A federal appeals court just vacated a landmark ruling that would have forced out-of-state banks to comply with Colorado’s interest rate caps. The case — now headed to a full en banc rehearing — will determine whether bank-fintech lending partnerships can survive state rate caps. The outcome reshapes the regulatory architecture for high-rate consumer lending nationwide.
Last week, the U.S. Court of Appeals for the 10th Circuit quietly issued an order that resets one of the most consequential regulatory disputes in consumer lending. The court agreed to rehear — en banc, meaning before the full court — a challenge to Colorado’s 2023 law targeting “rent-a-bank” arrangements. In doing so, it vacated a November 2025 ruling that had favored Colorado and reinstated protections for out-of-state banks and their fintech partners while the full court deliberates.
This is not a niche legal footnote. The outcome of this case will determine whether state-chartered banks can continue to export interest rates across state lines — and whether the bank-fintech partnership model that underlies a significant portion of US consumer lending remains viable in states that have enacted rate caps.
The dispute traces back to Section 521 of the Depository Institutions Deregulation and Monetary Control Act of 1980 — known as DIDMCA. Section 521 was designed to create parity between state-chartered banks and national banks by allowing state banks to charge interest at the rate permitted in their home state, regardless of where the borrower is located. In plain terms: a Utah-chartered bank can lend to a Colorado borrower at Utah rates, not Colorado rates.
Colorado decided to challenge this in 2023, passing legislation to “opt out” of Section 521. The law was designed to stop what consumer advocates call “rent-a-bank” arrangements — structures where a fintech partners with an out-of-state bank specifically to originate loans at rates that would be illegal under the borrower’s home state law, then purchases or services those loans after origination. Colorado caps rates at 8% to 45% depending on loan type and size. Many bank-fintech consumer lending products operate well above those thresholds for near-prime and subprime borrowers.
Three trade groups — the National Association of Industrial Bankers, the American Financial Services Association, and the American Fintech Council — sued Colorado to block the law. Their argument: Colorado’s opt-out authority under DIDMCA applies only to banks physically located within Colorado, not to out-of-state banks making loans to Colorado residents. The district court agreed and issued a preliminary injunction. The 10th Circuit then reversed that injunction in a 2-1 ruling in November 2025, handing Colorado a significant win. Last week, the full 10th Circuit agreed to rehear the case, vacating that November ruling and restoring the injunction.
En banc rehearings are rare. They signal that the full court views the case as having implications significant enough to warrant review beyond the original three-judge panel. In this instance, the breadth of institutional interest made that decision easier: the FDIC, the OCC, 20 state attorneys general, and 50 state bankers associations all filed amicus briefs in support of the trade groups. That is an unusual coalition — federal banking regulators and state banking industry groups aligned against a state consumer protection law.
The technical question the 10th Circuit is now wrestling with is whether the phrase “loans made in such State” in DIDMCA is ambiguous — and specifically, whether it covers loans where either the lender or the borrower is located in an opt-out state. The answer to that interpretive question determines whether Colorado’s law has any teeth against out-of-state banks at all.
Oral arguments will likely be scheduled after September, with a decision expected in the first half of 2027. Until then, the preliminary injunction stands — meaning Colorado cannot currently enforce its rate cap against out-of-state banks lending to its residents.
The bank-fintech partnership model is central to how a large portion of US consumer lending operates today. Upstart, Oportun, Avant, LendingClub, and dozens of smaller platforms originate loans through bank partners specifically because federal law allows those banks to export their home-state rates. If Colorado’s position is ultimately upheld — that opt-out states can cap what out-of-state banks charge their residents — the implications extend far beyond Colorado.
Eight other states have already enacted similar DIDMCA opt-out legislation: Illinois, California, Minnesota, Nevada, North Carolina, Puerto Rico, New Mexico, and Indiana. If the 10th Circuit affirms Colorado’s authority, each of those states gains an immediate legal basis to enforce rate caps against out-of-state bank partners. For any lender operating national or multi-state origination programs through bank partnerships, that is a fundamental operating model risk — not a future possibility, but a pending legal question with a clear timeline.
The consumer lending implications split by product type. Personal loans to near-prime borrowers — where APRs commonly run 25% to 36% — are the most directly exposed. So are installment loan products that rely on bank-fintech structures to serve borrowers who do not qualify for prime rates. Products with APRs below Colorado’s 45% ceiling for smaller loans are less affected, but the ceiling varies by loan size and type, and the compliance calculus is not straightforward across all state opt-outs.
This case sits at the intersection of two competing regulatory philosophies that have been in tension for decades. One view holds that federal preemption of state usury laws is essential infrastructure for a national consumer credit market — that without it, high-risk borrowers in rate-cap states simply lose access to credit rather than getting it at lower rates. The other view holds that federal preemption allows lenders to evade state consumer protections by routing loans through out-of-state charters with permissive rate environments.
The FDIC and OCC siding with the trade groups is a meaningful signal about the current federal regulatory posture. Under the current administration, federal banking regulators have consistently favored preemption and opposed state-level restrictions on bank lending activities. That posture may not survive a change in administration, and the 2027 decision timeline means the political landscape could look different by the time a ruling lands.
For now, the injunction holds, and the bank-fintech lending model continues to operate as it has. But the uncertainty itself has a cost. Lenders who have built origination infrastructure around bank partnerships in opt-out states are operating under a legal framework that remains genuinely unsettled — and will remain so for at least another year. Building that uncertainty into strategic planning, product pricing, and compliance architecture is not optional. It is the work that needs to happen now, while the injunction provides operational cover.
The Lending Pulse delivers weekly intelligence for consumer lending executives — macro signals, regulatory updates, earnings decoded, and company moves. Start your free month — no credit card required.
Start free month →