A payment app can be built by a handful of people in a few months. Getting it licensed takes considerably longer, and that gap explains most of what people find confusing about fintech: the technology is new, the rules it operates under mostly are not.
Regulated by activity, not by name
The starting point is that financial regulation attaches to what a company does, not to what it calls itself. A firm that holds customer money, moves it, lends it or gives advice falls under the same activity-based frameworks as any other financial services business. Calling the product a wallet, an app or a platform changes nothing.
In practice that means several regimes stacked on top of each other. Consumer-facing products fall under consumer protection rules covering electronic transfers, credit disclosure and unfair or deceptive practices. Firms that move money are treated as money services businesses, with registration and anti-money-laundering programmes attached. And licensing is often granted per jurisdiction — in the United States, operating nationally can mean satisfying more than fifty separate state regimes alongside the federal ones.
What the rules are actually protecting
Your money, when the firm fails. This is the one most users never think about. An e-money or payment institution is generally required to safeguard customer funds — holding them separately from the company's own money, so that they are not available to creditors if the business collapses. That is not the same as deposit insurance, and the distinction matters more than any feature comparison.
Your money, when something goes wrong. Rules on electronic fund transfers set out how disputes must be handled, what disclosures you receive, and how far your liability extends for unauthorised transactions. Without them, the answer to “someone took money from my account” would be whatever the terms of service said.
The price being what it says. Credit disclosure rules exist so that the cost of borrowing is expressed in a comparable way rather than as a monthly figure chosen for how small it looks.
The three questions worth asking about any financial app
- Who holds the money, and how? Many apps are not the licensed entity themselves; they operate through a partner bank or licensed institution. That is entirely legitimate, and it should be stated plainly. If you cannot find it in the terms, that is information too.
- Is it insured, safeguarded, or neither? These are three different things. Deposit insurance protects a balance up to a limit if the bank fails. Safeguarding segregates funds but pays out through an administration process. Neither applies to most crypto balances.
- What happens to a dispute? Look for a named complaints process and an external body you can escalate to. Its absence is the clearest signal that a product sits outside the perimeter.
Where the gaps genuinely are
Not every innovation fits an existing category, and regulators tend to arrive after the product does. Crypto assets, buy-now-pay-later credit and some earned-wage-access products have all spent years in a position where consumer expectations ran ahead of the protections that actually applied. The direction of travel is towards closing those gaps, but “eventually regulated” does not help anyone who used the product in the meantime.
For an individual, the practical implication is narrow: read what protection applies before the money goes in, because afterwards the question is a legal one. Where a genuine dispute arises — a frozen balance, a failed provider, an unrecoverable transfer — it becomes a matter for a qualified lawyer rather than customer support, and professional bodies such as the Cayman Law Society publish general orientation on that process; their introduction to choosing a lawyer is a reasonable starting point for anyone who has never had to.
The trade-off, stated honestly
Compliance is expensive, and that cost is one reason financial products are slower and duller than the technology allows. It is also the reason the balance in your account is still there next year. Both statements are true, and the interesting question is not whether to regulate but how much friction each protection is worth.


