Buy now, pay later regulation in the United States is a patchwork: most BNPL loans fall outside the federal Truth in Lending rules that protect credit card users, the Consumer Financial Protection Bureau’s 2024 attempt to close that gap was withdrawn in May 2025, and what protections you have today depend on a mix of general consumer-protection statutes, state licensing laws, a handful of state BNPL-specific statutes, and the provider’s own policies.1Federal Register. Interpretive Rules, Policy Statements, and Advisory Opinions; Withdrawal
Why BNPL Sits Outside Credit Card Law
The standard BNPL loan splits a purchase into four interest-free installments. Regulation Z, the federal rule implementing the Truth in Lending Act, defines a “creditor” as someone who extends credit that either carries a finance charge or is repayable in more than four installments.2eCFR. 12 CFR 1026.2 – Definitions and Rules of Construction A four-payment, zero-interest plan clears neither trigger. That means no required TILA disclosures, no ability-to-repay checks, and no federal penalty-fee limits.
The exemption predates digital checkout lending by decades. It was written for a furniture store letting you pay off a couch in three monthly installments, not for a product used millions of times a day online. BNPL providers built their business inside that gap.
The CFPB Rule That Came and Went
In May 2024, the CFPB issued an interpretive rule classifying BNPL providers with reusable digital accounts as “card issuers” under Regulation Z. The Bureau’s reasoning turned on the Truth in Lending Act’s broad definition of “credit card” as any “card, plate, coupon book or other credit device.”3Office of the Law Revision Counsel. 15 U.S. Code 1602 – Definitions and Rules of Construction A BNPL digital account, the Bureau argued, is a credit device under that language.
The rule would have triggered credit card protections under Regulation Z’s subpart B, specifically the billing-error dispute rules and refund rights for returned merchandise. It would not have imposed the full range of credit card regulation. The CFPB acknowledged that standard BNPL products don’t qualify as open-end credit, so penalty fee limits and ability-to-repay requirements under subpart G would not apply.4Consumer Financial Protection Bureau. Truth in Lending (Regulation Z) – Use of Digital User Accounts to Access Buy Now, Pay Later Loans
The rule never took hold. In May 2025, the CFPB announced it would not prioritize enforcement and was “contemplating taking appropriate action to rescind” the rule entirely.5Consumer Financial Protection Bureau. CFPB Announcement Regarding Enforcement Actions Related to Buy Now, Pay Later Loans Days later, the Bureau formally withdrew it as part of a broader pullback of guidance documents.1Federal Register. Interpretive Rules, Policy Statements, and Advisory Opinions; Withdrawal The practical effect: BNPL providers are not currently required by federal law to follow credit card dispute-resolution or refund procedures. Whatever you get when you return a BNPL purchase or dispute a charge comes from the provider’s own policies or from state law.
Federal Laws That Still Reach BNPL
Withdrawing the interpretive rule did not erase federal oversight. Several general-purpose statutes still apply, though none were written with BNPL in mind.
The FTC Act
The Federal Trade Commission Act makes unfair or deceptive acts and practices in commerce unlawful and empowers the FTC to stop them.6Office of the Law Revision Counsel. 15 U.S. Code 45 – Unfair Methods of Competition Unlawful; Prevention by Commission If a BNPL provider hides material terms, misleads consumers about fees, or uses deceptive marketing, the FTC can investigate and act whether or not the product qualifies as “credit” under TILA. The agency can prescribe rules defining specific unfair practices and seek monetary relief for harmed consumers.7Federal Trade Commission. Federal Trade Commission Act
The Equal Credit Opportunity Act
ECOA prohibits creditors from discriminating in any aspect of a credit transaction on the basis of race, color, religion, national origin, sex, marital status, or age.8Office of the Law Revision Counsel. 15 U.S. Code 1691 – Scope of Prohibition BNPL providers extend credit, so ECOA applies. The live concern is algorithmic. BNPL underwriting leans on proprietary data models, and models that produce disparate outcomes along protected characteristics can create liability without any intent to discriminate.
The Fair Debt Collection Practices Act
Once a delinquent BNPL account is handed to a third-party collector, the FDCPA governs that collector. The statute covers any obligation to pay money arising from a transaction for personal, family, or household purposes, which includes a BNPL purchase.9Federal Trade Commission. Fair Debt Collection Practices Act Third-party collectors cannot harass, misrepresent the debt, or use unfair collection practices. Note the limit: the FDCPA does not apply to the BNPL provider collecting its own debt, only to outside collectors it hands the account to.
State Regulation Is Where the Action Is
With federal BNPL-specific rules shelved, state law does most of the work. Approaches vary, but they fall into two broad camps.
Licensing Under Existing Lending Laws
Many states classify BNPL arrangements as consumer loans and require providers to hold a state lending license before offering credit to residents. The scope differs by state. Some loan-licensing regimes target only high-interest, small-dollar products that don’t describe a typical BNPL plan; others cast a wider net. Where a license is required, states have been aggressive about enforcing that requirement against providers who lend to residents without one. Licensing typically brings examination authority for state financial regulators along with operational and financial oversight comparable to what other nonbank lenders face.
BNPL-Specific Statutes
A growing number of states have moved beyond general lending frameworks to write laws tailored to BNPL. Some effectively do at the state level what the CFPB’s withdrawn federal rule attempted: require dispute-resolution procedures, mandate disclosures about payment schedules and fees, and cap late charges. State financial regulators generally retain authority to set fee and interest limits and to establish refund and dispute-handling standards. Those requirements often exceed federal minimums or fill the gaps left by TILA’s four-installment exemption.
The Bank-Partnership Wrinkle
Several major BNPL providers don’t actually lend their own money. They partner with FDIC-insured banks that originate the loans, and the BNPL company operates the customer-facing platform. Affirm works primarily through Celtic Bank and Lead Bank; Klarna partners with WebBank.10Congress.gov. Buy Now, Pay Later: Policy Issues and Options for Congress The structure matters because banks can sometimes preempt state lending laws that would otherwise apply to a nonbank fintech.
If the bank is the lender of record, certain state licensing requirements may not attach to the platform. Some states license loan brokers and third-party servicers separately, which can still capture the BNPL platform even when a bank originates the loan. The result depends on how each state treats these intermediary roles, and some BNPL companies have obtained state lending licenses preemptively even when the license isn’t strictly required for their core four-installment product.
Credit Reporting and Your Score
Whether BNPL payments help or hurt your credit is still being sorted out. The core issue is a lack of standardization. The CFPB has pushed BNPL lenders to furnish both positive and negative payment data to credit bureaus and has called for standardized reporting codes suited to the product’s characteristics. Practice is more fragmented. As of the Bureau’s most recent assessment, one major credit bureau accepts BNPL data but lets lenders report in whatever format they choose, and the other two planned to keep BNPL data in separate “specialty” files rather than core credit files. Specialty-file data typically does not appear on traditional credit reports or factor into standard credit scores.11Consumer Financial Protection Bureau. Buy Now, Pay Later and Credit Reporting
Scoring is shifting. In June 2025, FICO launched its first credit scores that incorporate BNPL data: FICO Score 10 BNPL and FICO Score 10 T BNPL. Because consumers tend to open many small BNPL loans in a short window, FICO’s models aggregate multiple loans together when calculating certain variables rather than treating each as a separate new account. FICO says this captures predictive signal without unfairly penalizing the rapid-fire borrowing pattern that’s normal for BNPL.12FICO. FICO Unveils Groundbreaking Credit Scores That Incorporate Buy Now, Pay Later Data Those models are new, and lenders adopt new scoring versions at their own pace. It could be years before most lenders use them in underwriting.
What Missing a Payment Actually Costs
A missed BNPL payment sets off a chain of consequences borrowers don’t always see at checkout. The provider will typically freeze your account against new purchases, and the debt may eventually be turned over to a third-party collector.13Consumer Financial Protection Bureau. What Happens if I Can’t Pay Back a Buy Now, Pay Later (BNPL) Loan? Late-fee policies vary. Some providers charge nothing; others charge fees that scale with the purchase amount, often capped at a percentage of the installment or order value.
The less obvious risk is overdraft exposure. BNPL payments are usually debited automatically from your debit card, credit card, or bank account. When a scheduled auto-debit hits a checking account without enough funds, you can be charged overdraft or non-sufficient-funds fees by your bank on top of the provider’s late fee.14Office of the Comptroller of the Currency. Retail Lending: Risk Management of Buy Now, Pay Later Lending With multiple active BNPL loans across different providers on different schedules, the compounding fees add up quickly. The CFPB’s 2022 report found 7.5 percent of BNPL borrowers experienced a failed or declined payment in 2021.15Consumer Financial Protection Bureau. Buy Now, Pay Later: Market Trends and Consumer Impacts
Once the account reaches a third-party collector, the FDCPA protections described above apply. Collectors must follow strict rules about when and how they contact you, must verify the debt if you dispute it in writing within 30 days, and cannot threaten actions they don’t intend to take. Again, the original provider collecting its own debt is not bound by those same rules.
Pending Federal Legislation and What to Do Now
Congress has shown interest in filling the gap. The Buy Now, Pay Later Protection Act of 2025 (H.R. 6891) was introduced in December 2025.16Congress.gov. H.R. 6891 – Buy Now, Pay Later Protection Act of 2025 As of early 2026, the bill has been introduced but has not advanced through committee. Previous sessions have seen similar proposals fail to move. Without legislation, federal BNPL oversight rests on the general-purpose statutes above and on how aggressively the sitting administration chooses to use them.
For consumers, the practical picture is that BNPL purchases currently carry fewer federal protections than credit card purchases. Dispute rights, refund procedures, and fee limits come primarily from your provider’s policies and your state’s laws rather than a uniform federal standard. Before using BNPL at checkout, it’s worth knowing whether your state requires the provider to be licensed, what the provider’s late-fee and dispute policies actually say, and whether the automatic payment schedule lines up with your cash flow.