CFPB Authority Over Auto Finance — Where the Bureau Can Actually Reach You (2026)

Manny Ruiz · Real Talk Media Group — Last Verified 2026-07-04

TL;DR

The Consumer Financial Protection Bureau (CFPB) regulates the companies that finance most car loans in America — but not, by law, most dealers. Under 12 U.S.C. § 5519 the Bureau is statutorily blocked from routine supervision of motor vehicle dealers, with narrow carve-outs for dealers that hold their own loans in-house (Buy Here Pay Here). Where CFPB reaches: the nonbank auto lender (Ally, Santander Consumer, Credit Acceptance, Toyota Motor Credit) and the bank-affiliated auto finance provider that funds your loan after the dealership assigns it. Where CFPB does NOT reach: the F&I office at a franchise dealer selling GAP and extended warranties on an assigned loan. The distinction matters when a buyer files a complaint — the right target is usually the lender, not the dealer. (Last Verified 2026-07-04.)

The Statute / The Law

Dodd-Frank Wall Street Reform and Consumer Protection Act (2010) created the CFPB and defined its authority at 12 U.S.C. §§ 5481 et seq. Two provisions matter for auto:

• 12 U.S.C. § 5519 — the auto dealer exemption. Congress excluded most motor vehicle dealers from CFPB’s supervisory and rulemaking authority. FTC and state AGs continue as the primary regulators of dealer conduct.
• 12 U.S.C. § 5481(5) and § 5481(15) — definitions of “covered person” and “financial product or service” that determine which auto-adjacent entities the Bureau can reach.
• 12 U.S.C. § 5565 — remedial authority: restitution, civil money penalties, injunctions.

The Larger Participant Rule for automobile financing is codified at 12 CFR § 1090.108 (finalized in 2015). It sets the threshold: nonbank auto finance companies with 10,000 or more aggregate annual originations are subject to CFPB supervisory examinations. Below the threshold, oversight is enforcement-only. (Last Verified 2026-07-04.)

Sources: 12 U.S.C. § 5519 at cornell.edu · 12 CFR § 1090.108 at ecfr.gov

How It Works

Who CFPB supervises directly:

• Nonbank auto lenders above the 10,000-origination threshold (Larger Participant status)
• Bank-affiliated auto lenders through prudential-regulator coordination
• Buy Here Pay Here dealer-lenders when they retain the loan and cross the threshold — the statutory exemption in § 5519 does not apply if the dealer is functioning as the lender

Who CFPB does NOT supervise directly:

• Franchise dealers assigning loans immediately to a third-party lender
• Dealer F&I sales of GAP, extended warranties, tire-and-wheel add-ons (state insurance or service-contract law governs; see GA-6 and GA-7)
• Vehicle price negotiation itself (state UDAP + FTC territory; see F1 and GA-12)

Enforcement pattern. Since 2013 the CFPB’s largest auto actions have followed a discretionary-pricing / disparate-impact model under the Equal Credit Opportunity Act (ECOA, see F6): dealer markup left to salesperson discretion produces measurably higher APRs for Black and Latino borrowers on statistically similar credit profiles, and the Bureau attributes disparate impact to the funding lender’s control over allowable markup.

• Ally Financial — $80 million restitution + $18 million CMP (December 2013), largest auto discrimination settlement to that date
• Fifth Third Bank — auto ECOA action (2015)
• Toyota Motor Credit Corporation — $21.9 million restitution (2016)
• Credit Acceptance Corporation — 2023 CFPB + NY AG lawsuit alleging deceptive subprime pricing and unlawful debt collection
• 2024 CFPB Supervisory Highlights (Special Edition on Auto Finance) — surfaced patterns in loan servicing errors, add-on cancellation refund failures, and repossession conduct

CFPB Bulletin 2013-02 on indirect auto lending was formally nullified in 2018 by a Congressional Review Act joint resolution — the first agency guidance ever nullified via CRA. But ECOA and Regulation B (12 CFR § 1002) remain unchanged, so the underlying fair lending expectations continue to shape supervisory examinations and enforcement priorities. (Last Verified 2026-07-04.)

Cure Period

CFPB enforcement actions do not carry a statutory cure period for the target company; they are administrative or judicial actions culminating in consent orders. For consumers, however: complaints filed at consumerfinance.gov/complaint get forwarded to the target company, which under CFPB’s complaint protocol is expected to respond substantively within 15 days, with a 60-day maximum to final resolution. That timeline is not statutory but is the Bureau’s operational expectation and lenders track it.

Common Violations

Based on 2013-2026 CFPB enforcement:

• Disparate impact in dealer markup on assigned loans (fair lending under ECOA)
• Deceptive add-on marketing in subprime credit contexts — GAP and warranty sold with materially false statements about coverage or cost
• Servicing errors post-origination — misapplied payments, late-fee cascades, deficient statements
• Repossession without required notices or in the wrong jurisdiction
• Refund failures on cancelled add-ons after early payoff or repossession
• Debt collection abuse on charged-off auto balances

For dealer-side violations, see F1 (Buyers Guide), F8 (UDAAP), and GA-12 (Georgia FBPA).

What Buyers Should Do

Know who to complain against. If the issue is with the vehicle price, the doc fee, the sales tactics, or the paperwork on the Buyers Order, the target is the dealer under state UDAP and FTC territory. If the issue is with the loan itself — the APR, the servicing statements, the payment application, the repossession notice, the refund of a cancelled add-on — the target is the lender, and the CFPB complaint portal at consumerfinance.gov/complaint routes to them under an expected 15-day / 60-day resolution timeline. Include the loan account number, the dealer name, and the assignment date on your complaint; the Bureau’s routing depends on it.

For fair lending concerns (rate quoted was higher than a similarly-credited buyer got at the same dealer), the ECOA claim runs to both the dealer and the funding lender. See F6.

Bilingual Notes

Para compradores hispanohablantes: el CFPB regula al prestamista que aprobó su préstamo, no al concesionario donde firmó el papeleo. Si el problema es con la tasa, los pagos, o cómo aplicaron sus abonos — la queja va al CFPB en consumerfinance.gov/complaint/es. Si el problema es con el precio del vehículo o cómo lo trataron en el show room, esa queja va al Fiscal General de Georgia (GA-12) o a la FTC (F1). Bajo la Ley de Igualdad en Oportunidades de Crédito (ECOA, 15 U.S.C. § 1691) usted tiene el mismo derecho de crédito sin importar el idioma en que negoció, y una tasa más alta correlacionada con negociación en español puede ser una violación federal (ver F6).

Sources (Primary)

1. 12 U.S.C. § 5519 — Motor vehicle dealer exemption. law.cornell.edu (Accessed 2026-07-04)
2. 12 U.S.C. § 5481 — Dodd-Frank definitions of “covered person” and “financial product or service”. law.cornell.edu (Accessed 2026-07-04)
3. 12 CFR § 1090.108 — Larger Participant Rule for auto financing (10,000-origination threshold). ecfr.gov (Accessed 2026-07-04)
4. CFPB press release on auto larger-participant supervision (2015). consumerfinance.gov (Accessed 2026-07-04)
5. CFPB Bulletin 2013-02 on indirect auto lending (nullified 2018 but underlying ECOA expectations remain). consumerfinance.gov PDF (Accessed 2026-07-04)
6. CFPB consumer complaint portal. consumerfinance.gov/complaint (Accessed 2026-07-04)
7. 12 U.S.C. § 5565 — CFPB remedial powers. law.cornell.edu (Accessed 2026-07-04)

Related Cells

• F1 — FTC Used Car Rule — the dealer-side federal counterpart to CFPB’s lender authority
• F3 — Truth in Lending Act — the disclosure regime CFPB enforces alongside ECOA
• F6 — ECOA and disparate impact in auto lending
• F8 — UDAAP and how CFPB frames auto-add-on cases
• GA-6 — Georgia GAP insurance and the state layer beneath CFPB
• GA-12 — Georgia FBPA — the state-law route when the dealer is the target

Manny’s Floor Note

The single most useful thing a buyer can know about CFPB is that it regulates the LENDER, not the dealer, in almost every deal you will see. On the sales floor I have watched buyers file complaints against the dealership when the actual problem was a servicing failure at Ally or Santander — the complaint goes to the wrong desk and nothing moves. Read your assignment. See who bought your paper. Complain to that entity through the CFPB portal if the issue is post-loan; complain to the Georgia AG if the issue is pre-signature at the dealership. Different regulators for different problems. (our verification process: Manny’s sales floor through sales manager experience — not F&I, not general management.)

Verified 2026-07-04 against primary sources.