Credit Counteroffer and Adverse Action Notice Requirements

When a lender denies your credit application, cuts your credit limit, or refuses your requested terms, federal law requires a written explanation. The adverse action notice requirements come from two statutes working together: the Equal Credit Opportunity Act (ECOA), implemented through Regulation B, and the Fair Credit Reporting Act (FCRA). Together they force the lender to tell you specifically why you were turned down, where the information came from, and how to get a free copy of any credit report used against you.¹²

When You Are Entitled to a Notice

The trigger is broader than a flat rejection letter. Under 12 CFR § 1002.2(c), an adverse action is any refusal to grant credit in substantially the amount or on substantially the terms you requested.³ Situations that qualify include:

A denied application for a mortgage, auto loan, credit card, or personal loan.
A refusal to lend the amount or at the rate you asked for, unless you accept a counteroffer.
A denied request to raise your credit limit.
An unfavorable change to an existing account, such as closing it or cutting the limit, based on a review of your file rather than a class-wide change.
A denial after a pre-approved offer, once you submit a full application.

The FCRA adds its own layer whenever the lender’s decision was based even partly on information in a consumer report.² Most consumer denials trigger both statutes at once, and the lender typically combines the disclosures into a single letter.

What the Notice Must Contain

Regulation B Content

The written notice must include the specific reasons for the adverse action, the creditor’s name and address, the ECOA anti-discrimination notice, and the name and address of the federal agency that oversees the creditor.¹ The reasons have to be genuinely specific. Telling you the decision was based on “internal standards” or that you “failed to achieve a qualifying score” does not satisfy the rule.⁴

The CFPB has pressed lenders on this point. If a creditor only considered bank references, it should say “insufficient bank references” rather than the vaguer “insufficient credit references.” If a limit was cut because of where or what you purchased, the notice needs to say so with enough detail that you can actually understand the reason.⁵ There is no cap on how many reasons must be listed, though CFPB commentary observes that more than four is unlikely to be helpful.⁶ Most notices list two to four factors.

FCRA Content When a Credit Report Was Used

If any part of the decision drew on a consumer report, 15 U.S.C. § 1681m requires the lender to include the name, address, and phone number of the consumer reporting agency that supplied the report, along with a statement that the agency did not make the decision and cannot explain why you were turned down.⁷ That distinction matters: disputes about the accuracy of report data go to the bureau, but disputes about the lender’s reasoning go to the lender.

If a credit score influenced the decision, the notice must also disclose the actual score used, the range of possible scores under that model, the date the score was generated, and the key factors that hurt your score. Up to four factors must be listed, or five if the number of recent inquiries was one of them.⁸

Finally, the notice must inform you of your right to obtain a free copy of your credit report from the named agency within 60 days, and your right to dispute inaccurate information on it.⁷ The 60 days runs from when you receive the notice, and the bureau must provide the report at no charge.⁹

Deadlines for Delivery

Regulation B fixes the timing under § 1002.9(a)(1):¹⁰

Denial of a completed application: 30 days after the lender receives it.
Unfavorable action on an existing account: 30 days after the lender takes the action.
Counteroffer that you do not accept: 90 days after the lender notified you of the counteroffer, unless you accepted or used the offered credit in the meantime.

Written delivery is the default. Electronic delivery is permitted only if you consented under the E-Sign Act.¹¹

How Counteroffers Change the Picture

A counteroffer sits between approval and denial. The lender rejects your terms but proposes alternatives, perhaps a smaller amount or a higher rate. Whether you are owed a formal adverse action notice depends on what you do next. Accept the counteroffer or actually use the credit, and no notice is required.¹² Reject it, or say nothing at all, and the lender must treat the situation as a final adverse action and send the full notice with specific reasons for denying your original request.¹⁰

That rule closes an obvious loophole. A lender cannot dangle terms it knows you will refuse just to avoid paperwork. Your silence counts as rejection, and the disclosure duty follows.

Lenders can also combine the counteroffer and adverse action notice into a single letter. If that combined notice meets the requirements of § 1002.9(a)(2), no second notice is required when you decline.¹⁰

Situations With Different Rules

Incomplete Applications

If your application is missing information you could supply, the lender does not jump straight to denial. Within 30 days, it must send a written notice identifying what is missing, giving you a reasonable time to supply it, and warning that the application will not move forward without it.¹ If you respond in time, the normal adverse action rules apply to any subsequent denial. If you do not respond, the lender owes you nothing further.

Joint Applicants

When two or more people apply together, the lender only has to send the notice to one of them. If there is an obvious primary applicant, that person receives it.¹⁰ A co-applicant who did not receive the notice can request a copy from the applicant who did.

Large Business Applicants

When a business applicant had gross revenues over $1 million in the prior fiscal year, the lender may notify orally within a reasonable time, and must furnish a written statement of specific reasons only if the applicant requests it in writing within 60 days.¹⁰ Lenders can rely on the applicant’s own statement about revenue in deciding which rule applies.

Adverse Action Versus Risk-Based Pricing

These two notices are often confused. An adverse action notice goes out when a lender denies your application or takes another negative step. A risk-based pricing notice is required when a lender approves you but at terms less favorable than those given to its best customers, based on your consumer report. The two are mutually exclusive on a given application. If a credit score was already disclosed in a risk-based pricing notice, and the lender later takes adverse action on the same account, the score must still be disclosed again in the adverse action notice.²

What to Do With the Notice

Start with the list of reasons. That list is the most useful part of the letter, and it tells you whether the problem is fixable or a matter of shopping elsewhere.

If the denial cites something you believe is wrong in your credit report, use your right to a free copy from the agency named in the notice. The request must be made within 60 days of receiving the notice.⁹ Once you have the report, dispute any errors in writing directly with the bureau. Include copies of supporting documents, identify each mistake clearly, and send the dispute by certified mail. The bureau has 30 days to investigate.

If the reasons on the notice are too vague to act on, you have grounds to push back. Regulation B does not allow boilerplate. You can request a more detailed explanation from the creditor, and a notice that genuinely fails the specificity standard is itself a compliance violation.

If the reasons are legitimate but reflect real issues, such as a high debt-to-income ratio or too many recent inquiries, the notice at least tells you what to work on. Reapplying elsewhere without addressing the underlying issue rarely produces a different result.

Remedies When the Lender Does Not Comply

Both statutes give consumers a private right of action. Under the ECOA, a creditor that fails to comply is liable for your actual damages plus punitive damages of up to $10,000 in an individual case. In a class action, total punitive damages are capped at the lesser of $500,000 or 1% of the creditor’s net worth. Successful plaintiffs also recover attorney’s fees and costs.¹³

The FCRA distinguishes willful from negligent violations. A willful violation carries statutory damages between $100 and $1,000 per consumer even without proof of actual harm, plus potential punitive damages and attorney’s fees.¹⁴ A negligent violation exposes the lender only to actual damages you can prove, plus attorney’s fees.¹⁵ The FTC can also pursue civil penalties of up to $4,983 per knowing FCRA violation.¹⁶ You have two years from when you discover the violation to file suit, with an outer limit of five years from when it occurred.

1
eCFR. 12 CFR 1002.9 – Notifications
2
Federal Trade Commission. Using Consumer Reports for Credit Decisions
3
eCFR. 12 CFR 1002.2 – Definitions
4
eCFR. 12 CFR 1002.9 – Notifications
5
Federal Register. Consumer Financial Protection Circular 2023-03
6
Consumer Financial Protection Bureau. Comment for 1002.9 – Notifications
7
Office of the Law Revision Counsel. 15 USC 1681m – Requirements on Users of Consumer Reports
8
eCFR. 12 CFR Part 1022 – Fair Credit Reporting (Regulation V)
9
Office of the Law Revision Counsel. 15 USC 1681j – Charges for Certain Disclosures
10
Consumer Financial Protection Bureau. 12 CFR Part 1002 (Regulation B) – 1002.9 Notifications
11
Federal Deposit Insurance Corporation. FDIC Consumer Compliance Examination Manual – X-3 The E-Sign Act
12
Consumer Financial Protection Bureau. 12 CFR 1002.2 – Definitions
13
Office of the Law Revision Counsel. 15 USC 1691e – Civil Liability
14
Office of the Law Revision Counsel. 15 USC 1681n – Civil Liability for Willful Noncompliance
15
Office of the Law Revision Counsel. 15 USC 1681o – Civil Liability for Negligent Noncompliance
16
Federal Register. Adjustments to Civil Penalty Amounts