Neobank AI Compliance: Chime CFPB, Dave Inc. FTC Settlement & Evolve Bank Sponsor Risk

Neobanks — digital-first financial services companies that rely on bank sponsor relationships for deposit insurance and payment infrastructure — face a distinctive regulatory risk profile. Chime's CFPB enforcement issues related to account closures, Dave Inc.'s $4 million FTC settlement over deceptive tipping practices, and Evolve Bank's exposure to partner fintech failures collectively illustrate the compliance risks that AI-driven neobank operations create. The sponsor bank model creates regulatory accountability for both the neobank and its bank partner.

135M
Estimated US neobank accounts in 2024 (Statista)
Neobanks operate in a regulatory gray zone — they are not banks and do not hold banking licenses, but they offer bank-like services through sponsor bank partnerships. AI systems that automate account opening, credit decisions, and customer service for neobanks must comply with the same consumer protection laws that apply to chartered banks, creating compliance obligations that many neobanks have underestimated.

Dave Inc. FTC Settlement — Deceptive Fintech Practices, 2024

Settlement amount: $4 million FTC civil penalty (2024)
Allegations: Dave Inc. used dark patterns and deceptive practices to enroll consumers in 'Dave's Express' service and solicit 'tips' that functioned as fees without adequate disclosure; FTC alleged that Dave misrepresented the cost and nature of its cash advance products
FTC Act violation: Section 5 — unfair or deceptive acts or practices
AI relevance: Neobank AI recommendation systems and checkout flows that use dark patterns to maximize tip or fee revenue violate the FTC's prohibition on deceptive practices
Source: FTC Press Release, 2024

Regulatory Risks and Compliance Challenges

Chime's regulatory issues centered on its practice of closing customer accounts without adequate notice or explanation — a practice that left customers without access to their funds. CFPB received thousands of complaints about Chime account closures, resulting in CFPB supervisory scrutiny. AI-driven account closure systems that apply risk rules without adequate review, generate inadequate notices, or fail to provide customers with timely access to their funds raise the same consumer protection concerns that attracted CFPB attention to Chime's practices.

Evolve Bank & Trust — Chime's former banking partner — faced heightened regulatory scrutiny after multiple fintech partners that it hosted experienced compliance failures. The Federal Reserve and Arkansas State Banking Department ordered Evolve to strengthen its fintech partner oversight in 2024 following a ransomware attack and partner compliance issues. Sponsor banks are accountable to their regulators for the compliance practices of their fintech partners — creating incentives for sponsor banks to impose compliance requirements on neobank AI systems.

Claire's AI Compliance Solution

Claire Platform Capabilities

Account Closure and Consumer Protection Compliance

Claire's AI-driven account management tools include consumer protection compliance controls — ensuring that account restrictions and closures are applied with adequate notice, documented justification, and timely return of customer funds — meeting CFPB and FDIC deposit rules that apply through sponsor bank partnerships.

Dark Pattern Detection for Neobank UX

Claire's user experience compliance module flags AI-driven UX elements that may constitute dark patterns — including pre-checked tip boxes, misleading fee disclosures, and subscription enrollment flows that lack affirmative consent — reducing FTC UDAAP and state consumer protection exposure.

Sponsor Bank Compliance Reporting

Claire generates the compliance reporting that sponsor banks require from their fintech partners — including AI model documentation, AML program summaries, consumer complaint data, and adverse action statistics — streamlining the sponsor bank oversight relationship.

Compliance Checklist

AI Regulatory Compliance Requirements

01

Account closure consumer protection protocol: AI account closure systems provide adequate notice, documented justification, and timely return of funds — complying with CFPB and Reg CC requirements.

02

CFPB UDAAP review of AI customer experience: All AI-driven customer flows reviewed for dark patterns, deceptive representations, and unfair practices before deployment.

03

FTC Act Section 5 compliance for fee disclosures: AI systems that prompt tips, suggest fees, or present subscription offers include clear, accurate disclosures of all costs.

04

Sponsor bank compliance reporting package: Monthly compliance reporting to sponsor bank covering AI model performance, consumer complaints, and AML monitoring results.

05

AML program for neobank sponsor structure: BSA-compliant AML program covering neobank customer onboarding, transaction monitoring, and SAR filing through sponsor bank structure.

06

Adverse action notices for AI credit decisions: ECOA-compliant adverse action notices for all AI-driven credit access decisions, including earned wage access and BNPL products.

07

CFPB complaint monitoring and response: Consumer complaint tracking by AI system, with root cause analysis for patterns that may indicate systemic UDAAP issues.

08

Account terms and conditions AI review: AI systems that automatically apply account terms must reflect terms that are accurately disclosed in the consumer agreement.

09

State consumer protection law compliance: Neobank AI systems reviewed for compliance with state UDAP laws in states where neobank customers reside.

10

Data privacy compliance for neobank AI: Neobank AI systems using behavioral data comply with GLBA, state privacy laws, and applicable CFPB data privacy guidance.

Frequently Asked Questions

Are neobanks subject to CFPB supervision?

Yes, in two ways. First, neobanks that are larger market participants in consumer financial product markets are subject to direct CFPB supervision regardless of whether they have a bank charter. Second, neobanks that operate through sponsor bank partnerships are subject to CFPB rules that apply to the products they offer — including Regulation E for deposit account-like products, ECOA for credit products, and UDAAP for all consumer financial products.

What sponsor bank compliance obligations do neobanks need to meet?

Sponsor banks require their fintech partners to maintain compliance programs that meet bank regulatory standards — because the sponsor bank is accountable to its regulators for partner compliance failures. Common sponsor bank requirements include: documented AML programs; ECOA-compliant adverse action notices; UDAAP-compliant customer experience review; consumer complaint tracking; and AI model documentation. Neobanks that cannot meet sponsor bank requirements risk losing their banking partnership.

What are dark patterns and why do they create regulatory risk?

Dark patterns are user interface design choices that manipulate consumers into decisions they might not otherwise make — such as pre-checked subscription boxes, misleading pricing displays, or aggressive 'tip' suggestions that function as fees. The FTC has taken the position that dark patterns that cause consumers to pay more than they understand they are paying, or to enroll in services they did not consciously choose, violate Section 5 of the FTC Act's prohibition on unfair and deceptive practices.

How should neobanks manage AI account closure risk?

Neobank AI systems that drive account closure decisions should provide: written notice at least 30 days before account closure (absent immediate fraud risk); clear explanation of the reason for closure; information about how the customer can access their remaining funds; and compliance with FDIC regulations on deposit account termination. AI closure decisions based on opaque risk scores without human review create consumer protection and regulatory exposure.

What happened with Evolve Bank's fintech partner oversight requirements?

The Federal Reserve Board and Arkansas State Banking Department issued a consent order to Evolve Bank & Trust in 2024 citing deficiencies in its BSA/AML program, its IT risk management, and its third-party risk management practices related to fintech partners. Evolve was required to strengthen oversight of its fintech partner AI systems and compliance programs. The case established that sponsor banks face direct regulatory accountability for fintech partner compliance failures.

Ready to strengthen your AI compliance program? Claire helps financial institutions navigate complex regulatory requirements with automated monitoring, audit trails, and examination-ready documentation. Book a demo with Claire.

Related: Finance AI Overview  |  AI Model Risk Management  |  Regulatory Compliance

Ask Claire about AI compliance
C