Payday Loan Consumer Protection – Know Your Borrower Rights (2025)
Last updated: May 8, 2026
Payday borrowers have more legal protections than most realize. Federal and state laws restrict what lenders can charge, how they can collect, and what happens if they violate the rules. This guide covers every major borrower right, how to exercise them, and where to report violations.
Your Legal Rights as a Payday Loan Borrower
Right to APR Disclosure (TILA)
Before signing any loan agreement, you have the right to see the Annual Percentage Rate (APR), total dollar amount of fees, and complete repayment terms. This is required by federal law.
Right to Extended Payment Plans
In many states (AL, AK, FL, ID, IL, IN, IA, KY, LA, MI, MN, MS, MO, NV, NM, ND, OK, OR, SC, UT, VA, WA), you have a legal right to request a free extended repayment plan if you cannot repay on the due date.
Right Against Unauthorized Debits
No lender can take money from your bank account without your explicit authorization. After two consecutive failed debit attempts, they must get new authorization before trying again.
Right Against Harassment
Debt collectors must follow the FDCPA—no harassment, threats, profanity, false statements, or repeated calls intended to annoy. This applies to the original lender and any third-party collector.
Military Lending Act (Active Duty Only)
Active-duty servicemembers and their dependents are protected by a 36% APR cap on payday loans, auto title loans, and other covered products. This is federal law and cannot be waived by any loan agreement.
Right to Report and Seek Redress
Every borrower has the right to file regulatory complaints against payday lenders who violate state or federal law. Penalties include fines, license revocation, loan voiding, and repayment of fees.
Red Flags: Signs of a Predatory or Illegal Lender
Where to Report Payday Loan Violations
CFPB (Consumer Financial Protection Bureau)
Federal agency. File complaints about any financial product including payday loans. Most effective for federal violations.
FTC (Federal Trade Commission)
Report deceptive or unfair practices, especially by online lenders. Also handles FDCPA violations.
CSBS (Conference of State Bank Supervisors)
Directory of state banking regulators. Find your state's regulator for state law violations.
NFCC (National Foundation for Credit Counseling)
Free and low-cost nonprofit credit counseling. Helps negotiate with payday lenders and develop debt payoff plans.
IC3 (Internet Crime Complaint Center)
FBI-affiliated. Report online payday loan fraud, phishing, and unlicensed internet lenders.
State Attorney General
File complaints about state consumer protection law violations. Can initiate enforcement actions against licensed and unlicensed lenders.
Frequently Asked Questions
How do I report an illegal payday lender?
File complaints with: (1) Your state banking regulator—find yours at csbs.org/consumers, (2) The CFPB at consumerfinance.gov/complaint, (3) The FTC at reportfraud.ftc.gov, and (4) Your state attorney general. If the lender is online, also report to the Internet Crime Complaint Center (IC3) at ic3.gov if fraud is involved.
Can a payday lender threaten me with jail?
No. It is illegal for a payday lender or debt collector to threaten criminal prosecution or arrest for failing to repay a payday loan. Defaulting on a payday loan is a civil matter, not a criminal one. Threats of arrest are a violation of the Fair Debt Collection Practices Act. Document the threat and report it immediately to the CFPB and FTC.
What is the CFPB and how does it protect payday borrowers?
The Consumer Financial Protection Bureau (CFPB) is a federal agency that regulates financial products including payday loans. Its protections include requiring APR disclosures (via TILA), limiting debit attempts after two failures, taking enforcement actions against predatory lenders, and operating a free consumer complaint system at consumerfinance.gov/complaint.
Can a payday lender take money from my bank account without permission?
No. The Electronic Fund Transfer Act (EFTA) prohibits lenders from requiring pre-authorized electronic debits as the sole condition of a loan. You must authorize any debit. The CFPB payment rule also requires lenders to obtain new authorization after two consecutive failed debit attempts rather than repeatedly attempting to withdraw funds.
What can I do if I'm being harassed by a payday loan debt collector?
The FDCPA prohibits collectors from calling before 8 AM or after 9 PM, using profanity, threatening violence, or misrepresenting the debt. Send a certified letter requesting the collector cease contact ('cease and desist'). Once received, collectors may only contact you to confirm they'll stop or notify you of a lawsuit. Report violations to the CFPB and your state AG.