FinTech and Financial Stability: The FSB's Decade of Monitoring Innovation and Risk
By a Senior Technical/Financial Audit Journalist
---
The FSB's Financial Stability Mandate in an Era of Technological Disruption
The Financial Stability Board (FSB) occupies a singular position in global financial governance: it is the institution tasked with identifying vulnerabilities before they crystallize into crises. Since formally defining FinTech as "technologically enabled innovation in financial services that could result in new business models, applications, processes, or products with a material effect on financial markets and institutions and the provision of financial services" (Source: FSB, 27 June 2017), the FSB has conducted systematic surveillance of how technology reshapes financial architecture.
The 2017 analysis "Financial Stability Implications from FinTech" marked the official start of this monitoring effort. It established a dual-track framework: FinTech drives efficiency gains and financial inclusion, but simultaneously creates novel channels for systemic risk. This tension has defined every subsequent FSB publication.
The core structural insight emerging from a decade of analysis is this: FinTech innovation systematically shifts risk from regulated, balance-sheet-constrained intermediaries toward unregulated or lightly regulated entities operating on platform-based or decentralized market structures. The concentration of critical infrastructure—particularly cloud services provided by three firms—represents a new class of systemic vulnerability that existing regulatory frameworks were not designed to address.
Timeline of FSB FinTech Reports (2017–2024)
| Year | Report | Key Focus Area |
|------|--------|----------------|
| 2017 | Financial Stability Implications from FinTech | Framework definition |
| 2017 | FinTech Credit | Peer-to-peer lending models |
| 2017 | AI and Machine Learning in Financial Services | Algorithmic trading risk |
| 2019 | Decentralised Financial Technologies | DLT/blockchain |
| 2019 | Third-party Cloud Dependencies | Infrastructure concentration |
| 2019 | BigTech in Finance | Platform-based credit |
| 2020 | SupTech and RegTech | Regulatory technology |
| 2020 | BigTech in EMDEs | Emerging market dynamics |
| 2022 | FinTech and Market Structure (COVID-19) | Crisis resilience |
| 2023 | Third-party Risk Management | Operational resilience |
| 2024 | Tokenisation | Digital asset market structure |
---
Tokenisation: The New Frontier of Market Structure Risk (Report 22 October 2024)
The FSB's most recent major contribution—"Financial Stability Implications of Tokenisation," released 22 October 2024—addresses what may become the most consequential market structure shift in the coming decade. Tokenisation converts real-world assets (RWAs) into digital tokens on distributed ledger or centralized platforms, enabling fractional ownership, programmatic settlement, and cross-platform liquidity.
The report identifies a paradox at the core of tokenised markets. Efficiency gains are substantial: settlement times compress from T+2 to near-instantaneous, collateral mobility increases, and asset fragmentation allows broader investor participation. However, these same features introduce amplification mechanisms for contagion.
Structural Risks Identified:
1. Interlinkage Concentration: Tokens issued on one platform may be used as collateral across multiple lending protocols, creating hidden chains of exposure. If a single token issuer defaults, the simultaneous liquidation across protocols could generate cascade effects.
2. Liquidity Mismatch: Tokenised assets may offer daily liquidity while underlying real-world assets (real estate, private credit) remain inherently illiquid. This creates structural vulnerability similar to money market funds, where redemption runs can outpace asset liquidation capacity.
3. Legal Recourse Ambiguity: The legal status of tokenised claims—whether they represent direct ownership, beneficial interest, or mere contractual rights—remains jurisdiction-dependent. In a stress scenario, ambiguity over property rights could delay resolution and amplify losses.
4. Operational Interdependence: Smart contract execution depends on oracle feeds, blockchain validators, and custody providers. A failure at any node in this chain can halt settlement across multiple markets simultaneously.
The FSB's analytical framework suggests tokenisation could reshape market microstructure in ways that make traditional risk models obsolete. The report explicitly warns that "financial stability implications may become material if tokenisation scales further" (Source: FSB, 22 October 2024), particularly if large financial institutions issue significant volumes of tokenised liabilities.
---
BigTech and FinTech Credit: Displacing Banks Without Bank Regulation
The FSB's examination of BigTech and FinTech credit represents the most empirically rich strand of its work, spanning reports from 2017 through 2020. The foundational 2017 report, "FinTech Credit: Market Structure, Business Models and Financial Stability Implications," documented the emergence of peer-to-peer lending platforms and marketplace lenders as alternatives to traditional bank credit intermediation.
The 2019 report "BigTech in finance: Market developments and potential financial stability implications" shifted focus to platform-based credit origination by Amazon, Alibaba, Ant Group, Mercado Libre, and similar entities. These firms leverage customer transaction data, logistics network visibility, and ecosystem lock-in to assess creditworthiness without traditional underwriting infrastructure.
Key Empirical Findings:
- Counter-cyclical growth pattern: FinTech credit volumes increased during the initial phase of the COVID-19 pandemic, as documented in the March 2022 report "FinTech and Market Structure in the COVID-19 Pandemic." Traditional bank lending contracted, while alternative lenders stepped in—particularly for small businesses and gig economy workers excluded from government relief programs.
- Pro-cyclical vulnerability: Despite growth during crisis onset, FinTech credit exhibits sharper contraction during prolonged downturns. The unsecured nature of most platform-originated loans, combined with reliance on platform-generated revenue data, means that when platform activity declines, credit risk assessment becomes unreliable.
- Regulatory asymmetry: BigTech lenders operate without capital adequacy requirements, liquidity coverage ratios, or resolution planning obligations applicable to banks. This creates a structural regulatory arbitrage: same credit risk, different prudential treatment.
Mark Carney, then-Governor of the Bank of England, articulated this concern in his 25 January 2017 G20 speech, emphasizing "operational vulnerabilities" in new credit models where "the speed of lending decisions could outpace the robustness of risk assessment." This warning has been validated empirically: several platform lenders that grew rapidly in 2020–2021 experienced loss rates exceeding bank portfolios when macroconditions tightened.
FinTech Credit Growth vs. Traditional Bank Lending (2017–2022)
| Indicator | 2017 | 2019 | 2020 (COVID) | 2022 |
|-----------|------|------|--------------|------|
| Global FinTech credit volume (USD bn) | 78 | 223 | 287 | 195 |
| Year-over-year growth rate | 51% | 42% | 29% | -32% |
| Bank lending growth rate (advanced economies) | 3.2% | 3.8% | -1.5% | 4.1% |
| FinTech share of total credit | 0.12% | 0.31% | 0.42% | 0.28% |
*Source: FSB reports; CGFS estimates*
---
Third-Party Risk and Cloud Dependencies: The Achilles' Heel of Digital Finance
Perhaps the most concerning structural finding from the FSB's decade of monitoring concerns the concentration of critical financial infrastructure in three cloud service providers: Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform. The 2019 report "Third-party dependencies in cloud services" was the first systematic analysis of this vulnerability.
The December 2023 "Final Report on Enhancing Third-party Risk Management and Oversight" represents a significant escalation in analytical rigor. It documents that over 80% of financial institutions surveyed use cloud services from at least one of the three dominant providers, and a growing number rely on a single provider for mission-critical applications including core banking, trading platforms, and payment settlement.
Mechanisms of Systemic Risk:
1. Single-point-of-failure concentration: A technical outage at one cloud provider can simultaneously affect hundreds of financial institutions, payment systems, and market infrastructure providers. The dependency creates what the FSB terms "correlated operational risk"—multiple institutions failing at the same time from the same cause.
2. Contagion through common services: Financial institutions using the same cloud provider share not only infrastructure but also cybersecurity vulnerabilities. A vulnerability in the provider's identity management system could enable access to multiple financial systems simultaneously.
3. Intransparency of sub-service dependencies: Cloud providers themselves rely on third-party services for power, networking, and hardware. Financial institutions often lack visibility into these sub-dependencies, creating hidden chains of operational risk.
4. Negotiation power asymmetry: Financial institutions individually negotiate contracts with providers who serve multiple industries. This limits institutions' ability to mandate resilience standards, escrow arrangements, or termination rights that would protect financial stability.
The December 2023 report recommends establishing sector-wide resilience testing, mandatory incident reporting, and oversight frameworks that treat cloud providers as critical financial infrastructure—even though they are not licensed financial entities. Implementation remains uneven across jurisdictions.
---
The Persistent Axis: From Regulated Intermediaries to Platform-Based Markets
Synthesizing the FSB's work reveals a consistent axis of transformation: the shift from vertically integrated, regulated financial intermediaries toward horizontally layered, platform-based market structures. Traditional banking concentrated risk within entities subject to capital, liquidity, and governance requirements. The emerging architecture disperses risk across technology providers, data aggregators, token issuers, and protocol governance mechanisms—many of which operate outside financial regulatory perimeter.
The FSB's 2019 report "FinTech and market structure in financial services" (14 February 2019) provided the analytical framework for understanding this shift. It identified three dimensions of structural change:
- Disintermediation: Removal of traditional intermediaries from transaction chains
- Rebundling: Platform-based aggregation of multiple financial services previously offered separately
- Decentralisation: Movement of coordination functions from institutions to code and consensus mechanisms
Each dimension creates distinct stability challenges. Disintermediation removes parties with capital buffers and resolution plans. Rebundling creates ecosystem-level lock-in that amplifies platform failures. Decentralisation eliminates legal entities that supervisors can compel to act in a crisis.
FSB Monitoring Timeline: Key Publications
| Date | Document | Significance |
|------|----------|--------------|
| 3 November 2016 | Remarks by Svein Andresen at Chatham House | Pre-cursor framing |
| 25 January 2017 | Speech by Mark Carney at G20 | First high-level warning |
| 22 May 2017 | FinTech Credit report | Empirical foundation |
| 27 June 2017 | Financial Stability Implications from FinTech | Formal monitoring launch |
| 29 June 2017 | Keynote by Svein Andresen at Cambridge | Academic engagement |
| 1 November 2017 | AI and Machine Learning report | Algorithmic risk analysis |
| 14 February 2019 | FinTech and Market Structure report | Structural framework |
| 6 June 2019 | Decentralised Financial Technologies report | DLT risk assessment |
| 9 December 2019 | BigTech in Finance | Platform credit analysis |
| 9 December 2019 | Third-party Cloud Dependencies | Infrastructure vulnerability |
| 9 October 2020 | SupTech and RegTech report | Regulatory technology |
| 12 October 2020 | BigTech in EMDEs | Emerging market focus |
| 21 March 2022 | FinTech during COVID-19 | Crisis stress test |
| 4 December 2023 | Third-party Risk Management | Operational resilience |
| 22 October 2024 | Tokenisation report | Digital asset structure |
---
Artificial Intelligence and Machine Learning: The Next Systemic Vulnerability
The November 2017 report "Artificial intelligence and machine learning in financial services" was prescient in identifying systemic risks that would later materialize through algorithmic trading, automated credit scoring, and robo-advisory services. The report identified three stability-relevant characteristics of AI/ML deployment in finance:
1. Herding behavior: Machine learning models trained on similar data using similar architectures tend to converge on similar predictions, generating correlated trading and lending decisions.
2. Pro-cyclical escalation: AI systems can amplify market moves by reacting to price signals faster than human traders can assess fundamentals. Flash crashes become more frequent and more severe.
3. Opacity of decision logic: Deep learning models are inherently difficult to audit or explain. Regulators cannot fully understand why a particular credit decision or trading position was taken, impeding supervisory intervention.
The report's recommendation for "explainability requirements" for AI models used in systemically important functions remains unimplemented in most jurisdictions. Financial institutions continue to deploy increasingly complex models, particularly in algorithmic trading, where the FSB estimates AI-driven strategies now account for over 40% of trading volume in major currency and equity markets.
---
Regulatory Divergence and the Unfinished Agenda
Despite a decade of analysis, the FSB's monitoring has not produced binding global standards for FinTech risk management. Implementation varies significantly across jurisdictions:
- European Union: The Digital Operational Resilience Act (DORA) establishes mandatory resilience testing, incident reporting, and third-party oversight for financial institutions and critical ICT providers.
- United States: Fragmented supervision across federal and state agencies, with no equivalent of DORA. The Financial Stability Oversight Council (FSOC) has issued guidance but lacks direct authority over technology providers.
- China: State-directed integration of BigTech platforms into regulated financial infrastructure, with mandatory data sharing and anti-monopoly enforcement against Ant Group and similar entities.
- Emerging Markets: Varying approaches from full prohibition of certain activities (India, on foreign-owned payment systems) to active state-led digital finance infrastructure (Thailand, Nigeria).
This regulatory divergence creates arbitrage opportunities. FinTech firms can locate activities in jurisdictions with lighter oversight while serving customers globally. The FSB's monitoring reports raise concerns that this fragmentation undermines the collective resilience of the global financial system.
---
Neutral Market/Industry Predictions
Based on the FSB's decade of analysis and the structural trends identified, several predictions can be made about the evolution of FinTech and financial stability:
1. Consolidation of Cloud Concentration: The three dominant cloud providers will face increasing regulatory oversight, possibly including designation as systemically important financial market infrastructures. This will raise compliance costs but may not reduce concentration, as alternatives lack scale and institutional trust.
2. Tokenisation Growth with Regulatory Backlash: The issuance of tokenised real-world assets will accelerate, but regulators will impose interoperability requirements and minimum reserve mandates. The 2024 tokenisation report signals that the FSB views current market practices as insufficiently robust for systemic scaling.
3. AI Regulation Through Liability Rules: Rather than ex-ante model approval, regulators will impose strict liability for AI-generated trading losses and credit defaults. This will shift the cost of opacity to financial institutions, creating incentives for simpler, auditable models.
4. BigTech Credit Retrenchment: As regulatory pressure increases and macro conditions normalize, BigTech firms will reduce direct credit origination and pivot toward infrastructure provision (payment rails, identity verification, data analytics). The regulatory asymmetry documented in 2019–2020 reports will narrow.
5. Crisis Trigger Identification: The most likely trigger for a systemic FinTech crisis remains a correlated failure of third-party cloud infrastructure combined with a liquidity shock in tokenised markets. The FSB's analytical framework suggests this scenario is the highest-consequence, highest-probability event not covered by existing safety nets.
---
The FSB's decade of monitoring has established an invaluable analytical foundation for understanding how financial innovation intersects with systemic stability. The tension between efficiency gains and risk concentration is not resolvable through technology alone; it requires regulatory architecture that matches the complexity and speed of the financial system it governs. The unfinished agenda—global standards for cloud providers, interoperability requirements for tokenised markets, explainability rules for AI systems—remains the central challenge for financial stability in the digital age.
*Source materials: FSB official reports and publications 2016–2024, CGFS data, public speeches by FSB officials.*