Digital Wallets Surge, While Regulators Play Catch-Up'

marsbitPublicado em 2025-12-19Última atualização em 2025-12-19

Resumo

Digital wallets are rapidly evolving beyond simple payment tools to encompass lending, investments, crypto assets, digital IDs, and virtual cards, while regulators struggle to keep pace with outdated rules. In the U.S., PayPal (32%), Cash App (25%), and Apple Pay (20%) lead the market, with 77% of adults using at least one major wallet. The CFPB attempted to impose stricter oversight on large non-bank payment providers like Google, Apple, and PayPal through a 2023 proposal, but it was overturned by Congress and President Trump in 2025. Despite this, digital wallets remain subject to a complex web of state and federal regulations, including money transmission licensing, Reg E, UDAAP rules, and FinCEN requirements. Experts warn that inconsistent enforcement and expanding wallet functionalities create compliance challenges, and a loss of consumer trust could trigger renewed regulatory pressure. Key issues include unclear user protections, reliance on banking partners, and potential state-level enforcement if federal oversight weakens.

By: Reporter - Sarah Barnett

Consumers can handle everything from buying coffee to entering concerts with a tap on their phones; meanwhile, wallet apps continue to add new features, such as lending, investing, crypto assets, digital IDs, and virtual cards. Regulators, however, are trapped in old rules, chasing after new applications.

From 'Beam Transfers' to Financial Life on Billions of Phones

Back in 1999—eight years before the first iPhone was released—a Silicon Valley startup called Confinity packaged PayPal.com as a 'killer app,' claiming users could transfer money with just an email address.

Even more bizarrely, it started with an even more peculiar concept: transferring funds via infrared 'beams.' Confinity famously demonstrated at Buck's, a breakfast spot in Woodside, California: beaming $3 million using a Palm Pilot device—an event later recounted by co-founders Max Levchin and Peter Thiel during a Stanford talk.

Fast forward 25 years, the 'email transfer' experiment has evolved into a global digital wallet industry, installed on billions of phones—many users even consider plastic cards as outdated as landlines.

Wallets Can Do Everything Now—That’s the Point

Today's digital wallets are far more than just payment tools. They can also store:

  • Digital driver's licenses and passports

  • Tickets and passes

  • Cryptocurrency

  • Stocks and trading tools

  • Loans and direct deposits

  • Virtual credit/debit cards and reward points

Fintech players like PayPal and Block (parent of Cash App) are continuously adding features to compete for the next wave of users.

Who’s in the Lead in the U.S.

Statista's Q3 survey shows that over the past 12 months, the most used payment services among U.S. users were:

  • PayPal—32%

  • Cash App—25%

  • Apple—20%

  • Google—14%

  • Venmo—14%

  • Samsung—3%

Statista stated that among Q3 respondents, 77% had used at least one of the top three wallets (PayPal, Cash App, Apple); the survey was based on an sample of approximately 60,000 U.S. adults aged 18–64.

The Federal Reserve's annual payments survey also shows rapid growth in mobile payments: consumers used mobile payments an average of 11 times per month last year, compared to just 4 times in 2018. The 18–24 age group completed 45% of all payments via mobile; while households with annual incomes under $25,000 and those 55 and older relied more on cash.

Globally, Juniper Research estimates there are currently about 4.5 billion digital wallet users and predicts this will grow to 6 billion by 2029.

Data Challenge: Big Tech Doesn’t Love Disclosing User Numbers

In the U.S., the precise scale of digital wallet usage is hard to pin down because Apple and Google don't disclose user numbers and often bundle wallet performance into larger business categories.

Block is more transparent: Cash App reported having 58 million active users as of September 2025.

CFPB Wanted to Wield a Bigger 'Regulatory Stick'—Then It Was Taken Away

As digital wallets expanded into more 'bank-like' territories, the Consumer Financial Protection Bureau (CFPB) under the Biden administration pushed for more direct oversight.

Lacey Aaker, a former CFPB policy analyst now at Consumer Reports, believes the issue is simple: in the eyes of the average user, digital wallets look like banks but may not have the same protections—and most people don't read the fine print about deposit insurance or which transfers are covered by federal rules.

In November 2023, the CFPB proposed a rule titled **'Defining Larger Participants of a Market for General-Use Digital Consumer Payment Applications.'** The core idea was to bring the largest non-bank payment apps under the CFPB's supervisory examination purview, including routine checks similar to those for banks.

According to the report cited in this article, the CFPB's final rule (later overturned) would have covered 7 non-bank entities processing at least 50 million consumer transactions annually—accounting for 98% of approximately 13.5 billion consumer payment transactions.

The CFPB did not name companies in the rule text. But when Congress moved to overturn the rule, the names emerged: the Congressional Review Act (CRA) resolution mentioned Google, Apple, Samsung, PayPal (and its Venmo), Block (Cash App), and Meta (Facebook).

The rule took effect in January 2025. Tech companies filed lawsuits to block it, and lawmakers moved to repeal it. After Congress passed the relevant resolution, President Trump signed it in May, reversing the CFPB's regulatory approach.

Jonathan Pompan, a Washington lawyer at Venable, described the CFPB's attempt as trying to force old-style consumer credit laws onto modern payments and said Congress 'pulled the plug.'

Regulatory Reality Check: Digital Wallets *Are* Regulated—Just 'Messily'

Even with the repeal of the CFPB's 'Larger Participant' rule, digital wallets remain under a dense web of legal regulations.

According to sources cited in the article, primary regulations typically include:

  • State-level money transmitter licensing (and corresponding enforcement authority)

  • Federal consumer protection requirements related to Electronic Fund Transfer rules (Reg E / EFTA) (specific applicability depends on product and transaction type)

  • Enforcement of UDAP/UDAAP (unfair, deceptive, abusive acts or practices) by the CFPB and FTC, among others

  • Financial crime compliance requirements from the Department of Treasury/ FinCEN, where applicable

  • Regulatory constraints borne by partner banks when wallet funds flow through insured depository institutions

Laura Huntley, Managing Director at FTI Consulting and a former bank regulatory lawyer, stated bluntly: digital wallets have been and will continue to be regulated—just under what she calls a 'dense and messy' framework. A spokesperson for the Financial Technology Association similarly emphasized that wallet businesses are highly regulated through state licenses and banking partnerships.

The CFPB Itself Became Part of the News

The article notes that the CFPB's future is facing questions, including controversies over its funding mechanism, and multiple reports indicating its enforcement work is being transferred to the Department of Justice, accompanied by potential layoffs.

Huntley and others also pointed out that if federal enforcement weakens further, a likely outcome is that State Attorneys General will 'step in' as the new primary market regulators.

Why the U.S. Differs from Markets Like India, Brazil

Statista analyst Raynor de Best suggests the U.S. didn't build its payment system from scratch around digital wallets because Americans have long been deep users of credit/debit cards.

In many emerging markets, mobile payment infrastructure and regulation grew almost simultaneously; whereas the U.S. is trying to 'bolt on' wallet regulation to a complex federal/state dual structure atop a mature card payment system.

Trust Is Everything

Consultants cited in the article stated that compliant wallet platforms have a strong incentive to protect users: once trust is lost, the foundation for platform growth is lost.

Google said it maintains communication with regulators and supports a consistent regulatory framework that both protects consumers and fosters innovation.

Owen Jennings, business lead at Block, stated that Cash App's recent expansions—including digital currency and broader lending—reflect users' current lifestyles but also raise the 'trust threshold': as the app becomes a full financial platform, risks and responsibilities increase accordingly.

Impact on MSBs

For MSBs and payment practitioners, the real risk isn't 'no regulation,' but rather cognitive confusion, regulatory inconsistency, and ever-expanding product functionalities.

  • Disclosures and User Expectations: Users might assume balances are FDIC-insured or dispute handling works like a bank account—but the scope of protection can vary by feature.

  • Reg E Operations: Error resolution and unauthorized transaction handling become complex when wallets mix transfers, cards, stored value, and third-party channels.

  • State Licensing Pressure: 'Patchwork regulation' remains—expanding into new functionalities can trigger new state and federal compliance obligations.

  • Dependence on Partner Banks: If your model relies on bank sponsorship/partnerships, the disappearance of the CFPB rule doesn't mean the compliance burden disappears.

  • Complaint Handling Paths: Even without an added CFPB examination layer, consumer complaints and reputational damage remain highly damaging.

What to Watch Next

  • If federal regulation continues to weaken, whether State Attorney General enforcement accelerates.

  • Which new regulators and rules are brought into the fray by wallet function expansion (credit, crypto assets, investing).

  • Market Trust Incidents: A major consumer harm event could quickly push the political winds back toward 'strong regulation.'

Perguntas relacionadas

QWhat are the top three most used digital wallet services in the US according to the Statista survey?

AAccording to the Statista survey, the top three most used digital wallet services in the US are PayPal (32%), Cash App (25%), and Apple (20%).

QWhat was the core idea of the CFPB's proposed in November 2023, and what was its ultimate fate?

AThe core idea of the CFPB's November 2023 proposal was to bring the largest non-bank payment apps under its supervisory examination authority, subjecting them to regular bank-like examinations. This rule was ultimately reversed after Congress passed a resolution and President Trump signed it in May, effectively blocking the CFPB's regulatory approach.

QHow does the regulatory landscape for digital wallets in the US differ from that in emerging markets like India and Brazil?

AThe US did not build its payment system from the ground up around digital wallets, as it has a long-established and deeply entrenched credit/debit card system. In contrast, many emerging markets developed their mobile payment infrastructure and regulatory frameworks simultaneously, allowing for a more integrated approach.

QWhat are some of the key existing regulations that still apply to digital wallets even after the CFPB's 'larger participant' rule was overturned?

AKey existing regulations include state-level money transmitter licensing, federal consumer protection requirements under the Electronic Fund Transfer Act (Reg E), enforcement against unfair or deceptive practices (UDAP/UDAAP) by the CFPB and FTC, financial crime compliance requirements from FinCEN, and regulatory constraints carried by partner banks that hold user funds.

QWhat potential future developments should payment industry professionals (MSBs) monitor regarding digital wallet regulation?

AProfessionals should monitor potential increased enforcement by state attorneys general if federal oversight weakens, the new regulators and rules that will be introduced as wallets expand into areas like credit and crypto assets, and the possibility of a major consumer trust incident that could rapidly shift the political climate back toward stronger regulation.

Leituras Relacionadas

$292 Million KelpDAO Cross-Chain Bridge Hack: Who Should Foot the Bill?

On April 18, 2026, an attacker stole 116,500 rsETH (worth ~$292M) from KelpDAO’s cross-chain bridge in 46 minutes—the largest DeFi exploit of 2026. The stolen assets were deposited into Aave V3 as collateral, causing $177–200M in bad debt and triggering a cascade of losses across nine DeFi protocols. Aave’s TVL dropped by ~$6B overnight. This legal analysis argues that KelpDAO and LayerZero Labs share concurrent liability, with fault apportioned 60%/40%. KelpDAO negligently configured its bridge with a 1-of-1 decentralized verifier network (DVN)—a single point of failure—despite LayerZero’s explicit recommendation of a 2-of-3 setup. LayerZero, which operated the compromised DVN, failed to secure its RPC infrastructure against a known poisoning attack vector. Both protocols’ terms of service cap liability at $200 (KelpDAO) or $50 (LayerZero), but these limits are likely unenforceable due to unconscionability, gross negligence exceptions, and potential securities law invalidation (if rsETH is deemed a security under the Howey test). Aave’s governance also faces fiduciary duty claims for raising rsETH’s loan-to-value ratio to 93%—far above competitors’ 72–75%—without adequately assessing bridge risks, amplifying the systemic fallout. Practical recovery targets include LayerZero Labs (a registered Canadian entity), KelpDAO’s founders, auditors, and identifiable Aave governance delegates. The incident underscores escalating legal risks for DeFi protocols, infrastructure providers, and governance participants.

marsbitHá 45m

$292 Million KelpDAO Cross-Chain Bridge Hack: Who Should Foot the Bill?

marsbitHá 45m

Insider Trading in War: 5 People Involved, the Highest Earner Was Arrested

On April 24, the U.S. Department of Justice arrested U.S. Army Special Forces Staff Sergeant Gannon Ken Van Dyke for insider trading related to the capture of Venezuelan President Nicolás Maduro on January 3. Van Dyke allegedly profited over $400,000 by placing bets on a prediction market, Polymarket, using insider knowledge of the covert operation. According to the indictment, Van Dyke registered an account (0x31a5) on December 26 and made a series of bets predicting Maduro’s capture and U.S. military involvement in Venezuela. He withdrew most of his funds on the day of the operation and attempted to obscure his tracks by transferring assets through crypto and brokerage accounts. This case marks the first time the DOJ has prosecuted insider trading on Polymarket. PolyBeats had previously identified five suspicious accounts, including Van Dyke’s—the highest earner—in January. The other accounts, with profits ranging from $34,000 to $145,000, remain under unofficial scrutiny but have not been charged. Their lower profits, indirect access to information, and unclear legal boundaries may complicate prosecution. Polymarket has since strengthened its market integrity rules, explicitly prohibiting trading based on confidential or insider information. Van Dyke’s arrest, nearly four months after his trades, signals increased regulatory attention and the persistent traceability of blockchain-based transactions.

marsbitHá 47m

Insider Trading in War: 5 People Involved, the Highest Earner Was Arrested

marsbitHá 47m

Bitwise: Bullish on Bitcoin's Performance in the Second Half of the Year, AI and Regulation Will Spark a New Altcoin Season

Bitwise CIO Matt Hougan and Research Lead Ryan Rasmussen express strong bullish sentiment on Bitcoin's long-term prospects, suggesting that its $1 million price target may be too conservative. They argue Bitcoin serves a dual role: as digital gold and a potential global settlement asset, especially amid declining trust in traditional monetary systems. Despite a weak Q1 2026 where nearly all crypto assets and prices saw double-digit declines, the analysts remain optimistic due to strong forward-looking catalysts, including institutional adoption via Bitcoin ETFs from major firms like Morgan Stanley and Goldman Sachs. Geopolitical instability, such as Iran’s mention of using Bitcoin for international payments, increases the value of Bitcoin’s “out-of-the-money call option” as a non-political, global settlement currency. This enhances its appeal beyond a mere store of value. . Additionally, Hougan highlights that a clearer regulatory token framework under current SEC leadership, combined with AI efficiency gains and high-performance blockchains, could fuel a new “altseason” by late 2026. This may lead to a wave of legitimate, value-capturing token projects, unlike the earlier ICO boom. . Bitwise also announced an Avalanche ETF, citing its unique architecture and rapid growth in real-world asset (RWA) tokenization, which has surged 10x to nearly $30 billion in two years. The firm believes Layer 1 blockchains are still early in their growth cycle, with significant potential ahead.

marsbitHá 1h

Bitwise: Bullish on Bitcoin's Performance in the Second Half of the Year, AI and Regulation Will Spark a New Altcoin Season

marsbitHá 1h

Trading

Spot
Futuros
活动图片