Merchant Issuer Decision Framework

Co-Brand Cards:
Who Regulates Whom

U.S. credit card regulatory tiers - and what they mean when choosing an issuer partner.

CARD Act · 2009
Fair Billing Rules
Rate limits, fee disclosure, payment timing. Applies to all issuers regardless of size.
Durbin / Dodd-Frank · 2010
Interchange Cap (Debit)
Credit cards are exempt - but this set the political template for ongoing reform debates.
OCC · Fed · FDIC · CFPB
Prudential Oversight
Larger banks face Basel III capital rules, stress testing, and direct CFPB exam authority.
⚖️
$10 Billion in Assets The Dividing Line

Above this: direct CFPB supervision + Basel III capital requirements. Below: lighter OCC or state-charter oversight. This single number shapes your partner's compliance costs, product flexibility, and how hard they'll negotiate.

Large Bank Issuers
Chase · Citi · Amex · BofA · Barclays
Assets > $10B · CFPB-supervised · Basel III
>$10BAsset Floor
CFPBDirect Examiner
~85%Co-brand Mkt Share
Key Obligations
CFPB direct exams - enforcement actions and real-time complaints review.
Basel III capital buffers - tighter credit risk limits per co-brand program.
Reg Z / UDAAP - universal rules; CFPB enforcement is fastest at this tier.
Network contracts - Visa/MC rules apply. Amex = proprietary economics.
Smaller Bank Issuers
Celtic · WebBank · First Electronic · Coastal
Assets < $10B · OCC or state charter · Lighter burden
<$10BAsset Cap
OCC/StatePrimary Regulator
FlexibleProgram Structure
Key Obligations
CFPB indirect - rules apply; exams run through OCC or state, not CFPB directly.
Lower capital reqs - fewer stress tests; more balance sheet flexibility.
Specialty charters - ILC / Utah / Nevada structures enable non-standard products.
BaaS prevalence - often infrastructure-layer banks behind fintech programs.
What You Gain - and Give Up
Four dimensions every merchant should evaluate before signing an issuer agreement
Large Bank Partner
PRO
CON
Massive existing cardholder base for day-one reach.
One of dozens of programs. Rigid templates, slow decisions.
Built-in underwriting, fraud ops, and servicing at scale.
Interchange terms favor the bank. Volume minimums sting.
"Chase-backed" or "Amex co-brand" drives consumer trust.
Bank owns spend data. Your access is limited by contract.
Strongest CFPB compliance posture; lowest regulatory risk.
New earn category or feature: expect 12–18 months to ship.
Smaller Bank Partner
PRO
CON
Real negotiating leverage - you're a meaningful partner.
Smaller balance sheet limits credit lines and approval rates.
Faster to market. Custom earn rates and redemptions achievable.
BaaS intermediary layers add complexity and counterparty risk.
Spend-level data returned to merchant. Loyalty integration viable.
Lighter oversight: if the bank falters, your program is exposed.
Fintech-bank combos (Bilt, Kard) enable loyalty-native design.
Low issuer brand recognition can hurt point-of-sale conversion.
Choose Large If…

Volume >$500M, national brand trust matters, and you can absorb slower product cycles. Airlines, major hotel chains, national retailers.

Choose Smaller If…

Emerging brand, loyalty-first, or you need flexibility and data access. Especially relevant in travel, hospitality, and fintech adjacents.