True Lender Doctrine Explained: What Fintech Compliance Teams Need to Know in 2026

When a fintech and a bank partner to offer consumer loans, the bank's name is on the origination documents. The fintech markets the product, underwrites the borrowers, holds the economic interest in the receivables, and services every account. Regulators in California looked at that structure and said: the fintech is the real lender, the bank is ‘renting’ its charter, and the partnership exists to evade state interest rate caps that would otherwise apply to a non-bank lender.

That claim — and the legal doctrine behind it — is what compliance and legal teams are managing in every bank-fintech lending program operating today.

The true lender question is not academic. The most closely watched state enforcement action under this doctrine spent years in California courts, with the DFPI alleging the fintech performed all key lending functions while the bank merely rented its charter. That case — Opportunity Financial, LLC v. Hewlett (Los Angeles Superior Court, May 19, 2026) — concluded in May 2026 with a significant court victory for the bank-fintech model. But the underlying tension between federal rate exportation authority and state consumer protection law has not been resolved. More states are moving toward true lender legislation. The federal rate exportation question is pending en banc review in the Tenth Circuit. Oregon enacted a DIDMCA opt-out in March 2026.

This post explains what the doctrine is, how courts and regulators apply it, what the current legal landscape looks like, and what fintech lenders need to consider when structuring bank partnerships.

What the true lender doctrine is — and where it comes from

The true lender doctrine is a legal analysis used to determine which party in a bank-fintech lending arrangement is actually the lender for purposes of federal and state rules and regulations, which include: state usury law, consumer protection regulation,  licensing requirements, disclosures and even loan enforceability to name a few. The question at the center of every true lender dispute is whether the bank's federal charter — and its right to export home-state interest rates — should govern the loan, or whether the fintech's economic control over the program makes it the functional lender subject to the borrower's state law.

The doctrine traces back to 19th-century anti-evasion principles in usury law. Courts have applied it to assess the true economic interest in lending arrangements where the nominal and functional lenders are not the same entity. When loans from bank-fintech partnerships are subject to judicial review, courts apply a totality-of-the-circumstances inquiry — examining which entity provides the credit analytics, which retains significant economic interest in the loans after origination, which services the loans, which bears the risk of loss in the event of default, who funds the loan, who approves the credit, and who has contractual authority.

The stakes on both sides are substantial if the fintech is determined to be the true lender. For the bank: if regulators find the fintech is the true lender, the bank's charter-based preemption defense is gone. For the fintech: it faces state licensing requirements, disclosure requirements, state interest rate caps, and potentially loan enforceability challenges across its entire borrower portfolio. One can also add the risk of litigation and legal costs due to the possibility of borrowers electing to go after the entity if it is determined to be the true lender.  In OppFi's case, the DFPI alleged the partnership with FinWise Bank was structured to evade California's 36% interest rate cap, with OppFi offering loans ranging from approximately 99% to 195% APR to California borrowers.

The true lender doctrine operates alongside — but is distinct from — the valid-when-made doctrine, which addresses whether a loan that was lawful when the bank made it remains lawful after it is sold or assigned to a nonbank. Both doctrines matter in bank-fintech structures, but they answer different questions: true lender asks who is the lender at origination; valid-when-made asks whether the interest rate terms survive assignment. The OppFi court addressed both and found for the fintech on each doctrine under analysis.

Common Legal Frameworks Used in True Lender Analysis

Test 1: Predominant economic interest

The predominant economic interest test focuses on who holds the economic upside and downside of the loans. The entity that retains the right to loan receivables, bears credit risk, and profits from the loan program is the functional lender — regardless of which name appears on the origination documents.

Under this test, a state consumer lending license is required for any person who purports to act as an agent or service provider for a bank if that person holds the predominant economic interest in the consumer loan, markets or facilitates the loan and holds a right of first refusal to acquire the loan or receivables, or if the totality of circumstances indicates the arrangement is structured to circumvent licensing requirements.

States that have codified this test include Connecticut, Maine, Minnesota, and Washington. It is also the framework the DFPI attempted to apply in OppFi, though California's statute did not contain an explicit predominant economic interest provision at the time — a gap the court noted directly in OppFi's favor.

Test 2: Totality of the circumstances

The totality of the circumstances test is broader and more fact-intensive. No single factor determines the outcome. Courts and regulators look at the whole structure to determine who functions as the lender in substance, not just in form.

The factors typically examined include:

• Whether the entity indemnifies, insures, or protects the bank from costs or risks related to the consumer loan
• Whether the entity predominantly designs, controls, or operates the lending program
• Whether the entity purports to act as an agent or service provider in the borrower's state while acting directly as a lender in another state
• Who makes the underwriting decisions and sets the credit criteria
• Who services the loans and manages the borrower relationship

These factors appear in state true lender statutes in Connecticut, Illinois, Nebraska, Rhode Island's proposed legislation, and Wisconsin's pending bill. They are also the framework courts apply when no statute codifies the test explicitly.

How the two tests interact

Most state true lender statutes include both tests as alternative grounds for finding a non-bank entity is the lender. Satisfying either one is sufficient. A fintech holding a right of first refusal to purchase loan receivables may trigger the predominant economic interest test even if the totality of circumstances analysis would otherwise favor the bank. In states with both tests codified, a partnership structure needs to withstand scrutiny under each independently.

‍

The federal preemption framework — why the bank's charter matters

To understand why the true lender doctrine matters, you need to understand what federal preemption makes possible.

Federal law gives both nationally chartered banks and FDIC-insured state-chartered banks the right to charge the interest rate permitted in their home state when lending to borrowers in other states — regardless of the borrower state's usury laws. This rate exportation framework is established for national banks under Section 85 of the National Bank Act and for state-chartered banks under Section 27 of the Federal Deposit Insurance Act, as amended by the Depository Institutions Deregulation and Monetary Control Act of 1980 (DIDMCA). For example, a bank chartered in Utah — which has no usury cap — can originate consumer loans to California borrowers at rates that exceed California's 36% limit, as long as the bank is the genuine lender.

The true lender doctrine is the tool regulators and courts use to test whether the bank is really the lender or whether it is effectively ‘renting’ its charter to give the fintech access to that preemption.

The DIDMCA opt-out dimension

DIDMCA's rate exportation framework for state-chartered banks contains one limitation that national bank preemption does not: states can opt out. If a state opts out, even a bank that is the unambiguous true lender may face that state's interest rate caps on loans to borrowers there.

Colorado enacted a DIDMCA opt-out effective 2024, and Oregon enacted its own opt-out in March 2026, joining Colorado and Iowa (who enacted theirs in 1980) as the only states currently exercising their opt-out rights. There were other states, in the 1980’s after the enactment of DIDMCA who exercised their opt out rights through statutory regulation, but subsequently repealed these opt outs to come in line with the national banking network. Rhode Island is considering opt-out legislation, as is New York, but neither are currently in effect

The true lender analysis and the DIDMCA opt-out question are related but distinct. True lender asks who is the lender. The DIDMCA opt-out determines what rate that lender can charge even when the bank clearly originates the loan. A fintech operating in Colorado or Oregon under a bank partnership model faces both questions simultaneously: is the bank the true lender, and if so, is the bank's home-state rate still exportable to borrowers in an opt-out state.

The Tenth Circuit granted en banc review in NAIB v. Weiser in April 2026, meaning the full court is reconsidering the panel decision upholding Colorado's opt-out. An en banc decision will set binding precedent for the Tenth Circuit on whether and how states can enforce DIDMCA opt-outs against out-of-state state-chartered banks. That decision will matter for every bank-fintech partnership with Colorado and potentially Oregon borrowers.

Opportunity Financial, LLC v. Hewlett (OppFi v. DFPI) — what the May 2026 California ruling means

On May 19, 2026, the Los Angeles County Superior Court issued its final Statement of Decision granting summary judgment in favor of OppFi in its litigation with the California Department of Financial Protection and Innovation. The court rejected the DFPI's true lender theory, finding that FinWise Bank — OppFi's Utah-chartered partner — was the actual lender, and that the program loans were not usurious under California law at origination because FinWise was entitled to export Utah's permissible rates under DIDMCA Section 27.

This is the most important state court ruling on the true lender doctrine to date, and its reasoning has direct implications for how bank-fintech partnerships should be structured and documented.

What the court found

Bank participation in underwriting matters. The court's analysis reinforces that courts will examine whether the bank meaningfully participates in underwriting, funding, compliance, and risk retention. A bank that genuinely controls its credit standards and retains meaningful risk is substantially harder to characterize as a nominal lender than one that defers entirely to the fintech's systems and decisions. The DFPI could not establish that FinWise was a mere "dummy" lender — FinWise participated in real credit decisions.

Loan validity is assessed at origination. The court reaffirmed the California principle that a loan not usurious at inception does not become usurious by subsequent events, including the sale or assignment of loan receivables. This directly protects the secondary market economics underlying most bank-fintech programs: if the bank validly originated the loan at a rate permissible under its home state law, that validity is not undone when the fintech acquires the receivables.

Federal preemption analysis expanded. The final opinion added substantial discussion of Section 27 of the FDIA and the FDIC's interest-rate exportation regulations, explicitly citing 12 C.F.R. § 331.4(e), and strengthened the court's analysis of federal preemption concerns. The court stated that interpreting California law to invalidate loans after assignment could stand as an obstacle to federal banking law's purposes — a framing that may be cited in future litigation in other circuits.

What OppFi does not resolve

The ruling is significant, but compliance teams should not treat it as a green light to stop monitoring.

First, DFPI has appealed to the California Court of Appeals in July, 2026. The appellate court could reach different conclusions on facts or law, and the case may continue for years.

Second, the court declined to decide the broader APA (Administrative Procedure Act) and statutory interpretation questions, leaving unresolved whether DFPI's asserted true lender doctrine is valid under California administrative law. Those questions may surface in future enforcement actions.

Third, the ruling turned significantly on the fact that California had not codified a predominant economic interest test at the time of the challenged loans. California could pass true lender legislation — as Connecticut and Minnesota have done — and force the question back into courts on different statutory terms. That legislative path remains open.

The current state legislative landscape

The true lender question is being resolved differently in different states, and the pace of legislative activity in 2025 and 2026 has been significant. This table reflects the state landscape as of mid-2026.

‍

Two federal developments are also worth tracking. The American Lending Fairness Act of 2026, introduced by Senator Moreno and Representative Davidson, would repeal Section 525 of DIDMCA and limit states' ability to opt out of federal rate exportation — effectively a legislative counter to the Colorado and Oregon opt-outs. Its prospects depend on congressional appetite for a banking preemption bill, which remains uncertain. A May 2026 Executive Order directing regulators to integrate fintech innovation more directly into regulatory frameworks signals some federal-level interest in stabilizing the bank-fintech partnership model, but executive orders do not resolve judicial and legislative questions.

What this means for your fintech lending program

Structure the bank partnership with genuine bank control

The OppFi ruling reinforces what compliance teams have long been advised: substance over form determines the true lender outcome. A bank that genuinely participates in setting credit criteria, approves policy decisions, retains meaningful portfolio risk, and actively oversees compliance is substantially harder to recharacterize as a nominal lender. Program agreements, credit policy documentation, and bank oversight records should reflect real bank involvement — not a contractual veneer over fintech control.

This means practical operational steps matter: the bank's credit committee should review and approve underwriting criteria. The entity or individuals conducting actual underwriting should follow all Vendor Management protocols and bank oversight, The bank's compliance team should have genuine, documented, oversight of the program, not just a contractual right to review. Risk retention — even modest — demonstrates the bank has economic skin in the game. These facts were central to OppFi's win.

Audit the economic interest structure in true lender states

The predominant economic interest test is triggered by who holds the receivables, who holds a right of first refusal to acquire them, and who bears credit losses. If the fintech holds all three, the analysis is difficult to win in states that have codified that test, regardless of how the origination documents read.

Economic structure matters most in Connecticut, Maine, Minnesota, and Washington. In those states, the partnership agreement and receivables purchase mechanics should be reviewed specifically for true lender exposure — not just the general lending compliance framework.

Map your licensing exposure alongside the true lender analysis

Even if your bank partnership structure withstands true lender scrutiny, the states with true lender statutes have typically also expanded their licensing requirements to cover program participants. Servicers, marketers, and entities holding economic interests in covered loans now face licensing obligations in Connecticut, Nebraska, Maine, and Illinois that are independent of whether the bank is found to be the true lender. The licensing exposure and the true lender exposure overlap but are not the same analysis.

A fintech that is not the true lender can still be an unlicensed servicer, unlicensed underwriter or program participant. Run both analyses in each state where you have material borrower concentration.

Monitor the state map actively — it is moving

In early 2026, Rhode Island and New York introduced DIDMCA opt-out legislation, with Rhode Island pairing its bill with true lender provisions. Oregon enacted an opt-out in March 2026. The Tenth Circuit en banc grant means the federal rate exportation question is back in play. Wisconsin's proposed 36% APR cap with a true lender framework would be significant if enacted. This is not a regulatory environment where a one-time legal analysis provides durable protection.

Build a monitoring program that tracks: (1) true lender and DIDMCA opt-out legislation in states where you have borrower concentration, (2) the Tenth Circuit en banc decision in NAIB v. Weiser, (3) the DFPI's appeal of OppFi, (4) any federal legislation that would stabilize or further fragment the rate exportation framework, (5) CFPB guidance, (6) FDIC/OCC/FRB guidance, (7) State AG enforcement actions where you lend, (8) servicing licensing (if necessary), and (9) secondary market requirements.

Brico automates the operational core of this program: tracking license status, renewal deadlines, annual reporting calendars, corporate good standing requirements, and change management notifications across all 50 states. If you are building or scaling a multi-state lending license program, see how Brico can help.