The Consumer Financial Protection Bureau, or CFPB, is the federal agency that writes and enforces the rules covering consumer financial products such as mortgages, credit cards, student loans, auto loans, bank accounts, debt collection, and credit reporting. Congress created it through the Dodd-Frank Wall Street Reform and Consumer Protection Act in 2010, pulling together consumer-protection powers that had been scattered across more than a dozen agencies. Since then, the bureau reports it has returned about $19.7 billion to roughly 195 million consumers through enforcement actions.1Consumer Financial Protection Bureau. Enforcement by the Numbers Its practical work falls into four buckets: writing rules, supervising companies, enforcing the law, and handling consumer complaints.
Writing the Rules You Actually Encounter
The bureau’s director has broad authority to issue regulations that carry the force of law across consumer finance.2Office of the Law Revision Counsel. 12 USC 5512 – Rulemaking Authority Most people run into these rules without knowing it, through the standardized forms and disclosures they get when opening an account or taking out a loan.
Mortgage Disclosures
The CFPB’s TILA-RESPA Integrated Disclosure rule combined two older sets of mortgage forms into a single format. Lenders have to deliver a Loan Estimate within three business days of receiving your application, and the document follows specific formatting so you can compare offers side by side.3Consumer Financial Protection Bureau. TILA-RESPA Integrated Disclosure FAQs The agency also updates Truth in Lending thresholds each year. For 2026, consumer credit transactions above $73,400 that are not secured by real property are exempt from certain Regulation Z protections.4Consumer Financial Protection Bureau. Agencies Announce Dollar Thresholds for Applicability of Truth in Lending and Consumer Leasing Rules
Debt Collector Calls
Under Regulation F, a collector is presumed to violate the law if it calls you more than seven times within a seven-day period about a particular debt, or calls within seven days after having already spoken with you about that debt.5eCFR. Part 1006 – Debt Collection Practices (Regulation F) The older Fair Debt Collection Practices Act barred “repeated or continuous” calls without saying how many that meant, so the Regulation F numbers gave both sides a concrete line.
Access to Your Own Bank Data
Under Section 1033 of Dodd-Frank, the bureau finalized a Personal Financial Data Rights rule that would require banks and other financial institutions to share your account data, at no charge, with third-party apps you authorize. Data providers would have to share at least 24 months of transaction history, account balances, and terms and conditions in a machine-readable format.6eCFR. Part 1033 – Personal Financial Data Rights Banks with $250 billion or more in assets faced an initial compliance deadline of April 1, 2026, but the bureau issued an advance notice of proposed rulemaking in August 2025 reconsidering several parts of the rule, including whether institutions can charge for data sharing.7Consumer Financial Protection Bureau. Personal Financial Data Rights Reconsideration Whether it takes effect on the original schedule is an open question.
Supervising Banks and Nonbanks
The bureau’s supervisory reach depends on what kind of company you’re dealing with and how big it is. That determines whether CFPB examiners can walk in, review the company’s records, and require changes.
- Large banks and credit unions. The CFPB has exclusive authority to examine depository institutions with more than $10 billion in total assets for compliance with federal consumer financial laws. If your bank is smaller, its main consumer-protection regulator is the OCC, FDIC, or another prudential regulator instead.8Office of the Law Revision Counsel. 12 USC 5515 – Supervision of Very Large Banks, Savings Associations, and Credit Unions
- Certain nonbank companies. The bureau supervises specific types of nonbank financial companies regardless of size, including mortgage originators and servicers, private student lenders, and payday lenders. It can also assert supervisory authority over “larger participants” in markets like debt collection and credit reporting, and over any nonbank it has reasonable cause to believe is harming consumers.9Office of the Law Revision Counsel. 12 USC 5514 – Supervision of Nondepository Covered Persons
- Auto dealers are carved out. The CFPB cannot exercise rulemaking, supervisory, or enforcement authority over auto dealers that are primarily in the business of selling or leasing vehicles, even though dealer-arranged financing is one of the most common consumer credit transactions. If your complaint is against a dealer for the financing side of a car purchase, the CFPB is not the right forum.10Office of the Law Revision Counsel. 12 USC 5519 – Exclusion for Auto Dealers
During examinations, the bureau can issue civil investigative demands that compel companies to hand over documents, answer written questions, or provide testimony.11Bureau of Consumer Financial Protection. Request for Information Regarding Bureau Civil Investigative Demands and Associated Processes These function much like subpoenas, and companies that refuse to comply face court enforcement.
Enforcing the Law and Returning Money
The bureau’s broadest enforcement tool is the prohibition against unfair, deceptive, or abusive acts or practices. That standard lets it challenge deceptive marketing, hidden fees, and contract terms that exploit consumers who don’t fully understand what they’ve agreed to.12Office of the Law Revision Counsel. 12 USC 5531 – Prohibiting Unfair, Deceptive, or Abusive Acts or Practices The bureau can bring cases in federal court or through its own administrative proceedings, and available remedies include contract rescission, refunds, restitution, disgorgement of profits, and civil penalties.
Civil penalties fall into three tiers, with inflation-adjusted maximums as of January 2025:13Federal Register. Civil Penalty Inflation Adjustments
- Tier 1, for any violation: up to $7,217 per day.
- Tier 2, for reckless violations: up to $36,083 per day.
- Tier 3, for knowing violations: up to $1,443,275 per day.
The bureau also enforces 18 other federal consumer financial laws, including the Fair Credit Reporting Act, the Fair Debt Collection Practices Act, and the Equal Credit Opportunity Act.14Office of the Law Revision Counsel. 12 USC 5565 – Relief Available
Rules That Did Not Survive Court Review
Two recent examples show the limits of the bureau’s reach. In 2024, it finalized a rule that would have capped credit card late fees at $8 for large issuers. A federal court in Texas found the rule likely violated the Credit Card Act, and in April 2025 the bureau agreed to vacate it. Late fees reverted to the prior safe harbor amounts of $30 for a first missed payment and $41 for subsequent ones.
The bureau also finalized a rule in January 2025 that would have banned most medical debt from credit reports, but a federal court vacated it in July 2025, finding it exceeded the bureau’s authority under the Fair Credit Reporting Act.15Consumer Financial Protection Bureau. CFPB Finalizes Rule to Remove Medical Bills from Credit Reports Medical debt can still appear on credit reports nationally, though roughly 15 states have passed their own versions of the ban.
Handling Your Complaint
Filing a complaint is the CFPB function most directly useful to individual consumers. You can submit one about credit cards, mortgages, student loans, auto loans, bank accounts, debt collection, credit reporting, money transfers, payday loans, and prepaid cards.16Consumer Financial Protection Bureau. Consumer Complaint Database
What To Submit
Gather your contact information, the company’s name, relevant account numbers, and supporting documents such as billing statements, collection letters, or emails. The online form at consumerfinance.gov/complaint walks you through each step, or you can call (855) 411-2372. You generally cannot submit a second complaint about the same issue, so include everything the first time.17Consumer Financial Protection Bureau. Submit a Complaint About a Financial Product or Service Describe the problem in your own words with the key dates and amounts, state the resolution you want, and attach up to 50 pages of supporting documents.
What Happens Next
The bureau forwards your complaint directly to the company, which generally responds within 15 days. If more time is needed, the company must explain why, and most cases receive a final response within 60 days. You can track status through a secure online portal and will get email updates as the case progresses.18Consumer Financial Protection Bureau. Learn How the Complaint Process Works The company is expected to address the issues you raised and describe any steps taken to fix them.
De-identified complaint information is published in the public Consumer Complaint Database, which anyone can search. The bureau uses patterns in that data to identify systemic problems and direct its enforcement resources.
Protections for Servicemembers
The CFPB has a dedicated Office of Servicemember Affairs and enforces the Military Lending Act, which caps the interest rate on most consumer credit extended to active-duty military personnel and their dependents at 36 percent. The rate cap covers not just interest but also finance charges, credit insurance premiums, and fees for add-on products sold with the loan.19Consumer Financial Protection Bureau. Military Lending Act (MLA) Lenders also cannot charge prepayment penalties on covered loans to servicemembers or force them into mandatory arbitration.
Whistleblower Protections
Section 1057 of the Consumer Financial Protection Act prohibits financial companies from retaliating against employees who report potential violations of laws the CFPB enforces. Protected activities include providing information to the bureau or other law enforcement, testifying about potential violations, and refusing to participate in activities the employee reasonably believes are illegal.20Consumer Financial Protection Bureau. CFPB Circular 2024-04 – Whistleblower Protections Under CFPA Section 1057 An employee who faces retaliation can file a complaint with the Department of Labor, which investigates and adjudicates these claims. Contractual provisions that try to waive these protections, including pre-dispute arbitration agreements, are generally unenforceable.
Where the Agency Stands Right Now
In early February 2025, the acting director ordered all staff and contractors to stop performing work tasks and effectively closed the agency’s office. Within days, employees were terminated or placed on administrative leave, and almost all investigations, litigation, rulemaking, and public communications were halted. A federal court issued a preliminary injunction ordering the bureau to reinstate terminated employees, stop enforcing the shutdown order, and preserve all agency records. The administration appealed. As of mid-2025, the bureau’s senior enforcement leadership had resigned in protest, and the agency has signaled it could run out of operating funds by early 2026.
The bureau’s statutory authority still exists, courts have ordered it to keep functioning, and its regulations remain on the books. But enforcement activity has slowed sharply, and several major rules have been vacated or abandoned. If you’re counting on the CFPB to investigate a company or push a new consumer protection through, expect an unpredictable timeline. The complaint process, the existing rules, and the servicemember and whistleblower protections all still apply in the meantime.