A fintech founder spends six weeks building a deposit product, then discovers the bank partner's compliance team will not approve it — not because the product is bad, but because nobody checked the licensing perimeter first. The engineering was fine. The regulatory map was not.
That is the everyday reason Banking and Financial Regulation matters. Not as an exam subject, but as the invisible constraint that decides which products exist, which contracts hold up in court, and which institutions survive a supervisory review. This piece walks through how that constraint actually operates across US, EU and UK systems — and where people routinely misjudge it.
What does «banking law» actually govern in practice?
Most people hear «banking law» and picture courtroom disputes. In reality the field is mostly administrative: who is allowed to take deposits, on what capital, under what reporting, and with what duties to the customer.
Four layers do most of the work:
- Licensing and authorisation — a bank needs a charter (US) or authorisation from a regulator (UK PRA/FCA, EU competent authorities under CRD). Taking deposits without one is not a paperwork slip; it is a criminal exposure.
- Prudential supervision — capital and liquidity requirements (Basel III as implemented through the EU Capital Requirements Regulation, US rules, UK PRA rulebook).
- Conduct and consumer protection — how credit and deposit agreements must be drafted, what must be disclosed, how complaints are handled.
- AML/CFT and data — customer due diligence, suspicious activity reporting, bank secrecy and lawful data sharing.
A deposit-taking licence is not a permission to do «banking» in general. It is a permission to do a defined list of things under defined conditions. Everything else — payment services, lending, e-money — sits in a different bucket with a different regulator.
The walkthrough: a neobank wants to offer savings accounts in the EU and the UK
Take a concrete task. A startup has an e-money licence in one EU member state and wants to offer interest-bearing savings accounts to UK customers. Here is the order a banking lawyer actually works in.
Step 1 — classify the activity. An interest-bearing savings account is, in substance, deposit-taking. E-money safeguarding is not the same thing. Under UK law, accepting deposits is a regulated activity under the Financial Services and Markets Act 2000, and it requires authorisation — the e-money permission does not cover it. More on the topic: FRM.
Step 2 — choose the structure. Three options, each with a cost:
| Option | What you gain | What you pay |
|---|---|---|
| Full UK bank authorisation | Direct deposit-taking, deposit insurance coverage | Capital, months of application, ongoing PRA supervision |
| Partner with an authorised bank | Speed, no new licence | Margin, loss of product control, partner's compliance veto |
| Passporting / cross-border | Reach without a second entity | Only works where the legal gateway exists; post-Brexit the UK is outside EU passporting |
Step 3 — check capital and liquidity before the business plan. A supervisor will ask how the institution survives a stress scenario. If the answer is «we will raise more», the application stalls. This is where the prudential side stops being abstract — see the mechanics of liquidity ratios in Banking Regulation. More on the topic: Currency Regulation and Exchange Control.
Step 4 — draft the customer documents. The deposit agreement, fee schedule and disclosures must match what you told the regulator. A mismatch between the approved business plan and the live terms and conditions is one of the most common findings in supervisory reviews.
Step 5 — AML and onboarding. Customer due diligence, ongoing monitoring, suspicious activity reporting. Under the EU Anti-Money Laundering Directives and the UK Money Laundering Regulations, the burden sits on the institution, and «our vendor handles it» is not a defence.
What breaks if you reverse the order? You build the product, sign the marketing, then discover the licence does not cover it. The cost is not legal fees — it is the launch date and the partner relationship.
Why does the same product get a different answer in the US, EU and UK?
Because the three systems answer different questions.
The US splits by charter: a national bank charter under the National Bank Act versus state charters, with Dodd-Frank adding heightened prudential standards for larger institutions and the Volcker rule constraining proprietary trading. The EU harmonises through directives and regulations (CRR/CRD), so a single rulebook applies across member states, but the competent authority is national. The UK, post-Brexit, runs its own rulebook through the PRA and FCA under FSMA 2000.
Practical consequence: a product that is a straightforward deposit account in one jurisdiction may be a collective investment scheme in another. Regulatory arbitrage exists, but it is narrow — supervisors compare notes, and the same activity tends to attract the same substance of rule even when the label differs.
Where do practitioners most often go wrong?
Three failure patterns repeat.
Treating compliance as a post-launch fix. Consumer protection rules on credit agreements — disclosure, cooling-off, early repayment — are drafted into the contract, not bolted on. A credit agreement that omits required disclosures can be unenforceable in part, which is a far bigger problem than a fine.
Confusing bank secrecy with a data-sharing ban. Bank secrecy limits disclosure; it does not prohibit sharing within the legal gateways for AML, tax reporting or credit registers. Teams that read it as an absolute wall block legitimate data flows and slow down onboarding.
Assuming a licence travels. It does not. Permissions are activity-specific and jurisdiction-specific. This is the same trap that catches professionals in other licensed fields — the logic of Space Law & Commercial Space: Why the 25-Year Rule Fails Your License — and What Actually Passes is structurally similar: the licence you hold is not the licence you need.
How do people actually learn this — and what does each path cost?
Three routes, honestly compared.
Self-study from primary sources. The statutes and regulations are public: FSMA 2000, the EU CRR/CRD, the National Bank Act, Dodd-Frank, Basel III texts. Cost: time, and the risk of reading a rule without knowing which supervisory expectation sits behind it. Free, but slow and easy to misread.
Learning on the job. The fastest route for those already inside a bank or a law firm — you see real applications, real supervisory letters, real findings. The catch: you only learn the slice your team touches, and nobody explains the adjacent perimeter.
Structured courses. A course compresses the map and gives you document samples — credit agreements, applications, notifications, claims — so you see what the output actually looks like. What you pay is money and the discipline of following someone else's sequence.
For a reader deciding, the trade-off is simple: if you need breadth across US, EU and UK systems quickly, self-study is inefficient; if you need depth in one jurisdiction, primary sources plus a mentor beat any course.
Who should learn this — and who should not
It fits people whose work touches regulated money: fintech product and compliance staff, lawyers moving into financial services, analysts at banks and payment institutions, founders building on a bank partner. They need to read a rule and translate it into a decision. More on the topic: Profession.
It does not fit someone looking for a shortcut into banking without the underlying work. The field rewards precision, and precision comes from repetition with real documents — not from memorising definitions.
The course «Banking and Financial Regulation» is built around that translation: licensing and authorisation, banking operations, credit and deposit agreements, prudential supervision, deposit insurance, bank secrecy and AML/CFT, with document samples you can compare against your own. Lessons are personalised to the student's level, and you can ask the course AI chat for feedback on a written answer when you want a second opinion on your reasoning.
If you have ever drafted a term sheet and then wondered which regulator would object, start with the perimeter question and work outward. Banking and Financial Regulation is where that sequence is laid out end to end.