Most guidance about digital banking concerns the interface: how to log in safely, how transfers move, why a transaction sits pending for two days. That material matters and it is worth knowing.
There is a separate question that the app screen almost never answers, and it turns out to be the one that decides whether your money is safe: which institution is actually holding your deposit, and what protection applies to it. A clear guide to how digital banking and online banking work covers the mechanics of logging in, moving money and card settlement. This article covers the layer underneath: ownership, insurance and legal recourse. Those are different subjects, and the second one is where people have actually lost money.
The short version: a polished app does not tell you whether you are dealing with a chartered bank, a credit union, or a technology company that routes your deposit to a bank somewhere behind the scenes. Those three arrangements offer meaningfully different protection.
Three Different Things That Look Identical on a Phone
| Chartered bank | Credit union | Fintech app or neobank | |
| What it is | A licensed depository institution | A member-owned cooperative depository | A technology company, usually not a licensed bank |
| Who holds deposits | The bank itself | The credit union itself | One or more partner banks, often in a pooled account |
| Insurance | FDIC, directly | NCUA, directly | Pass-through FDIC coverage via the partner bank, subject to conditions |
| Typical marketing wording | “Member FDIC” | “Federally insured by NCUA” | “Banking services provided by [Bank], Member FDIC” |
| Who you call if frozen | The bank, and its regulator | The credit union, and NCUA | Unclear; the app, the partner bank, or possibly a bankruptcy trustee |
That last row is the one worth reading twice. The difference between these models is invisible when everything works. It becomes the only thing that matters when something breaks.
Note also that the phrase “banking services provided by” is doing real work. It signals that the company whose logo is on the app is not the institution holding your deposit. This is not necessarily bad, and many such arrangements are run competently. But it introduces at least one additional party between you and your money, plus the bookkeeping system that tracks who owns what.
How Pass-Through Insurance Works, and How It Failed
When a fintech places customer funds at a partner bank, the money typically sits in a pooled custodial account, sometimes called a “for benefit of” or FBO account. The bank sees one large balance. The record of which individual customer owns which portion of it is maintained on a ledger, historically often kept by the fintech or by a middleware provider sitting between the fintech and the bank.
For FDIC coverage to pass through to individual customers, those records have to be accurate. The insurance protects deposits at an insured bank if that bank fails. It does not insure the fintech, and it does not insure against the ledger being wrong.
In 2024 this stopped being theoretical. Synapse Financial Technologies, a middleware provider connecting consumer fintech apps to partner banks, entered bankruptcy. Customers of apps built on that infrastructure were locked out of their accounts, some for months. A court-appointed trustee reported that up to $96 million of customer funds could not be accounted for. The FDIC noted that it received more than a thousand consumer inquiries following the episode, and that funds had been advertised as FDIC-insured, leading consumers to believe they would remain safe and accessible.
The critical detail: no bank failed. FDIC insurance is triggered by the failure of an insured institution, so the protection consumers believed they had was not the protection that applied to what actually happened. Banks involved struggled to obtain and reconcile the middleware provider’s records, which is precisely the scenario pass-through coverage assumes will not occur.
In September 2024 the FDIC proposed a rule, Recordkeeping for Custodial Accounts, that would require insured banks holding custodial accounts with transactional features to maintain records identifying the beneficial owner of each account and the balance attributable to each, in a specified format, with annual certification. As of writing this remains a proposal rather than a finalized rule, and industry groups have argued for changes or withdrawal. Check its current status before assuming the gap has been closed.
| The practical lessonDeposit insurance covers bank failure. It does not cover a technology company failing, a middleware provider collapsing, a ledger being unreconcilable, or your account being frozen while a trustee works out who owns what. Those are operational and counterparty risks, and they sit outside the insurance framework entirely. If an app is where your rent money lives, knowing which bank holds it and whether that bank maintains its own records at the customer level is a reasonable thing to establish in advance. |
What Deposit Insurance Actually Covers
FDIC insurance protects deposits up to $250,000 per depositor, per insured bank, per ownership category. NCUA provides equivalent coverage for credit union members. The ownership category structure is what allows a household to hold more than $250,000 at one institution with full coverage.
| Ownership category | Coverage limit | Note |
| Single accounts | $250,000 per depositor | All single-ownership accounts at the same bank are added together |
| Joint accounts | $250,000 per co-owner | A two-person joint account can therefore carry $500,000 of coverage |
| Certain retirement accounts | $250,000 per depositor | Includes IRAs and certain self-directed plans |
| Trust accounts | Up to $1,250,000 per owner | Under the rule effective April 2024, $250,000 per beneficiary up to five beneficiaries |
Summary only. Ownership category rules contain conditions and exceptions, and limits are subject to change. Use the FDIC’s own deposit insurance estimator and current publications, or the NCUA equivalent, for your specific situation.
Two consequences people miss. First, holding money at three different fintech apps that all route to the same partner bank may give you a single $250,000 limit at that bank, not three. Second, a product that looks like a deposit account may not be one at all.
| Generally insured | Not covered by deposit insurance |
| Checking and savings accounts | Stocks, bonds, mutual funds and ETFs |
| Money market deposit accounts | Money market mutual funds, despite the similar name |
| Certificates of deposit | Cryptocurrency and stablecoin balances |
| Certain retirement deposit accounts | Contents of a safe deposit box |
| Cashier’s checks and money orders issued by the bank | Life insurance and annuity products |
Regulation E: Your Protection Against Unauthorized Transfers
Separate from deposit insurance, US consumers have statutory protection against unauthorized electronic transfers under Regulation E, which implements the Electronic Fund Transfer Act. This is the rule that governs what happens when someone drains your account without permission.
In general terms:
- You must report the problem within a defined window, generally 60 days from the statement showing the transfer, to preserve full protection.
- Reporting a lost or stolen card or credential promptly limits your liability; delay can increase it substantially.
- The institution generally has 10 business days to investigate, or must provide provisional credit while taking up to 45 days.
- Error resolution rights apply regardless of how polished or unpolished the app is.
Now the limitation that matters most in practice. Regulation E protects against transfers you did not authorize. It does not generally protect transfers you did authorize, even where you were deceived into authorizing them. If a scammer convinces you to send money yourself, that is an authorized transfer under the rule, and recovery is far from guaranteed.
This is why instant payment systems deserve particular caution. A transfer that settles in seconds and cannot be recalled is an excellent product feature and an excellent fraud vector. Treat any unexpected request to send money quickly, from anyone, as suspect by default.
How to Verify Who Holds Your Money
- Read the fine print at the bottom of the app or website. Look for “Member FDIC” against the provider’s own name, versus “banking services provided by” another institution.
- Identify the partner bank by name. If you cannot find it in the terms, deposit agreement or help centre, treat that as a warning rather than an oversight.
- Verify that bank exists and is insured using the FDIC’s BankFind tool, or the NCUA’s research tool for credit unions. Do not rely on a logo.
- Check whether deposits are placed at one bank or spread across several, since that changes how your coverage limits aggregate.
- Add up your exposure to each underlying bank across all the apps and accounts you use, not per app.
- Find out what the deposit agreement says about who maintains customer-level records.
- Establish, before you need it, how to reach a human and what the escalation path is if funds become inaccessible.
Red Flags in Digital Banking Marketing
- “FDIC insured” stated without naming the insured institution.
- Yields far above the prevailing market with no explanation of where the return comes from.
- Language implying insurance covers the platform rather than deposits at a named bank.
- No published deposit agreement, or terms that are hard to locate.
- Support available only through in-app chat, with no phone number and no named institution to escalate to.
- Crypto or investment balances presented in the same interface and same visual style as insured deposits.
- Pressure to move your entire balance to unlock a promotional rate.
A Reasonable Setup
None of this argues against digital banking. Digital-only institutions frequently offer better rates and lower fees than branch networks, and many are themselves chartered, directly insured banks. The point is to know which kind you are using and to build in some resilience.
- Keep your core operating money, the balance that pays rent and bills, at a directly insured bank or credit union.
- Use fintech apps for what they are good at, and size the balance you hold there against the possibility of temporary loss of access.
- Maintain accounts at two unrelated institutions so a single outage or freeze does not leave you without payment ability.
- Keep a modest amount of cash accessible for outages, which happen to every platform eventually.
- Turn on transaction and login alerts everywhere, since early detection is what preserves your Regulation E rights.
- Review, once a year, which underlying banks actually hold your deposits. Partner arrangements change without much announcement.
The Bottom Line
Digital banking has made the interface excellent and the underlying structure harder to see. Two accounts can look identical on a phone while offering materially different protection: one is a deposit at an insured bank, the other is a claim against a technology company that has placed funds at an insured bank and keeps the record of who owns what.
Both can be perfectly fine. But the question “which bank actually holds my money, and who keeps the record” takes about ten minutes to answer and is worth answering before you need the answer rather than after.
This article is general information about deposit protection and consumer payment rights in the United States. It is not financial, legal or tax advice and does not address individual circumstances. Deposit insurance rules, coverage limits and regulations change; the FDIC proposal discussed was not finalized at the time of writing. Verify current rules with the FDIC, NCUA or CFPB directly, and consult a qualified professional about your own situation. Consumers outside the US should check their own national deposit guarantee scheme, such as FSCS in the UK, CDIC in Canada or the applicable EU deposit guarantee scheme.
