US consumer watchdog wants Apple Pay, Google Pay, and PayPal to be regulated as banks

The rise of mobile payment apps like Apple Pay and Google Pay is undeniable, with statistics showing that the global mobile payment market reached a staggering $53 billion in 2022. These apps have become ubiquitous, with the top 10 mobile payment apps, including Apple Pay and PayPal, accumulating a combined user base of 3.37 billion. Despite being in the top 10, Apple Pay, with an estimated 507 million worldwide and 43.9 million people in the United States regularly using it, still has many mountains to climb.

This means that these companies will be subject to scrutiny from CFPB examiners, who will review their privacy protections, executives’ conduct, and adherence to regulations prohibiting unfair and deceptive practices.

If implemented, this proposal would encompass approximately 17 companies collectively handling over 13 billion payments annually. While GooglePay, ApplePay, PayPal, and CashApp are specifically mentioned, the CFPB has declined to disclose the identities of the other platforms that would fall under this regulatory umbrella.

In a recent speech, CFPB Director Rohit Chopra highlighted the agency’s findings regarding tech giants’ data collection practices. According to Chopra, these companies amass vast amounts of consumer payment data with minimal restrictions, insufficient transparency, and confusing corporate policies, potentially exposing consumers to the risk of “Chinese-style surveillance.”

The new proposal, applicable to companies processing more than five million transactions per year, aims to address these concerns by ensuring both traditional financial players and the tech sector are subject to equivalent oversight.

 
This approach is welcomed by consumer banks, with the Consumer Bankers Association commending the proposal as “a step in the right direction.” However, tech giants have expressed apprehension, arguing that the proposed regulations would stifle innovation and harm consumers.

 
Regarding a similar case in Australia last month, both Google and Apple have said that customers only use their phones to use cards issued by banks to make payments. This implies that the tech giants do not store or process payment data themselves, and any concerns about data collection should be directed towards the respective banks.

The proposal is currently subject to a notice-and-comment period expected to conclude in early 2024. Following this review period, the CFPB will assess the feedback received and determine whether to finalize the rule.