Closed-loop prepaid card regulations sit lighter on issuers than the rules covering general-purpose prepaid products, mostly because these cards can only be spent at one merchant or a defined group of affiliated retailers. Federal law draws its main line at a daily value of $2,000 per device: stay below it, and most Bank Secrecy Act obligations fall away. That doesn’t mean the cards are unregulated. Federal consumer protection rules set floors on expiration and fees, state laws add their own layers, and cross the wrong threshold as an issuer or seller and the compliance picture changes fast.
What Counts as a Closed-Loop Prepaid Card
Two federal definitions do the work. Under 31 C.F.R. § 1010.100(ww), “prepaid access” means access to funds paid in advance that can be retrieved or transferred later through a card, code, or similar device.1eCFR. 31 CFR 1010.100 – General Definitions Under 31 C.F.R. § 1010.100(kkk), “closed-loop prepaid access” narrows that to funds redeemable only at a defined merchant or group of locations, such as a retail chain, a college campus, or a transit system.2Federal Register. Bank Secrecy Act Regulations – Definitions and Other Regulations Relating to Prepaid Access
A card that only works at a coffee chain is closed-loop. A card carrying a Visa or Mastercard logo that works at any accepting merchant is open-loop, even if a retailer’s name is printed on it. Network branding pushes the product into a different category with substantially more compliance obligations under the CFPB’s Prepaid Rule and the full scope of Regulation E.
Federal Consumer Protections That Still Apply
Most closed-loop products are carved out of the CFPB’s Prepaid Rule. The definition of “prepaid account” in 12 C.F.R. § 1005.2 specifically excludes gift certificates, store gift cards, and loyalty or promotional cards as defined in § 1005.20.3eCFR. 12 CFR 1005.2 – Definitions The practical effect: if you have a dispute over a transaction on a store gift card, you don’t get the federally mandated error resolution rights that come with a reloadable general-purpose card or a bank debit card. The issuer isn’t required to investigate disputed charges or provisionally credit your account while it looks into the problem.
What remains are baseline protections under 15 U.S.C. § 1693l-1 (the CARD Act’s gift card provisions) and Regulation E at 12 C.F.R. § 1005.20. These set three limits an issuer can’t contract around.
Five-Year Minimum on Funds
The underlying funds on a gift certificate, store gift card, or general-purpose prepaid card cannot expire sooner than five years from issuance or the date funds were last loaded, whichever is later.4eCFR. 12 CFR 1005.20 – Requirements for Gift Cards and Gift Certificates If the physical card expires before the funds do, the issuer has to replace the card at no charge so the consumer can access the remaining balance.5Office of the Law Revision Counsel. 15 USC 1693l-1 – General-Use Prepaid Cards, Gift Certificates, and Store Gift Cards The card also has to disclose whether the funds expire separately from the card, along with a toll-free number and website for requesting a replacement.
Dormancy and Inactivity Fees
Issuers can’t charge dormancy, inactivity, or service fees unless the card has seen zero activity for at least twelve consecutive months.5Office of the Law Revision Counsel. 15 USC 1693l-1 – General-Use Prepaid Cards, Gift Certificates, and Store Gift Cards Even then, only one such fee is allowed per calendar month. Federal law is a floor here, and several states go further.
Disclosures on the Card Itself
The fee amount, frequency, and the fact that it may be assessed for inactivity all have to appear on the card. Burying the details in terms-and-conditions documents, on packaging, or on stickers doesn’t satisfy the requirement. The regulation puts the disclosures on the certificate or card itself.4eCFR. 12 CFR 1005.20 – Requirements for Gift Cards and Gift Certificates Terms can’t change after purchase, and the card has to provide a toll-free number and website for balance and fee information.
Lost or Stolen Cards: What Federal Law Doesn’t Cover
This is the biggest gap, and it surprises consumers regularly. Federal regulation does not require issuers to replace a lost or stolen gift card or store gift card. The CFPB’s official interpretation of 12 C.F.R. § 1005.20 states this directly: the rule requiring free replacement of an expired card does not extend to cards that have been lost or stolen.6Consumer Financial Protection Bureau. 12 CFR Part 1005 (Regulation E) – Requirements for Gift Cards and Gift Certificates If an issuer chooses to replace a lost card, it may charge a fee for doing so.
Some retailers voluntarily replace cards if you can show proof of purchase or if the card was registered online. None of that is legally required. Registering a closed-loop card when the option exists is the single best consumer step available. Without registration, a lost card functions the same as lost cash.
Where State Law Goes Further
State rules often exceed federal minimums, and the variation matters enough that you need to know what applies where you are.
Expiration and Fee Bans
A handful of states prohibit expiration dates on gift cards entirely, regardless of the five-year federal minimum. Others ban dormancy and inactivity fees outright rather than allowing them after twelve months. A card issued in one of these states can carry better protections than the same retailer’s card issued elsewhere, depending on which state’s law governs.
Cash Redemption of Small Balances
Roughly a dozen states require merchants to refund small remaining gift card balances in cash. The most common threshold is $5: once your balance drops below that after a purchase, the merchant has to give you the remainder in cash if you ask. A few states set the trigger lower, at $1 or $2.50, and at least one state has moved it higher. About forty states have no cash-back requirement at all.
Escheatment of Unused Balances
When a closed-loop card sits unused long enough, the unredeemed balance may become the property of the state under unclaimed property laws. The dormancy period before escheatment typically ranges from three to five years. At that point, the business holding the funds transfers the balance to the state treasury. If the issuer has a record of the purchaser’s or owner’s address, the state where that person lives generally has first claim; if no address is on file, the state where the business is incorporated takes priority. Consumers can usually recover escheated funds by filing a free claim with their state’s unclaimed property division, though they need to identify the original card or transaction.
Bank Secrecy Act Thresholds for Issuers and Sellers
The Bank Secrecy Act creates a tiered compliance structure for closed-loop products, with two thresholds doing most of the work.
The $2,000 Daily Device Limit
A closed-loop prepaid arrangement is excluded from the definition of a “prepaid program” under FinCEN’s rules if the maximum value accessible through any single device does not exceed $2,000 on any day. The threshold attaches to the device, not the person. A customer who buys five separate $400 gift cards in one visit has not triggered it, because no individual device exceeds $2,000. But if a single reloadable card allows cumulative loads over $2,000 in one day, the exemption falls away.7Financial Crimes Enforcement Network. Final Rule – Definitions and Other Regulations Relating to Prepaid Access
Once a program crosses that line, the provider has to register with FinCEN as a money services business and implement a formal anti-money laundering program. That includes filing suspicious activity reports when transactions look designed to evade reporting rules and retaining customer and transactional records for five years.7Financial Crimes Enforcement Network. Final Rule – Definitions and Other Regulations Relating to Prepaid Access Sellers are treated as agents of the provider and have to maintain their own AML programs, but they don’t need to register separately with FinCEN.8eCFR. 31 CFR 1022.380 – Registration of Money Services Businesses
The $10,000 Seller Threshold
Even when the product qualifies for the closed-loop exemption, a separate rule targets high-volume sales. A retailer counts as a “seller of prepaid access” if it lacks policies reasonably designed to prevent selling more than $10,000 of any type of prepaid access to a single person in a single day.7Financial Crimes Enforcement Network. Final Rule – Definitions and Other Regulations Relating to Prepaid Access Crossing that line pulls the seller into BSA compliance regardless of whether each individual card stays under $2,000.
Separately, any business that receives more than $10,000 in cash in a single transaction, or in related transactions within 24 hours, has to file IRS Form 8300. That applies to bulk cash purchases of gift cards the same as any other large cash transaction.9Internal Revenue Service. IRS Form 8300 Reference Guide
Tax Treatment
Buying a closed-loop gift card is not itself a taxable event. Sales tax is typically collected when the card is redeemed, not when it’s bought. The tax problems tend to appear elsewhere.
Gift Cards Given to Employees
The IRS treats cash and cash equivalents from an employer as taxable income, with no exception. Gift cards sit squarely in that category. Even a $25 store gift card given as a holiday bonus is taxable compensation and has to be included in the employee’s wages on Form W-2, subject to income tax withholding, Social Security, and Medicare taxes.10Internal Revenue Service. De Minimis Fringe Benefits The de minimis fringe benefit exclusion, which covers things like occasional snacks or a holiday turkey, does not apply to gift cards because they function as cash equivalents. This is a payroll error that catches small businesses regularly.
Merchant Reporting on Form 1099-K
Third-party settlement organizations processing transactions for merchants that accept closed-loop cards may need to file Form 1099-K. For 2026, the reporting threshold requires total payments exceeding $20,000 across more than 200 transactions in a calendar year.11Internal Revenue Service. Understanding Your Form 1099-K Whether or not a 1099-K is issued, the merchant has to report all income from gift card redemptions on its tax return.
Penalties for Non-Compliance
Ignoring BSA obligations on prepaid access products escalates quickly from administrative fines to federal prison.
A provider or seller that fails to register with FinCEN faces civil penalties of up to $5,000 per violation, with each day of continued non-compliance counted separately.12Financial Crimes Enforcement Network. Money Services Business (MSB) Registration Filing false or materially incomplete registration information triggers the same per-day penalty. FinCEN periodically adjusts these amounts for inflation, so the current ceiling may be higher.
Criminally, operating an unlicensed money transmitting business is a federal felony under 18 U.S.C. § 1960, carrying up to five years in prison and additional fines.13Office of the Law Revision Counsel. a href=”https://uscode.house.gov/view.xhtml?req=(title:18%20section:1960%20edition:prelim)” target=”_blank” rel=”noopener”>18 USC 1960 – Prohibition of Unlicensed Money Transmitting Businesses The statute covers anyone who knowingly operates, manages, or owns any part of an unlicensed business, and it applies whether or not the person knew state licensing was required. A prepaid access provider that crosses the $2,000 threshold without registering and running an AML program is exactly the kind of operation the statute targets.