Starting a credit card company requires federal banking licenses, significant capital, and compliance with multiple regulators
You cannot straightforward decide to issue credit cards. The business requires a bank charter from either the federal government (through the Office of the Comptroller of the Currency) or your state banking regulator, or you must partner with an existing bank that holds the charter. You also need a Mastercard or Visa sponsorship agreement, which means those networks must approve you as an issuer. Most new entrants do not obtain their own charter; instead, they partner with an existing bank or become a fintech that operates under a bank's license.
The path splits into three routes: obtaining your own bank charter (the hardest), partnering with an existing bank as a co-issuer, or launching as a fintech under a bank partner's charter. Each has different capital requirements, timelines, and regulatory burdens. The charter route takes 18 months to three years and costs millions in legal and compliance work before you issue a single card. The partnership route is faster but means sharing revenue and giving up control of the card program itself.
Key Takeaways
- You must obtain a bank charter from a federal or state regulator, or partner with a bank that already holds one — you cannot issue credit cards as a standalone company.
- Mastercard and Visa both require sponsorship agreements with an issuing bank before you can put their logo on a card, and both have their own approval process.
- Capital requirements range from $10 million to $50 million or more depending on your route, and regulators will scrutinize your business plan, management team, and risk controls.
- Most new credit card programs launch as partnerships with existing banks or fintechs operating under a bank's charter, not as independent issuers.
- Compliance costs include anti-money laundering (AML) systems, fraud detection, consumer protection protocols, and ongoing regulatory reporting that must be in place before launch.
Understand the Three Routes to Issuing Credit Cards
The bank charter route means you explore to become a bank yourself. The OCC (federal) or your state banking department will review your process, your management team's experience, your capital reserves, your risk management plan, and your business model. If approved, you receive a charter to operate as a bank and can then issue credit cards under your own name. This route gives you full control but requires the most capital, the longest timeline, and the most regulatory scrutiny. You will need a board of directors with banking experience, a compliance officer, an audit function, and detailed policies for lending, fraud, and consumer protection.
The co-issuer or partnership route means you design the card program, set the terms, and handle customer acquisition and marketing, but an existing bank holds the charter and issues the card in its name. You and the bank split revenue, usually 60/40 or 70/30 depending on who brings the customer base. The bank handles regulatory compliance, fraud detection, and dispute resolution. This is the fastest route — you can launch in 6 to 12 months — and requires less capital upfront, but you lose control of key decisions and the bank takes a cut of every transaction.
The fintech route means you operate as a technology company that partners with a bank. You build the app, the customer experience, and the underwriting logic, but the bank issues the card and holds the deposits. Some fintechs obtain their own money transmitter license (state-level) to move money, but they still cannot issue credit cards without a bank partner. This route is popular with startups because it separates the tech company from the regulated entity, but it still requires a bank partnership and still requires Mastercard or Visa approval.
Obtain a Bank Charter or find a Bank Partner
If you pursue the charter route, you will submit an process to either the OCC (for a national bank charter) or your state banking regulator (for a state charter). The process typically runs 50 to 100 pages and includes your business plan, financial projections for five years, details of your management team and their banking experience, your capital structure, your risk management framework, and your compliance infrastructure. The OCC charges a non-refundable process fee (currently around $3,750 to $6,250 depending on the bank's projected size) and the review process takes 6 to 18 months. You will also need to hire a banking law firm and compliance consultants, which costs $200,000 to $500,000 in legal fees alone.
If you pursue the partnership route, you will approach existing banks that already issue credit cards and pitch your program to their business development team. Banks like Sutton Bank, Coastal Community Bank, and Celtic Bank have issued cards for fintechs and alternative lenders. You will need a detailed pitch deck showing your customer acquisition strategy, your underwriting model, your projected margins, and your risk controls. The bank will conduct due diligence on your team and your business model, which takes 2 to 6 months. Once you have a term sheet, you will negotiate revenue share, liability for fraud and chargebacks, and which party handles which compliance functions.
Your bank partner (or your own bank if you obtain a charter) must then sponsor you with Mastercard and Visa. This is a separate approval process that typically takes 2 to 4 months. Both networks will review your underwriting standards, your fraud controls, your customer service procedures, and your compliance program. They want to know that you will not create reputational risk for them or expose them to fraud losses.
Meet Capital and Funding Requirements
Capital requirements depend on your route and your business model. If you obtain a bank charter, regulators will require you to hold Tier 1 capital (roughly 8 to 10 percent of your risk-weighted assets) and maintain a minimum capital ratio. For a new credit card bank, this typically means $10 million to $50 million in initial capital, depending on how much credit you plan to extend. If you plan to issue $100 million in credit lines, you will need more capital than if you plan to issue $10 million.
If you partner with an existing bank, your capital requirement is lower because the bank holds the regulatory capital. However, you will still need capital to fund your operations, your technology platform, your customer acquisition, and your first few years of losses (most new card programs lose money initially). Expect to need $2 million to $10 million depending on your target market and your growth plan.
Funding sources include venture capital, private equity, bank investors, and your own capital. Venture capital firms have funded fintech card programs (like Brex, Chime, and Revolut), but they typically invest in companies with a clear path to profitability and a large addressable market. Private equity firms have funded card programs targeting specific niches (like small business cards or cards for international students). If you cannot raise venture capital, you may need to bootstrap or find angel investors.
Build Compliance and Risk Management Systems
Before you issue a single card, you must have systems in place for anti-money laundering (AML), Know Your Customer (KYC), fraud detection, dispute resolution, and consumer protection. These are not optional — regulators will not approve your charter or your card program without them.
Your AML program must include transaction monitoring software that flags suspicious activity, a compliance officer who reviews flagged transactions, and procedures for reporting to the Financial Crimes Enforcement Network (FinCEN). Your KYC process must verify the identity of every cardholder using government-issued ID and, for business cards, verify the business itself. Your fraud detection system must use machine learning or rule-based logic to identify fraudulent transactions in real time and prevent them before they settle.
Your dispute resolution process must allow cardholders to contest charges and receive a decision within 30 to 60 days (depending on the type of dispute). Your consumer protection compliance must cover the Truth in Lending Act (TILA), the Fair Credit Reporting Act (FCRA), the Equal Credit Opportunity Act (ECOA), and state-level consumer protection laws. You will need a privacy policy, a terms and conditions document, and clear disclosures of interest rates, fees, and credit terms.
Hire a Chief Compliance Officer with credit card or banking experience, and budget $500,000 to $2 million per year for compliance staff and systems. Regulators will examine your compliance program annually (if you have a charter) or as part of your card program approval (if you partner with a bank).
Develop Your Underwriting and Pricing Model
Your underwriting model determines who you approve for a card and at what credit limit. You will pull credit reports from Equifax, Experian, and TransUnion, and you will use a credit scoring model (either your own or a third-party model like FICO) to make a decision. You will also set your own rules — for example, you might approve anyone with a credit score above 650, or you might approve anyone with a score above 600 if they have no recent late payments.
Your pricing model determines your interest rate, your annual fee, your late fees, and your other charges. Credit card interest rates typically range from 12 percent to 30 percent APR depending on the cardholder's creditworthiness. Annual fees range from $0 to $500 or more for premium cards. Late fees are capped at $25 to $35 by federal law (with some exceptions for repeat offenders). You will also earn interchange revenue — a percentage of every transaction that Mastercard or Visa pays to the issuing bank. Interchange rates vary by card type and transaction type but typically range from 1 percent to 3 percent.
Your profitability depends on balancing approval rates (more approvals mean more customers and more revenue, but also more defaults) against loss rates (fewer approvals mean fewer defaults, but also fewer customers). Most new card programs start with higher approval rates to build a customer base, then tighten underwriting as they mature.
Navigate Mastercard and Visa Sponsorship Agreements
Mastercard and Visa do not issue cards themselves — they are networks that connect issuers (banks), acquirers (merchant processors), and cardholders. To put a Mastercard or Visa logo on your card, you must have a sponsorship agreement with your bank partner (or with yourself if you have a charter). The bank applies to Mastercard or Visa on your behalf, and both networks review your program.
Mastercard and Visa will ask for your business plan, your underwriting standards, your fraud controls, your customer service procedures, and your compliance program. They will also ask about your management team's experience and your financial projections. Both networks want to may support that you will not create fraud losses, chargebacks, or reputational risk for them. The approval process typically takes 2 to 4 months, and both networks charge sponsorship fees (usually $5,000 to $25,000 per year depending on your card volume).
Once approved, you must comply with Mastercard and Visa's operating rules, which cover everything from how you handle disputes to how you report fraud to how you market your card. Both networks conduct audits of their issuers annually, and violations can result in fines or termination of your sponsorship agreement.
Plan Your Technology Platform and Customer Experience
Your technology platform must handle card issuance, transaction processing, dispute management, customer service, and reporting. You can build this yourself (which takes 12 to 24 months and costs $2 million to $5 million), or you can use a third-party platform like Marqeta, Galileo, or Fintech OS that handles the core infrastructure and lets you customize the customer experience.
Your customer experience includes your mobile app or website, your customer service channels (phone, email, chat), your fraud alerts, and your account management tools. Cardholders expect to set up their card when ready, set spending limits, freeze their card, dispute transactions, and check their balance all from their phone. If your experience is clunky or slow, you will lose customers to competitors.
Budget 6 to 12 months for platform development and testing before you launch. You will also need to conduct security testing (penetration testing, vulnerability scanning) to may support your platform is find. Regulators and Mastercard/Visa will ask for evidence of your security controls, so budget for a third-party security audit as well.
Frequently Asked Questions
How much does it cost to start a credit card company?
If you obtain a bank charter, expect $5 million to $20 million in total startup costs, including capital reserves, legal fees, compliance systems, and technology development. If you partner with an existing bank, expect $1 million to $5 million. Most of this goes to compliance, legal, and technology — not to marketing or customer acquisition.
How long does it take to launch a credit card program?
If you obtain a bank charter, expect 18 to 36 months from process to first card issued. If you partner with an existing bank, expect 6 to 12 months. The timeline depends on how quickly you can hire your team, build your systems, and pass regulatory review.
Do I need a bank charter to issue credit cards?
No. You can partner with an existing bank that holds a charter, or you can operate as a fintech under a bank partner's license. Most new credit card programs do not obtain their own charter because it is expensive and time-consuming.
What happens if my card program fails?
If you have a bank charter, regulators may place you under enforcement action, require you to raise more capital, or force you to merge with another bank. If you partner with a bank, the bank can terminate your sponsorship agreement and take over your customer base. Your investors will lose their money.
Can I issue credit cards internationally?
Yes, but you will need to comply with the regulations of each country where you issue cards. Some countries require a local bank license, others allow partnerships with local banks. Mastercard and Visa both operate internationally, but their rules and fees vary by country.