for 'all marketing compliance.' Summit's compliance officer has never reviewed the ads.
1. Assess the two products' advertising. Which representations are supportable and which are not?
Read the worked answer
Separate the products - they are not the same risk.
Deposit account. Funds held at Summit can be FDIC-insured, but advertising insurance is regulated under 12 CFR Part 328, which prohibits misleading representations about deposit insurance. Two problems: (a) 'No risk' is false for a variable-rate deposit whose rate can fall to 0.40% - insurance protects against bank failure, not against rate, liquidity, or opportunity risk; (b) if balances are swept, placed through a network, or held at other institutions, pass-through insurance depends on conditions being met and records being kept, and 'FDIC insured' without qualification can mislead. The bank must be able to prove insurance applies, account by account.
SmartGrowth. This is a mutual fund, not a deposit. It can lose value and is not insured. Placing the FDIC sign and 'your money is protected' on that page is a misrepresentation under Part 328 and a UDAAP violation - this is the highest-risk item in the file because the consumer takeaway directly contradicts the product.
Corrective action for both. Immediate takedown, written notice to SavingsHub, corrective consumer communication, a look-back at accounts opened through the page, and - if the misrepresentation was widespread - self-identification to the FDIC. Preserve screenshots and ad-platform records before they are edited.
2. Evaluate the '5.10% APY - 10x the national average' claim under Regulation DD and UDAAP principles.
Read the worked answer
Three distinct defects.
- Accuracy of the APY. 5.10% applies only below $5,000; above that the rate is 0.40%. A customer depositing $50,000 earns a small fraction of the advertised yield. Stating '5.10% APY' without the cap in the same visual field is misleading under Regulation DD's advertising rules (12 CFR 1030.8) even if a footnote exists elsewhere - the headline and the fine print cannot contradict each other.
- Variability. If the rate can change, the advertisement must say so. Nothing in the copy does.
- The comparison. '10x the national average' requires substantiation: source, date, methodology, and a like-for-like basis. Comparing a promotional tiered rate on the first $5,000 to a national average on all balances is not like-for-like and cannot be cured by a footnote.
Analytical anchor. Ask what a reasonable consumer takes away from the ad as a whole, not what a lawyer reads from the fine print. Here the takeaway - a high, safe, cost-free return on the whole balance - is wrong on all three counts.
Fix. Headline the rate with the balance cap attached, add 'variable rate' language, and either substantiate the comparison with a cited source or drop it. Any APY claim must also carry the required Reg DD advertising content.
3. Summit's contract makes SavingsHub responsible for 'all marketing compliance,' and compliance has never reviewed the ads. Does that allocation work? What oversight structure should replace it?
Read the worked answer
No. Regulatory obligations attach to the insured depository institution, not to its vendor. The deposits are Summit's, the FDIC sign implicates Summit, and examiners will attribute the ads to Summit regardless of the contract sentence. Contractual allocation shifts indemnity, not responsibility - and the fact that compliance has never seen the ads is itself the finding.
Replace with an operating model.
- Contract. Require Summit pre-approval of all consumer-facing marketing, unilateral takedown rights, access to complaint and ad-platform data, audit rights, and change-notification obligations for copy, rates, and product structure. Then actually exercise those rights.
- Pre-review. A materiality-based review with a documented SLA and a named approver; no ad goes live without a ticket showing compliance sign-off.
- Monitoring. Periodic mystery shopping of the app and ad accounts, keyword and creative sweeps across paid social, and complaint-trend review as an early-warning signal.
- Governance. Third-party risk rating commensurate with the program's size, an annual oversight review, and reporting to the compliance committee.
Because the ads already ran, open a remediation file: inventory and risk-rank every live claim, take down non-compliant copy, quantify affected accounts, evaluate redress, and track root cause to closure. 'The vendor promised' is not a root cause.