How it operates
PayPal provides online payment, merchant and consumer account services. Its business financing products include Working Capital and Business Loan offerings, whose eligibility, repayment and lender arrangements differ.
Financial technology company · COVERAGE INDEX
PayPal
PayPal operates digital payment services for consumers and merchants and offers selected credit and working-capital products through its platforms.
PayPal’s products do not all share the same lender or underwriting process. Its U.S. business-loan disclosures identify WebBank as lender for PayPal Business Loan; PayPal has also announced an application to establish a proposed Utah industrial bank.
Financial-services role
Payment activity can provide useful cash-flow information for merchant lending, while a platform relationship can connect payments, underwriting, repayment and a partner bank. PayPal’s announced bank application is a proposal; it does not establish an operating bank charter.
News timeline
Published Oct 1, 2026Source / event date: Utah DFI tracker last updated August 21, 2026
Utah’s August tracker lists five pending industrial-bank applications →
Utah’s Department of Financial Institutions lists five industrial-bank applications as pending in a tracker last updated August 21. Four other industrial-bank proposals show state approval but remain opening pending.
Bank & fintech · Utah DFI application-status snapshot · August 21, 2026Related permanent research
Lending & consumer financeResearch updated Oct 4, 2026
Cash-Flow Underwriting: Adoption, Performance & Risk →
Cash-flow underwriting is already used in bank, CDFI, merchant and mortgage workflows. This expanded review maps adopters and motives, separates historical adoption statistics from live coverage, examines predictive and adverse evidence, and explains affordability, operational, economic and governance risks.
AI & financial technologyResearch updated Oct 4, 2026
Cursor and Anysphere: AI coding after the SpaceX acquisition, with financial-sector controls in focus →
Cursor is Anysphere’s AI software-development platform. Following its August 2026 acquisition by SpaceX, the relevant questions include model strategy, enterprise economics, cloud-agent data boundaries and whether faster engineering produces dependable financial software.
Payments & financial infrastructureResearch updated Oct 4, 2026
Inside Sponsor Banking: Partnerships, Economics & Oversight →
Sponsor banking links distinct creditors, issuers, technology providers and asset buyers. New product-level evidence clarifies those roles, alongside Parafin’s proposed Stripe transaction and the limits of announced embedded-banking adoption.
AI & financial technologyResearch updated Sep 30, 2026
Nova Credit: cash-flow information, customer access and lending economics →
Cash Atlas supplies structured financial information while NovaScore supplies a risk assessment. Their value depends on usable evidence, customer completion and decisions suited to the product.
Financial company profileResearch updated Sep 30, 2026
The Bancorp Bank: fintech infrastructure, deposits and partner economics →
Payment and account programs link fintech distribution to bank funding. Follow fees, usable deposits, service costs and partner retention without assigning a business-line total to one partner.
Financial company profileResearch updated Sep 30, 2026
WebBank: embedded lending and the value of bank-platform partnerships →
How a bank and a platform divide distribution, lending and service work, with merchant repayment examples and a clearer view of customer experience and retained economics.
Financial company profileResearch updated Sep 30, 2026
Synchrony Bank: commerce, customer relationships and financing economics →
How partner distribution, customer usage, promotions, rewards and deposits interact, with a clearer explanation of retailer sharing and the accounting presentation of loyalty costs.
Policy & official records
Curated library records that name PayPal or connect through its linked research. The official source provides full scope and status.
OCC / FDIC / Federal Reserve2024-07-25 · Supervisory statement
Third-party deposit arrangements — joint statement →
Responsibility, records and risks in bank-fintech deposit programs.
Official record ↗OCC / FDIC / Federal Reserve2024-05-07 · Voluntary guide
Community-bank third-party risk management guide →
Practical considerations for community-bank third-party relationships.
Official record ↗OCC / FDIC / Federal Reserve2023-06-06 · Supervisory guidance
Interagency third-party relationship guidance →
Planning, diligence, contracts, monitoring and termination; tailored to risk.
Official record ↗OCC2021-10-21 · Current posted examination handbook
Payment Systems — Comptroller’s Handbook →
Overview of payment systems, payment types, operational exposures and risk-management practices. Useful context for bank payment operations and outsourced processing.
Official record ↗CFPB2021-09-20 · Current posted examination procedures
Compliance management and information technology — CFPB examination procedures →
Procedures for evaluating technology and service-provider controls as part of consumer-compliance management. Connects system design, oversight and testing to risks of consumer harm.
Official record ↗OCC / FDIC / Federal Reserve / NCUA2020-05-20 · Current posted supervisory guidance
Responsible small-dollar lending — interagency principles →
Principles for responsibly offering small-dollar credit, with attention to successful repayment, clear terms and sound risk management. Provides product-design context alongside applicable consumer-credit rules.
Official record ↗OCC / FDIC / Federal Reserve / CFPB / NCUA2019-12-03 · Current posted supervisory guidance
Alternative data in credit underwriting — interagency statement →
Addresses consumer-protection opportunities and risks from alternative underwriting data, including cash-flow data. Encourages analysis of applicable laws and compliance controls before deployment; it does not exempt a model from consumer-protection requirements.
Official record ↗OCC2019-07-24 · Current posted supervisory guidance
Fraud risk management — OCC 2019-37 →
Guidance on fraud governance, prevention, detection, response and loss monitoring across the bank. The posted bulletin marks removal of reputation-risk references on March 20, 2025.
Official record ↗OCC2019-07-15 · Current posted examination handbook
Corporate and Risk Governance — Comptroller’s Handbook →
Examination reference for board oversight, management responsibilities and bank risk governance. Use the posted revision notices and applicable rules alongside this July 2019 handbook.
Official record ↗OCC2018-06-28 · Current posted examination handbook
Compliance Management Systems — Comptroller’s Handbook →
Consumer-compliance risk management within the OCC’s risk-based examination approach. Useful for evaluating compliance programs and oversight across products and service providers.
Official record ↗CFPB2017-08-30 · Current posted examination procedures
Compliance management review — CFPB examination procedures →
Covers management oversight, the compliance program, service-provider controls, violations and consumer harm. Useful for testing whether responsibilities and corrective actions work across the product lifecycle.
Official record ↗CFPBDate not provided · Codified rule
Credit-card ability to pay — 12 CFR 1026.51 →
Ability-to-pay requirements for opening card accounts and increasing credit limits, including special rules for younger consumers. Separate from the mortgage ability-to-repay and qualified-mortgage framework.
Official record ↗FDICDate not provided · Examination manual; current collection
Consumer Compliance Examination Manual →
FDIC compliance and Community Reinvestment Act examination resource. Individual chapters have different revision dates; newer laws, final rules and agency instructions must be read alongside older examination text.
Official record ↗FDICDate not provided · Current codified rule
Activities of insured state banks — Part 362 →
Restrictions and exceptions governing activities and investments of insured state banks and savings associations, including subsidiaries and FDIC consent. Useful when assessing charter-specific partnership or product authority.
Official record ↗FDICDate not provided · Current codified rule
Computer-security incident notification — Part 304, Subpart C →
Subpart C contains the FDIC-supervised bank and service-provider notification framework. Section 304.23 sets the bank’s outside limit at 36 hours after determining that a notification incident occurred; service providers have a distinct trigger under §304.24.
Official record ↗