The mechanism: The federal BNPL crackdown died quietly — the CFPB withdrew its interpretive rule treating BNPL "digital accounts" as credit cards on May 12, 2025, after the Financial Technology Association sued and the Bureau folded. But Washington's retreat just handed the job to the states, and they're finishing it with more teeth than the CFPB ever proposed. Illinois signed SB 3561 into law on June 25, 2026, creating a full licensing and supervisory regime for BNPL lenders. New York DFS followed with nation-leading proposed rules in February requiring state licensure, ability-to-repay underwriting, capped late fees, and credit-bureau-reporting disclosures — the exact plumbing credit card issuers already run. More states are drafting similar bills. The pattern: BNPL grew by avoiding the licensing, underwriting, and disclosure costs card issuers absorbed decades ago. States are now closing that gap loan-by-loan, statehouse-by-statehouse — and compliance costs scale worse for standalone apps than for issuers who already have the legal and underwriting infrastructure built.

Who cashes in:

  • Visa (V) and Mastercard (MA) — both have spent years building installment-plan rails (Visa Installments, Mastercard Installments) that let existing card-issuing banks offer pay-over-time options at checkout without a separate BNPL entity needing its own state license in each jurisdiction. As standalone BNPL apps face licensing friction and underwriting overhead, volume that would have routed around the card networks stays on them instead — network fees intact.
  • American Express (AXP) — Amex already underwrites, reports to bureaus, and holds banking charters in every state it operates in; its "Plan It" installment feature is just a feature on a card it already issues. A state licensing wave that forces BNPL-only players to replicate bank-grade compliance is a non-event for Amex — it's already paid for.
  • Regional banks (KRE) — many regionals sit behind private-label installment and co-brand card programs; tighter BNPL rules push retailers back toward bank-issued financing partnerships where the compliance burden is already someone else's job.