Under Title X of the Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010 (12 U.S.C. § 5481 et seq.), Congress established the Consumer Financial Protection Bureau (CFPB) as the primary federal regulator responsible for supervising consumer financial markets and eliminating unfair, deceptive, or abusive acts or practices (UDAAPs). In the small-dollar consumer credit arena, the CFPB promulgated landmark regulations codified at 12 CFR Part 1041—formally designated as the Payday, Vehicle Title, and Certain High-Cost Installment Loans Rule. Designed to curb predatory debt traps that extract billions in fees from vulnerable households, these federal regulations establish crucial procedural safeguards governing loan underwriting, payment debits, and disclosure transparency.
The Core Provisions of 12 CFR Part 1041: The Payment Processing Rule
While the initial 2017 rulemaking included comprehensive underwriting mandates requiring lenders to independently verify a borrower's ability to repay, subsequent administrative revisions focused federal enforcement primarily on the Payment Provisions of Part 1041. These provisions protect consumer depository accounts from predatory electronic extraction:
The Two Consecutive Failed Debit Rule (12 CFR § 1041.8)
A lender is strictly prohibited from attempting to withdraw funds from a consumer's bank account via electronic ACH debit, debit card transaction, or remotely created check after two consecutive payment attempts have failed due to insufficient funds (NSF), unless the lender obtains an entirely new, specific written authorization from the consumer.
Historically, aggressive payday lenders subjected borrower bank accounts to rapid-fire debit attempts, repeatedly trying to pull funds when account balances were zero. Each failed attempt assessed a $30 to $35 penalty fee from the consumer's depository institution, triggering financial insolvency. The CFPB's two-failed-attempt restriction completely halts this predatory practice, forcing creditors to pause electronic collections until the borrower affirmatively authorizes a new transfer.
Mandatory Advance Consumer Withdrawal Notices
Under 12 CFR § 1041.9, lenders covered by the rule must provide clear, written advance notice to the borrower before initiating electronic withdrawals:
| Disclosure Requirement | Statutory Delivery Timeline | Required Notice Contents | Consumer Protection Benefit |
|---|---|---|---|
| Payment Notice | At least 3 to 10 business days before transfer | Exact dollar amount, transfer date, payment channel (ACH, debit card), and breakdown between principal, interest, and fees. | Prevents surprise debits that conflict with rent or grocery schedules. |
| Unusual Withdrawal Notice | At least 3 to 7 business days before transfer | Highlighted notice if the scheduled payment differs in date, amount, or payment channel from the agreed schedule. | Alerts the consumer to unexpected fee additions or altered debit timing. |
| Consumer Rights Disclosure | Included in all formal payment notices | Mandatory disclosure informing the consumer of their legal right to revoke authorization or request an Extended Payment Plan. | Empowers borrowers with knowledge of federal and state defense rights. |
The Legal Battle: CFSA v. CFPB and Supreme Court Affirmation
The implementation of CFPB small-dollar lending regulations was delayed by extensive federal litigation initiated by payday industry trade groups. In Community Financial Services Association of America (CFSA) v. CFPB, plaintiffs challenged the legality of the 2017 Payday Rule, arguing that the CFPB's independent funding mechanism through the Federal Reserve violated the Appropriations Clause of the United States Constitution.
In May 2024, the Supreme Court of the United States issued a definitive 7–2 landmark ruling upholding the constitutionality of the CFPB's statutory funding structure. Writing for the majority, Justice Clarence Thomas affirmed that Congress acted well within its constitutional authority when creating the agency's funding framework. This ruling eliminated years of legal uncertainty, formally validating the CFPB's regulatory authority and empowering the agency to aggressively enforce small-dollar lending and payment processing rules nationwide.
Ability-to-Repay (ATR) Principles Under CFPB Guidance
Although federal court litigation and administrative revisions altered the mandatory underwriting provisions of Part 1041, the CFPB continues to enforce Ability-to-Repay (ATR) principles under its overarching UDAAP statutory authority (Dodd-Frank Section 1036):
- Evaluation of Non-Discretionary Expenses: Under CFPB supervisory expectations, responsible small-dollar lenders must evaluate whether an applicant can reasonably satisfy the loan payment while still covering essential basic living expenses (housing, food, utilities, healthcare) without needing an immediate subsequent re-borrowing.
- Verification of Income Reliability: Creditors are expected to verify income through official documentation (paystubs, tax returns, automated bank data feeds) rather than relying exclusively on unverified applicant self-certifications.
- Repeat Borrowing Prohibitions: Originating repeat loans to consumers exhibiting clear signs of continuous default constitutes an abusive lending practice under federal law.
Frequently Asked Questions About CFPB Lending Rules
Can a payday lender keep debiting my bank account if it has no money?
No. Under CFPB rule 12 CFR § 1041.8, a lender is legally prohibited from attempting an electronic withdrawal after two consecutive attempts have failed due to insufficient funds, unless you sign a new, specific authorization.
Did the Supreme Court uphold the CFPB Payday Rule?
Yes. In May 2024, the Supreme Court ruled in CFSA v. CFPB that the agency's funding structure is constitutional, affirming the CFPB's authority to enforce its consumer financial protection rules nationwide.
How do I file a complaint against a predatory lender with the CFPB?
You can submit a formal complaint online at consumerfinance.gov/complaint or by calling (855) 411-2372. The CFPB forwards your complaint to the company, tracks their response, and investigates systemic statutory violations.