Consumer Financial Protection Bureau

The CFPB is the U.S. agency that administers federal consumer-finance laws through rules, supervision, enforcement, complaints, research, and education.

The Consumer Financial Protection Bureau (CFPB) is the U.S. federal agency responsible for administering and enforcing federal consumer financial law within its statutory authority. It writes rules, supervises covered banks and nonbank financial companies, brings enforcement actions, processes consumer complaints, monitors markets, conducts research, and publishes educational resources.

The CFPB focuses on consumer financial products and services such as mortgages, credit cards, deposit accounts, credit reporting, debt collection, money transfers, and certain consumer loans. It is not the general regulator for securities markets, insurance companies, investment performance, or every financial dispute.

Key Takeaways

  • Title X of the Dodd-Frank Act created the CFPB and consolidated consumer-finance functions previously divided among several federal agencies.
  • The Bureau began exercising transferred authorities on July 21, 2011.
  • Rulemaking, supervision, enforcement, and complaint handling are different functions; one does not automatically trigger another.
  • CFPB jurisdiction depends on the law, product, provider, institution size, market, and activity.
  • The Bureau supervises certain depository institutions and specified nonbank consumer-finance companies, but other federal and state regulators retain important authority.
  • A CFPB complaint can obtain and document a company response, but it is not a court judgment, guarantee of reimbursement, or substitute for meeting legal deadlines.
  • Current obligations should be checked in the statute, eCFR, Federal Register, and applicable agency materials because rules and policies can change.

Why the CFPB Was Created

Before 2010, responsibility for federal consumer financial protection was distributed across multiple agencies whose primary missions also included safety and soundness, monetary policy, competition, or other regulatory objectives. The financial crisis exposed weaknesses in mortgage origination, servicing, disclosures, underwriting, and oversight of some nonbank providers.

Title X of the Dodd-Frank Act created a single bureau focused on consumer financial markets. Its statutory purpose is to implement and, where applicable, enforce federal consumer financial law so consumers can access markets that are fair, transparent, and competitive.

The CFPB did not replace every regulator. It received specified authorities and works within a system that still includes federal banking agencies, the Federal Trade Commission, state regulators and attorneys general, and specialized market regulators.

CFPB Core Functions

FunctionWhat it doesWhat it does not mean
RulemakingIssues regulations under assigned consumer-finance statutesEvery financial rule comes from the CFPB
SupervisionExamines covered institutions and evaluates compliance systems and consumer riskEvery provider is examined continuously
EnforcementInvestigates and brings administrative or court actions within its authorityEvery complaint becomes an enforcement case
ComplaintsRoutes eligible complaints, obtains company responses, and uses data for oversightThe CFPB acts as the consumer’s private lawyer
Market monitoring and researchStudies products, providers, consumer experiences, and emerging risksResearch findings decide liability in an individual case
Consumer educationPublishes explanations, tools, and financial informationThe Bureau recommends a specific product or gives personalized advice

These functions can inform one another. A pattern in complaints, examinations, market data, or referrals may affect supervisory priorities or enforcement analysis, but there is no automatic one-to-one progression.

Laws and Regulations Administered by the CFPB

The CFPB administers or enforces numerous federal consumer-finance laws. Important examples include:

LawCFPB regulationMain subject
Truth in Lending ActRegulation ZCredit-cost disclosures, billing, mortgages, and other credit requirements
Real Estate Settlement Procedures ActRegulation XMortgage settlement and servicing requirements
Equal Credit Opportunity ActRegulation BProhibited credit discrimination and related notices and data
Electronic Fund Transfer ActRegulation EElectronic transfers, remittances, disclosures, and error procedures
Fair Debt Collection Practices ActRegulation FConduct and communications by covered debt collectors
Fair Credit Reporting ActRegulation V and other provisionsConsumer-reporting accuracy, use, notices, disputes, and identity-theft rules
Home Mortgage Disclosure ActRegulation CMortgage application and lending data
Truth in Savings ActRegulation DDDeposit-account disclosures and advertising

The table is a starting point, not a complete allocation of authority. Some statutes contain exceptions, shared enforcement, institution-specific responsibility, or provisions administered by another agency. The same transaction can also be subject to state law.

For example, the Truth in Lending Act and Regulation Z can govern a consumer credit disclosure, while state contract or licensing law governs a separate issue in the same transaction.

Who Does the CFPB Supervise?

The Bureau’s supervisory authority is not identical to its rulemaking or enforcement authority. It generally includes:

  • insured depository institutions and credit unions above the statutory asset threshold, together with covered affiliates;
  • nonbank mortgage originators, brokers, servicers, and specified foreclosure-relief or loan-modification providers;
  • payday lenders;
  • private education lenders;
  • larger participants in consumer-finance markets defined by CFPB rule; and
  • certain other nonbank covered persons when statutory risk-based procedures are satisfied.

Banks and credit unions at or below the statutory threshold are generally examined and primarily enforced against for federal consumer financial law by their prudential regulators, although CFPB rules can still apply. The precise allocation should be verified for the institution and date.

Supervision Is Not the Same as Enforcement

A supervisory examination is a nonpublic review of an institution’s compliance management, practices, transactions, and consumer risks. Examiners can identify weaknesses, require corrective work through supervisory channels, or refer potential violations.

An enforcement action is a separate process that may be filed in federal court or an administrative forum. Depending on the legal authority and facts, remedies can include injunctions, consumer relief, rescission or reformation, disgorgement, damages, or civil money penalties.

The existence of an examination does not prove a violation. Likewise, a public enforcement settlement may state that the defendant does not admit or deny specified findings. Read the actual order, complaint, judgment, and settlement terms.

Banks, Nonbanks, and Other Regulators

Entity or issueLikely regulatory starting point
Large bank’s consumer-finance complianceCFPB plus the bank’s prudential regulator
Smaller bank or credit union examinationOCC, Federal Reserve, FDIC, or NCUA, depending on charter and insurance
Mortgage company or servicerCFPB and applicable state mortgage regulators
Debt collectorCFPB, Federal Trade Commission, and state authorities, depending on scope
Credit reporting companyCFPB, Federal Trade Commission, and state authorities
Broker-dealer investment recommendationSEC and FINRA, not the CFPB merely because a consumer is involved
Insurance policy and insurer conductPrimarily state insurance regulation, subject to product and conduct
Consumer complaint involving fraud or crimeCFPB routing may help, but law enforcement or another regulator may have primary authority

This allocation is simplified. A company can have several regulators, and authority may differ between rulemaking, supervision, and enforcement.

Unfair, Deceptive, or Abusive Acts or Practices

The Consumer Financial Protection Act prohibits covered persons and service providers from engaging in unfair, deceptive, or abusive acts or practices, often abbreviated UDAAP. These are legal standards, not labels for any product a consumer dislikes.

In simplified terms:

  • Unfairness focuses on substantial consumer injury that is not reasonably avoidable and is not outweighed by countervailing benefits under the statutory test.
  • Deception generally concerns a material representation, omission, or practice likely to mislead a reasonable consumer in the circumstances.
  • Abusiveness is a separate statutory concept addressing specified interference with understanding or unreasonable advantage involving consumer understanding, reliance, or inability to protect interests.

Application depends on evidence, context, consumer group, disclosures, conduct, and current law. A clear disclosure does not necessarily cure unrelated conduct, while a poor customer experience is not automatically a UDAAP violation.

How the Consumer Complaint Process Works

The CFPB accepts complaints about covered consumer financial products and services. A simplified process is:

  1. The consumer identifies the product, company, events, prior attempts to resolve the issue, and desired response.
  2. The consumer submits relevant dates, amounts, communications, account details, and supporting documents through the official channel.
  3. The CFPB sends an eligible complaint to the company or refers it to another government agency when appropriate.
  4. The company reviews the matter and submits a response through the secure portal.
  5. The consumer can review the response and may be able to provide feedback.
  6. The CFPB uses complaint information for market monitoring, supervision, enforcement, research, and reporting, consistent with law and policy.

What a Complaint Can and Cannot Do

A complaint canA complaint cannot guarantee
Create a documented record of the issueA particular refund, correction, or settlement
Obtain a response from a participating companyThat the response is legally correct
Help route an issue to the appropriate agencyThat the CFPB has jurisdiction
Contribute data about patterns in a marketThat an enforcement action will follow
Support the consumer’s own recordkeepingExtension of a lawsuit, dispute, appeal, or foreclosure deadline

Submitting a complaint should not be assumed to pause contractual or legal time limits. Consumers facing imminent foreclosure, repossession, collection litigation, identity theft, or expiring dispute rights may need prompt help from the company, a qualified lawyer, a housing counselor, law enforcement, or another agency.

Worked Example: Credit-Card Billing Dispute

Assume a cardholder sees a transaction they do not recognize, contacts the issuer, and receives a response that does not address the documents provided.

A useful complaint would state:

  • the transaction date and amount;
  • when the cardholder first notified the issuer;
  • the dispute or case number;
  • what the issuer said or failed to address;
  • copies of relevant statements and correspondence; and
  • the specific correction or explanation requested.

The CFPB may route the complaint to the card issuer and collect its response. The complaint does not decide whether the transaction was authorized or preserve every right under the Fair Credit Billing Act or Regulation Z. The cardholder should still follow the issuer’s dispute instructions and applicable legal deadlines.

Worked Example: Mortgage Servicing

Suppose a borrower believes a mortgage servicer applied a payment incorrectly and then charged a late fee. The borrower should first compare the statement, payment confirmation, transaction history, and loan terms.

The issue may involve:

  • a general customer-service request;
  • a formal notice of error or request for information under Regulation X;
  • a credit-reporting dispute;
  • a CFPB complaint; or
  • state-law or court remedies.

These paths are not interchangeable. A CFPB complaint can document the problem and obtain a company response, but a formal statutory notice may have separate content, address, and timing requirements.

How Businesses Use CFPB Materials

Financial companies and compliance teams use CFPB sources to:

  • monitor proposed and final rules;
  • review current regulations and official interpretations;
  • maintain policies, controls, training, and testing;
  • analyze complaint causes and response quality;
  • prepare for supervisory examinations;
  • review public enforcement orders and court decisions;
  • identify product, marketing, servicing, and fair-lending risk; and
  • track rule rescissions, amendments, effective dates, and litigation.

A press release or blog post should not replace the controlling statute, regulation, official interpretation, order, or judgment. Guidance can explain an agency view without having the same legal status as a legislative rule.

Reading CFPB Complaint Data Carefully

The public Consumer Complaint Database can help identify recurring issues, products, and company responses. It has important limitations:

  • complaint narratives are consumer reports, not adjudicated findings;
  • publication criteria and data fields can change;
  • complaint volume is influenced by company size, customer mix, product use, awareness, and routing;
  • companies can select response categories but may not publish confidential details;
  • one company cannot be ranked fairly against another without an exposure denominator and comparable scope; and
  • a complaint count alone does not establish a violation rate or product quality.

Use complaint data as a signal for investigation, not a final scorecard.

How to Verify a CFPB Requirement

  1. Identify the product, transaction, provider, and consumer status.
  2. Locate the governing federal statute and CFPB regulation.
  3. Check the current eCFR text and official interpretations.
  4. Review Federal Register amendments, effective dates, and transition rules.
  5. Determine whether the CFPB or another regulator has supervisory or enforcement authority.
  6. Check exemptions, thresholds, definitions, and state-law overlap.
  7. Distinguish binding law from guidance, speeches, blog posts, manuals, and enforcement allegations.
  8. Review later court decisions and congressional action where relevant.
  9. Preserve transaction records and obtain qualified advice for an actual dispute or compliance decision.

Common Mistakes

  • Calling the CFPB the regulator for all financial products and companies.
  • Saying the Bureau generally supervises securities firms, insurers, or investment advisers.
  • Assuming CFPB rulemaking, supervision, and enforcement cover the same entities in the same way.
  • Treating a submitted complaint as proof that a company violated the law.
  • Assuming a complaint pauses payment, foreclosure, collection, appeal, or lawsuit deadlines.
  • Reading complaint narratives as verified factual findings.
  • Relying on a press release when the final rule or court order says something narrower.
  • Using an old compliance guide after a rule has been amended, rescinded, vacated, or delayed.
  • Expecting the CFPB to provide personal legal representation or recommend a financial product.
  • Ignoring state regulators and other federal agencies with overlapping authority.

Authoritative Sources

Check Your Understanding

Loading quiz…

FAQs

What does the CFPB do?

The CFPB writes and administers federal consumer-finance rules, supervises covered companies, brings enforcement actions, processes complaints, monitors markets, conducts research, and publishes educational resources.

Does the CFPB regulate every bank?

No. Its rulemaking, supervisory, and enforcement authority differ. The Bureau directly supervises covered larger depository institutions and specified nonbanks, while prudential regulators generally examine smaller banks and credit unions for federal consumer-finance compliance.

Can the CFPB force a company to resolve my complaint?

The CFPB can route an eligible complaint and obtain a company response, but filing does not guarantee a refund, correction, settlement, or enforcement action. Other dispute procedures and deadlines may still apply.

Does the CFPB regulate investments and broker-dealers?

Not generally. The SEC, FINRA, state securities regulators, and other authorities oversee securities activities. CFPB authority can intersect with a financial company when it offers a covered consumer financial product, but consumer status alone does not make the CFPB the securities regulator.

Where can I check a current CFPB regulation?

Start with the CFPB’s regulation pages and the current eCFR, then review Federal Register amendments, effective dates, official interpretations, and relevant court decisions. A historical article or enforcement press release is not a substitute for current rule text.

This article provides general financial, legal, and regulatory education. It does not provide personalized financial or legal advice, represent a consumer, determine jurisdiction, or preserve any contractual or statutory deadline.

Browse Regulation