United States — Utah (US-UT)
Lead Signal
Utah's Industrial Bank charter has become the focal point of this cycle's US payments intelligence, with PayPal Holdings submitting applications to Utah's Department of Financial Institutions and the FDIC on 2025-12-15 to establish "PayPal Bank" as a Utah-chartered ILC. As of the July 2026 collection window, Utah DFI's public application-status page showed no recorded approval or withdrawal for PayPal's filing, leaving the outcome pending. PayPal's bid follows a broader wave of charter activity: FDIC approval for Edward Jones, whose Utah ILC will launch with at least $330 million in initial funds targeting a 2027 opening, and for Stellantis Bank USA, subject to a minimum $150 million initial capital requirement and a 15% tier-1 leverage-ratio condition, alongside conditional approvals granted to Ford Motor Credit and GM Financial in January 2026. Utah's Industrial Bank charter regime, granted by DFI jointly with FDIC deposit-insurance approval under Utah Code 7-1-704/706, allows industrial banks to accept federally insured deposits and make consumer and commercial loans while being examined annually alongside the FDIC. PayPal's proposed bank would seek direct card-network membership to complement, not fully replace, its existing processing and settlement relationships with program banks Goldman Sachs, Wells Fargo and JPMorgan Chase, explicitly framed by the company as reducing reliance on third-party program-bank partners. The charter wave sits atop an already-established payments-ILC cluster in Utah that includes WebBank, Merrick Bank, Comenity Capital Bank and Block Inc., following Block's 2020 charter.
Outlook
Several items carry directly into the next collection window. PayPal's ILC application status should be re-checked against DFI's public tracker, since no approval or withdrawal had been recorded as of this cycle. Edward Jones' newly approved Utah bank is targeting a 2027 opening backed by at least $330 million in initial capital, giving a concrete forward marker for the wealth-management sector's move into chartered banking. BNPL provider Sezzle's chief executive signalled in a November 2025 interview that the company may apply for a Utah ILC charter within the following year to gain distance from state-by-state BNPL regulatory fragmentation, though no formal filing had been made at collection time. A separate discrepancy, Banking Dive's reporting that Stellantis' approval brought Utah's ILC total to 16, against Utah DFI's own count of 15 active charters, remains unreconciled and warrants confirmation. Utah's broader trajectory is one of liberalising market access paired with incrementally added consumer guardrails: permissive crypto and ILC charter settings sit alongside newly enacted kiosk consumer protections, even as true-lender litigation remains a persistent residual risk for the bank-partnership model that underpins much of the state's fintech ecosystem.
Other Developments
Beyond the charter wave, Utah's digital-asset regulatory posture continues to firm up. The state enacted HB72 during its 2026 session (signed 2026-03-25, effective 2026-05-06), creating a new Title 13 Chapter 82 Virtual Currency Kiosk Regulation with graduated transaction limits, disclosure requirements, bilingual fraud-prevention warnings, annual location reporting to the Division of Consumer Protection, and recordkeeping duties, superseding an earlier November 2025 interim-committee draft that had only proposed such protections. This sits alongside the 2025 HB230 blockchain amendments, which protect self-custody, node-running, staking and mining from state money-transmitter licensing, though the bill's original state-treasury digital-asset reserve provision was stripped before Senate passage. On the litigation front, Utah-chartered banks remain central to the national true-lender rent-a-bank dispute: Colorado's UCCC Administrator sued fintech Avant alleging that Utah-based WebBank was merely a pass-through lender, a case resolved via a 2020 safe-harbor settlement, while the District of Columbia's Attorney General found Utah's FinWise Bank was not the true lender for loans carrying APRs up to 149% made with nonbank partner Elevate, producing a $4 million settlement requiring at least $3.3 million in consumer relief. WebBank has since intervened directly in FDIC rulemaking on federal interest-rate authority, urging confirmation that a loan's federal-law validity survives sale to a nonbank purchaser. Utah's safeguarding regime for money transmitters remains bond-plus-net-worth rather than a UK-style statutory segregation model: licensees must maintain independently audited net worth of at least $1,000,000 and a minimum $50,000 surety bond, with DFI retaining discretion to compel deposits with an approved financial institution if a licensee is found unsafe or unsound. Conduct oversight for consumer fees and surcharges continues to run through the Division of Consumer Protection's general deceptive-practices authority rather than a dedicated payments conduct code. Separately, Utah merchants fall within the nationwide Visa/Mastercard interchange-fee antitrust settlement class, with a second distribution of funds court-approved in June 2026, while the state's 2013-2014 surcharge cap has lapsed unrenewed, leaving network rules such as Mastercard's 4% cap as the operative backstop.
Cross-Monitor Connections
Two Utah AML-adjacent procedural touchpoints identified this cycle, the requirement that money-transmitter licence applicants submit a current review of their AML policy as part of the NMLS application package, and the requirement since 2016 that payday lenders check borrowers' credit reports and report loan data to consumer reporting agencies and a state database, have been routed to Sentinel.gi's illicit-finance channel for deeper assessment rather than analysed as WPM conclusions, consistent with the module's role as a payments-market-access lens rather than a financial-crime investigator. No dedicated Sentinel.gi payments-context AML/CFT position for Utah was retrievable this cycle, leaving that cross-reference thin pending a fuller feed next period.
Legal accessibility by product
overall:Domains
14 regulatory modules · click to expand the full sub-briefLicensing, Authorisation & Market Access
ConfirmedUtah requires a money transmitter license under Title 7, Chapter 25, the Money Transmitter Act, administered by the Department of Financial Institutions through the NMLS system; applicants must show independently audited net worth of at least $1,000,000, while depository institutions and US or state government entities are exempt.
Conduct, Safeguarding & Promotions
HighSafeguarding for Utah money transmitters rests on a minimum $50,000 surety bond rather than a UK-style statutory segregation regime, with DFI able to raise the bond requirement and, where a licensee is found unsafe or unsound, to compel it to deposit funds with an acceptable financial institution or to cap or prohibit further payment-instrument issuance.
Stablecoins & Digital Money
HighUtah has taken a deliberately permissive approach to crypto assets: blockchain tokens were carved out of the Money Transmitter Act's licensing perimeter in 2019-2020, and the 2025 HB230 blockchain amendments further shield self-custody, node-running, staking and mining from state money-transmitter licensing and limit local zoning or noise rules targeting digital-asset mining, though the bill's original state-treasury 5% digital-asset reserve provision was stripped before Senate passage.
Operational Resilience & Critical Infrastructure
HighUtah's operational-resilience baseline for payments runs through the Protection of Personal Information Act, in force since 2006, and the 2024 SB98 breach-notification amendments, which require notice to the Attorney General and the Utah Cyber Center with prescribed content whenever misuse affects 500 or more Utah residents, alongside a general standard of notification without unreasonable delay once an investigation confirms a breach.
Scheme & Network Compliance
HighDebit-card surcharging is prohibited nationwide, including in Utah, under the federal Durbin Amendment's interchange-fee and network-rule framework, a floor that applies independently of any state-level permission to surcharge credit transactions.
Payment Corridor Dynamics
AssessedUtah has no distinct state-level cross-border payment corridor or remittance-scheme regime; its corridor relevance is instead structural, arising from Utah-chartered industrial banks' ability to export their home-state interest rate nationwide under Section 27 of the Federal Deposit Insurance Act, making the Utah charter a de facto national consumer-credit distribution corridor for partner fintechs.
Full per-domain detail — all 14 modules
W1aConfirmedLicensing, Authorisation & Market Access
see this theme across all jurisdictions →8 claimsUtah regulates money transmission under the Title 7, Chapter 25 Money Transmitter Act via the Department of Financial Institutions (DFI) using NMLS-based licensing, alongside a distinct and nationally significant Industrial Bank (ILC) charter regime that is the primary US venue for fintech/payments companies seeking bank charters. Check cashing/deferred deposit lending and commercial financing are separately registered.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Licensing, Authorisation & Market Access
Utah requires a money transmitter license under Title 7, Chapter 25, the Money Transmitter Act, administered by the Department of Financial Institutions through the NMLS system; applicants must show independently audited net worth of at least $1,000,000, while depository institutions and US or state government entities are exempt. Utah's Industrial Bank charter, granted by DFI jointly with FDIC deposit-insurance approval under Utah Code 7-1-704/706, is the primary US bank-charter venue for fintech and payments companies, permitting industrial banks to accept federally insured deposits and make consumer and commercial loans while being examined annually alongside the FDIC. PayPal Holdings submitted applications to Utah DFI and the FDIC on 2025-12-15 to establish PayPal Bank as a Utah-chartered ILC, though as of the July 2026 collection window DFI's public application-status page showed no recorded approval or withdrawal, leaving the filing pending. Commercial financing providers, including merchant cash advance firms, must separately register with DFI under Title 7, Chapter 27 (effective January 2023), unless exempt, such as being already MTL-licensed under Chapter 25 or transacting five or fewer deals annually in-state.
Outlook
PayPal's pending application is the item most likely to move first: Utah DFI's application-status tracker had recorded neither approval nor withdrawal as of the July 2026 collection window, and confirmation of the charter's fate would be a first-order signal for whether large payments firms can obtain direct ILC access alongside the auto-finance and wealth-management charters already approved this cycle.
Utah regulates money transmission under the Title 7, Chapter 25 Money Transmitter Act via the Department of Financial Institutions (DFI) using NMLS-based licensing, alongside a distinct and nationally significant Industrial Bank (ILC) charter regime that is the primary US venue for fintech/payments companies seeking bank charters. Check cashing/deferred deposit lending and commercial financing are separately registered.
Evidence — 8 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- False
Event Findings
Safeguarding for Utah money transmitters rests on minimum net worth plus a surety bond, with DFI discretion to compel deposits if a licensee is unsafe or unsound. Conduct/promotions oversight for consumer fees (including surcharges) sits with the Division of Consumer Protection under general deceptive-practice authority rather than a payments-specific conduct code.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Conduct, Safeguarding & Promotions
Safeguarding for Utah money transmitters rests on a minimum $50,000 surety bond rather than a UK-style statutory segregation regime, with DFI able to raise the bond requirement and, where a licensee is found unsafe or unsound, to compel it to deposit funds with an acceptable financial institution or to cap or prohibit further payment-instrument issuance. Conduct and promotions oversight for consumer-facing fee practices sits with the Division of Consumer Protection, which treats undisclosed or mischaracterised card and surcharge fees as a deceptive act under its general unfair-and-deceptive-practices authority, in the absence of any dedicated payments conduct code.
Outlook
No change to Utah's safeguarding or conduct settings is currently signalled; the bond-plus-net-worth model and general UDAP-based fee enforcement are likely to remain the operative baseline absent a dedicated payments conduct code, which would represent the main upgrade path if pursued.
Safeguarding for Utah money transmitters rests on minimum net worth plus a surety bond, with DFI discretion to compel deposits if a licensee is unsafe or unsound. Conduct/promotions oversight for consumer fees (including surcharges) sits with the Division of Consumer Protection under general deceptive-practice authority rather than a payments-specific conduct code.
Evidence — 5 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- False
Event Findings
Utah has taken a deliberately permissive, exemption-led approach: blockchain tokens/cryptocurrency were carved out of the Money Transmitter Act in 2019-2020, and the 2025 Blockchain and Digital Innovation Amendments (HB230) further shield self-custody, node-running, staking and mining from state licensing, while a state-treasury digital-asset reserve provision was stripped out before enactment. A crypto-kiosk (ATM) consumer-protection bill remains at interim-committee draft stage.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Stablecoins & Digital Money
Utah has taken a deliberately permissive approach to crypto assets: blockchain tokens were carved out of the Money Transmitter Act's licensing perimeter in 2019-2020, and the 2025 HB230 blockchain amendments further shield self-custody, node-running, staking and mining from state money-transmitter licensing and limit local zoning or noise rules targeting digital-asset mining, though the bill's original state-treasury 5% digital-asset reserve provision was stripped before Senate passage. Utah has since enacted HB72 during its 2026 session, signed 2026-03-25 and effective 2026-05-06, creating Title 13, Chapter 82, the Virtual Currency Kiosk Regulation, which imposes graduated transaction limits, disclosure requirements, bilingual fraud-prevention warnings, annual location reporting to the Division of Consumer Protection, and recordkeeping duties, superseding the November 2025 interim-committee draft that had only proposed such protections and correcting the earlier draft-only characterisation of the state's kiosk-consumer-protection position.
Outlook
Utah's crypto posture is now best read as permissive-market-access paired with newly enacted consumer safeguards at the point of cash-to-crypto conversion, a combination likely to be replicated as other states debate kiosk-specific rules; the corrected HB72 baseline should be treated as authoritative going forward, superseding the earlier interim-draft characterisation.
Utah has taken a deliberately permissive, exemption-led approach: blockchain tokens/cryptocurrency were carved out of the Money Transmitter Act in 2019-2020, and the 2025 Blockchain and Digital Innovation Amendments (HB230) further shield self-custody, node-running, staking and mining from state licensing, while a state-treasury digital-asset reserve provision was stripped out before enactment. A crypto-kiosk (ATM) consumer-protection bill remains at interim-committee draft stage.
Evidence — 5 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- False
Event Findings
W3HighOperational Resilience & Critical Infrastructure
see this theme across all jurisdictions →4 claimsUtah's operational-resilience baseline for payments is anchored in the Protection of Personal Information Act (breach notification since 2006, amended 2024) and the Utah Cyber Center's coordination role, rather than a payments-specific operational-resilience regime; GLBA-regulated financial institutions receive a partial carve-out from the general statute.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Operational Resilience & Critical Infrastructure
Utah's operational-resilience baseline for payments runs through the Protection of Personal Information Act, in force since 2006, and the 2024 SB98 breach-notification amendments, which require notice to the Attorney General and the Utah Cyber Center with prescribed content whenever misuse affects 500 or more Utah residents, alongside a general standard of notification without unreasonable delay once an investigation confirms a breach. A federal Gramm-Leach-Bliley Act carve-out under 15 U.S.C. 6809 exempts financial institutions and their affiliates from Utah's state breach-notification chapter entirely, while civil fines for non-exempt entities are capped at $2,500 per violation, generally $100,000 in aggregate, unless more than 10,000 residents are affected.
Outlook
Utah's resilience regime is likely to remain anchored in general state breach law rather than evolve into a payments-specific operational-resilience framework in the near term, with any federal GLBA guidance change being the more probable source of movement.
Utah's operational-resilience baseline for payments is anchored in the Protection of Personal Information Act (breach notification since 2006, amended 2024) and the Utah Cyber Center's coordination role, rather than a payments-specific operational-resilience regime; GLBA-regulated financial institutions receive a partial carve-out from the general statute.
Evidence — 4 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- False
Event Findings
Utah imposes no state-specific interchange or surcharge cap; scheme compliance is delegated to card-network rules (Visa/Mastercard surcharge ceilings) layered on top of a brief-then-repealed 2013-2014 state surcharge ban, plus ongoing exposure to the nationwide Visa/Mastercard interchange antitrust settlement.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Scheme & Network Compliance
Debit-card surcharging is prohibited nationwide, including in Utah, under the federal Durbin Amendment's interchange-fee and network-rule framework, a floor that applies independently of any state-level permission to surcharge credit transactions. In the absence of a state-specific interchange or surcharge cap, since Utah's 2013-2014 surcharge ban lapsed unrenewed, merchants surcharging credit cards must instead comply with card-network limits such as Mastercard's 4% cap, which may not exceed actual processing cost. Separately, Utah merchants sit within the nationwide Rule 23(b)(3) Visa/Mastercard interchange-fee antitrust settlement class covering card acceptance between January 2004 and January 2019, with a court-approved second distribution of settlement funds dated June 2026.
Outlook
No state-level surcharge or interchange legislation is currently pending in Utah, so scheme compliance will likely continue to run through card-network rules and federal law, with the interchange settlement's distribution schedule the main near-term item to track.
Utah imposes no state-specific interchange or surcharge cap; scheme compliance is delegated to card-network rules (Visa/Mastercard surcharge ceilings) layered on top of a brief-then-repealed 2013-2014 state surcharge ban, plus ongoing exposure to the nationwide Visa/Mastercard interchange antitrust settlement.
Evidence — 5 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- False
Event Findings
Utah has no distinct state-level cross-border payment corridor or remittance-scheme regime; its corridor relevance is instead structural, arising from its ILC banks' nationwide interest-rate-exportation lending distribution and Utah-based open-banking data infrastructure serving the whole US bank-data corridor.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Payment Corridor Dynamics
Utah has no distinct state-level cross-border payment corridor or remittance-scheme regime; its corridor relevance is instead structural, arising from Utah-chartered industrial banks' ability to export their home-state interest rate nationwide under Section 27 of the Federal Deposit Insurance Act, making the Utah charter a de facto national consumer-credit distribution corridor for partner fintechs. MX, headquartered in Lehi, Utah, aggregates bank transaction data nationally and functions as connective infrastructure within the broader US open-banking data corridor, an adjacent signal rather than a dedicated cross-border payment programme.
Outlook
No Utah-specific corridor regime is expected to emerge; the state's cross-border relevance will likely remain a structural by-product of its bank-charter and open-banking-infrastructure position rather than a directly regulated payment corridor.
Utah has no distinct state-level cross-border payment corridor or remittance-scheme regime; its corridor relevance is instead structural, arising from its ILC banks' nationwide interest-rate-exportation lending distribution and Utah-based open-banking data infrastructure serving the whole US bank-data corridor.
Evidence — 2 structured claims
Key facts
- Content Tier
- D
- Sentinel Feed
- False
Event Findings
Utah is the leading US jurisdiction for Industrial Bank (ILC) charters, hosting the majority of the country's fintech- and auto-finance-linked ILCs, while its 'Silicon Slopes' cluster has produced payments/fintech unicorns; the bank-partnership ('rent-a-bank') model built on Utah charters remains commercially central to national online lending and is now attracting large payments companies seeking direct charters.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Industry Structure & Commercial Dynamics
Utah remains the leading US jurisdiction for Industrial Bank charters: Stellantis Bank USA's FDIC approval reportedly brought the state's industrial-bank total to 16, alongside Ford, GM and Edward Jones approvals in the same period, though Utah DFI's own industrial-banks page lists 15 active charters, an unreconciled discrepancy flagged for confirmation next cycle. Utah already hosts an established payments-relevant industrial-bank cluster, including WebBank, Merrick Bank, Comenity Capital Bank and Block Inc., which obtained its charter in 2020; PayPal's application follows this pattern, underscoring Utah's position as the payments industry's preferred bank-charter venue.
Outlook
The charter wave is likely to continue as more non-bank financial firms seek direct settlement access, though the unreconciled 15-versus-16 charter count should be confirmed, and any PayPal decision would be the single largest near-term marker of Utah's industry-structure trajectory.
Utah is the leading US jurisdiction for Industrial Bank (ILC) charters, hosting the majority of the country's fintech- and auto-finance-linked ILCs, while its 'Silicon Slopes' cluster has produced payments/fintech unicorns; the bank-partnership ('rent-a-bank') model built on Utah charters remains commercially central to national online lending and is now attracting large payments companies seeking direct charters.
Evidence — 6 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- False
Event Findings
Utah-chartered banks sit at the centre of the national 'true lender'/rent-a-bank litigation and enforcement wave, with multiple state-AG actions and private suits testing whether Utah banks or their nonbank fintech partners are the true lender for usury purposes; outcomes have been mixed, including a Colorado safe-harbor settlement and a $4 million DC settlement against a Utah-bank-partnered lender.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Legal & Litigation
Colorado's UCCC Administrator sued fintech Avant, alleging that Utah-based WebBank was merely a pass-through lender rather than the true lender under the predominant-economic-interest test drawn from CashCall v. Morrisey; the case was resolved through a 2020 safe-harbor settlement that now structures Colorado's approach to bank-fintech lending partnerships. In the District of Columbia, the Attorney General found that Utah-chartered FinWise Bank was not the true lender for loans made with nonbank partner Elevate carrying APRs up to 149%, producing a $4 million settlement that requires at least $3.3 million in consumer relief and halted the DC arrangement. WebBank has since formally intervened in FDIC rulemaking on federal interest-rate authority, citing its role in the Colorado litigation and urging the agency to confirm that a loan's federal-law validity survives its sale to a nonbank purchaser.
Outlook
True-lender exposure remains the single largest legal risk to the Utah bank-partnership model: further state-AG actions or private suits testing predominant-economic-interest theories are likely, and WebBank's FDIC rulemaking intervention signals that federal clarification of post-sale loan validity is now an active industry priority.
Utah-chartered banks sit at the centre of the national 'true lender'/rent-a-bank litigation and enforcement wave, with multiple state-AG actions and private suits testing whether Utah banks or their nonbank fintech partners are the true lender for usury purposes; outcomes have been mixed, including a Colorado safe-harbor settlement and a $4 million DC settlement against a Utah-bank-partnered lender.
Evidence — 6 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- False
Event Findings
Utah has no dedicated merchant-acquirer licensing or high-risk-MCC statute; acquiring-related consumer risk is addressed only indirectly through DFI's general oversight of payment service providers and DCP's surcharge-disclosure enforcement.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Merchant Acquiring & Risk
Utah has no dedicated merchant-acquirer licensing regime or high-risk-MCC statute; acquiring-related consumer risk is addressed only indirectly, through DFI's general oversight of payment service providers and the Division of Consumer Protection's surcharge-disclosure enforcement, an under-indexed area relative to more heavily regulated jurisdictions.
Outlook
Absent legislative action, Utah's acquiring oversight is likely to remain indirect; a dedicated acquirer-licensing or high-risk-merchant framework is not currently signalled, leaving this the thinnest-covered module in the state's payments regime.
Utah has no dedicated merchant-acquirer licensing or high-risk-MCC statute; acquiring-related consumer risk is addressed only indirectly through DFI's general oversight of payment service providers and DCP's surcharge-disclosure enforcement.
Evidence — 2 structured claims
Key facts
- Content Tier
- D
- Sentinel Feed
- False
Event Findings
Utah was the third US state to launch a fintech regulatory sandbox (2019) and has since layered on blockchain-innovation protections (2025) and a new earned-wage-access product category (2025), reinforcing a deliberately innovation-friendly product-development posture administered mainly by the Department of Commerce.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Product Innovation & Market Development
Utah's Regulatory Sandbox Program, established under Utah Code 13-55-101 in 2019 and administered by the Department of Commerce, was the third such fintech sandbox launched by a US state and lets peer-to-peer lending, money transmission and blockchain or crypto products test for up to two years without prior state licensure, with participants deemed appropriately licensed for federal-law purposes. Utah's 2025 Earned Wage Access Services Act (HB279), effective 2025-05-07, creates a registered on-demand-pay product category, the seventh such state framework enacted, with a grandfathering path running through October 2025 for existing providers.
Outlook
Utah's innovation-friendly product posture -- sandbox, blockchain carve-outs and the new earned-wage-access category -- is likely to continue attracting novel product filings, with the sandbox's two-year deemed-licensure window remaining the key structural feature for market entrants to track.
Utah was the third US state to launch a fintech regulatory sandbox (2019) and has since layered on blockchain-innovation protections (2025) and a new earned-wage-access product category (2025), reinforcing a deliberately innovation-friendly product-development posture administered mainly by the Department of Commerce.
Evidence — 5 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- False
Event Findings
Consumer protection in Utah payments rests on the Utah Consumer Privacy Act, general Division of Consumer Protection UDAP enforcement, and the 2025 earned-wage-access conduct rules; Utah has no dedicated APP (authorised push payment) fraud reimbursement mandate, relying instead on the federal Reg E/EFTA unauthorized-transfer framework.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Consumer Protection & APP Fraud
The Utah Consumer Privacy Act, effective 2023-12-31, gives the Attorney General exclusive enforcement authority with no private right of action, requires a 30-day non-sunsetting cure period, and caps civil penalties at $7,500 per violation. Utah has no dedicated authorised-push-payment fraud reimbursement mandate; consumers instead rely on the federal Regulation E and Electronic Fund Transfer Act unauthorised-transfer framework, with no primary source located that directly negates an APP-fraud mandate for the state.
Outlook
Consumer protection in Utah is likely to keep resting on the general privacy statute and federal Reg E rather than a payments-specific code, and the absence of an APP-fraud reimbursement mandate remains a monitored gap relative to jurisdictions that have adopted dedicated reimbursement rules.
Consumer protection in Utah payments rests on the Utah Consumer Privacy Act, general Division of Consumer Protection UDAP enforcement, and the 2025 earned-wage-access conduct rules; Utah has no dedicated APP (authorised push payment) fraud reimbursement mandate, relying instead on the federal Reg E/EFTA unauthorized-transfer framework.
Evidence — 4 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- False
Event Findings
W11PossibleAML/CFT & Financial Crime (Sentinel.gi-fed)
Sentinelsee this theme across all jurisdictions →2 claimsW11 baseline content for US-UT is intended to be Sentinel.gi-fed rather than original FIM-style analysis. The general payments-licensing research surfaced AML-adjacent procedural touchpoints (DFI's AML-policy review for MTL applicants; payday-lender credit-report/data-sharing duties), but a dedicated Sentinel.gi payments-context AML/CFT position for this jurisdiction could not be retrieved within this research pass.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
AML/CFT & Financial Crime
This module's content for Utah is Sentinel.gi-fed: money-transmitter licence applicants must provide the most current review of their AML policy as part of the NMLS application package reviewed by DFI, a procedural touchpoint rather than an original illicit-finance assessment, which readers should follow up via the Sentinel.gi feed directly. Also Sentinel-flagged: since 2016, Utah deferred-deposit (payday) lenders must check a borrower's credit report before lending and report loan information to consumer reporting agencies and a state database, a financial-crime-adjacent data-sharing control noted here for completeness rather than analysed as a WPM conclusion.
Outlook
No dedicated Sentinel.gi payments-context AML/CFT position for Utah was retrievable this cycle, so this module should be revisited once a fuller Sentinel feed is available; both touchpoints identified here have been flagged to FIM for deeper illicit-finance assessment beyond WPM's market-access framing.
W11 baseline content for US-UT is intended to be Sentinel.gi-fed rather than original FIM-style analysis. The general payments-licensing research surfaced AML-adjacent procedural touchpoints (DFI's AML-policy review for MTL applicants; payday-lender credit-report/data-sharing duties), but a dedicated Sentinel.gi payments-context AML/CFT position for this jurisdiction could not be retrieved within this research pass.
Evidence — 2 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- True
Event Findings
Utah's correspondent-banking exposure runs primarily through its industrial banks' program-bank/settlement relationships with large national banks, with FDIC deposit insurance and Sections 23A/23B affiliate-transaction limits underpinning access and safeguarding; PayPal's pending ILC application explicitly aims to reduce reliance on such correspondent/program-bank arrangements.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Correspondent Banking, Settlement & Access
PayPal's proposed Utah-chartered bank would seek direct card-network membership to complement, not fully replace, its existing processing and settlement relationships with program banks Goldman Sachs, Wells Fargo and JPMorgan Chase, a correspondent-dependency-reduction rationale central to the ILC bid. All Utah industrial banks are FDIC-insured and undergo joint annual safety-and-soundness examinations by DFI and the FDIC, underpinning access to federally backed settlement and deposit-insurance infrastructure, while Sections 23A and 23B of the Federal Reserve Act limit affiliate transactions between industrial banks and their nonbank parents.
Outlook
Correspondent-banking exposure in Utah is likely to keep running through program-bank relationships underpinned by FDIC insurance and Sections 23A/23B, even as PayPal's ILC bid tests whether a directly chartered payments company can reduce that dependency; the outcome will be a bellwether for other fintechs weighing the same route.
Utah's correspondent-banking exposure runs primarily through its industrial banks' program-bank/settlement relationships with large national banks, with FDIC deposit insurance and Sections 23A/23B affiliate-transaction limits underpinning access and safeguarding; PayPal's pending ILC application explicitly aims to reduce reliance on such correspondent/program-bank arrangements.
Evidence — 4 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- False
Event Findings
W13HighCommercial Intelligence (M&A, Investment & Product)
see this theme across all jurisdictions →5 claimsThe trailing-12-month window (July 2025-July 2026) has been dominated by a wave of Utah industrial-bank charter filings and approvals from major payments, auto-finance and wealth-management firms, led by PayPal's application to form PayPal Bank and capped by FDIC approvals for Edward Jones, Ford, GM and Stellantis.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Commercial Intelligence (M&A, Investment & Product)
2025-12-15 -- PayPal Holdings filed applications with Utah DFI and the FDIC to establish PayPal Bank, explicitly framed as reducing reliance on third-party program-bank partners; amount not publicly disclosed and the filing remained pending regulatory decision at collection time. FDIC approval (completed) -- Edward Jones' Utah ILC charter, first filed 2020 and resubmitted April 2025, will launch with at least $330 million in initial funds, targeting a 2027 opening. FDIC approval (completed) -- Stellantis Bank USA received Utah ILC charter approval, subject to a minimum $150 million initial capital requirement and a 15% tier-1 leverage-ratio condition. Conditional FDIC approval, January 2026 -- Ford Motor Credit and GM Financial each received conditional approval for a Utah ILC charter after multi-year pending applications; final capitalisation terms were not disclosed in reporting. Signalled interest, November 2025 -- BNPL provider Sezzle's chief executive indicated the company may apply for a Utah ILC charter within the following year to gain distance from state-by-state BNPL regulatory fragmentation; no formal application had been filed at collection time.
Outlook
The Edward Jones opening (targeted 2027) and any Sezzle filing decision are the two clearest forward markers to track next cycle, alongside confirmation of PayPal's still-pending application and reconciliation of the disputed 15-versus-16 Utah ILC charter count.
The trailing-12-month window (July 2025-July 2026) has been dominated by a wave of Utah industrial-bank charter filings and approvals from major payments, auto-finance and wealth-management firms, led by PayPal's application to form PayPal Bank and capped by FDIC approvals for Edward Jones, Ford, GM and Stellantis.
Evidence — 5 structured claims
Key facts
- Content Tier
- D
- Sentinel Feed
- False