If your business finances its own customers, the legal requirements for in-house financing come from several directions at once: federal credit laws set what you must disclose and how you must treat applicants, state law decides whether you can lend at all and how much interest you can charge, and separate rules govern how you handle borrower data and report interest to the IRS. Get each layer right before you write your first contract, because the penalties for missteps are calculated per loan and add up fast.
Federal Credit Disclosures
The Truth in Lending Act requires you to give every borrower standardized written disclosures before the deal closes, so credit offers can be compared on the same terms.1Office of the Law Revision Counsel. 15 USC 1601 Congressional Findings and Declaration of Purpose Regulation Z sets the format. Your disclosure box has to spell out:
- The annual percentage rate, labeled exactly that way, combining the interest rate with any mandatory prepaid finance fees.
- The finance charge, meaning the total dollar cost of credit over the life of the loan.
- The amount financed, meaning the net credit provided.
- The total of payments the borrower will make.
- The payment schedule: number, amount, and due dates.
- The total sale price, combining cash price, other charges, and the finance charge.2Office of the Law Revision Counsel. 15 USC Chapter 41 Subchapter I Consumer Credit Cost Disclosure
A borrower who sues over a disclosure violation on a typical closed-end contract can recover twice the total finance charge plus attorney’s fees and court costs.3Office of the Law Revision Counsel. 15 USC 1640 Civil Liability On a high-interest, multi-year contract that is a serious number, and class actions raise the ceiling further, up to the lesser of $1 million or 1% of the lender’s net worth.
Anti-Discrimination Rules
The Equal Credit Opportunity Act prohibits denying credit or offering worse terms based on race, color, religion, national origin, sex, marital status, or age, provided the applicant can legally contract.4Office of the Law Revision Counsel. 15 USC 1691 Scope of Prohibition It also bars discrimination based on whether an applicant’s income comes from public assistance or on the applicant having previously exercised consumer protection rights.5eCFR. 12 CFR Part 1002 Equal Credit Opportunity Act Regulation B
Practically, this means your approval criteria have to rest on financial factors: income, debt load, payment history. Write your standards down and apply them the same way every time. Informal, gut-level decisions leave you with nothing to show a regulator or a plaintiff.
State Licensing and Interest Rate Limits
Federal law handles disclosures and fair treatment. The authority to actually lend sits with the states. Most require a consumer finance or installment lender license before you make consumer loans, and many run their licensing through the Nationwide Multistate Licensing System. Application fees range from a few hundred to several thousand dollars. If you finance buyers across state lines, you may need a license in every state where your borrowers live.
Every state also sets its own usury cap on consumer loans, and the caps vary widely. Some states permit 36% or higher on certain loan types; others sit well below that. Charging above the legal ceiling can void the interest portion of your contract, trigger statutory penalties, and open the door to predatory lending claims. Know the cap in every state where you lend before you set your rates.
What the Financing Contract Must Contain
Your agreement is both a sales contract and a loan contract, and it needs to hold up as both. Capture the borrower’s full legal name, Social Security number, current address, and verified employment and income. The Social Security number is required for credit bureau reporting and Fair Credit Reporting Act compliance.6Office of the Law Revision Counsel. 15 USC 1681 Congressional Findings and Statement of Purpose
If the loan is secured, describe the collateral with enough detail that anyone reading the contract could identify what is pledged. The Uniform Commercial Code requires a description that “reasonably identifies” the property; a blanket phrase like “all of the buyer’s property” will not hold up.7Cornell Law School. Uniform Commercial Code 9-108 Sufficiency of Description Use make, model, serial number, or VIN where they apply.
Late Fees and Default
Spell out the dollar amount of any late fee, any grace period, and the point at which missed payments constitute default. State law controls late fee amounts on installment loans, and most states cap them either as a flat dollar figure or a percentage of the overdue payment.8Consumer Financial Protection Bureau. When Are Late Fees Charged on a Car Loan? Stay inside your state’s limit and make the trigger unmistakable.
Prepayment
Decide whether the contract will impose a penalty for early payoff. Federal law bans prepayment penalties on certain loan types, including some manufactured housing loans and most residential mortgages, but no blanket federal ban covers all consumer installment credit. Many states restrict or prohibit prepayment penalties on consumer loans. If you allow penalty-free early payoff, say so in the contract.
Reviewing Applications and Handling Denials
Every application goes through the same process. Pull the credit report, verify income against pay documentation or the employer directly, and calculate debt-to-income against your written threshold. Consistency is what protects you when a rejected applicant asks why.
The rules on denials are strict. If you decline a credit application based even partly on information from a credit report, federal law requires a written adverse action notice containing:
- The name, address, and phone number of the credit bureau that supplied the report.
- A statement that the bureau did not make the denial decision and cannot explain it.
- The credit score used in the decision.
- Notice of the applicant’s right to a free copy of the report from that bureau within 60 days.
- Notice of the right to dispute inaccurate information on the report.9Office of the Law Revision Counsel. 15 USC 1681m Requirements on Users of Consumer Reports
The notice must go out within 30 days of the completed application, and the same 30 days apply if you are declining because the application is incomplete.10Consumer Financial Protection Bureau. 12 CFR 1002.9 Notifications Skipping the notice or sending it late violates both the Fair Credit Reporting Act and the Equal Credit Opportunity Act, with separate liability under each. Build a template and use it every time.
Signing, Delivery, and Recordkeeping
You can execute the contract on paper or through an electronic signature platform. The federal E-Sign Act gives electronic signatures the same legal effect as handwritten ones, provided the borrower has consented to doing business electronically and has not withdrawn that consent.11National Credit Union Administration. Electronic Signatures in Global and National Commerce Act E-Sign Act A digital platform must also give the borrower the option to receive paper documents and explain how to request them.
Verify identity before capturing the signature. Federal banking guidance calls for at least one unexpired identification document showing nationality or residence, such as a driver’s license or passport, and encourages reviewing more than one where possible.12FFIEC BSA/AML Manual. Assessing Compliance with BSA Regulatory Requirements Customer Identification Program Give the borrower a complete copy of the signed agreement immediately.
Regulation Z requires you to keep evidence of your compliance with the disclosure rules for at least two years after the date disclosures were required or action was required to be taken.13Consumer Financial Protection Bureau. 12 CFR 1026.25 Record Retention In practice, hold signed contracts, disclosure forms, payment histories, credit reports, and correspondence for the full life of the loan plus a few additional years, because disputes and audits often surface after a loan closes.
A boundary worth flagging: the federal Fair Debt Collection Practices Act generally applies only to third-party debt collectors, not to businesses collecting on debts they originated. Several states apply similar restrictions to original creditors, so your own collection practices still need to be professional and documented, and any outside agency you hire falls fully under the federal rules.
Tax Reporting on Interest Income
Interest you earn from financing customers is ordinary income. The IRS treats seller-financed transactions as installment sales, so you report the interest portion of each payment in the year you receive it, with principal handled separately under the installment sale rules.14Internal Revenue Service. Publication 537 Installment Sales
Watch the applicable federal rate. If your contract’s interest rate falls below the AFR for the loan’s term, the IRS will impute a higher rate and recharacterize part of each principal payment as disguised interest. The AFR changes monthly and varies by term. For seller-financed transactions of $7,296,700 or less, the test rate is capped at 9% compounded semiannually, but your stated rate still needs to meet or exceed the AFR for the term to avoid recharacterization.14Internal Revenue Service. Publication 537 Installment Sales
For reporting, if you pay or credit $10 or more in interest to any person during the year, file Form 1099-INT with the IRS and send the borrower a copy.15Internal Revenue Service. About Form 1099-INT Interest Income If the loan is secured by property the borrower uses as a personal residence, also report the interest on Schedule B of your own return with the borrower’s name, address, and Social Security number.
Protecting Customer Financial Data
Collecting Social Security numbers, bank account details, and credit reports puts you inside two federal data frameworks.
The FTC Safeguards Rule
The Safeguards Rule requires non-banking financial institutions, a category that includes motor vehicle dealers, installment lenders, and other businesses extending consumer credit, to maintain a written information security program.16Federal Trade Commission. FTC Amends Safeguards Rule to Require Non-Banking Financial Institutions Report Data Security Breaches The program scales to your size but has to cover core elements:
- A qualified individual designated to run the program.
- A written risk assessment, updated periodically.
- Access controls that limit who can view customer information, with regular reviews.
- Encryption of customer data in storage and in transit.
- Multi-factor authentication for anyone accessing customer records.
- A written incident response plan for unauthorized access.17Federal Trade Commission. FTC Safeguards Rule What Your Business Needs to Know
The rule also requires secure disposal of customer information no later than two years after you last used it to serve the customer, unless another law’s retention rule (like the Regulation Z two-year requirement) keeps it alive longer.
Privacy Notices Under Gramm-Leach-Bliley
The Gramm-Leach-Bliley Act requires a clear, written privacy notice describing how you collect, use, and share the borrower’s personal financial information.18Office of the Law Revision Counsel. 15 USC 6802 Obligations with Respect to Disclosures of Personal Information Deliver it when the customer relationship is established, meaning at or before loan closing. If you share information with nonaffiliated third parties beyond what is needed to service the loan, borrowers must get the chance to opt out first.
The notice has to be in plain language and presented so the borrower actually sees it, not buried in the signing stack. Electronic delivery requires acknowledgment as part of the transaction. Send an updated notice at least once every 12 months for as long as the customer relationship lasts.