บทถอดความฉบับเต็มของ How Fintechs Grow Without Outrunning Their Compliance

smart, very technically astute, but little to no experience operating in heavily regulated markets, like you know, dealing with FINRA or the SEC. 00:04:59.360 --> 00:05:20.879 So, with that said, there was a need for our expertise, but more importantly, there was a need for our sort of expertise at CRC Oyster that could really distill what the client, the fintech-enabled companies were looking for, and really translate that into the regulatory requirements or the impact of those requirements on those companies. 00:05:21.120 --> 00:05:37.759 And the truth of the matter is the only reason they needed to become a broker dealer andor an investment advisor was the utility of having those registrations because their business model necessitated it based on how they wanted to be compensated for doing that business. 00:05:38.079 --> 00:05:40.000 And Devin, any thoughts on that? 00:05:40.399 --> 00:05:45.279 That describes uh my experience working with CRC entirely. 00:05:45.519 --> 00:05:58.319 So, I mean, when I was at large companies, the two large companies, I obviously worked with outside counsel and you use outside counsel for many different things, but one of them is their expertise in working with many different firms. 00:05:58.480 --> 00:06:11.839 Like you're if you're an in-house lawyer, you have you're getting great experience at the particular firms where you are, but you don't necessarily have that bird's eye view of how other firms are addressing particularly difficult legal problems. 00:06:12.160 --> 00:06:23.839 The thing that I've learned, and and it's been since joining FinTechs and working with CRC is that you need some of that same expertise for those same reasons on the compliance and operational side. 00:06:24.240 --> 00:06:35.759 It's it's very difficult to build uh compliance and operational systems and processes from scratch without understanding how other firms have done it. 00:06:36.000 --> 00:06:49.920 So, you know, I have found it's been incredibly effective to go to Mitch and and CRC to get that information in building those systems and processes and in advising my internal clients on on doing so. 00:06:50.160 --> 00:07:03.439 I mean, part of FinTech, obviously, is uh, as Mitch mentioned, remaking the way that financing services has worked in the past and particularly applying technology to make it more efficient and cost effective and the like. 00:07:04.079 --> 00:07:09.680 But I don't think you can successfully innovate unless you understand how others have done things in the past. 00:07:09.839 --> 00:07:21.839 And CRC folks have that breadth of knowledge and they act as creative partners in building upon those past processes or figuring out a new way to do them, in particular uh in using technology. 00:07:22.240 --> 00:07:39.439 And Mitch, looking at what what Devin had just walked through, does anything stand out to you as pitfalls or certain things that fintechs that get right have the ability to scale versus going the wrong direction and then kind of facing their own demise, right? 00:07:39.600 --> 00:07:50.639 Given the experience that you've had and Devin has had in terms of advising and helping grow, scale, and operationalize these ideas into full-blown entities. 00:07:50.879 --> 00:08:00.000 Are there any certain areas that you look at as either things that a firm needs to do or pitfalls that a firm should try and stay away from in order to receive commercial success? 00:08:00.240 --> 00:08:02.399 It's a great question and it's the right question. 00:08:02.639 --> 00:08:13.199 It's not that these firms are setting out to do things the wrong way or trying to take shortcuts to get to an outcome. 00:08:13.439 --> 00:08:21.680 I think it's the lack of education and knowledge, and that's not unique, or and that's not a criticism, but it's the truth. 00:08:21.839 --> 00:08:38.960 And often we'll talk to fintech companies or tech-enabled companies, I should say, and they're under the impression that they can stand up these businesses with little to no internal resources or the utilization of external support. 00:08:39.279 --> 00:08:46.000 Great example is we get fintech companies coming to us all the time saying we want to set up a self-clearing business. 00:08:46.240 --> 00:08:53.600 And they really just don't understand the intense operational support that's required. 00:08:53.759 --> 00:08:58.799 And a lot of that middle and back office expertise is very hard to find. 00:08:58.960 --> 00:09:10.159 And so if you were going to try to staff something like this and go out and hire teams of people, that would be very hard to do on a de novo basis. 00:09:10.720 --> 00:09:39.679 What you really need to think about, and that's where your legal, your accounting, your ops, your compliance partners come in, is you need to work with those who have been there, who have done it, who have been the practitioners, and not only help you with the guidance and advice, but also help you with staff augmentation and really helping you to think about what do those first 12 to 24 to 36 months look like until you can fully operationalize it internally as you scale the business. 00:09:40.000 --> 00:09:41.200 And Devin, any thoughts? 00:09:41.679 --> 00:09:52.480 Number one, I've worked uh at two companies with clearing firms, and I couldn't agree more that it is an intense thing to build and that it's absolutely essential to get external expertise in doing so. 00:09:52.720 --> 00:10:09.519 I think if there are pitfalls, particularly in the brokerage space, it's you know, circumstances where you're building a product and you're or you're building internal operations, you're having engineers do it, and it's not properly supervised by folks who have their licenses and the expertise uh uh at the end of the day. 00:10:09.759 --> 00:10:22.000 And the other part uh that I didn't mention in in working, say, with CRC or uh other compliance consultants is it, and I want to say I agree that you

can't staff it up immediately. 00:10:22.159 --> 00:10:30.240 But I've worked with CRC in the past where uh you know we've brought on personnel uh uh as contractors to help us scale the business. 00:10:30.480 --> 00:10:33.679 They're external, but they're working with us internally, and that's been very successful. 00:10:34.000 --> 00:10:34.480 Mitch. 00:10:34.879 --> 00:10:42.240 So when we take a look at at fintechs and tech-enabled firms, they can't build everything in-house, especially early on in their journey. 00:10:42.559 --> 00:10:47.519 How do fintechs make smart decisions about what to own versus what to outsource? 00:10:47.840 --> 00:11:08.159 So I think one of the things that we see that's very common as it relates to that scenario, that question, is they want the utility, let's say, of a broker dealer, but they're smart enough to know that they don't have the licensed principles, they don't have the expertise of operating a FENRA-regulated broker dealer. 00:11:08.320 --> 00:11:18.399 And so they're like, we want to set this up, but we want to do this where there's enough guardrails in place so we're not overstepping into an area that we don't understand. 00:11:18.559 --> 00:11:20.159 That's why we're hiring you. 00:11:20.399 --> 00:11:22.080 So, great example. 00:11:22.159 --> 00:11:31.279 When we're registering a broker dealer for the first time, you have to have a minimum of three principles for that broker deal: two series 24s and a series 27. 00:11:31.679 --> 00:11:37.039 The most common thing that we see is we want you and your team to do that. 00:11:37.200 --> 00:11:39.200 Can you give us the principles? 00:11:39.440 --> 00:11:52.559 And what do we do here to ensure that we're not overstepping so that we at the let's call it techco are inadvertently causing our folks to be uh licensed as principals. 00:11:52.960 --> 00:12:00.080 So there are ways to do that, and these organizations want that sort of guardrail in place. 00:12:00.320 --> 00:12:18.720 And and the way that we we guide and advise our clients to do that is number one, when you're going through the registration process, you can have all the principles, not the securities principles, but you call it the principles of the fintech company, sign attestations that they're not going to be involved in the day-to-day operations. 00:12:18.879 --> 00:12:33.840 We work closely with council to ensure that operating agreements are written in such a way that a power and authority isn't given to someone or multiple individuals that can bring them into the broker dealer world. 00:12:34.000 --> 00:12:46.799 And then the way that we set up their governance oversight programs is you can set the strategic goals and objectives for the broker dealer, but then it's our job, the principles of the broker dealer, to affect those. 00:12:46.960 --> 00:12:52.159 And so that's an area where we see our clients saying, we want to rely on you. 00:12:52.399 --> 00:12:56.399 Tell us how we do that without stepping over a line that we don't want to. 00:12:56.639 --> 00:13:12.960 I just to riff on that a little bit, even beyond Mitch just talked about sort of starting up a brokerage from scratch, but I'm at a company now where brokerage has been operating for some period of time, but there still are opportunities to assess where we need additional outside help or expertise. 00:13:13.039 --> 00:13:21.679 And I think that often shows up where you know you've scaled to the point where internal folks can be overwhelmed by the workload. 00:13:21.840 --> 00:13:29.360 At that point in time, like it's important to figure out whether you need to hire, whether you need to seek outside help from CRC or others. 00:13:29.600 --> 00:13:43.519 The other is when you know an existing business tries to go into new areas of business and nobody internally has bird's eye view of how to get into that other business, how to develop policies, procedures, internal controls, et cetera. 00:13:43.679 --> 00:13:53.440 And at that point, like I've I found working with external uh compliance and and operations experts uh like CRC has been it's been very helpful. 00:13:53.759 --> 00:14:00.639 And I think one of the most exciting and and possibly dangerous moments for a fintech is when they decide to expand, right? 00:14:00.720 --> 00:14:05.120 So either it's a new product, a new vertical, a new customer segment. 00:14:05.360 --> 00:14:13.919 So from your experience and and Mitch or Devin, or both of you, can you guys walk us through what that inflection point actually requires? 00:14:14.240 --> 00:14:16.080 Yeah, I mean, I I I can speak about it. 00:14:16.159 --> 00:14:18.720 I think from the in-house side. 00:14:18.879 --> 00:14:30.480 I mean, we obviously we have these companies develop product roadmaps, and at times those product roadmaps will add a new line of business that you know is highly regulated or that's regulated differently. 00:14:30.639 --> 00:14:48.000 Uh, and then there's a process of developing a uh product requirements document, having legal counsel, internal legal counsel and compliance experts sort of ferret out all the particular legal and regulatory issues, and then work with the business to figure out whether we have the internal resources to staff it. 00:14:48.159 --> 00:14:55.360 And if we don't, then it I think it's time to get creative and in looking at your sort of outside expert stack. 00:14:55.759 --> 00:14:56.399 Absolutely. 00:14:56.639 --> 00:15:08.159 From my perspective, it's really refreshing when you have an organization that is strategically thinking about where they want to play or where they want to go next. 00:15:08.399 --> 00:15:13.840 But more often than not, we see folks who are attracted to shiny objects. 00:15:14.080 --> 00:15:20.720 And um, and so they really immediately want to go where they think the the ball is going, right? 00:15:20.879 --> 00:15:32.720 And what happens is then you get into the world of the one-offs, and

we want to do this because this opportunity landed on our desk, and we think we can do this and we and we want to give it a shot. 00:15:32.960 --> 00:15:48.960 That's awesome, but you cannot do that, and this is how we would guide our clients and our and anyone who came to me and asked this question is it's great if you want to take this strategic next step, but you can't do it in a world where you have no operational infrastructure to support it. 00:15:49.200 --> 00:16:05.440 Even if you've been presented with the most amazing opportunity that nobody else in the world has been presented, I will tell you, as somebody who will attest to history repeating itself, is when you get into the world of the one-off, you will have a problem. 00:16:05.600 --> 00:16:06.399 Because guess what? 00:16:06.559 --> 00:16:16.960 If you are not operationally set up to support it, you're gonna have operational breakdowns, and operational breakdowns lead to compliance issues, and compliance issues lead to regulatory problems. 00:16:17.200 --> 00:16:24.320 If you're serious about wanting to play in a certain area, then you have to have that strategic roadmap and that outlook. 00:16:24.480 --> 00:16:37.759 And if you want to get there faster, there are ways to potentially do that, i.e., you can work with a third party who's already built it and create some sort of channel partnership with that party while you're building it yourself. 00:16:38.080 --> 00:16:52.240 Or you could take the step back and say, this is important enough that we're gonna take the next three, six, or nine months to build this correctly because we truly want to be in this business rather than taking advantage of an opportunity that may or may not be there tomorrow. 00:16:52.559 --> 00:17:03.679 In fintech, there's this concept of minimum viable product where you're shipping a product that works and that you hope customers love, but it's not the fully built-out product yet. 00:17:03.919 --> 00:17:10.319 I think it's an excellent concept and allows companies to dabble into scale and to and to do all the things that they want to do. 00:17:10.559 --> 00:17:19.039 But with these regulated entities, there isn't sort of a minimum viable product from a compliance perspective, if that makes any sense. 00:17:19.359 --> 00:17:24.960 Regulators don't care that you're just a startup or that you, you know, that you're new at this. 00:17:25.200 --> 00:17:29.359 They expect uh, for good reason, strong compliance programs to start with. 00:17:29.680 --> 00:17:34.799 So, one other thing, kind of looking at the growing and scaling of a fintech, right? 00:17:34.880 --> 00:17:47.039 And and sometimes founders or executive teams, they sometimes resist to bringing in outside help because it's almost like an admission that they don't have it figured out or there's a loss of control. 00:17:47.200 --> 00:17:48.640 How do you reframe that? 00:17:48.799 --> 00:18:11.759 You know, Mitch, when you're having conversations with fintechs that are reaching out to you and talking about either standing up a broker dealer, investment advisor, or just general support, how do you kind of frame the partnership between the executive team and CRC Oyster, you know, so that it really is a collaborative approach, not something where they don't know it, so they're outsourcing it. 00:18:11.839 --> 00:18:12.640 How do you work with them? 00:18:12.880 --> 00:18:14.640 Front and center is flexibility. 00:18:14.880 --> 00:18:20.640 So we look to provide a flexible model that can scale up or scale down as needed. 00:18:20.799 --> 00:18:32.480 And so when we understand the aspirations of the client, and some clients may say we want a fractional model because that's in line with who we are strategically. 00:18:32.720 --> 00:18:40.559 More often than not, they look at this as a point in time till they hit that inflection point where they can say, now we want to internalize this. 00:18:40.799 --> 00:18:52.400 And that was the goal of CRC and CRC Oyster from the start, is we wanted to help companies get to that point where we were eventually working ourselves out of a job. 00:18:52.559 --> 00:18:57.599 And we were comfortable in doing so because we would figure out other ways to work with that client. 00:18:57.759 --> 00:19:04.960 If and when the client gets there, we're happy to work with them, to turn it over to them and still be there as a resource. 00:19:05.119 --> 00:19:15.359 And that in and of itself is disarming to those who might be skeptical about the model and what it means and how you unwind that once you're ready to internalize it. 00:19:15.599 --> 00:19:20.960 We believe so much in what we do, we give clients a 60 day out, no matter what. 00:19:21.119 --> 00:19:24.160 And so you can't do that unless you know the model works. 00:19:24.240 --> 00:19:28.880 And so I don't want anybody to be stuck long term with something that they don't need. 00:19:29.039 --> 00:19:34.880 I want to help them figure out what it is they need and be a value-added partner to help them get there. 00:19:35.039 --> 00:19:45.519 And if you're dealing with folks who are suspicious or skeptical of the model, I think it just takes an honest, direct conversation to get to the point where they see what this is and what it isn't. 00:19:45.839 --> 00:19:47.759 Yeah, I agree with all of that. 00:19:47.920 --> 00:19:53.680 I tend to frame it as so resources at a startup are scarce and just it by nature. 00:19:53.839 --> 00:20:00.000 And so I think that executives are naturally looking to allocate resources most efficiently. 00:20:00.160 --> 00:20:14.079 And I think oftentimes when you're starting in a new line of business, new regulated line of business, the most efficient allocation of resources is to outsource some of those, you know, some of the operational and compliance functions to begin with. 00:20:14.319 --> 00:20:19.359 Hiring is very expensive, obviously, in terms of time, obviously in terms of money.

00:20:19.519 --> 00:20:35.519 And, you know, if you're just trying to figure out whether this line of business or this product works or as product market fit or the like, oftentimes the most efficient way to get into it is to leg into it using, say, CRC or other experts, and then bring that expertise in-house. 00:20:35.599 --> 00:20:38.880 If you have the good fortune that that line of business or product is scaling. 00:20:39.119 --> 00:20:44.240 And the other thing we should talk about is it's not necessarily when you're starting net new. 00:20:44.400 --> 00:20:48.319 And Devin, you and I have been through this together in a number of iterations. 00:20:48.559 --> 00:20:53.119 There are mature businesses at times that need stopgap support. 00:20:53.440 --> 00:20:57.039 And so it's not only about starting from scratch. 00:20:57.119 --> 00:21:10.640 It's sometimes you have a mature business model, but there are times where you need those resources because you may have had internal turnover, somebody may be going out on a maternity leave, whatever it is. 00:21:10.960 --> 00:21:21.519 So these sorts of situations really lend themselves to our business model because it's not only when we're looking for these long-term relationships. 00:21:21.680 --> 00:21:31.039 Of course, we want those long-term relationships, but part of a long-term relationship is being able to provide your clients with point solutions on a just-in-time basis as they need it. 00:21:31.359 --> 00:21:34.880 FinTechs are leanly staffed by nature. 00:21:35.119 --> 00:21:39.519 And in the startup world, there's lots of movement of workers. 00:21:39.599 --> 00:21:46.000 I mean, people gain very valuable experience very quickly at startups, and you know, they may leave for another one. 00:21:46.240 --> 00:21:52.079 I think you probably find more staffing gaps at startups than you would Morgan Stanley. 00:21:52.240 --> 00:21:54.960 Lots of people go there and stay there for their entire careers. 00:21:55.119 --> 00:21:57.519 That really isn't usually the startup model. 00:21:57.599 --> 00:21:59.759 And so there have been circumstances where. 00:22:00.240 --> 00:22:06.799 It's been essential to fill a gap that all of a sudden have as a result of turnover, that nature of turnover. 00:22:06.880 --> 00:22:11.920 And it's incredibly important to have that resource at hand as necessary. 00:22:12.240 --> 00:22:18.400 Overall, Mitch, what should firms be thinking about outside of just compliance and operations? 00:22:18.640 --> 00:22:30.319 They need to think about how they're going to staff their customer service desk or their customer success desk, however they want to call it, because the regulators are going to be very focused on that. 00:22:30.480 --> 00:22:37.759 And I'll talk about it from a regulatory perspective, but maybe Devin, you can share some real-world perspective in terms of things that you've seen. 00:22:37.920 --> 00:22:50.480 But from a regulatory perspective, especially if you're setting up self-directed sorts of businesses where your customer service desk or customer success individuals are there to field questions. 00:22:50.640 --> 00:23:07.519 And most of the time, especially in these self-directed sorts of businesses, and vis-a-vis Robinhood and all those who look and feel or want to be doing what Robinhood is doing, is how are you staffing that business from a customer success standpoint? 00:23:07.680 --> 00:23:15.759 Because in these businesses, you're going to get calls, texts, emails, however, it's coming in about why did my trade not settle? 00:23:15.920 --> 00:23:16.799 Where's my cash? 00:23:16.960 --> 00:23:18.720 Why can't I access the app? 00:23:18.960 --> 00:23:20.079 You guys suck. 00:23:20.240 --> 00:23:33.279 Like whatever it may be, you have to educate those folks because now they're operating in a regulated environment, and you need to track and deal with customer grievances from a FINRA perspective. 00:23:33.440 --> 00:23:37.200 You have to report your quarterly customer complaint statistics. 00:23:37.359 --> 00:23:41.200 And there's all these hosts of fields that are applicable. 00:23:41.599 --> 00:23:43.440 Most people erroneously think about that. 00:23:43.599 --> 00:23:50.640 Customer complaints are sales practice or predatory selling or unauthorized trading. 00:23:50.799 --> 00:23:53.279 Most customer complaints are operational in nature. 00:23:53.359 --> 00:23:55.039 And it can be like, where's my money? 00:23:55.200 --> 00:24:02.640 And so you need to be able to track that and deal with that and have people who are educated to deal with that. 00:24:02.720 --> 00:24:11.839 And most importantly, have somebody overseeing or supervising those folks who has the right expertise, experience, and licensing to deal with that. 00:24:12.000 --> 00:24:13.920 But interested in your thoughts on that, Devin. 00:24:14.319 --> 00:24:16.480 The regulatory piece is absolutely correct. 00:24:16.720 --> 00:24:21.519 I think even on the commercial side, though, I mean, these fintechs are trying to displace incumbents. 00:24:21.680 --> 00:24:26.240 And the only way that they can do that is by delighting their customers. 00:24:26.400 --> 00:24:27.039 That is the goal. 00:24:27.200 --> 00:24:35.839 And I've been lucky enough to work at fintechs that we're obsessed with customer service and ensuring that the customers were happy with our products and services. 00:24:36.079 --> 00:24:40.880 Where that falls down, or if it falls down, it can be catastrophic for a fintech. 00:24:41.119 --> 00:24:45.839 Uh customers going to social media to complain about it can be a significant problem. 00:24:46.000 --> 00:24:50.400 I imagine the customers of United Airlines complain about it on social media all the time. 00:24:50.559 --> 00:24:56.799 It doesn't pose any sort of significant threat to them, but it does for startups in the fintech space. 00:24:57.119 --> 00:25:06.319 Back in the early days of doing this and working with organizations as they were looking to operationalize social media, one of the thoughts is, well, just to take that post down. 00:25:06.480 --> 00:25:07.839 You don't take the post down. 00:25:08.000 --> 00:25:09.519 You show how you've dealt with it. 00:25:09.599 --> 00:25:13.599 And so it's an opportunity because you only get so many shots. 00:25:13.839 --> 00:25:14.799 I couldn't agree more. 00:25:14.880 --> 00:25:20.720 I think trying to run one of these businesses without a social media presence is just unrealistic. 00:25:20.799 --> 00:25:28.720 And I agree with you when a company is responsive to customer complaints and is demonstrably so, you know, it can work in their favor. 00:25:28.960 --> 00:25:29.680 Absolutely. 00:25:29.920 --> 00:25:30.400 Great. 00:25:30.559 --> 00:25:43.599 Well, I want to thank Devin and Mitch for joining us today and talking about a little bit behind the scenes in regards to fintechs, how to grow and scale the issues and the roadblocks and how to overcome them. 00:25:43.759 --> 00:25:57.359 So with that, I want to thank our special guest, Devin Sullivan from Altruist and Mitch Avnet, the founder and managing partner at CRC Oyster, for joining and look forward to everyone tuning in to the next episode of the Built to Scale podcast with CRC Oyster. 00:25:57.680 --> 00:25:58.799 Thanks so much for having me. 00:25:58.960 --> 00:25:59.839 Thank you. 00:26:06.240 --> 00:26:08.799 Thank you for listening to today's podcast. 00:26:09.039 --> 00:26:17.279 For more information, you can find us at compliance-risk dot com or oyster LLC dot com. 00:26:18.640 --> 00:26:22.319 Don't forget to subscribe so you never miss an episode. 00:26:22.559 --> 00:26:25.440 Take care, and we will see you soon.