X Money Publishes Three FDIC Numbers. The $500,000 Everyone Quoted Is the Opt-Out Case.

Abstract

X Money added joint accounts on 10 September, and the sentence that travelled was a deposit-insurance figure: up to $250,000 per co-owner, per insured bank, so up to $500,000 for a two-owner joint account at Cross River Bank. Read on its own it looks like a product benefit. It is not. In X Money's own help centre that sentence is the answer to a specific question — "How is a joint account FDIC insured if we opt out of the Sweep Program?" — and the condition is the half that got dropped in transit.

The default is the other way round. X Money's own footnotes say deposits are automatically enrolled in a cash sweep administered by IntraFi Cash Service (ICS), which places money across a network of banks for aggregate coverage up to $10 million per ownership category. The $500,000 is therefore not a ceiling being advertised as generous. It is the degraded case — what a two-owner account falls back to if it leaves the network. X Money's disclosure is more careful than most of the writing about it, and it volunteers the sentence the summaries omit: amounts above that at one bank in the same ownership category are not FDIC-insured.

So there are three numbers, and each carries a different condition. $250,000 is the statutory limit and applies always. $500,000 is two owners in one ownership category at one bank, on the opt-out path. $10 million is an aggregate across many banks, and X Money states plainly that the program is not guaranteed to keep every slice under the limit. A reader who takes any one of the three without its condition has the wrong number.

That leads to the second question, which is what sits under the app. Cross River Bank is a two-office New Jersey institution with $8.53 billion of assets and $6.68 billion of deposits at 30 June 2026, and it is routinely described as the bank beneath Affirm, Upstart, Coinbase and now X Money. Against the companies' own SEC filings that map does not hold. Affirm names Cross River — as the bank for its savings product, while Celtic Bank and Lead Bank originate "substantially all" of its loans. Upstart's latest annual report names no bank at all. Coinbase has never named Cross River in any SEC filing.

None of this says Cross River is in trouble; it holds equity worth 12.1% of assets. It says something duller and more useful. Almost every claim in this story — the insurance figure, the dependency map, the concentration — is one step removed from a document, and every time you open the document it says something narrower than the version in circulation.

Table of contents

1. The sentence, and the question it was answering
2. What the FDIC actually insures
3. The sweep, and the conditions on $10 million
4. The risk a joint account actually carries
5. The bank underneath
6. The map, against the filings
7. The consent order, precisely
8. What follows

1. The sentence, and the question it was answering

The obvious question about a new joint account is how much insurance it comes with, and it is a trap, because the number has no meaning without the sentence around it.

Here is the passage, from X Money's own help centre, quoted whole:

How is a joint account FDIC insured if we opt out of the Sweep Program?

Up to $250,000 per co-owner, per insured bank — so up to $500,000 for a two-owner joint account at Cross River Bank. Amounts above that at one bank in the same ownership category are not FDIC-insured.

Everything after the dash is what circulated. The question mark is what did not. This is a FAQ entry describing what happens when a customer leaves the sweep network, and X Money answers it accurately, including the warning about amounts above the limit.

The default path is set out in the product footnotes on the same site: "Deposits are automatically enrolled in a cash sweep program, which provides up to $10M of aggregate FDIC pass-through deposit insurance coverage, across participating FDIC-insured network banks, subject to limits." A separate footnote states that funds are held "at Cross River Bank, Member FDIC and other FDIC-insured institutions". X Money does not claim to be one bank. It says the opposite, in the fine print, twice.

The useful question, then, is not how much coverage the joint account has. It is: which of the three published numbers applies to me, and what am I doing that makes it that one? That question has an answer a reader can act on. The headline figure does not.

2. What the FDIC actually insures

The rule underneath all three numbers is one sentence, and it has three qualifiers that do all the work: the standard maximum deposit insurance amount is $250,000 per depositor, per insured bank, for each account ownership category.

Take them in order.

Per depositor. The coverage attaches to a person, not to a product, a login or an app.

Per insured bank. It attaches at the charter. Two accounts at the same bank do not get two allowances. This is the qualifier the abstract of this story usually reaches for, and it is real — but it is not the one that decides the X Money case, because X Money sweeps across several banks by default.

Per ownership category. This is the one that generates the $500,000. Single accounts and joint accounts are different categories, and each category gets its own $250,000 per person. A joint account with two owners is therefore insured to $500,000 at one bank — $250,000 for each co-owner's share — and that sits on top of whatever each owner separately holds in single-owner accounts at the same bank.

The FDIC's own consumer guidance works the example: two co-owners holding a $350,000 certificate and a $150,000 savings account at the same bank are covered for the full $500,000, because the balances aggregate within the category and then the per-owner limit applies.

Which is why the marketing framing is misleading in a subtle way rather than a false one. $500,000 for a two-owner joint account is simply what federal law provides at any insured bank in the country. It is not a feature of X Money, of Cross River, or of joint accounts as a product. It is the arithmetic of 2 × $250,000.

3. The sweep, and the conditions on $10 million

The number X Money actually leads with is larger. Its home page advertises "Up to $10M in FDIC insurance" and calls it "40x the standard coverage" — a multiple that checks out, since $10,000,000 divided by $250,000 is exactly 40.

The mechanism is named, which is more than most such programs disclose. From the help centre: the sweep is "a service administered by IntraFi Cash Service® (ICS) that automatically transfers funds into demand deposit accounts at one or more participating banking institutions... up to an aggregate maximum of $10 million per ownership category."

That is a real and well-established arrangement, and the logic is simple: if $250,000 is the limit per bank, then spreading a balance across forty banks multiplies the coverage. But four conditions sit on it, and X Money states all four itself.

It is not guaranteed. Asked directly whether the program keeps balances at or under $250,000 at each bank, the answer is: "No. Although the program is designed to place no more than $250,000 at any single Destination Institution, there is no guarantee it will always achieve this." Anything over the limit at one institution, after aggregation, "will be ineligible for FDIC deposit insurance."

It aggregates with what you already hold. "Your funds in the Sweep Program Accounts are aggregated with any other deposits you hold at the same institution in the same legal ownership category." If the network sweeps money into a bank where the customer already banks, the two balances combine before the limit applies — and the customer has no way to see the network's placement in advance.

It is pass-through, not direct. X Payments LLC is not a bank. The insurance reaches the customer only if the recordkeeping conditions for pass-through coverage are satisfied, which X Money flags each time it mentions the figure: "Certain conditions must be satisfied for pass-through deposit insurance coverage to apply."

It only ever covers bank failure. "Deposit insurance only covers the failure of an insured bank." It is not protection against the app, the fintech, or a dispute.

None of these is unusual, and none is hidden. They are the conditions that turn "up to $10M" into a number with a shape. The reason to set them out is that the $500,000 figure travelled precisely because its condition was removed — and the $10 million figure has four more.

4. The risk a joint account actually carries

Here is where the coverage of this launch missed the more consequential material. A reader worried about a joint account should be worried about something other than insurance, and X Money's own FAQ says so in detail.

Each of those lines is X Money's own language. "Each joint owner has complete control over all of the funds, not just the amount they deposited." Either owner "may close the joint account without the other owner's consent." A violation of the terms by one owner "is grounds to take action against all owners." On written notice from any person named on the account, the account may be frozen until all owners agree in writing on what happens to the money.

And the one that carries real financial weight: if a court, government agency or similar legal process names either joint owner, Cross River Bank "may pay all or part of the funds in the joint account, including the entire balance."

That is the ordinary law of joint deposit accounts, and it is not a criticism of the product — the same is true at any bank. But it is the risk that actually attaches to putting money in a joint account with someone, and it is strictly larger than the insurance question that got all the attention. A two-owner account is insured to $500,000 against the bank failing, and exposed to 100% of the balance against the other owner's creditors.

One further constraint, since it bounds the whole discussion: joint accounts are in beta and take exactly two owners. The invited person must already follow you, hold X Premium, and already be an X Money user. This is not yet a mass-market product.

5. The bank underneath

Cross River Bank is a real, ordinary, well-capitalised small bank, and the numbers are worth putting on the page because most writing about it substitutes adjectives.

Two offices in New Jersey, chartered in 2008. $8.53 billion of assets, $6.68 billion of deposits, $5.87 billion of net loans. Deposits fund 78% of the balance sheet; loans absorb 88% of deposits. Equity is $1.03 billion, or 12.1% of assets — a capital position that gives no support at all to a distress reading, and this piece is not making one.

What cannot be seen is the composition. How that $6.68 billion splits between X Money balances, Affirm's savings product, and the other fintech programs is disclosed nowhere — not in the call report, which reports deposits by type and size rather than by partner, and not in any partner's filing. We are not going to estimate it. The honest statement is that the concentration everyone gestures at is not a measurable quantity from outside the bank, and any number you see for it was invented.

That absence is the point rather than a gap in it. A structure that matters is not visible in any single document, which is exactly the condition under which ecosystem maps get drawn from secondary sources and then repeated.

6. The map, against the filings

The standard version of this story is that one bank in Fort Lee sits underneath Affirm, Upstart, Coinbase and X Money. We went to each company's own SEC filings to check it. It does not survive.

Affirm names Cross River, and the relationship is the opposite shape from the usual telling. Its annual report for the year ended 30 June 2026 says that "substantially all of the loans facilitated through our platform in the U.S. are originated through Celtic Bank... and Lead Bank" — the two it calls its Primary Originating Banks. Cross River appears fourteen times, but as the deposit institution: "Through the Affirm App and in partnership with Cross River Bank, we offer an FDIC-insured, high-yield savings account," and "the savings account is opened and maintained by Cross River Bank. We act as the service provider." Affirm's card issuers are named separately again as Evolve Bank & Trust and Stride Bank.

So Affirm's Cross River exposure is a deposit relationship, not a lending one — and Affirm carries the matching risk factor in its own words: if it fails to comply with the requirements for the savings product, "our consumers' deposits may not qualify for FDIC insurance and they may withdraw their funds."

Upstart's latest annual report names no bank at all. The word "Cross River" appears zero times in the 10-K it filed in February 2026. The phrase "lending partner" appears 183 times, always generically. Its last mention of Cross River in any filing, a quarterly report from November 2025, is not about its own arrangements — it appears in a risk factor describing a class action against Marlette Funding, a different company, over a Cross River partnership, cited as an example of true-lender litigation.

Upstart is also the one company here building its way out of sponsor-bank dependence altogether, and it says so plainly: "We have received conditional approval from the OCC to establish an insured national bank, Upstart Bank, N.A., and our application to the FDIC for deposit insurance remains pending. We have also applied to the Federal Reserve for approval for Upstart Holdings, Inc. to become a bank holding company." Three approvals, one granted conditionally, two outstanding.

Coinbase has never named Cross River in an SEC filing. Not in the most recent quarterly report, not in any filing, on a full-text search of everything it has filed. Its June 2026 balance sheet carries $4.30 billion of customer custodial funds, down from $5.35 billion, and it flags those funds under concentration of credit risk — but it names no bank, and the word "FDIC" does not appear in the document at all. That $4.30 billion is Coinbase's own liability to its customers, not a balance disclosed as sitting at Cross River, and it should never be presented as one.

The caveat that keeps this honest: a company names in its filings what is material enough to name. Silence is not proof that a relationship does not exist, and Cross River has been reported to hold well over a hundred fintech clients. What the filings establish is narrower and still worth having — that for three of the four names in the standard map, there is no public document from the company itself putting it at this bank, and for the fourth the relationship runs the other way from how it is usually described.

7. The consent order, precisely

Cross River entered a consent order with the FDIC in March 2023, made public on 28 April 2023. It concerned unsafe or unsound practices relating to fair lending compliance — Regulation B and the Equal Credit Opportunity Act — and the bank's oversight of its fintech lending partners.

Three things about it are usually got wrong.

It cites no specific discriminatory practice and requires no restitution to customers. It is a program-and-oversight order, not a findings-of-harm order. It was entered without admission.

Its most consequential term is procedural: the bank must obtain the FDIC's prior approval before entering new fintech partnerships, alongside corrective work on fair lending and third-party risk management. That is the clause worth knowing, because it means each new program of the kind X Money represents runs through a regulator's non-objection.

And it is one order, not two. The "twice cited" formulation circulating since a July 2026 write-up is not supported by a second document we could find. On its current status: we found no public termination order, which is not the same as confirming it remains in force. A consent order stays effective until the FDIC terminates, modifies or suspends it, and terminations are published — but the absence of one in a search is weaker evidence than a document, and we are stating it as the weaker thing.

8. What follows

In descending order of confidence.

The insurance figure in this story is conditional, and the condition is the product. This is the durable lesson and it generalises past X Money. When a fintech publishes a deposit-insurance number, the question is never how big it is; it is which of several numbers it is, which path produces it, and whether the customer is on that path by default or by choice. Three numbers, three conditions, and the one that travelled was the fallback.

The pass-through qualifier deserves more attention than the per-bank one. X Payments LLC is not a bank. Every figure it publishes depends on pass-through coverage conditions being satisfied and on the sweep placing balances as designed, which it says it cannot guarantee. That is a recordkeeping-and-operations dependency, and it is a different animal from the per-bank aggregation rule the commentary fixed on.

The joint-account risk that matters is not insurance. Either owner can empty or close the account, and either owner's creditors can reach the entire balance. Both are ordinary law and both are larger than the insurance question.

The dependency map is weaker than it reads, but not empty. Only Affirm documents a Cross River relationship in its own filings, and it is a deposit relationship sitting beside originations that run substantially through Celtic Bank and Lead Bank. Upstart names no bank and is chartering its own. Coinbase names none. Anyone holding a thesis about concentration at this charter is holding it on secondary sources, and should say so.

What would change all of this. A partner-level split of Cross River's deposits would turn the concentration question from rhetoric into arithmetic; no filing produces one today. An FDIC termination order would change how section 7 reads. And Upstart's three pending approvals, if granted, would remove one name from the map by making it a bank — the only structural fix available to any of them.

Primary sources worth reading

• X Money's FDIC and Sweep Program FAQ — the joint-account entry, the sweep conditions, and the "no guarantee" answer, in the product's own words.
• X Money's product page and footnotes — the automatic-enrolment language, the IntraFi ICS naming, and the "and other FDIC-insured institutions" clause.
• FDIC, Your Insured Deposits — the ownership-category rules and the worked joint-account example.
• FDIC BankFind, certificate 58410 — Cross River's call report figures.
• Affirm's annual report for the year ended 30 June 2026 — the Primary Originating Banks language and the savings-account risk factor.
• Upstart's quarterly report for the quarter ended 30 June 2026 — the OCC conditional approval and the two pending applications.

For the mirror image of this structure, we covered a charter designed the other way round — a bank application that expressly cannot take deposits — the day before this launch. And on reading bank capital figures without the bar beside them, our own four ratios ran backwards.

All X Money product language — the joint-account entry and its opt-out question, the sweep conditions, the IntraFi ICS naming, the automatic-enrolment and pass-through footnotes, the joint-owner powers and the beta and eligibility limits — is quoted from X Money's own help centre and product pages as they stood on 10 September 2026. Deposit-insurance rules and the worked example are the FDIC's own consumer guidance. Cross River Bank's assets, deposits, loans, equity, office count and charter date are its call report at 30 June 2026 as published by the FDIC. Affirm's originating, card-issuing and deposit bank relationships and its savings-account risk factor are from its annual report filed in August 2026; Upstart's charter status and the absence of any named bank are from its own filings; Coinbase's custodial-funds figure is from its June 2026 quarterly report, and the absence of any Cross River reference is a full-text search of its filings. The consent order description is the FDIC's April 2023 publication and contemporaneous legal analyses. Capital and funding ratios, and the multiples checking X Money's own comparisons, are ours. The split of Cross River's deposits between partners is disclosed nowhere and is not estimated here.