Pinwheel bets open-banking rule cements payroll APIs; CFPB then pulls rule (2025)

Pinwheel is a US payroll-connectivity company: its APIs let neobanks and lenders switch a customer's direct deposit, verify income and employment, and underwrite paycheck-linked loans, with data spanning roughly 80% of US employees. The company was founded by Kurt Lin, Anish Basu and Curtis Lee after their earlier pre-tax-benefits startup hit a wall — payroll systems were nearly impossible to connect to — and they came out of stealth in June 2020 with a $7M seed led by First Round Capital and Upfront Ventures.

The thesis was that consumer-permissioned income data would become the standard layer of US consumer finance. Traction followed: a $20M Series A led by Coatue in June 2021, then a $50M Series B at a $500M valuation led by GGV in January 2022, with 4.6M processes a month (400x year over year) and ARR up 177x in 2021. Customers included Block, Varo and Lendly, and after the stealth exit more than 130 banks and fintechs — including Wells Fargo and Citi — reached out.

The regulatory chapter opened on October 22, 2024, when the CFPB finalized its Personal Financial Data Rights rule under Section 1033 of Dodd-Frank: banks, card issuers and other providers would have to unlock consumer data via API, with compliance phased from April 2026 to 2030. Banking trade groups sued the same day in Kentucky federal court, and on May 30, 2025 the CFPB under new leadership filed for summary judgment against its own rule, arguing it unlawfully regulated open banking, while the Financial Technology Association intervened to defend it.

Pinwheel's response to the reversal was a validation of its founding choice: it had built its access through direct, contractual partnerships with payroll providers (its PreMatch network), explicitly not by waiting for a government mandate. As of June 2025 the company was still operating on that model while the fate of the rule — and of any rewritten version — remained with the courts.