Federal banking agencies are proposing a more tailored approach to third-party risk management. That doesn't make vendor oversight easier. It makes understanding the actual risk of each relationship more important.

Nuvei and Humboldt Merchant Services faced FTC actions only four days apart. The details are different, but the message to processors, PayFacs, sponsor banks, and fintechs is similar: merchant underwriting and monitoring are becoming an enforcement issue, not just an operational one.

Processor approval does not protect a merchant, ISV, PayFac, or platform from card brand scrutiny, sponsor bank discomfort, scam merchant monitoring, excessive fraud, chargebacks, or prohibited activity exposure. Approval means someone let the account in. It does not mean the business model is safe.

Sponsor banks are not just payment plumbing. They are risk partners, and they do not like discovering late that your merchants, volume, fraud, chargebacks, ACH returns, vendors, or product roadmap have drifted outside the story they approved. If you depend on a sponsor bank, clear communication, real controls, clean reporting, and early escalation are not optional.