Custodial and FBO Account Structures: Whose Money Is It

A for-benefit-of account solves a practical problem: a company that is not a bank needs to hold money for thousands of people. It opens one deposit account at an insured bank, titled to show that the balance is held for others, and keeps its own ledger of who is owed what. The bank sees one depositor. The end users see an app balance.

Everything that goes wrong with these structures traces to the gap between those two views. Ownership is decided by state trust, agency, and contract law, not by the letters "FBO" in the account title. Deposit insurance is decided by federal rules that only operate if the insured bank fails. And the ability to pay end users at all is decided by whether the intermediary's ledger reconciles to the bank balance.

Three questions the structure has to answer

Any custodial arrangement should be able to answer three separate questions with three separate documents. Conflating them is the root defect in most weak programs.

Note what is absent from that table: nothing about the account title alone. Titling is necessary for the insurance question and useful evidence on the ownership question, but a title is a label. Where the end-user agreement gives the intermediary discretion to use the funds, or the deposit agreement makes the intermediary the outright owner of the balance, courts look at those terms rather than at the acronym.

The pass-through insurance conditions

Federal deposit insurance normally attaches to the depositor of record. Pass-through coverage is the exception that lets insurance reach the actual owners of a pooled balance, so that each end user is treated as a separate depositor for coverage purposes rather than the whole pool counting as one. It is conditional, and the conditions are cumulative.

• The account records at the insured bank disclose the custodial or fiduciary nature of the relationship — the title must show the funds are held for others, not held for the intermediary.
• Records maintained in good faith and in the ordinary course of business, by the bank or by the depositor, identify the actual owners and the amount each owns.
• The relationship is genuine: the deposits really are owned by the identified owners under applicable law, rather than by the intermediary under an arrangement dressed up as custody.
• Those records are current, reconcilable, and available quickly enough to be useful in a failure, when a determination has to be made within days.

Coverage then applies per owner, per insured bank, per ownership category, at the standard maximum — so an end user with funds at the same bank through two different programs may hold less coverage than the two balances suggest. The mechanics of aggregation, and what happens when the same bank appears twice in a stack, are set out in deposit insurance and pass-through coverage.

Verify before relying: after several high-profile failures of non-bank program managers, the FDIC moved to tighten recordkeeping expectations for custodial accounts with transactional features, including requirements around who maintains the ownership ledger and how quickly it can be reconciled. As of mid-2026 the exact status and compliance dates should be confirmed at fdic.gov rather than assumed from a program agreement drafted earlier.

What deposit insurance does not do

This is the most consequential misunderstanding in the market, and it is worth stating flatly. Deposit insurance responds to the failure of the insured bank. It does not respond to the failure of the intermediary, the failure of a middleware provider, a ledger that cannot be reconciled, fraud by the program manager, or a freeze imposed by a court. In each of those scenarios the bank is solvent, the money is there, and the end user still cannot be paid — because nobody can prove how much is theirs.

That gap is why marketing copy has become a supervisory issue. Statements suggesting that funds held by a non-bank are themselves "FDIC insured," without explaining that coverage depends on the bank failing and on the recordkeeping conditions being met, have drawn direct regulatory attention. Programs should describe coverage precisely: which insured bank holds the deposit, that coverage arises only if that bank fails, and that pass-through treatment depends on records identifying each owner.

The controls that actually protect end users

1. Title correctly, once

   The account title should state the custodial character on its face and match the deposit agreement. Fix the title at opening; retitling a live account with millions of balances is painful and creates a records gap for the period before the change.

2. Reconcile daily

   Sum the sub-ledger, compare to the bank balance, and investigate any break the same day. A structure without daily reconciliation cannot satisfy the ownership-records condition when it matters.

3. Keep operating funds out

   Fees, float, and corporate cash belong in a separate account. Commingling is the fastest way to convert a custodial claim into an unsecured claim against a failed company.

4. Hold an independent copy of the ledger

   A record only the intermediary can read is not a record anyone can rely on in a failure. Arrange for the bank, or an independent agent, to hold a current copy under a documented format.

5. Document the agency in the end-user terms

   Say plainly that the company holds funds as agent or custodian for the user, that it does not lend or invest them, and identify the insured bank. Consistency across the three agreements is the point.

6. Test the wind-down

   Run the exercise: if the program stopped today, who instructs the bank, who validates balances, and how long would payment take? The answer is the real measure of the structure.

The other rulebooks sitting on top

Custodial structures rarely sit under one regime. State money-transmission law is often the binding constraint: licensed transmitters typically must hold permissible investments at least equal to outstanding transmission obligations, and those requirements — and the definition of what counts as transmission — differ meaningfully from state to state. A structure that satisfies one state's safeguarding rule is not for that reason compliant nationally.

Anti-money-laundering duties travel too. The bank must understand whose activity flows through the pooled account, which means customer identification and monitoring responsibilities have to be allocated explicitly between the bank and the program manager. Where that allocation is vague, the bank carries the regulatory obligation without the data, and the escalation path for a filing decision breaks down — see Suspicious Activity Report filing and confidentiality. Identifying the beneficial owner behind an entity end user is part of the same problem set.

Consumer law applies to the end-user relationship regardless of the plumbing. Where the balance is a consumer account or a prepaid account, Regulation E error-resolution duties run against the account-holding institution on a fixed clock, as described in Regulation E error resolution. Movement in and out of the pool usually runs on the automated clearing house network, where the validity of an ACH authorization and the handling of returns raise their own issues, covered in ACH authorization, returns, and account-freezing risk.

Questions the desk gets

Does putting "FBO" in the account title protect customer funds?

Not on its own. The title is evidence of the parties' intent and it is required for pass-through insurance analysis, but ownership is decided by the agreements and by state law. If the deposit agreement makes the intermediary the owner of the balance, or the end-user terms let the company use the funds for its own purposes, the title will not overcome those terms in a bankruptcy. Align all three documents or expect the weakest one to govern.

Who is responsible for the ownership records — the bank or the program manager?

Both have exposure, and the allocation must be written down. The insurance condition is satisfied by records maintained by the bank or by the depositor in the ordinary course, so a program manager's ledger can qualify. The practical risk is that only the manager can read it. Regulators have pushed toward arrangements where the bank can access or independently reconstruct the ownership detail, which is a direct response to failures where the ledger became unusable.

Can interest or float on the pooled balance go to the intermediary?

Sometimes, and it must be disclosed. Whether the intermediary may keep earnings depends on the end-user agreement and on state law governing agents and fiduciaries; in some contexts, and for some regulated intermediaries, retaining earnings on client funds is restricted or prohibited. Silence in the terms is the dangerous option, because a customer later argues the earnings followed the funds. State the arrangement expressly.

Is a custodial structure a substitute for a money transmission licence?

No. Licensing turns on what the company does — receiving money for transmission — not on where it parks the balance. Some states exempt agents of a payee or of a licensed institution, and those exemptions are narrow and drafted differently in each state. Treat the licensing analysis as independent, and reassess it whenever the money flow changes, not only when the product name changes.

How to use this brief

Read the three agreements side by side before anything else. Take the deposit account agreement, the program or sponsorship agreement, and the end-user terms, and mark every sentence that says who owns the money, who may direct it, and who bears loss. Most defective structures reveal themselves in ten minutes of that exercise, because the documents were drafted by different parties at different times and never reconciled.

Then test the ledger the way a receiver would. Ask for yesterday's reconciliation, the break report, and the format in which the ownership detail could be handed to a third party. Confirm current deposit-insurance recordkeeping expectations at the FDIC and the coverage rules at 12 CFR Part 330, and check third-party-risk supervisory expectations for the sponsor bank with its regulator, such as the OCC. Where the program also extends credit, the structural analysis in state lending licenses and bank-partner models applies, and related material sits on the Financial Regulation & Digital Assets desk.