In a recent digital advisory engagement, one of the first things I did was try to become the client’s customer. I attempted to open an account via the client’s mobile app and on their website, the way a new customer would, and then presented the experience back to the leadership team exactly as I experienced it. Over the last few years, I have done this many times and sometimes it is a great experience. Sometimes it is a mess no prospect would forgive. And sometimes the attempt ends before it begins, because the functionality is not there at all, which tells me something different. Last week’s commentary called business banking the front you are losing, one new account at a time – this week we walk up to the door itself. Only 30.5% of community banks offer online account opening at all; 45.9% say they will add it within twelve months, which means the majority of this market is either mid-project or not started on a capability the digital-native competitors finished a decade ago. And they are collecting the rent: Chime alone captured 13% of new checking accounts opened in the third quarter of 2025 – more than any single traditional bank. The front door is no longer a feature of the product. It is the product.

Door Half Built

Start with the adoption picture, because it is starker than most bankers assume. The CSBS annual survey of community banks puts online account opening at 30.5% of institutions – against 87.6% for remote deposit capture, a capability of roughly the same vintage. Another 45.9% plan to add it within a year, a number that has the familiar shape of intentions rather than projects, and 21.4% have no plans at all. The survey does not even split consumers from business account opening, which tells you something about how young this capability still is in the community market.

The demand side did not wait. 54% of consumers now name the mobile app as their preferred banking channel against 9% for the branch, and the flow of new accounts is going to whoever has the door open: alongside Chime’s 13% share of new checking, J.D. Power’s churn research found 72% of additional or replacement accounts were opened at a different institution than the customer’s prior one. Recall last week’s finding that the average customer now holds three deposit accounts. Every one of those additional accounts passed through somebody’s front door, and the doors that are open, fast, and funded are winning the traffic.

Ten Minutes or Gone

When I run the new account exercise, I run it against a clock, because the market has already set one. The digital-native openers complete a consumer application in under three minutes, and the practical ceiling before abandonment climbs is about ten. The consumer research is remarkably consistent about where applicants quit: FICO found roughly a quarter of consumers will abandon an application if identity verification is slow or difficult, and 70% expect the whole process to take under thirty minutes; its larger global poll found more than half of respondents abandon when asked ten or more questions, and nearly one in five give up at five. One fintech chief executive puts the industry’s average application completion rate around 15%, with roughly 60% of the fallout at the document-upload step – a single company’s estimate, unverifiable independently, but directionally consistent with everything else in the record.

A candid note on that record: no regulator publishes abandonment or conversion data, so every benchmark in circulation is vendor or consultant math. Which leads to the first practical conclusion of this commentary, your own funnel data is the only benchmark you can fully trust, and if your institution cannot say today what percentage of started applications become funded accounts, and at which screen the rest died, that measurement is a cheaper first investment than any software. The failure points named across every source are the same four: too many knowledge questions, forced document upload, applications that break when the customer switches devices, and funding by micro-deposit. The two small test transfers that take days to verify, in an era when the customer expected to be done before lunch.

Fraud Paradox

The reflex answer to abandonment is “we have to ask all this, fraud is exploding,” and the first half of that sentence deserves more scrutiny than it gets, because the second half is true. The Alloy 2026 State of Fraud report, fielded by The Harris Poll across 500-plus US fraud decision-makers and sponsored by a vendor in this market, found 67% of institutions saw fraud rise in 2025, and synthetic identity - fabricated persons assembled from fragments of real data - ranked as the top fraud type by volume at 44% of institutions, with 89% calling it the most concerning evolving threat. The Boston Fed relays an industry estimate of more than $35 billion in synthetic identity losses in 2023 and warns that generative AI now fabricates identities, documents, and deepfakes at scale. The Fed has since flagged the business version – synthetic companies built to open accounts and access credit – warning that traditional controls may not catch them.

Here is the paradox, and it is the most useful finding in this research, friction and security are not the same thing, and customers know the difference. FICO found up to a third of Americans consider lying on a financial application acceptable in some circumstances – and yet 75% say stricter identity checks would not make them abandon an application. Read those two findings together: tolerance exists for real verification, done in the background or as a clear step-up when risk warrants it. What customers will not tolerate is being interrogated with typed fields, the tenth question, the document upload, the wait. The institutions winning this front run risk-based flows: light where the signal is clean, demanding where it is not. The ones losing it apply the maximum friction to everyone, which manages to be simultaneously hostile to good customers and, according to the synthetic-identity numbers, insufficient against the bad ones.

Who Is the Door For?

Before any institution tunes its application flow, it should answer a question most never formally ask: who is this door for? “Anyone with a browser” is not a strategy, it is how you buy fraud and hot money. Legally a bank can take deposits nationwide; in practice, the defensible eligibility models are three. Footprint-first: open accounts only where you can genuinely service the relationship, collect, and perfect a lien. Product-limited national: savings and CDs from anywhere if you want the funding, checking only in footprint knowing rate money churns, and you should accept it knowingly or not at all. Or niche-national: nationwide for a vertical you serve, where the strategy is the segment rather than the map. Geography still earns its place in the decision even in a digital flow, because an out-of-footprint application with no connection to the institution is one of the stronger fraud signals available, and a customer you cannot service is a relationship you are renting, not building. For credit unions the question is not even discretionary, field of membership is a legal gate, and it belongs on the first screen: a membership rejection at question twenty-one creates all of the friction and none of the member.

Two adjacent policy choices deserve the same deliberateness. Referral programs work, referred customers retain better than any acquisition channel a bank can buy but only when the machinery is right: unique codes tied to the referring customer’s record rather than a generic code that migrates to a coupon site, verification done by the system at the moment of application rather than manually after it, and rewards paid on funded-and-used – a balance held for a season, a threshold of transactions – never on merely opened, because “opened” is precisely what a bonus-farming ring manufactures, and synthetic identities farming referral rewards is a live fraud pattern, not a hypothetical.

And then the question that exposes more account opening architecture than any other: what happens when an existing customer wants a second account? The regulation is on the bank’s side, the customer identification rules do not require re-verifying a customer the institution already reasonably knows so an authenticated, logged-in customer opening another deposit account should experience a product change, not an application: prefilled, funded instantly from the existing account, done in three clicks inside digital banking. Marching a ten-year customer through the same public twenty-question flow as a stranger is the most common own-goal in this market, and it is usually a symptom, not a choice: it means the account opening system and the digital banking platform were never actually integrated. The exceptions are real, an existing consumer opening a business account is a new identification event for the entity, and a new joint owner must be verified as a new person but the base case is the cheapest account your institution will ever open, and at most institutions it is inexplicably the hardest.

Washington Quietly Helped

Three regulatory developments changed this picture in the past eighteen months, and the first got far less attention than it deserves. In June 2025, the OCC, FDIC, and NCUA – with FinCEN’s concurrence – issued an order allowing banks to obtain a customer’s full taxpayer identification number from third-party sources rather than making the customer type it, for all accounts, provided procedures stay risk-based. That is a regulator removing one of the exact fields applicants abandon over. If your account opening still demands manually keyed data your vendor could source and verify behind the scenes, you are imposing friction the rules no longer require.

The second development cuts the other way. FinCEN’s exemption of domestic companies from beneficial-ownership reporting was made permanent in August 2026 – but the bank-facing customer due diligence rule is unchanged, meaning banks must still collect and certify beneficial-ownership information at business account opening, and the registry banks once hoped to verify against is effectively gone for domestic entities. The burden remained, the tool disappeared. And third, the open banking rule under Section 1033 sits enjoined and under reconsideration, which means the data-access verification that increasingly replaces micro-deposits runs on contracts, not regulation it works, but the legal footing under it is a diligence question for your vendor, not a settled fact.

Business Door Is Still the Hard Part

Everything above is doubly true for business accounts, which is where last week’s number – 47% of banks under $100 billion offer digital onboarding to small businesses, against 72% for retail – connects to this week’s story. The business door is structurally harder: beneficial-ownership collection and certification with no registry to check, entity documents, multi-owner identity verification, and now synthetic businesses on the Fed’s warning list. Most institutions answer that difficulty with manual review measured in days. No independent public data on business time-to-open exists, the only benchmarks are vendor claims, such as MANTL’s roughly ten minutes for business accounts, which is marketing, but marketing that implies an industry norm measured in hours to days. The strategic point stands regardless of whose stopwatch you trust: the segment every strategic plan covets is the segment with the worst front door, and the primacy flywheel from last week’s commentary spins from exactly this moment in the relationship.

And be clear-eyed about who is walking through the door you have not built, because it is no longer only the fintechs. American Express – through American Express National Bank, a $214 billion FDIC-insured national bank has spent the past eighteen months assembling a small business banking bundle around its checking account: a new business card, a high-yield business savings account with no minimums or fees, Membership Rewards redeemable straight into checking, and an AI-powered payroll product with Gusto coming in 2027. A business that already runs it spend through Amex can now bank where the points land, a hook no community institution can replicate and payroll is the operating-account move that converts a deposit product into primacy. Amex publishes no business account counts, and its service model was built for cardmembers, not business banking operations. But a competitor with a charter, a rewards currency, and a five-minute application does not need to be better at business banking than you. It only needs to be easier to become a customer of.

Fund It Before They Leave

The last mile is funding, and it is the abandonment cause with the cleanest fix. Micro-deposit verification strands a motivated new customer for days between applying and using the account, days in which the account at the other institution, the one that funded instantly, becomes the habit. The instant rails have reached the scale to end this: FedNow passed 1,600 participating institutions and settled $853 billion in 2025, while RTP processed $1.3 trillion and carries 98% of US bank-to-bank instant volume. An account opened in five minutes and funded in the sixth is a customer; an account opened in five minutes and funded on Thursday is a lead you are hoping does not cool. Our team at CCG Catalyst summarizes where applicants fall out and what fixes it:

Before You Buy Anything

Four moves, in order. First, measure your own funnel - started, completed, funded, by screen because no trustworthy external benchmark exists and your vendor’s demo is not data. Second, count your questions and typed fields against the flows that are winning, and use the TIN order to delete the ones the rules no longer require. Third, put funding on an instant rail, because the cheapest retention program in banking is a working account on day one. Fourth, take the business door seriously as the 2027 project: it is harder, which is exactly why it is still open as a competitive front. And when the evaluation turns to vendors, account opening has become its own market, with its own specialists, its own consolidation, and its own claims to test, This is tomorrow’s Sector Spotlight, “The Account Opening Vendor Landscape.”

My final comment: for a hundred years this industry designed its front doors obsessively - the marble, the teller line, the branch manager who knew your name - because the door was where the relationship began. The door is now a form on a phone, the marble budget went to a vendor contract, and half the industry’s doors are either locked or still on order. The branch lobby never asked a customer ten questions before letting them in. Neither should its replacement.

CCG Catalyst advises banks, credit unions, and fintech companies on digital strategy, vendor selection, and contract negotiation. If your institution is rebuilding its front door, reach out to our team at www.ccgcatalyst.com.

See our latest announcement: CCG Catalyst’s Paul Schaus Named a 2026 Top Consultant by Consulting Magazine

By: Paul Schaus | Founder & Managing Partner, CCG Catalyst Consulting

Disclaimer: The views expressed in this article represent the perspective of CCG Catalyst Consulting based on our direct experience advising financial institutions. This commentary is intended to stimulate industry discussion and does not constitute legal, accounting, or regulatory advice.