Skip to main content
Menu Icon

InfoBytes Blog

Financial Services Law Insights and Observations


Subscribe to our InfoBytes Blog weekly newsletter and other publications for news affecting the financial services industry.

  • CFPB sues online lending platform for alleged CFPA, FCRA violations

    Federal Issues

    On May 17, the CFPB announced a lawsuit against an online lending platform through which consumers could obtain small-dollar, short-term loans through a brokering arrangement with lenders. The CFPB alleged the platform violated the CFPA through its deceptive advertisements to consumers on the platform’s alleged promotion of financing terms which included “no interest,” “0% APR,” or “0% interest” but instead invited consumers to provide “tips” and “donations” to lenders, which, would increase the likelihood of a loan being funded. The CFPB further alleged that while the platform marketed zero-interest loans, the platform did not provide users an option for a $0 donation fee or to skip the fee altogether. The Bureau claimed, “almost all of [the platform’s] loans carry an equivalent annual percentage rate of over 36% APR, and many loans carry an APR in excess of 300%, with some over 1,000%.” The Bureau also claimed the platform violated the CFPA by providing misleading TILA disclosures that did not contain the cost of the additional fees and tips in the quoted total payments.

    The complaint alleged further violations of the CFPA where the platform (i) obscured whether and how borrowers can select the option for no donation or tip; (ii) stated or implied through its practices that consumers were obligated to repay loan amounts although the loans violated the applicable states’ lender-licensing or usury laws that declared such loans void ab initio or limited consumers’ obligation to repay; (iii) requested to collect and collects on void loans consumers were not obligated to repay for the aforementioned reason; (iv) misleadingly implied that it will furnish negative information to the credit bureaus unless the consumer makes a payment, without actually intending to do so; and (v) violated the FCRA.

    The CFPB’s complaint stated that because the platform was a consumer reporting agency under the FCRA and therefore would be required to “follow reasonable procedures to assure maximum possible accuracy of the information concerning the individual about whom the report relates.” The CFPB will seek, among other things, injunctions against the platform to prevent future violations, monetary relief for borrowers, forfeiture of ill-gotten gains, and a civil money penalty.

    Federal Issues Peer-to-Peer Enforcement CFPB Consumer Finance CFPA FCRA

  • Senate Banking Committee hearing on P2P payment scams calls for updates to EFTA definitions

    On February 1, the U.S. Senate Committee on Banking, Housing, and Urban Affairs held a hearing on “Examining Scams and Fraud in the Banking System and Their Impact on Consumers,” and invited three panelists to testify, including an attorney from a consumer law center and two vice presidents from banking associations. Chairman Sherrod Brown (D-OH) led the hearing by noting that peer-to-peer (P2) apps are a rising target among scammers, alongside a rise in check fraud. The Chairman noted a 2023 alert from FinCEN warning (as covered by InfoBytes here) of a surge in check fraud after a “drastic” rise in scams, and concluded with a statement that the P2P companies need “rules to make them” do better. Next, Ranking Member Senator Tim Scott (R-SC) called for the companies to spend more money developing security technologies to protect consumers from fraud. Sen. Scott then called for better education in financial literacy to learn about scams and methods. 

    At the hearing, Mr. John Breyault noted that reported losses from P2P payment platforms nearly doubled from $87 million in 2020 to $163 million in 2022. Mr. Breyault asked Congress to play a larger role in preventing fraud on P2P platforms and urged the passage of the Protecting Consumers from Payment Scams Act (which would expand EFTA’s definition of unauthorized electronic fund transfer to cover fraudulently induced payments). Ms. Carla Sanchez-Adams, in her testimony, asserted the entire burden of payment fraud should not fall on the customers and advocated for an updated Electronic Funds Transfer Act that protects consumers from fraudulently-induced transactions. She testified that receiving institutions should have more responsibility, and called for anti-fraud policies that protect consumers from having their accounts frozen, among others. Mr. Paul Benda testified to similar points: he called for an increase in consumer education and the closure of regulatory loopholes to stop impersonation scams. He testified in favor of improved information sharing and enhanced collaboration with law enforcement and regulators.  

    Bank Regulatory Peer-to-Peer Fraud Senate Banking Committee EFTA U.S. Senate Federal Issues

  • SBA issues new SBLC licenses for the first time in 40 years

    Federal Issues

    On November 1, the SBA announced that three new Small Business Lending Company (SBLC) licenses have been issued to lenders focused on underserved markets, which is notably the first expansion of the SBLC program in more than 40 years. An SBLC license permits lending institutions to leverage government guarantees during the process of approving small business loans, decreasing risk for the lender, and lowering costs for the borrower. Consequently, SBA noted, SBLCs can extend a greater number of loans to small businesses than would be feasible without government support. The announcement stated that SBA's current SBLCs surpass banks and credit unions in their ability to provide loans to minority-owned businesses.

    In June, the SBA opened a window for new applications for lenders. In announcing the new licensees, SBA Administrator Isabel Guzman stated that “[w]ith the addition of three new Small Business License Companies, the SBA will be able to serve even more small business owners who need capital to start, operate, and grow their businesses.” The SBA highlighted that “[e]ach of the three new SBLC license holders will focus on historically underserved markets, including small businesses in Native, rural, and low-income communities.”

    Federal Issues SBA Nonbank Consumer Finance Peer-to-Peer Loans Small Business Lending Biden Licensing

  • Senate passes resolution seeking to nullify CFPB’s small business lending rule

    Federal Issues

    Recently, the U.S. Senate passed a joint resolution of disapproval (S.J. Res. 32) under the Congressional Review Act to nullify the CFPB’s small business lending rule. As previously covered on InfoBytes, the rule, which requires financial institutions to collect and report to the CFPB credit application data for small businesses, has faced opposition from various politicians and is the subject of litigation brought by financial institutions that would be subject to the rule in the U.S. District Court of the Southern District of Texas. In support of the joint resolution, Sen. John Kennedy (R-LA), who introduced the legislation, recently argued on the floor that “the CFPB is setting these small business people… up for lawsuits” because “[it] has promulgated a rule that totally perverts our intention in section 1071.”  If the House of Representatives similarly passes the joint resolution, and President Biden signs it, the CFPB’s rule will be nullified under the Congressional Review Act.

    The joint resolution follows the order from the U.S. District Court for the Southern District of Texas granting a nationwide preliminary injunction enjoining the CFPB from enforcing the rule (covered by InfoBytes here and here).

    Federal Issues CFPB Section 1071 Congress Peer-to-Peer Small Business Lending Texas

  • CFPB general counsel highlights risks in payments industry

    Federal Issues

    On May 9, CFPB General Counsel and Senior Advisor to the Director, Seth Frotman, discussed the evolution of the payments system and its significant impact on consumer financial protection. Speaking before the Innovative Payments Association, Frotman commented that over the past few years, growth in the use of noncash payments (i.e. ACG, cards, and checks) accelerated faster from 2018 to 2021 than in any previous period, with the value of noncash payments since 2018 increasing nearly 10 percent per year, approaching almost $130 trillion in 2021. The value of ACH transfers and the number of card payments also increased tremendously, Frotman noted, pointing to a rapid decline in ATM cash withdrawals and the use of checks. He observed that the use of peer-to-peer (P2P) payment platforms and digital wallets is also growing quickly, with more traditional financial institutions redoubling their efforts to expand product offerings to capture market shares in this space. Additionally, several large tech firms, drawing on their significant customer bases and brand recognition, are looking to integrate payment services into their operating systems, with some offering payment products used by consumers daily, Frotman said.

    Addressing concerns relating to data harvesting and privacy, Frotman said the Bureau is concerned that companies, including big tech companies, are using payment data to engage in behavioral targeting or individualized marketing, while some companies are sharing detailed payments information with data brokers or third parties as a way to monetize data. These behaviors, which he said only increase as payment systems continue to grow, raise the potential for harm, including limiting competition and consumer choice and stifling innovation. Frotman added that these issues are not limited to big tech. Banks, Frotman said, are also rolling out digital wallets as a way to access payment information, and Buy Now Pay later lenders are collecting consumer data “to increase the likelihood of incremental sales and maximize the lifetime value extracted from each current, past, or potential borrower.” Frotman reminded attendees that the Bureau has several critical tools at its disposal to address concerns about how data is bought, sold, used, and protected, and warned the payments industry to comply with applicable legal requirements.

    Frotman also discussed challenges facing “gig” and other non-standard workers when trying to navigate consumer financial markets, particularly with respect to the intersection between how workers are being paid and the EFTA. According to Frotman, the Bureau is concerned about whether gig workers are being improperly required to receive payments through a particular financial institution or via a particular payment product or app. Frotman instructed employers to provide payment options that do not require workers to establish an account with a particular institution to ensure they do not run afoul of the EFTA’s “compulsory use” provision. Consumers who use a personal P2P app for work transactions are also entitled to EFTA protections with respect to fraud and error resolution, Frotman added. Frotman closed his remarks by touching briefly on liquidity and stability in the P2P payment system. He warned that consumers who use P2P payment products to store funds do not have the same level of protection as consumers who use traditional banking products.

    Federal Issues CFPB Payments Privacy, Cyber Risk & Data Security Consumer Finance Peer-to-Peer Digital Wallets EFTA

  • FinCEN prohibits engagement with virtual currency exchange connected to Russian finance

    Financial Crimes

    On January 18, the Financial Crimes Enforcement Network (FinCEN) issued its first order pursuant to section 9714(a) of the Combating Russian Money Laundering Act to identify a Hong Kong-registered global virtual currency exchange operating outside of the U.S. as a “primary money laundering concern” in connection with Russian illicit finance. FinCEN announced that the virtual currency exchange offers exchange and peer-to-peer services and “plays a critical role in laundering Convertible Virtual Currency (CVC) by facilitating illicit transactions for ransomware actors operating in Russia.” A FinCEN investigation revealed that the virtual currency exchange facilitated deposits and funds transfers to Russia-affiliated ransomware groups or affiliates, as well as transactions with Russia-connected darknet markets, one of which is currently sanctioned and subject to enforcement actions that have shuttered its operations. The investigation also found that the virtual currency exchange failed to meaningfully implement steps to identify and disrupt the illicit use and abuse of its services, and lacked adequate policies, procedures, or internal controls to combat money laundering and illicit finance.

    Recognizing that the virtual currency exchange “poses a global threat by allowing Russian cybercriminals and ransomware actors to launder the proceeds of their theft,” FinCEN acting Director Himamauli Das emphasized that “[a]s criminals and criminal facilitators evolve, so too does our ability to disrupt these networks.” He warned that FinCEN will continue to leverage the full range of its authorities to prohibit these institutions from gaining access to and using the U.S. financial system to support Russian illicit finance. Effective February 1, covered financial institutions are prohibited from engaging in the transmittal of funds from or to the virtual currency exchange, or from or to any account or CVC address administered by or on behalf of the virtual currency exchange. Frequently asked questions on the action are available here.

    Concurrently, the DOJ announced that the founder and majority owner of the virtual currency exchange was arrested for his alleged involvement in the transmission of illicit funds. Charged with conducting an unlicensed money transmitting business and processing more than $700 million of illicit funds, the DOJ said the individual allegedly “knowingly allowed [the virtual currency exchange] to become a perceived safe haven for funds used for and resulting from a variety of criminal activities,” and was aware that the virtual currency exchange’s accounts “were rife with illicit activity and that many of its users were registered under others’ identities.” While the virtual currency exchange claimed it did not accept users from the U.S., it allegedly conducted substantial business with U.S.-based customers and advised users that they could transfer funds from U.S. financial institutions. 

    Deputy Secretary of the Treasury Wally Adeyemo issued a statement following the announcement, noting that the action “is a unique step that has only been taken a handful of times in Treasury’s history for some of the most egregious money laundering cases, and is the first of its kind specifically under new authorities to combat Russian illicit finance.” He reiterated that the action “sends a clear message that we are prepared to take action against any financial institution—including virtual asset service providers—with lax controls against money laundering, terrorist financing, or other illicit finance.”

    Financial Crimes Of Interest to Non-US Persons FinCEN Department of Treasury DOJ Digital Assets Anti-Money Laundering Russia Enforcement Virtual Currency Illicit Finance Peer-to-Peer

  • DFPI orders online platform to cease offering crypto-related products

    State Issues

    On December 21, the California Department of Financial Protection and Innovation (DFPI) announced it has ordered an online platform offering several crypto-related services and products to desist and refrain from violating the California Securities Law and the California Consumer Financial Protection Law. According to DFPI, the company, which is registered with the California Secretary of State, offers services including (i) a peer-to-peer loan brokering service in which it claims that loans are secured by borrowers’ crypto assets; (ii) an interest-bearing crypto asset account that promises a fixed annual percentage rate yield; and (iii) an interest-bearing fiat account that promises a fixed annual percentage interest rate return. DFPI maintained that the company engaged in unlicensed loan brokering by offering and providing brokering services for personal loans made from one consumer to another (known as peer-to-peer lending), and conducted the unregistered sale of securities, in which consumers’ assets were pooled together with the stated purpose of generating passive returns. DFPI claimed that the company was and is not registered to offer investment contracts or to operate in this capacity with any relevant authority. Finding that these peer-to-peer lending services and interest-bearing accounts violate state law, including a prohibition against engaging in unlawful acts or practices, DFPI ordered the company to stop offering the services and products in California.

    State Issues Digital Assets State Regulators DFPI California Cryptocurrency Securities California Securities Law California Consumer Financial Protection Law Peer-to-Peer Licensing Enforcement

  • Seven largest U.S. banks answer committee questions on overdraft fees and P2P fraud

    Federal Issues

    On September 22, the Senate Banking Committee held a hearing entitled “Annual Oversight of the Nation’s Largest Banks” where chief executive officers from the seven largest U.S. retail banks testified on bank activities related to topics including peer-to-peer (P2P) payment networks; mortgage practices; overdraft fees; forced arbitration; and environmental, social, and governance agendas. Among other things, senators pushed the CEOs to take more aggressive action to eliminate overdraft fees and compensate P2P payment fraud victims.

    • Overdraft fees. Democratic senators stressed that charges still fall too heavily on low-income and minority customers, with Senator Bob Menendez (D-NJ) saying that there is “no reasonable explanation to continue to charge overdraft fees on working families.” The CEOs discussed their respective efforts to relax overdraft policies to reduce fees, with one CEO noting that “there are a lot of occasions where if [overdraft protection] is not used, [customers] would be charged a higher fee on the other side.” These fees, he noted, “can often reduce the cost on the other side and stop them from going to payday lenders.” Another CEO added that he believes “giving people a choice and letting them opt in or out is the proper thing to do.” One bank CEO noted that his bank offers two accounts with no fees and provides customers the opportunity to choose in the moment if they want to return or pay for an item.
    • P2P platforms. Senators Sherrod Brown (D-OH) and Elizabeth Warren (D-MA) asked the CEOs if they would give customers their money back if they are defrauded on a certain P2P platform and complain to the bank. The CEOs emphasized that their banks currently reimburse customers for fraud and “unauthorized transactions” and are taking measures to reduce the incidence of fraud, including educating consumers on how to detect scams. “There’s a tremendous amount that we can do as owners of the network to drive down the ability for thieves to take advantage of the network,” one CEO said when asked if banks believe it is their responsibility to make a consumer whole again. “That is what we're working on. That’s what we have to do.” Another CEO pointed out that other P2P platforms have “15 times the number of disputes” coming into the bank than the highlighted platform. One CEO also stressed that banks need to work through partnerships with law enforcement and regulatory agencies “to actually catch the criminals who are perpetuating this fraud against our customers.”

    The previous day, the same CEOs discussed similar topics during the House Financial Services Committee’s hearing entitled “Holding Megabanks Accountable: Oversight of America’s Largest Consumer Facing Banks.” Several proposed bills containing provisions that would impact the banks if enacted were also discussed, including those that would (i) improve dispute procedures and disclosures related to reinvestigations of consumer reports (see H.R. 4120); (ii) amend and modernize bank merger laws (see H.R. 5419); and (iii) amend Community Reinvestment Act provisions to improve the assessment process for financial institutions (see H.R. 8833).

    During the hearing (see committee memorandum here), committee members questioned the CEOs on a broad range of topics related to consumer protection compliance, enforcement, diversity initiatives, capital standards, emerging technologies and cybersecurity, merchant category codes for firearm purchases, and banking deserts. The CEOs addressed ways their banks have engaged in “responsible growth” and spoke on measures they have taken to bolster customer relations, including modifying overdraft practices. They also noted they are working on improving data protection and cybersecurity. In discussing P2P digital payment services, one CEO emphasized that “scams are growing daily” and regulators and legislators need to respond. He added that “[i]t’s not enough that we apportion blame after the fact. We need to stop fraud and scams before they occur. Secure [P2P] networks, real-time payments, and potentially FedNow allow for direct authentication with a host bank. They also allow members of the network to identify [] and police against scam accounts. This is not the case with nonbank networks. These networks are not held to the same security standards as banks.” He stated that banks “have zero visibility into where the money went, zero capability to recover the money, and zero capability to close the bad account.”

    Federal Issues House Financial Services Committee Senate Banking Committee Consumer Finance Overdraft Peer-to-Peer

  • Senate Democrats urge CFPB for guidance on P2P apps

    Federal Issues

    On September 1, five Senate Democrats sent a letter to CFPB Director Rohit Chopra urging the Bureau to issue guidance to provide better tools to protect older Americans and their families from the increased prevalence of P2P fraud. The letter discussed that, according to the FTC, P2P apps are used by scammers because “the ease with which consumers may make payments to individuals they have never met on P2P platforms facilitates quick purchasing decisions.” The FTC also found that older adults are increasingly using payment apps or services, noting that P2P-related complaints received by the FTC tripled from 2019 to 2020, and older adults reported $10 million in losses associated with complaints related to payment apps and services in 2020 alone. The letter concluded that the CFPB should “move forward with the guidance under consideration, keeping in mind the disproportionate effect that frauds and scams have on communities of color and people with Limited English Proficiency.”

    Federal Issues U.S. Senate CFPB Elder Financial Exploitation Peer-to-Peer Electronic Payments Consumer Finance

  • Online payments system company settles FTC privacy, security, and money transfer allegations

    Privacy, Cyber Risk & Data Security

    On February 23, the FTC announced a proposed settlement with a global online payments system company (company) to resolve a complaint filed in 2016 concerning allegations that its payment and social networking service (service) violated the FTC Act when it, among other things, failed to adequately disclose to consumers that transfers to external bank accounts were subject to review and that funds could be frozen or removed based on a review of the underlying transaction. According to FTC allegations, many consumers who relied on notifications from the service that funds were available for transfer found themselves unable to pay rent or other bills. In some instances, the service reversed transactions after initially notifying consumers the funds were available. Additionally, the service allegedly violated the Gramm-Leach-Bliley Act’s Privacy and Safeguard Rules (GLBA Rules) by misleading consumers about protections for their accounts when it claimed to use “bank-grade security systems” and failed to have a written security program or implement basic security safeguards. As a result, the FTC claims unauthorized users were able to, in certain cases, withdraw funds from consumer accounts or change passwords and/or associated email addresses without consumers being notified.

    Under the proposed settlement, the company—which did not admit or deny liability and is not required to pay a fine—has agreed that it will not misrepresent any material restrictions on the use of its service, the extent of control provided by any privacy settings, and the extent to which it “implements or adheres to a particular level of security.” The company will also, among other things, make certain disclosures to consumers about its transaction and privacy practices, obtain biennial third-party assessments of its compliance with these rules for 10 years, and refrain from violating any provisions of the GLBA Rules.

    Privacy/Cyber Risk & Data Security FTC Peer-to-Peer Settlement Gramm-Leach-Bliley FTC Act


Upcoming Events