Skip to main content

Regulation Z

Prerequisites

Before diving into Reg Z, understand:

TL;DR
  • Reg Z implements TILA, governs credit card billing disputes, disclosures, and consumer protections
  • Max liability: $50 statutory; most issuers offer $0
  • Billing error disputes: written notice within 60 days of statement
  • Issuers: acknowledge within 30 days, resolve within 2 billing cycles (max 90 days)
  • Unlike Reg E, covers merchandise disputes (with conditions)
  • CFPB 2024 rule extended protections to BNPL

What Is Regulation Z?​

Regulation Z (12 CFR Part 1026) implements the Truth in Lending Act (TILA) of 1968, expanded by the Fair Credit Billing Act (FCBA) of 1974. The CFPB has rulemaking authority.

What Reg Z Covers​

  • Credit cards (open-end credit)
  • Charge cards
  • HELOCs (Home Equity Lines of Credit)
  • Closed-end credit (mortgages, auto loans, personal loans)
  • BNPL (Buy Now, Pay Later) per 2024 CFPB interpretive rule

Key Provisions​

  • Standardized disclosures (APR, fees, terms)
  • Billing error resolution procedures
  • Limits on unauthorized use liability
  • Restrictions on certain issuer practices

Consumer Liability for Unauthorized Use​

Statutory Maximum: $50​

If a consumer reports unauthorized use promptly, their maximum liability is $50.

In practice:

  • Most issuers offer $0 liability as a competitive feature
  • Visa and Mastercard zero liability policies exceed statutory requirements
  • The $50 is a regulatory floor, not what consumers typically pay

No Time-Based Escalation​

Unlike Reg E, Reg Z liability does not increase based on how quickly the consumer reports. Whether reported in 2 days or 60 days, the maximum remains $50.

Key Difference from Reg E

Reg E (debit): $0 → $50 → $500 → unlimited based on reporting speed Reg Z (credit): $50 maximum regardless of timing

This is why many consumers feel "safer" using credit cards for large purchases.

Billing Error Resolution​

What Qualifies as a Billing Error​

  • Unauthorized charges (fraud, lost/stolen card)
  • Incorrect charges (wrong amount, date, or description)
  • Goods not received
  • Goods not as described
  • Computational errors
  • Failure to credit payments or returns
  • Statements sent to wrong address

Consumer's Obligations​

To invoke billing error protections, the consumer must:

  1. Send written notice (oral notice is insufficient, unlike Reg E)
  2. To the designated billing inquiry address (not the payment address)
  3. Within 60 days of the statement containing the error
  4. Include: name, account number, dollar amount, and explanation of why it's an error

Issuer's Obligations​

Within 30 days: Send written acknowledgment (unless the issue is resolved)

Within 2 billing cycles (max 90 days): Complete investigation and either:

  • Correct the billing error and credit the account, OR
  • Send written explanation of why the charge is correct

Protections During Investigation​

The issuer cannot:

  • Attempt to collect on the disputed amount
  • Report the disputed amount as delinquent to credit bureaus
  • Restrict or close the account solely because of the dispute
  • Include disputed amount in minimum payment calculation
  • Auto-debit the disputed amount if notified at least 3 business days before

After Investigation​

If error confirmed:

  • Correct the account
  • Credit any finance charges related to the error
  • Send written notification

If no error found:

  • Send written explanation
  • Provide copies of documents if consumer requests
  • Allow grace period to pay (same time as for original billing)

Claims and Defenses (Section 1026.12(c))​

Beyond billing errors, consumers can assert claims and defenses against the card issuer for problems with goods or services, essentially holding the issuer responsible for merchant failures.

Conditions​

To assert claims and defenses:

  1. Consumer made good-faith effort to resolve with merchant
  2. Transaction exceeds $50
  3. Transaction occurred in same state as consumer's address OR within 100 miles

Limitations​

  • Consumer can't recover more than the amount still owed on that specific transaction
  • Geographic and dollar limits don't apply if:
    • Issuer and merchant are related entities
    • Issuer solicited the transaction (e.g., co-branded card promotions)
  • This creates a defense against collection, not an automatic refund
In Practice

Many issuers extend chargeback rights regardless of geographic limits through network rules. The network chargeback process is usually more practical than asserting Reg Z claims and defenses. But Reg Z provides the legal baseline.

Network Chargeback Rights vs. Reg Z Rights​

AspectReg Z RightsNetwork Chargeback Rights
ScopeFederal law, all credit cardsNetwork rules (Visa, MC, etc.)
Geographic limits100 miles or same stateGenerally none
Dollar threshold$50 minimumOften none
Timeline60 days from statementTypically 120 days from transaction/delivery
Merchandise disputesSubject to conditionsBroader coverage

Most consumers experience network chargeback processes, which are generally more practical and have fewer restrictions. Reg Z is the baseline that can't be contracted away.

BNPL and Reg Z (2024 Update)​

In May 2024, the CFPB issued an interpretive rule clarifying that BNPL lenders are "card issuers" under Reg Z when they issue digital accounts to access credit.

What Products Are Covered​

BNPL products payable in 4 or more installments with a finance charge, or otherwise meeting TILA's definition of credit.

BNPL Providers Must Now:​

  • Investigate billing errors using Reg Z procedures
  • Pause disputed payments during investigation
  • Provide refunds if billing errors are confirmed
  • Follow same timelines as traditional credit card issuers

What This Means for Merchants​

  • More formal dispute processes from BNPL providers
  • Potential chargebacks similar to credit card disputes
  • Clearer timelines for resolution
  • BNPL disputes may become more structured

BNPL Products Still Exempt​

  • 4-or-fewer installments with no finance charge
  • Deferred interest products if paid in full
  • Layaway (no credit extension until final payment)

Credit CARD Act Provisions (2009)​

The CARD Act added significant consumer protections implemented through Reg Z:

Rate Increase Protections​

  • 45-day advance notice of rate increases
  • No increases in first year (with limited exceptions)
  • Promotional rates must last minimum 6 months

Payment Allocation​

  • Payments above minimum applied to highest-rate balance first
  • Consumers can direct excess payments if they choose

Statement Requirements​

  • Clear payoff timeframe if only minimum payments made
  • Payoff time at specific payment amounts
  • Same due date each month

Fee Restrictions​

  • Penalty fees must be reasonable and proportional
  • Over-limit fees prohibited unless consumer opts in
  • No fees for phone, mail, or electronic payments

Reg Z vs. Reg E Comparison​

AspectReg Z (Credit)Reg E (Debit/ACH)
Liability cap$50 (most offer $0)$50 → $500 → unlimited
Notice formatWritten onlyOral or written
Notice deadline60 days from statement60 days from statement
AcknowledgmentWithin 30 daysN/A
Investigation2 billing cycles (max 90 days)10-45 days (or 90)
Provisional creditNot requiredRequired if extended
Merchandise disputesCoveredNot covered
Collection during disputeProhibited on disputed amountFunds already gone
Credit reporting during disputeCannot report delinquentN/A

Key Timelines Summary​

EventDeadline
Consumer written noticeWithin 60 days of statement
Issuer acknowledgmentWithin 30 days
Issuer investigationWithin 2 billing cycles (max 90 days)
Consumer can withhold paymentDuring investigation
Written explanation if no errorWith resolution

Issuer Compliance Considerations​

Required Practices​

  • Designate billing inquiry address (and disclose it clearly)
  • Train staff on Reg Z procedures
  • Document investigations thoroughly
  • Avoid prohibited actions during disputes
  • Provide written explanations of findings
  • Maintain dispute records

Common Compliance Failures​

Investigation failures:

  • Not completing within 2 billing cycles
  • Not pausing collection on disputed amount
  • Not providing written results
  • Inadequate documentation

Credit reporting failures:

  • Reporting disputed amount as delinquent
  • Not coding disputes properly to credit bureaus
  • Not correcting after resolution

Consumer communication failures:

  • Sending notices to wrong address
  • Missing 30-day acknowledgment
  • Inadequate explanation of findings

Documentation Best Practices​

Maintain records of:

  • Date and content of consumer notice
  • Acknowledgment date and method
  • Investigation steps taken
  • Evidence reviewed
  • Decision rationale
  • Resolution letter
  • Any provisional credits

Enforcement and Penalties​

CFPB Enforcement​

The CFPB has primary enforcement authority for Reg Z at larger institutions.

2024 Example: $89 million penalty for Apple Card billing dispute mishandling

Common Violations​

  • Failure to investigate properly
  • Improper collection during disputes
  • Inaccurate credit reporting
  • Missing disclosure requirements

Consequences​

  • Civil money penalties
  • Consumer restitution
  • Consent orders
  • Reputational damage

Practical Scenarios​

Scenario 1: Unauthorized Transaction​

Situation: Consumer sees $500 charge they didn't make.

Process:

  1. Consumer sends written notice within 60 days
  2. Issuer acknowledges within 30 days
  3. Issuer investigates (transaction data, merchant records, signatures)
  4. During investigation: amount not in minimum payment, no late fees/interest on disputed amount
  5. Within 2 billing cycles: credit account or explain why charge is valid
  6. Consumer liability: max $50 (most issuers $0)

Scenario 2: Merchandise Not Received​

Situation: Consumer paid $300 for item that never arrived.

Process:

  1. Consumer first attempts good-faith resolution with merchant
  2. If unresolved, sends written billing error notice
  3. Geographic limits apply (but most issuers waive via network rules)
  4. Issuer investigates: delivery confirmation, tracking, merchant communication
  5. No proof of delivery = credit account

Scenario 3: Item Not as Described​

Situation: Consumer paid $150 for "new" electronics that arrived damaged/used.

Process:

  1. Consumer contacts merchant first
  2. Documents issue (photos, correspondence)
  3. Sends written billing error notice
  4. Issuer investigates with evidence from both parties
  5. Resolution based on condition vs. description evidence

Scenario 4: BNPL Dispute​

Situation: Consumer used BNPL for $400 purchase, item is defective.

Process:

  1. Consumer contacts BNPL provider
  2. Provider pauses disputed payments during investigation
  3. Investigation similar to credit card process
  4. Resolution within 2 billing cycles
  5. If error: refund payments made, cancel remaining balance

See Also​