The CFPB's core rules against predatory lending

The Consumer Financial Protection Bureau enforces four main prohibitions that directly block the tactics predatory lenders use. Lenders cannot charge fees that are not disclosed upfront in writing. They cannot misrepresent the terms, cost, or consequences of a loan. They cannot require you to waive legal rights as a condition of borrowing. And they cannot structure loans so that default becomes inevitable — what the CFPB calls "ability to repay" violations.

These rules explore to most consumer loans: payday loans, title loans, personal loans, and installment loans. They do not cover mortgages, which have their own separate rulebook under Dodd-Frank. The CFPB enforces these rules by investigating complaints, examining lenders' records, and bringing enforcement actions that can result in fines, loan forgiveness, and restitution to harmed borrowers.

The CFPB was created in 2011 specifically because the previous system — scattered rules across multiple agencies — failed to stop widespread predatory lending. Before the CFPB, a payday lender could operate in one state under one regulator's oversight and in another state under a different regulator's rules, or sometimes under no federal oversight at all. The CFPB consolidated that authority and gave it teeth through the Dodd-Frank Act.

Key Takeaways

  • The CFPB prohibits undisclosed fees, misrepresented terms, waiver of legal rights, and loans structured so the borrower cannot realistically repay them.
  • Lenders must provide a written disclosure of all costs before you sign, and the actual cost cannot differ materially from what was disclosed.
  • A lender cannot require you to give up your right to sue, arbitrate disputes in court, or report the loan to credit bureaus as a condition of borrowing.
  • The CFPB can fine lenders, order them to refund borrowers, and prohibit them from making certain types of loans if they violate these rules.
  • State laws sometimes offer stronger protections than federal CFPB rules, so your state's usury cap or licensing requirement may block loans the CFPB allows.

How the CFPB stops undisclosed and hidden fees

Before you sign any loan, the lender must give you a written disclosure that lists every fee you will pay. This includes origination fees, prepayment penalties, late fees, NSF fees, and any other charge. The disclosure must show the total cost of the loan in dollars, not just as a percentage. For payday loans and other short-term loans, the CFPB requires the annual percentage rate (APR) to be displayed prominently so you can compare it to other borrowing options.

The actual fees charged cannot materially differ from what was disclosed. If the disclosure says a $500 loan will cost $75 in fees and the lender charges $100, that is a violation. The CFPB has brought enforcement actions against lenders who buried fees in fine print, charged fees that were not mentioned in the disclosure, or changed the terms after the borrower signed.

This rule stops a common predatory tactic: offering a loan that sounds cheap upfront, then hitting the borrower with surprise fees once they are committed. A payday lender might advertise "$15 per $100 borrowed" but then add an process fee, a verification fee, and a funding fee that were never mentioned in the initial pitch.

The CFPB's ban on misrepresenting loan terms

Lenders cannot lie about what a loan costs, when payments are due, what happens if you miss a payment, or what the consequences of default are. This sounds obvious, but predatory lenders have historically misled borrowers about whether a loan is renewable, whether interest compounds, whether missed payments trigger automatic rollover into a new loan, and whether the lender can take money directly from the borrower's bank account without permission.

The CFPB has found that some lenders told borrowers a payday loan was a "short-term solution" when the lender's own data showed the average borrower renewed the loan eight times in a year. Others told borrowers that a title loan would not affect their ability to drive the car, when in fact the lender held the title and could repossess the vehicle if a payment was missed. Still others misrepresented the APR by quoting only the fee as a percentage rather than the full annual cost.

When the CFPB finds this kind of misrepresentation, it can order the lender to refund the excess interest or fees paid by affected borrowers, sometimes going back years. In 2017, the CFPB ordered a major payday lender to refund $100 million to borrowers who had been misled about the terms of their loans.

Restrictions on forcing you to waive your legal rights

A lender cannot require you to sign away your right to sue, your right to a jury trial, or your right to join a class action lawsuit as a condition of getting a loan. These are called mandatory arbitration clauses and class action waivers, and the CFPB has limited when lenders can use them.

Before 2017, many payday lenders and title lenders required borrowers to agree to arbitration — meaning any dispute would be decided by a private arbitrator, not a court — and to waive the right to join a class action. This meant that if a lender broke the law, an individual borrower had little practical recourse because the cost of arbitration exceeded the amount owed. But a class action allowed hundreds or thousands of borrowers to pool their claims and make it worth pursuing.

The CFPB's 2017 rule prohibited mandatory arbitration clauses and class action waivers in consumer financial contracts, with limited exceptions. This restored borrowers' ability to sue in court and to join class actions. The rule has been challenged in court and modified, but the core protection — that a lender cannot strip you of your right to sue — remains in place for most consumer loans.

The "ability to repay" rule that stops debt traps

The CFPB prohibits lenders from making loans they have no reasonable basis to believe the borrower can repay. This is called the ability-to-repay rule, and it is the most direct attack on the predatory lending business model.

Predatory lenders historically made money by trapping borrowers in debt. A payday lender would lend $500 to someone making $2,000 a month, knowing that the borrower would struggle to repay $575 (the loan plus fees) two weeks later. When the borrower could not repay, the lender would offer to "roll over" the loan — extend it for another two weeks for another fee. The borrower would end up paying $1,500 in fees on a $500 loan over the course of a year, and still owe the original $500.

The ability-to-repay rule requires lenders to look at the borrower's income and expenses before making the loan. For payday loans, the lender must verify income and check whether the borrower has the money left over after basic expenses to repay the loan in full when it is due. For longer-term loans, the lender must assess whether the borrower can afford the monthly payment without defaulting or having to reborrow.

This rule has been litigated and modified, but the basic principle stands: a lender cannot knowingly make a loan to someone who cannot repay it. The CFPB has used this rule to shut down lending practices that were explicitly designed to maximize default and fee collection.

What the CFPB can do when lenders break these rules

When the CFPB finds that a lender has violated these rules, it has several enforcement tools. It can issue a cease-and-desist order, forcing the lender to stop the illegal practice when ready. It can impose civil penalties — fines that can reach millions of dollars for large-scale violations. It can order the lender to refund money to borrowers who were harmed, sometimes with interest.

The CFPB can also prohibit a lender from making certain types of loans in the future. In 2020, the CFPB ordered a major online lender to stop making payday loans and to refund $225 million to borrowers. In 2023, it ordered a title lender to stop making title loans and to forgive $4.7 million in debt owed by borrowers.

However, the CFPB's enforcement depends on the agency having the resources to investigate and prosecute cases. The agency has a limited budget and cannot pursue every complaint. If you believe a lender has violated CFPB rules, you can file a complaint with the CFPB's Consumer Complaint Database, which is public and sometimes triggers investigations.

State laws that go beyond CFPB protections

Many states have their own rules against predatory lending that are stricter than federal CFPB rules. Some states cap the interest rate a lender can charge — called a usury cap — at 36% APR or lower. Some states require lenders to be licensed and audited. Some states ban payday loans or title loans entirely.

If your state has a stricter rule than the CFPB allows, the state rule applies to you. For example, the CFPB does not set a maximum interest rate, but if your state caps rates at 36% APR, a lender cannot charge you more than that, even if the CFPB would allow it. Similarly, if your state bans payday loans, a payday lender cannot operate in your state, regardless of what the CFPB permits.

This means that the level of protection you have depends partly on where you live. A borrower in a state with a 36% usury cap has much stronger protection than a borrower in a state with no cap. You can check your state's usury laws and licensing requirements through your state attorney general's office or your state banking regulator.

Gaps in CFPB protection and what they mean for you

The CFPB's rules are strong, but they do not cover every lender or every loan. Credit unions and banks are regulated by other agencies and have different rules. Some online lenders operate across state lines and may be harder for the CFPB to reach. Some lenders structure their business to avoid CFPB oversight — for example, by calling themselves a "credit counselor" rather than a lender, or by partnering with a bank to make the loan.

Additionally, the CFPB's rules protect you from the worst predatory practices, but they do not mean a loan is a good deal. A lender can comply with all CFPB rules and still charge a high interest rate, require a short repayment period, or structure the loan in a way that makes it hard to repay. The CFPB stops the most abusive tactics, but it does not stop all high-cost lending.

This is why understanding how predatory lending works — the subject of the previous guide — is still important even with CFPB protections in place. The rules create a floor, not a ceiling. You still need to compare offers, understand the true cost of a loan, and consider alternatives before borrowing.

Frequently Asked Questions

Can a lender charge me a fee that was not in the original disclosure?

No. The CFPB requires all fees to be disclosed in writing before you sign. If a fee appears on your statement that was not in the disclosure, that is a violation. Document the discrepancy and file a complaint with the CFPB's Consumer Complaint Database or your state attorney general.

What if a lender says I have to use arbitration to resolve a dispute?

For most consumer loans, mandatory arbitration clauses are prohibited under CFPB rules. If a lender requires you to sign an arbitration clause, that may be a violation. Check the CFPB's website for current rules, as this area has been litigated and modified. You can also file a complaint if you believe the clause is illegal.

Does the CFPB stop all high-interest loans?

No. The CFPB does not set a maximum interest rate. It stops lenders from misrepresenting rates, charging undisclosed fees, and making loans to people who cannot repay them. A lender can still charge 400% APR if the borrower can afford the payment and all terms are disclosed. State usury laws sometimes set lower caps.

What should I do if I think a lender broke CFPB rules?

File a complaint with the CFPB's Consumer Complaint Database at consumerfinance.gov. Include details of what happened, copies of loan documents, and any evidence of the violation. You can also contact your state attorney general or your state banking regulator. Keep records of all communications with the lender.

Are credit unions and banks subject to the same CFPB rules?

Credit unions are regulated by the National Credit Union Administration, and banks are regulated by the Office of the Comptroller of the Currency or the Federal Reserve. They have similar protections against predatory lending, but the rules are not identical to the CFPB's. If you borrow from a credit union or bank, ask about their fee disclosure and ability-to-repay practices.