Skip to content

How Does the Partial Rollback of Dodd-Frank Affect Payment Facilitators and UDAAP?

The US House of Representatives voted this week to repeal parts of the Dodd-Frank Wall Street Reform and Consumer Protection Act, the 2010 legislation that brought significant changes to financial regulation in the United States after the Great Recession. Because Dodd-Frank led to the creation of the Consumer Financial Protection Bureau (CFPB), payment facilitators and processors may wonder whether changes in the law impact the way the government approaches its enforcement of unfair, deceptive, or abusive acts or practices - known as UDAAP. (Get our UDAAP guide for an in-depth explanation of these practices.)

The recent legislation, which passed 258-159, is aimed at relaxing rules for small- and medium-sized banks, which under the modified law would not have to undergo the same stress tests as banks that hold more than $250 billion in assets. These rules are intended to prevent another financial meltdown, but opponents have said the rules are too cumbersome for smaller institutions and that the new changes will help regional banks be more competitive by making it easier for them to lend money.

Absent of this recent rollback is any change to UDAAP. That means the CFPB still has the authority to go after unfair and deceptive practices, which are defined as ones that harm consumers financially and that consumers cannot reasonably avoid. The greater risk to UDAAP enforcement lies is within the bureau itself, with leader Mick Mulvaney. The CFPB Director has stated that the bureau is not particularly interested in pursuing UDAAP violations.

Does this mean payment facilitators shouldn't be concerned about merchants engaged in unfair or deceptive practices? Not so fast. Despite Mulvaney's statements, the CFPB last month slapped Wells Fargo with a whopping $1 billion UDAAP fine - 10 times bigger than the previous largest assessed in the bureau's history. The bank was found to have forcibly enrolled hundreds of thousands of borrowers in duplicative or unnecessary automobile insurance policies. The Wells Fargo fine, as well as a recent lead generation case the CFPB is aggressively pursuing, suggest that UDAAP still has teeth.

Regardless of government approaches to UDAAP enforcement, payment facilitators should remain wary of merchants offering high-risk services such as credit repair, debt collection, payday lending, lead generation sales, and extended warranties, as these merchants can still prompt steep card brand fines if they are found to be engaging in UDAAP violations. There are several steps payment processors and acquirers can take to avoid UDAAP violations and accompanying fines. These include:

    • Properly responding to consumer complaints


    • Performing internal policy audits


    • Educating staff


    • Practicing proper underwriting


    • Reviewing existing UDAAP policies


Most important, consistent merchant monitoring is a valuable tool for identifying and avoiding UDAAP violations.

For more information on these high-risk areas, get our UDAAP guide.


David Khalaf is a writing, communications, and marketing professional with specialties in media, investigations, content strategy, and writing instruction. His 20 years of writing, media, and communications work have included two top-tier universities (USC and UCLA), print and digital magazines, consulting firms, and technology companies.

His current work involves content strategy and development at LegitScript, a company that helps the world's leading search engines, payment service providers, and internet platforms and marketplaces do business with legitimate, legally operating entities in more than 80 countries and 15 languages around the world. LegitScript specializes in risk and compliance for highly regulated industries including CBD/cannabis, online gambling, cryptocurrencies, drugs, financial trading, online adult, scams and fraud, and more.

Recent Blog Articles

Levels of risk.

What You Need to Know About the Different Levels of Merchant Risk

Many risk mitigation approaches focus on high-risk merchants, but what about medium-risk merchants? Being aware of the various levels of risk and which category your merchant falls into is a critical step in quantifying risk. Let's delve into what low-, medium-, and high-risk merchants are and the v...
Northern Colorado Hemp Exposition (NOCO)

Navigating Compliance: LegitScript’s Insights from NOCO

Join LegitScript on a journey to the 10th annual Northern Colorado Hemp Exposition (NOCO), where we immersed ourselves in the heart of the CBD industry. LegitScript shared critical compliance knowledge, exchanged insights with industry peers, and absorbed vital regulatory updates from the FDA and US...

What’s Hiding on Your Marketplace? A Look at How Risk Infiltrates Your Platform

You monitor seller listings on your e-commerce marketplace, but do you know what's going on behind the scenes - or, rather, behind the screens? Illegal and brand-damaging activity isn't always easy to spot, and the risk only compounds as your platform scales. In this post, we explore violative activ...
Addiction Treatment Advisory Committee

Harnessing Collaboration: Highlights from LegitScript’s First Advisory Committee Meeting of the Year

Last year, LegitScript set out to relaunch its Addiction Treatment Certification Advisory Committee in order to strengthen avenues of communication and ensure the continued improvement of its Certification solutions. On March 27, 2024, the revitalized committee convened for the first time. Keep read...