Mastercard (MA) bought Finicity, one of the three dominant U.S. bank-data aggregators, for $825 million back in 2020 — years before Section 1033 existed. Whatever fee structure or "representative" definition the CFPB eventually lands on, Finicity is the connective tissue between banks' core systems and the thousands of fintech apps that need verified account, balance, and transaction data. Mastercard's Data & Services segment profits off both the rule and the regulatory limbo surrounding it.
Visa (V) owns Tink, the European open-banking connectivity platform it's pushing into the U.S. for account verification and data-sharing infrastructure. Visa doesn't need 1033 finalized to sell identity and account-ownership verification to banks and fintechs worried about fraud on data-sharing pipes — it needs the market's underlying anxiety about access and fraud, which the CFPB proceeding has only sharpened.
Fiserv (FISV) is the quiet workhorse. Its AllData Connect product sits inside the firewall of roughly 3,000 community banks and credit unions — the institutions least equipped to build their own consent-and-token API layer — and has cut data-sharing agreements with Plaid, MX, Finicity, and Akoya so those banks can claim compliance-ready connectivity without writing a line of code themselves. Small banks pay Fiserv a recurring fee for that gateway regardless of the rule's fate, because they were already exposed to fintech credential "screen-scraping" and wanted a licensable, safer alternative.
Who is exposed:
Regional banks (KRE) carry the cost side of this trade. They don't own aggregation infrastructure and can't spread compliance spend across a global payments network the way Visa and Mastercard can. They face a choice between building costly in-house APIs or paying processors like Fiserv indefinitely — with no certainty the rulemaking that justified the spend will even survive judicial review.
The play: Nothing here depends on Section 1033 surviving in its current form. The CFPB's reconsideration is explicitly revisiting whether banks can charge aggregators fees — an outcome that would flow straight through Mastercard's and Visa's existing infrastructure relationships. Watch the CFPB's docket for how it resolves the fee question; that reprices the toll, it doesn't remove it.
Stay three moves ahead of every practice in your market.
Knowing it happened is table stakes. Money Racket Pro hands you the play — what each move means for your margins, your license, and your patients, and exactly what to do about it — in a two-minute brief, twice a week. The owners who read it never get blindsided.
Get the edge · $40/mo Join the owners who run ahead of the industry. Cancel anytime, one click.