Synapse collapse: the missing BaaS ledger

In spring 2024, thousands of Americans lost access to money they had entrusted to financial apps. Some could no longer pay their rent, mortgage, food or medical bills. Yet no bank had failed. The broken link was Synapse, a technology intermediary whose name many end customers had never even heard.

The case was neither a simple outage nor a hack. According to the complaint filed by the Consumer Financial Protection Bureau (CFPB) in August 2025, Synapse failed to maintain reliable records showing where funds were held and failed to ensure that its records reconciled with those of its partner banks. Collectively, those banks held between $60 million and $90 million less than the amounts shown in Synapse’s data. That range is an estimate of an accounting shortfall, not proof that a specific sum was stolen.

The bankruptcy exposes a blind spot in banking as a service: an interface can look like a bank, display the name of an insured bank and offer banking functions even though the company visible to the customer is not itself a bank. Several companies, several contracts and, above all, several ledgers then sit between the screen and the deposit.

A bank built in layers

Synapse supplied the software connecting non-bank financial platforms to the institutions that held deposits, issued cards and processed transfers. The CFPB describes it as a bridge between those two worlds. From 2023, its cash-management programme made the structure still more complex: funds could pass through Synapse Brokerage and then be distributed among several partner banks.

Some deposits were held in FBO accounts, meaning for the benefit of. These omnibus accounts pool money belonging to many beneficiaries. The bank sees the account and its aggregate balance; assigning each fraction to its owner depends on detailed records. In the Synapse arrangement, the intermediary had to track movements among several banks and reconcile its data with theirs.

This architecture is not inherently fraudulent. It can reduce the cost of accessing financial services and allow a bank to distribute its products through several interfaces. It nevertheless creates a critical dependency: if the ledgers stop reconciling, the balance displayed by the app is not enough to establish where each dollar is held.

Simplified representation based on the CFPB complaint. The exact role of each bank varied by platform and programme. Source: CFPB, August 2025.

When the ledger stops being authoritative

The problem predated the bankruptcy. The CFPB complaint alleges that by September 2023 at the latest, Synapse and Evolve Bank & Trust already knew that the intermediary’s data showed several tens of millions of dollars more than the funds held by Evolve. The two companies publicly blamed each other for the discrepancy, which remained disputed when the complaint was filed in 2025.

Synapse filed for Chapter 11 protection on 22 April 2024. In May, its operations deteriorated and then stopped. The company ceased providing certain data to at least one bank and no longer maintained its access to the dashboard showing balances and transactions. After a bankruptcy trustee was appointed, discrepancies with several partner banks became apparent.

The banks then had to reconcile sets of records that no longer agreed. Some took months to determine how much to return to each customer. The CFPB says thousands of consumers remained unable to access their funds for weeks or months and that, more than a year after operations stopped, many still had not recovered the full balance displayed by their platform.

Timeline built from the CFPB complaint and judgment, the Civil Penalty Fund page and the Federal Register. A fund allocation opens a distribution process whose duration varies by case.

Insurance limited to bank failure

The FDIC wording visible in some apps was not a promise of reimbursement against every failure. Federal insurance covers deposits held at an insured bank when that bank fails. A non-bank intermediary is never itself FDIC-insured.

In an omnibus account, pass-through insurance may treat beneficiaries as if they held their deposits directly with the bank. Among other conditions, the custodial relationship must be properly documented and the identity and share of each beneficiary must be established. It covers neither the bankruptcy of a fintech nor that of a technology provider, nor a loss caused by defective records while the deposit-taking bank remains open.

The FDIC reminded users of financial apps of that distinction after Synapse stopped operating: coverage begins only when funds reach an insured bank and does not protect against the insolvency or bankruptcy of the non-bank company. The logo could therefore accurately describe the partner bank while leaving the customer unprotected against the risk that materialised.

Responsibility does not stop at the middleware

Synapse was responsible for maintaining individual records and tracking funds. Banks were not thereby relieved of their duty to supervise their partners. On 14 June 2024, the Federal Reserve took enforcement action against Evolve after examinations conducted in 2023 identified unsafe practices and an inadequate risk-management framework for its fintech partnerships. The order requires stronger oversight of those relationships, recordkeeping and compliance with consumer-protection rules.

The Fed states that this action is independent of the Synapse bankruptcy. It documents supervisory weaknesses at a partner bank but does not allow the entire $60 million to $90 million discrepancy to be attributed to Evolve alone. Several questions remain unresolved: the exact distribution of the shortfall among programmes, the portion attributable to erroneous entries rather than missing funds, and the final amount recoverable by each customer.

That caution is essential. The $90 million figure is the upper bound of the CFPB estimate, not an amount conclusively shown to have “vanished”. Evolve and Synapse accused each other, and the complaint notes that their dispute remained unresolved. A rigorous investigation must preserve that uncertainty instead of turning a reconciliation failure into a criminal conclusion.

$46.25 million allocated, not yet distributed

The CFPB brought proceedings against Synapse on 21 August 2025. The court entered the stipulated judgment on 12 September 2025. Among other provisions, it prohibits the sale of customer data and imposes a symbolic civil penalty of $1, which was necessary for the Bureau to use its Civil Penalty Fund for harmed consumers.

On 28 November 2025, the fund administrator allocated $46,248,291 to Synapse victims. The money comes from civil penalties paid to the CFPB and pooled across cases; it is not funded by taxes. It should not be compared mechanically with the gross $60 million to $90 million discrepancy because the fund compensates remaining harm after accounting for money already returned or expected from other sources.

An allocation is not a transfer. The CFPB explains that it sets money aside and then begins identifying eligible consumers and calculating payments. As of 30 July 2026, Synapse did not appear on the list of ongoing or completed distributions, updated on 10 July. The Bureau says that when a case is absent from that page, distribution may not have started. Victims cannot submit a claim on their own unless the CFPB later opens a claims process.

A regulatory remedy still unfinished

On 17 September 2024, the FDIC approved a proposed rule covering custodial deposit accounts with transactional features. Published in the Federal Register on 2 October under RIN 3064-AG07, it would require covered banks to:

maintain a record identifying each beneficiary and their balance;
reconcile that record with the account balance every day;
retain direct and continuous access to data entrusted to a third party;
submit systems and controls to independent validation.

The measure addresses the precise point of failure exposed by Synapse: a bank could no longer depend on a provider to know how funds should be allocated without itself holding an accessible and verifiable record. The proposal also clearly distinguishes deposit insurance from the risk of bankruptcy, fraud or theft at a non-bank company.

Its status must nevertheless be described precisely. The FDIC withdrew several other proposals on 3 March 2025, but not this one. A Federal Register search for RIN 3064-AG07, checked on 30 July 2026, returns only two documents: the proposed rule of 2 October 2024 and the extension of its comment period on 20 November. No final rule or withdrawal is published there. The rule therefore remains proposed, not in force.

The risk to identify before depositing money

Synapse does not show that every BaaS service is dangerous. The case shows that an apparently simple product can depend on a chain the customer cannot see and that deposit insurance does not cover every link in that chain.

Before entrusting emergency savings to a non-bank app, four questions reduce the ambiguity:

Which entity legally holds the deposit? The name of the insured bank should be explicit, not merely represented by a logo.
Have the funds already reached the bank? The FDIC does not cover money before it arrives at an insured institution.
Who maintains the individual ledger? An omnibus account requires knowing who keeps beneficiary-level records and how frequently they are reconciled.
What does the contract provide if the intermediary stops operating? Continuity of access to data matters as much as the insurance promise.

To assess the strength of the institution that actually holds the deposits, the guide to reading a bank’s financial health complements this operational review. To place Synapse within the growth of institutions outside the traditional banking perimeter, see also the analysis of shadow banking and non-bank intermediation.

The ledger was not merely a technical component. It was the economic evidence connecting displayed balances to actual deposits. Once that evidence stopped being reliable, the interface, the contract and the FDIC seal were not enough. The Synapse lesson follows a clear hierarchy: a promise of safety is worth only as much as the records that can still establish precisely who owns what.

The missing ledger