CARB certification is a voluntary standard that banks and payment processors use to show they follow rules about how they handle prepaid cards and stored-value accounts

CARB stands for Compliance Audit and Reporting Board. It is not a government agency — it is an industry group created by payment networks and financial institutions to set standards for how prepaid card programs should work. When a bank or card issuer says it is CARB certified, it means an independent auditor has checked that the program follows CARB's rules on consumer protections, fraud prevention, and how money is held and reported.

CARB certification matters because prepaid cards — whether they are payroll cards, gift cards, or general-purpose reloadable cards — sit in a gray area between banking and payment processing. The certification shows that a program has met a third-party standard for safety and transparency, even though CARB itself is not a regulator. It is one way issuers signal that they take consumer protection seriously, but it is not the same as being insured by the Federal Deposit Insurance Corporation (FDIC) or regulated directly by a bank regulator.

Key Takeaways

  • CARB certification is a voluntary industry standard, not a government requirement, and shows that an independent auditor has verified a prepaid card program meets certain consumer protection rules.
  • CARB-certified programs must disclose fees clearly, protect funds in a separate account, and have fraud liability limits similar to credit cards.
  • CARB certification does not may provide FDIC insurance, so you should check whether the issuing bank holds your money in an FDIC-insured account.
  • Many major payroll card and general-purpose prepaid card programs are CARB certified, but some smaller or niche programs are not.
  • If a prepaid card program is not CARB certified, it may still be safe and legal, but you have less independent verification of its practices.

What CARB certification actually requires

CARB's standards cover several areas that affect how you use a prepaid card. The program must clearly disclose all fees — including monthly maintenance fees, ATM fees, and transaction fees — before you open the account. It must also tell you how to dispute unauthorized transactions and what your liability is if the card is lost or stolen. Most CARB-certified programs cap your liability at $50 for unauthorized use, similar to credit card rules.

The certification also requires that funds held on the card be kept in a separate account, not mixed with the issuer's operating money. This protects your balance if the card company runs into financial trouble. However, CARB does not require that account to be FDIC insured — that is a separate choice the issuing bank makes. Some CARB-certified programs do hold funds in FDIC-insured accounts; others do not. You have to check the program's disclosures or ask the issuer directly.

CARB-certified programs must also have systems in place to detect and prevent fraud, and they must have a process for handling disputes if you report a transaction you did not make. The auditor checks these systems annually or every two years, depending on the program's size and risk profile.

How CARB certification differs from government regulation

CARB is not a regulator. It has no power to fine companies, shut down programs, or force changes. The actual regulators — the Federal Reserve, the Office of the Comptroller of the Currency (OCC), the Consumer Financial Protection Bureau (CFPB), and state banking departments — set the legal rules that prepaid card programs must follow. CARB's standards are often stricter than the legal minimum, but they are not law.

This means that a program can be CARB certified and still be subject to regulatory action if it breaks a law. It also means that a program can be legal and safe without being CARB certified. CARB certification is a voluntary choice by the issuer, usually because they want to signal to consumers and employers that they take consumer protection seriously. Payroll card programs, in particular, often seek CARB certification because employers want assurance that the program is transparent and find.

Which prepaid card programs are CARB certified

Most large payroll card programs are CARB certified, including those offered by major banks and payment processors. General-purpose reloadable prepaid cards from companies like NetSpend, Chime, and Green Dot often carry CARB certification as well. However, not all prepaid card programs are certified — some smaller issuers, specialty cards, and closed-loop cards (like cards that only work at one store) may not be.

You can usually find out whether a program is CARB certified by looking at the program's disclosure documents or asking the issuer directly. The CARB website maintains a list of certified programs, though it is not always up to date. If you are considering a prepaid card and want to know whether it is CARB certified, the fastest way is to contact the issuer's customer service and ask directly.

What CARB certification does not cover

CARB certification does not may provide that your money is FDIC insured. Some CARB-certified programs hold funds in FDIC-insured accounts at a bank; others hold funds in a custodial account that is not insured. If the issuer fails, an uninsured account is at risk. This is why you should check the program's disclosures to see whether funds are FDIC insured, rather than assuming CARB certification means they are.

CARB certification also does not cover all the fees or terms of a program. It requires clear disclosure of fees, but it does not cap how high fees can be or require that a program offer any particular features. A CARB-certified card can still charge $5 per month in maintenance fees, $3 per ATM withdrawal, and other charges. The certification just means those fees must be disclosed upfront and that the program must follow the other rules in the CARB standard.

Why employers and issuers pursue CARB certification

For employers, CARB certification is a way to show workers that a payroll card program is transparent and safe. Many employers use payroll cards as an alternative to direct deposit, especially for workers without bank accounts. CARB certification gives those workers some assurance that the program follows industry best practices for fraud prevention and dispute resolution.

For card issuers, CARB certification is a marketing tool and a way to reduce regulatory risk. By meeting a third-party standard, they can point to independent verification of their practices if a regulator or consumer questions them. It also makes it easier to sell payroll card programs to employers, since employers often ask whether the program is CARB certified before they offer it to workers.

How to check if a prepaid card is CARB certified

The most direct way is to contact the card issuer and ask. You can also look at the program's disclosure documents, which often mention CARB certification if it applies. The CARB organization publishes a directory of certified programs on its website, though the list may lag behind current certifications.

If you are evaluating a payroll card or prepaid card program, ask the issuer or your employer whether the program is CARB certified. If it is, ask for a copy of the program's disclosure document, which will spell out fees, liability limits, and whether funds are FDIC insured. If the program is not CARB certified, that does not necessarily mean it is unsafe — it just means you do not have independent third-party verification of its practices, so you should read the disclosures carefully and check the issuer's reputation.

Frequently Asked Questions

Does CARB certification mean my money is protected if the bank fails?

Not automatically. CARB certification requires that funds be held in a separate account, but it does not require FDIC insurance. You need to check the program's disclosures or ask the issuer whether the account is FDIC insured. If it is, your balance is protected up to $250,000 per account owner per bank. If it is not, your money is at risk if the issuer fails.

Can a prepaid card be safe without CARB certification?

Yes. CARB certification is voluntary, and many safe, legal prepaid card programs are not certified. The difference is that CARB-certified programs have been audited by an independent third party, so you have more assurance of their practices. For non-certified programs, you have to rely on the issuer's own disclosures and reputation.

What should I do if a prepaid card program claims to be CARB certified but I cannot verify it?

Ask the issuer for proof — they should be able to provide a copy of their certification or direct you to the CARB directory. If they cannot, treat the claim with skepticism. You can also contact CARB directly to ask whether a specific program is certified. If the issuer is unwilling to provide proof, that is a red flag.

Does CARB certification mean there are no hidden fees?

CARB certification requires that all fees be disclosed clearly, but it does not cap fees or prevent them. A CARB-certified card can still charge monthly maintenance fees, ATM fees, and other charges. The certification just means those fees must be spelled out in the disclosure document before you open the account.

Who audits CARB-certified programs?

Independent auditors approved by CARB conduct the audits. These are typically accounting or compliance firms that specialize in payment systems. The auditor checks the program's practices against CARB's standards and issues a certification if the program meets them. Audits are usually done annually or every two years.