There appears to be an escalating conflict in the retirement savings industry, according to an update from the New York Times. Fintech startups are developing tools that allow independent financial advisers to directly manage clients’ 401(k) accounts—such as rebalancing investments—without the traditional barriers imposed by large investment firms.
This approach promises more coordinated financial advice but has sparked pushback from Fidelity Investments, which cite security risks and are blocking such access.
As a result of this, employees may lose online control of their retirement funds, getting caught in a battle over convenience, security, and profits.
Fintech startups like Pontera appear to be leading the charge, offering platforms where advisers can log in using encrypted client credentials stored in a digital vault. This enables actions like trading or rebalancing within the 401(k) without sharing sensitive details directly.
Pontera charges advisers 0.2% to 0.3% of managed assets. Competitors like Absolute Capital seek formal agreements with custodians for “recognized” access, avoiding credential-sharing altogether.
Investment firms like Fidelity, managing 401(k)s for over 24 million participants across 25,000 plans, is the primary opposition here. They’ve reportedly disconnected accounts where credentials were shared with fintech tools, forcing users to reset logins and verify identities (sometimes via emailed driver’s licenses).
In contrast, firms such as Manulife John Hancock collaborate with Pontera, acknowledging its security as “superior to old-school alternatives.”
Essentially, the fight boils down to access methods and security.
Fintechs like Pontera claim that their credential-sharing model is secure, compliant with regulations, and empowers clients’ rights to delegate actions—essentially, “This is what customers want, and it’s their money,” as Pontera’s CEO Yoav Zurel claimed.
They even proposed an API integration to Fidelity a year ago, but got no reply.
Fidelity counters that sharing logins enables “high-risk actions” like unauthorized trades, exposing accounts to breaches. They’ve locked out users (e.g., one adviser reported 190 clients affected) and warn it voids some protections.
State regulators are seemingly divided on this matter: Colorado discourages third-party credential sharing, while Rhode Island allows it if fiduciary duties are upheld. Professionals like Corey Frayer from the Consumer Federation of America call Fidelity’s concerns “legitimate,” noting the lack of APIs could let tools access unintended data.
Advisers, stuck in the middle, say tools like Pontera are “game changers” for holistic planning—e.g., preventing overexposure to stocks by syncing 401(k)s with other assets. But without access, clients often ignore recommendations, as one CEO noted: “They fail to enact the changes.”
With $9.3 trillion in U.S. 401(k) plans (part of $13 trillion in employer-based savings), this battle affects millions.
Some benefits are as follows:
- Better advice: Advisers can treat 401(k)s as part of a full portfolio, potentially reducing risks.
- Efficiency: Digital tools beat manual methods like mailing statements.
Some potential drawbacks:
- Access Disruptions: Lockouts mean no online logins, delaying management— one investor called it a potential “scam” and refused to email ID.
- Added Costs: Fees (20-30 basis points) may get passed to you, and experts question if advisers can consistently “beat the market” to justify them.
- Security vs. Control: While fintechs claim encryption, breaches remain a risk; self-management or auto-features (like target-date funds) might suffice for many.
Fidelity pushes alternatives like in-person logins or read-only tools, but admits many users were unaware of shared credentials.
Retirement plans have grown complex (e.g., adding crypto options), but innovation shouldn’t come at the cost of access or safety.
Clients may consider if they need an adviser (many don’t), check tool security, and consider low-fee index funds or automations as simpler paths.