Is Your Money in a Bank or an App? What Protects It

Open your phone and you will find a dozen apps that look and feel exactly like banks: balances, cards, interest rates, instant transfers. Some advertise savings rates north of 5% — eye-catching when UK fixed savings are paying just over 5% AER and US high-yield accounts hover around 4.4% APY. But here is the question almost nobody asks before tapping "deposit": is this app actually a bank?

Often, the answer is no. And that distinction decides what happens to your money if the company behind the app fails. Regulators on both sides of the Atlantic have been tightening the screws: the UK's Financial Conduct Authority (FCA) brought in tougher safeguarding rules for payment and e-money firms on 7 May 2026, while the US Federal Deposit Insurance Corporation (FDIC) warns plainly that nonbank companies are never FDIC-insured — no matter what their marketing says. Here is what actually protects your money, and where the gaps are.

What "e-money" actually means

A bank takes deposits, lends them out, and — in return for that licence — submits to deposit-protection schemes. An electronic money institution (EMI) or payment institution (PI) is something different: it issues electronic money and moves payments, but it is not allowed to lend out your funds. Instead, the law requires it to safeguard customer money — keeping it separate from the firm's own cash, usually in a segregated account at a real bank, or covered by an insurance policy or guarantee.

That sounds reassuring, and the idea is sound. The problem is the gap between the principle and the practice. When the FCA examined payment firms that became insolvent between early 2018 and mid-2023, it found average shortfalls of 65% of customers' funds — the safeguarded money simply was not all there. Even when safeguarding is done properly, getting your money back runs through an insolvency practitioner, not an automatic compensation scheme. Administrators can deduct their costs, so you may receive slightly less than your full balance — and you will wait.

This is the key distinction to internalise: safeguarding means your money should be identifiable and returnable. It is not a compensation guarantee like FSCS or FDIC insurance.

The FCA's overhaul (policy statement PS25/12) is an attempt to narrow that gap. Since 7 May 2026, UK payment and e-money firms must reconcile safeguarded funds every business day, undergo an annual safeguarding audit by a qualified auditor, file monthly returns with the FCA, and keep a "resolution pack" so an insolvency practitioner can return funds faster. That is a genuine improvement — but safeguarding still is not FSCS protection.

What a bank gives you

Deposit money with a UK-licensed bank and the Financial Services Compensation Scheme (FSCS) protects up to £120,000 per person, per banking institution if the bank fails. That cover is automatic, free, and usually paid out within days. Note the "per institution" part: if two brands share one banking licence (for example, Mettle shares NatWest's, Halifax shares Bank of Scotland's), the £120,000 limit is shared across both.

In the US, the FDIC insures deposits at insured banks up to $250,000 per depositor, per insured bank, for each ownership category — and it is backed by the full faith and credit of the US government. The FDIC has never failed to pay an insured depositor since it was created in 1933. Crucially, neither scheme covers investment products: stocks, bonds, mutual funds and crypto held through a bank are not insured.

Bank vs e-money firm vs fintech partner-bank: how they compare

	UK-licensed bank	E-money / payment institution	US fintech with partner bank
Who holds your money	The bank itself	The firm; safeguarded at a separate bank	An FDIC-insured partner bank, usually in a pooled account
If the provider fails	FSCS pays up to £120,000 automatically	Safeguarded funds returned via insolvency process — delays and possible shortfalls	FDIC does not cover the fintech's failure — only the bank's
If the underlying bank fails	FSCS / FDIC pays	Limited FSCS cover may apply to the safeguarding bank, not the firm	Pass-through FDIC cover possible, if records are perfect
Cost of the protection	Free, statutory	None — there is no guarantee	Free if the pass-through conditions are met

The US fintech wrinkle: "pass-through" FDIC insurance

Many US fintechs are not banks at all. They partner with a chartered, FDIC-insured bank that holds customer money behind the scenes, typically in a pooled "for-benefit-of" (FBO) account, while the fintech supplies the app, cards and customer service. The FDIC's position is blunt: nonbank companies themselves are never FDIC-insured. Your funds are not eligible for FDIC insurance until the company actually deposits them in an insured bank — and even then, "pass-through" coverage only works if three conditions hold:

1. The funds must genuinely belong to the customers, not the fintech.
2. The bank's records must show the account is custodial, held for customers.
3. Records — at the bank or the fintech — must identify each owner and their exact share.

If any of those fail, the FDIC treats the whole pooled account as belonging to the fintech, and your share may be uninsured. Worse, FDIC insurance does not protect against the fintech company itself going bust. That is not theoretical: when the fintech middleman Synapse collapsed in 2024, tens of thousands of customers were locked out of their money even though the partner banks were still standing — because Synapse's internal ledgers could not immediately prove who owned what. The FDIC has since proposed stricter rules requiring partner banks to maintain their own detailed, daily-reconciled ledgers of fintech customers' balances. Until those are universal, pass-through cover depends on record-keeping you cannot see.

Five checks before you trust an app with your cash

1. Find out what licence the firm holds. In the UK, search the FCA Financial Services Register — "e-money institution" or "payment institution" means safeguarding, not FSCS cover. In the US, ask which bank holds the deposits and verify it on the FDIC's BankFind tool.
2. Identify where the money actually sits. Is it a deposit at a named bank, safeguarded funds at a third-party bank, or swept across partner banks? The answer should be in the firm's terms — not just its adverts.
3. Read the exact insurance wording. "FDIC-insured" or "FSCS-protected" claims mean nothing without the name of the insured bank and which accounts the cover applies to. Terms like "funds are protected" without a scheme named are a red flag.
4. Keep balances under the protected limit per institution. Split savings across separately licensed banks if you are near £120,000 (UK) or $250,000 (US) — remembering that shared licences share one limit.
5. Match the account to the job. An e-money account is a fine tool for spending, travel money and foreign exchange. Salary, emergency funds and serious savings belong in protected accounts.

Frequently asked questions

Is my money safe in an e-money app?

Safeguarded, not guaranteed. If the firm is well-run and follows the FCA's post-May-2026 rules, you are far more likely to get your money back than under the old regime. But safeguarding is a process for returning funds through insolvency, not an automatic payout — it can be slow and partial. Keep day-to-day money there, not your life savings.

What happens if my e-money firm fails?

An insolvency practitioner identifies the safeguarded funds and returns them to customers. Under the new FCA rules the firm must have a resolution pack ready to make this faster. The administrator's costs can be deducted, so you may get back slightly less than the full balance — and there is no FSCS claim to top it up.

Does FDIC insurance cover me if my fintech app goes bankrupt?

No. FDIC insurance only covers the failure of an FDIC-insured bank. If the fintech itself fails — as with Synapse in 2024 — the FDIC does not step in, and access to your money can be frozen while ownership is untangled. Pass-through cover only helps if the underlying bank fails and the ownership records are accurate.

How do I check whether a company is a real bank?

UK: search the firm's name on the FCA Financial Services Register and look at its permissions — a "bank" is authorised to accept deposits; an "e-money institution" is not. US: search the claimed partner bank on the FDIC's BankFind tool, and read the fintech's account agreement for the pass-through wording.

The fintech boom gave us better apps, faster transfers and rates that forced old banks to compete — all good things. But the shiny interface hides a legal reality: an app is only as safe as the structure behind it. A bank gives you a statutory guarantee; an e-money firm gives you a process; a fintech gives you a promise that depends on someone else's paperwork. None of that means you should delete your apps. It just means you should know which kind of account each one is — and put your rent money and your emergency fund somewhere a failure cannot touch.