Not every capital provider is the same. Banks and credit unions that route unsupported credit opportunities to third parties should apply the same diligence they apply to any significant third-party relationship.
In short
When a financial institution routes an unsupported credit opportunity to a capital provider, it enters a third-party relationship carrying regulatory, reputational, and relationship risk. Institutions should apply the same diligence they apply to any significant third-party arrangement — and require defined conduct standards, relationship protections, and accurate outcome reporting before routing any customer opportunity.
Key takeaways
When a financial institution routes an unsupported credit opportunity to a capital provider, it is entering a third-party relationship that carries regulatory, reputational, and relationship risk. The institution's name is associated with the outcome, even if the institution did not make the credit decision.
Banks and credit unions should apply the same diligence to capital provider relationships that they apply to any significant third-party arrangement. That means evaluating the provider's financial condition, regulatory standing, complaint history, data practices, and conduct standards before routing any customer opportunity.
Beyond initial diligence, institutions should require defined conduct standards. The provider should be prohibited from rebrokering the opportunity to another lender without consent. The provider should be prohibited from soliciting the customer for unrelated products. The provider should be required to report status and funding outcomes accurately and on time.
Institutions should also require defined relationship protections. The provider should be contractually prohibited from soliciting the customer's deposit, treasury, or other protected services during and after the credit relationship.
A governed channel provides these protections through executed agreements and product-specific schedules. An unmanaged referral provides none of them. The difference is the difference between a managed third-party relationship and an uncontrolled exposure.
Unfamiliar with a term? See the Institutional Lending Network Glossary
Chuck Doherty
Founder, Mainlynk
Chuck Doherty founded Mainlynk to help community banks and credit unions build lending capability, govern technology decisions, and protect institutional relationships.
| Source | Effective / Publication date | Reviewed |
|---|---|---|
| Interagency Guidance on Third-Party Relationships (2023) | June 6, 2023 | September 2026 |
| OCC Bulletin 2013-29: Third-Party Relationships: Risk Management Guidance | October 30, 2013 | September 2026 |
Effective: June 6, 2023
Reviewed: September 2026
Effective: October 30, 2013
Reviewed: September 2026
Counsel & current-source review required
The regulatory assertions in this article reflect Mainlynk's current understanding of applicable guidance. Regulatory frameworks evolve. Institutions should verify current requirements with qualified legal counsel before relying on this content for compliance purposes.
Factual and regulatory claims in this article are supported by the sources identified above, including the effective date and Mainlynk review date for each. Member names, logos, testimonials, or data require approval.
The question is not whether to outsource lending platform functions. The question is which functions the institution must own and which it can source — and how to govern the boundary between them.
Read articleThe economic case for a governed referral Network is not built on referral fees. It is built on the relationship value that would otherwise be lost when an institution cannot serve a credit request.
Read articleCertification is capability-specific, use-case-specific, and time-limited. It is not a blanket endorsement — and it is distinct from Network Ready status, Member Advantage Terms Available, and Strategic Provider designation.
Read articleMainlynk
Mainlynk works with institutions on credit architecture, specialty product design, and the operating model required to execute at scale — without outsourcing the judgment.
