FDIC Digital Sign Compliance Checklist 2026

The FDIC digital sign rule is now an implementation project, not a future regulatory idea. Banks and fintech programs need to know where the FDIC official digital sign belongs, where it does not belong, how non-deposit disclosures work, and how partner marketing should avoid implying that a non-bank is FDIC insured.

The short version: the FDIC's 2026 amendments streamlined the digital sign and ATM requirements and set an April 1, 2027 compliance date for the amended provisions. That gives institutions time, but not much room for guesswork. The work requires product, design, legal, compliance, marketing, vendor, and partner-bank coordination.

What Changed in 2026?

The FDIC issued a 2026 final rule amending requirements for official signs, advertising statements, false advertising, misrepresentation of insured status, and misuse of the FDIC name or logo. The FDIC said the final rule:

requires the digital sign on an insured depository institution's homepage, login page, and first page of the deposit account opening process;
narrows digital non-deposit signage to pages primarily dedicated to advertising or providing information about, or access to, non-deposit products;
allows a one-time third-party non-deposit notification to disappear automatically after three seconds; and
streamlines ATM and like-device requirements so digital sign and non-deposit signage are focused on initial screens and initial non-deposit transaction screens.

The FDIC's Part 328 Q&A, updated May 13, 2026, states that the compliance date for these amended provisions is April 1, 2027.

Who Needs This Checklist?

This checklist is for:

FDIC-insured banks updating websites, mobile apps, online account opening flows, ATMs, and digital deposit experiences.
Fintechs that market deposit products through sponsor banks.
Banking-as-a-service programs with co-branded account, card, wallet, or cash-management surfaces.
Compliance teams reviewing "Member FDIC," FDIC logo, pass-through insurance, sweep, and non-deposit product language.
Marketing teams creating ads, landing pages, onboarding emails, social posts, app store copy, and affiliate or influencer scripts.

If a consumer could reasonably misunderstand who is insured or what product is protected, treat the asset as a compliance review item.

FDIC Digital Sign Checklist

Use this checklist for bank-owned digital deposit-taking channels:

Inventory all digital deposit surfaces: Website, mobile app, web app, account opening, login, landing pages, embedded application flows, and bank-branded partner surfaces.
Identify the homepage or initial page: Confirm where the official digital sign must appear.
Identify the login page: Place the sign clearly, continuously, and conspicuously.
Identify the first deposit account opening page: Add the official digital sign before the consumer begins opening a deposit account.
Do not over-apply the sign: The FDIC Q&A says the official digital sign is not required on dashboards or portals after login solely because customers can view account information.
Check mobile display: The sign should remain readable on smaller screens. The Q&A allows scaling, wrapping, or stacking if needed.
Review placement: Near the top of the page and adjacent to the bank name is a strong default, but footer placement may work if it is still clear, continuous, and conspicuous.
Keep accessibility in scope: The FDIC notes that Part 328 does not supersede ADA digital accessibility obligations.
Archive evidence: Save screenshots, page URLs, implementation dates, reviewer notes, and version history.

Non-Deposit Product Checklist

The digital sign is only one part of the rule. Non-deposit products need separate clarity.

For pages primarily dedicated to non-deposit products, confirm the page clearly states that the product:

is not insured by the FDIC;
is not a deposit;
may lose value, where applicable; and
is visually distinct from insured deposit products.

For bank platforms that send logged-in customers to a third-party platform offering non-deposit products, confirm there is a one-time per-session notification before the customer leaves. The FDIC Q&A says that notification can use a pop-up, speedbump, or overlay and must clearly indicate the third party's non-deposit products are not FDIC insured, are not deposits, and may lose value.

ATM and Like-Device Checklist

For ATMs and similar devices, review:

Does the device receive deposits for the insured depository institution?
Was the device placed into service before April 1, 2027?
Does the device allow customers to transact with non-deposit products?
Is the FDIC official digital sign displayed on the initial screen when required?
If physical signage is used instead, is that option available for this device?
Is the non-deposit sign shown on the first screen where the bank's customer initiates a transaction with a non-deposit product?
Are screen savers and idle advertisements excluded from the "initial screen" analysis?

The FDIC Q&A says the sign requirements in Section 328.4 apply to ATMs and remote electronic facilities that receive deposits. Devices that only allow transfers between deposit accounts but do not accept cash or check deposits are not subject to those sign requirements.

Fintech and Partner-Bank Marketing Checklist

Fintechs are often where the practical risk shows up. A fintech may be offering a deposit product through a partner bank, but the fintech itself is usually not FDIC insured. That distinction needs to be obvious.

For fintech-bank partner marketing, confirm:

The copy says the fintech is not a bank when FDIC insurance or banking services are discussed.
The copy names the FDIC-insured partner bank.
The copy explains that FDIC insurance protects against failure of the insured bank, not failure of the fintech.
Pass-through insurance language is accurate and qualified.
Deposit products are not blended with investments, crypto, rewards, credit, or other non-deposit products in a way that implies broader coverage.
Affiliate, influencer, and paid social scripts use approved disclosure language.
The bank approves use of its name and insured status before launch.
Both the bank and fintech retain final assets, reviewer notes, approval timestamps, and monitoring evidence.

For a deeper review structure, use a documented partner marketing compliance workflow before creative is finalized.

Implementation Plan Before April 1, 2027

Do not wait until the quarter before the deadline. Use the runway to build an auditable implementation record.

1. Map Surfaces

Create a spreadsheet or system inventory of every public and logged-out deposit surface, every account opening flow, every ATM type, and every partner-bank or fintech surface that mentions FDIC insurance.

2. Classify Each Surface

Classify each surface as:

digital deposit-taking channel;
deposit advertising page;
non-deposit product page;
third-party non-deposit exit path;
ATM or like device;
fintech partner marketing asset; or
not in scope.

3. Add Required Language and Signage

Implement the official digital sign, advertising statement, non-deposit sign, or third-party notification based on the classification. Do not use one generic FDIC footer everywhere and assume it solves the rule.

4. Test Across Devices

Test desktop, mobile web, iOS, Android, tablet, screen readers, zoomed text, and small screens. The sign and disclosures need to be visible, readable, and accessible.

5. Build the Approval Record

Retain screenshots, URLs, app version numbers, ATM screen captures, disclosure text, approval comments, reviewer names, and launch dates. This is the evidence you will need if an examiner asks how implementation happened.

6. Monitor After Launch

Partner sites, app releases, landing pages, and social ads drift. Use monitoring to catch changes after approval, especially where a non-bank brand uses a bank name or FDIC-related language.

Common Failure Patterns

The most common failures are simple:

The fintech says "FDIC insured" without saying the bank is the insured institution.
A page uses "Member FDIC" next to a non-bank brand.
A landing page markets deposits and investments side by side without clear separation.
A mobile screen hides the digital sign below the fold or behind a carousel.
A partner bank approves a homepage but not the paid ads or affiliate copy driving traffic to it.
A product team changes account opening screens after compliance signoff.

Those are workflow failures as much as disclosure failures. The solution is a review process that covers every surface where a consumer sees the claim.

How Luthor Helps

Luthor helps banks, fintechs, and regulated marketing teams review FDIC advertising language before it goes live, route partner-bank approvals, retain review evidence, and monitor live assets for changes after launch. That matters because FDIC compliance is not a one-time copy edit. It is an ongoing control across product, marketing, legal, compliance, and partner channels.

FAQ

What is the FDIC official digital sign?

The FDIC official digital sign is the required digital version of FDIC signage for certain insured depository institution digital deposit-taking channels. It is intended to help consumers identify when they are dealing with an FDIC-insured bank and deposit product.

What is the compliance date for the 2026 FDIC digital sign amendments?

The FDIC's Part 328 Q&A says the compliance date for the 2026 amended digital sign and related website, app, ATM, and like-device provisions is April 1, 2027.

Does every bank webpage need the FDIC digital sign?

No. The FDIC Q&A says the sign must be displayed on the initial page or homepage of the bank website or app, the login page, and the page or screen where a consumer first initiates deposit account opening. The 2026 rule removed the broader requirement to display the sign on pages where customers may transact with deposits.

No. The FDIC Q&A says insured depository institutions are not required to display the FDIC official digital sign on social media advertisements. Social ads still need to comply with official advertising statement requirements and false advertising rules.

Can a fintech display the FDIC official digital sign?

Generally, a non-bank should not display the FDIC official digital sign in a way that implies the non-bank is FDIC insured. A fintech should clearly identify the insured bank and explain the limits of deposit insurance when advertising deposit products offered through a partner bank.