BNPL Compliance in the US: A Working Checklist
The rule that came and went, and what's actually enforceable today.
BNPL regulation has moved fast enough that guidance written even a year ago is likely out of date. This is a working reference, not legal advice, and worth rereading periodically given how much has already changed.
The rule that came and went
In May 2024, the CFPB issued an interpretive rule stating that BNPL lenders offering digital user accounts qualified as "card issuers" under Regulation Z, meaning many BNPL providers would owe consumers the same billing-dispute and periodic-statement rights as credit card holders. That rule was formally withdrawn on May 12, 2025, along with dozens of other CFPB guidance documents, as part of a broader deregulatory shift. There is currently no federal rule specifically treating BNPL as credit-card-equivalent.
| Status | What it means for a BNPL provider today |
|---|---|
| No active federal BNPL-specific rule | Standard TILA/Reg Z obligations apply only where a product independently meets the definition of credit or a credit card; BNPL gets no special carve-in or carve-out right now |
| State-level rules remain a patchwork | Several states have separately moved on BNPL licensing and disclosure; treat this the same way as commercial financing disclosure, state by state, not settled at the federal level |
| Political direction can shift again | A withdrawn interpretive rule is not the same as a permanent legal conclusion; a future CFPB leadership change could reintroduce similar treatment |
The practical takeaway
The absence of a federal BNPL-specific rule doesn't mean the absence of risk. It means the compliance question shifts to state law and to whether your specific product structure independently triggers standard TILA/Reg Z obligations regardless of the BNPL label. Treat the current quiet as a moving target, not a settled answer.
Want a one-page PDF version of this checklist to keep on hand? Drop your email and it'll be sent your way.