The debate over giving fintechs direct access to Federal Reserve payment rails has focused mostly on eligibility. But eligibility is only the first question. 

The harder question is what happens after access is granted. I advise financial institutions on payment strategy, and most aren’t yet asking the right questions about what this means for existing relationships.

The recent Executive Order 14405 and the Federal Reserve’s payment account proposal make the direction clear: nonbank institutions are being invited closer to the payment rails. 

The Fed’s proposal creates a limited-purpose account structure for institutions already eligible for Fed accounts under existing law; the order goes further, asking the Fed to evaluate expanded access for uninsured depository institutions and certain nonbank financial companies. The legal path remains conditional, and the operational questions are largely unanswered.

Financial institutions should be asking three questions now, before the rules are final.

The Fed’s proposed payment account is deliberately limited: no discount window, intraday credit, or FedACH, and any transaction that would overdraw the account gets rejected. That design reduces risk to the Federal Reserve, but shifts risk to the participant, whose liquidity management, fraud controls, AML and sanctions screening now carry the load.

The question is whether every new participant will be held to a comparable operational standard, because if access expands faster than risk management maturity, the system gains speed while adding fragile points of failure.

The current bank-fintech partnership model is imperfect, but it created a defined liability chain. Banks provide payment access while remaining subject to supervisory oversight and responsible for much of the compliance infrastructure supporting those relationships. Fintechs provide user experience, speed, and distribution. 

If nonbank institutions gain more direct access, even on limited terms, that value proposition changes. Banks need to reassess which relationships depend on rail access versus compliance expertise, and which are genuinely strategic.

The order also introduces a policy tension worth watching. It calls for reviewing rules that unduly impede bank-fintech partnerships, while separately asking the Fed to evaluate broader access for certain covered firms. Easier partnerships and more direct access are not the same policy path.

Banks shouldn’t assume their role in the payment ecosystem is protected simply because they are regulated. They need a clear view of where they create value if access becomes less exclusive.

Policy is moving faster than institutional readiness. The order gives regulators 90 days to review rules and 180 days to act. Similarly, the Federal Reserve is requested to produce its payment-access report within 120 days. Those are aggressive timelines for changes that could reshape how payment access and settlement risk are allocated.

Supervision will need to answer practical questions: what operational resilience should be required before a participant touches core payment infrastructure, and who is accountable when one fails.

Expanded access to payment infrastructure can strengthen the financial system, but the benefits are conditional on whether obligations, oversight, and operational discipline travel with access.

This is not a banks-versus-fintechs debate. It is about whether access and accountability stay connected. If the U.S. is going to open the payment rails more broadly, the question cannot stop at who gets in. What matters is who is ready to carry the risk once they do.