Block's credit operation has crossed a threshold that demands serious attention from every incumbent bank and BaaS provider watching the competitive landscape shift. The San Francisco fintech giant has now extended over $200 billion in credit globally—a figure that rivals the loan books of mid-tier regional banks—yet operates without the regulatory overhead, capital requirements, or legacy infrastructure that constrain traditional lenders. The scale is striking; the operating model behind it is more instructive still.

Juan Hernandez, Block's head of credit and underwriting, has articulated a competitive advantage that traditional financial institutions cannot easily replicate: ownership and continuous access to first-party transaction data. When a customer borrows through Cash App Borrow, Square Loans, or Afterpay, Block already possesses a granular, real-time view of that person's spending patterns, payment velocity, merchant relationships, and cash flow rhythms. This is not credit data inferred from thin files or bureau scores; it is behavioral intelligence harvested directly from the payment rails Block operates. That asymmetry in information quality underpins faster underwriting, tighter risk pricing, and dramatically lower default rates than the industry baseline.

The implication for the broader banking ecosystem is profound. Traditional banks have spent decades building credit models on backward-looking bureau data, income documentation, and credit history—all of which suffer from staleness, opacity, and inherent bias. They score creditworthiness as a binary event: an application arrives, a bureau report is pulled, a decision is rendered. Block, by contrast, is scoring creditworthiness as a continuous process, updating its risk profile of each customer with every transaction that flows through its ecosystem. This is not innovation in credit modeling alone; it is a fundamental reimagining of when and how risk assessment occurs.

For banks and BaaS providers, the lesson cuts in two directions. First, it reveals a genuine structural advantage that pure-play fintechs enjoy when they control both the payment infrastructure and the credit product. A traditional bank partner to a BaaS platform, or a card issuer working through a sponsorship relationship, does not have access to the transaction-level data that Block mines continuously. That information asymmetry is not a regulatory constraint; it is a competitive reality. Hernandez's operation has shown that data depth can substitute for underwriting complexity, allowing Block to extend credit to borrowers that legacy risk models would flag as unprofitable or too risky.

Second, it exposes an urgent strategic question for incumbent institutions: Can they close the data gap? Some banks are moving to build or acquire embedded finance capabilities, betting that controlling the point of sale or payment moment will yield similar first-party data advantages. Others are doubling down on open banking and API strategies to access customer transaction feeds from third parties. Neither approach fully replicates Block's position. Open banking data is still fragmented across multiple sources; embedded products acquired late in a customer journey lack the continuous signal that comes from owning the primary payment platform. Block's advantage is not merely technological—it is architectural and derives from the sequence in which it collected data.

The $200 billion portfolio also raises regulatory questions that have not yet been fully litigated. Block extends credit primarily through licensed lending partners and bank subsidiaries, navigating a patchwork of state lending laws, federal banking regulations, and evolving anti-discrimination statutes. As the portfolio grows and as algorithmic underwriting draws closer scrutiny from regulators like the Consumer Financial Protection Bureau (CFPB), the risk calculus shifts. A lending operation this large, backed by data-driven decisioning, will eventually face algorithmic bias audits, fair lending reviews, and likely demands for explainability in credit denials. Block's first-party data advantage may also become a liability if regulators question whether continuous behavioral surveillance is a proportionate underwriting method, or whether it creates systemic concentration risk if a single entity controls both payment infrastructure and credit allocation.

For BaaS platforms and embedded finance players, Block's scale underscores both the opportunity and the competitive pressure. Embedded lending—credit offered at the moment of purchase or need—is becoming table stakes in fintech-banking partnerships. Yet the profitability and risk profile of that lending depend heavily on data quality. Platforms that control only the credit decision point, without visibility into the borrower's broader transaction patterns, will lose to platforms that can synthesize payment, spending, and behavioral data into tighter risk models. This creates an incentive for consolidation and for BaaS providers to deepen their data integration with banking partners.

Block's achievement also inverts a traditional banking wisdom: that lending is inherently riskier and less profitable than payments and deposits. By merging the two functions and letting transaction data drive credit decisions, Block has demonstrated that lending can be a high-margin, low-loss business when underwritten with sufficient behavioral granularity. This is why every major payments player—from PayPal to Stripe to Wise—is adding credit products. The data moat is real, and the economics are compelling once you own the data source.

The question now is whether traditional banks can build or partner their way into equivalent data positions before the gap widens further. Building in-house will take years and significant capital; buying embedded finance capabilities or lending fintechs may close the gap faster but rarely yields the true integration that makes first-party data sustainable. The most likely path forward involves banks deepening their BaaS partnerships with platforms that already have embedded transaction data, trading some margin and control for accelerated access to better underwriting signals. Block has shown the prize is worth the pursuit.

Sources: Tearsheet · 29 April 2026