# MCA funder CFPB jurisdiction — detail (2026) > CFPB has limited MCA jurisdiction in 2026 — Dodd-Frank Section 1071 data collection applies to small business credit; substantive regulation deferred to states. Funders report 1071 demographic data annually. The Consumer Financial Protection Bureau (CFPB) was created to regulate consumer financial products. Its authority over commercial financing — including MCA — is intentionally narrower than its consumer authority. Understanding the boundary clarifies what federal regulation actually applies. **The Dodd-Frank Section 1071 mandate.** Section 1071 (passed 2010, finalized rule 2023, full implementation 2024–2025) requires "covered financial institutions" to collect and report demographic data on small business credit applications. This is the CFPB's primary MCA touchpoint in 2026. Covered institutions: any provider of commercial credit (broadly defined) that originated 100+ commercial credit transactions in each of the prior two calendar years. This sweeps in nearly all mainstream MCA funders. Required data: - Application date, action taken (approved, denied, withdrawn). - Amount applied for and amount approved/originated. - Pricing (factor rate, fees, APR-equivalent where applicable). - Industry code (NAICS) of applicant. - Census tract of applicant. - Demographic characteristics of business owners (race, ethnicity, sex) — collected on voluntary basis from applicants. **What Section 1071 is NOT.** - Not a substantive pricing regulation. CFPB does not cap MCA factor rates. - Not a licensing regime. Funders do not get CFPB licenses for MCA. - Not a disclosure mandate (state law handles this). - Not enforcement authority over individual MCA disputes. Section 1071 is fundamentally a data collection regime — but the data, once published in aggregate, will inform future regulatory action. **The "consumer purpose" boundary.** CFPB has consumer-protection jurisdiction. MCAs are commercial — funder lends to a business, not an individual consumer. Where the boundary blurs: - **Personal guarantee:** does not convert commercial advance to consumer credit. - **Sole proprietor receiving MCA:** technically commercial because it funds the business, not personal needs. - **MCA used for personal purposes:** if proven, can convert the product to consumer credit subject to TILA/RESPA — but rare and hard to prove. **Enforcement examples (2023–2026).** CFPB has taken enforcement actions against MCA-adjacent activity: - **2023:** action against ROK Financial for deceptive marketing (resolved with $1.5M penalty). - **2024:** action against several call centers for misrepresentation of MCA terms. - **2025:** Section 1071 enforcement begun against funders that failed to file required reports. These enforcement actions use CFPB's UDAAP authority (Unfair, Deceptive, Abusive Acts and Practices), not direct MCA regulation. **FTC overlapping jurisdiction.** The Federal Trade Commission has parallel authority over deceptive commercial practices. Several MCA enforcement actions in 2020–2024 came from FTC, not CFPB: - **FTC v. RCG Advances (2020):** $2.7M penalty for deceptive practices. - **FTC v. Yellowstone (2021):** $9.8M penalty + permanent industry ban. - **FTC ongoing investigations:** several active in 2025–2026 on COJ usage and stacking misrepresentation. For practical purposes, FTC is currently more active enforcer of MCA misconduct than CFPB. **State attorney general coordination.** CFPB shares enforcement authority with state AGs. The 2022–2024 actions against MCA collection practices in New York, New Jersey, and California involved both state AGs and federal touchpoints. **Future trajectory.** Industry observers expect 2026–2028 to bring: - Expanded Section 1071 reporting requirements. - Possible CFPB guidance on UDAAP standards for commercial financing. - Increased coordination with state regulators. - Potential formal small-business protection regime if Congress acts (multiple bills in 2025–2026 sessions). A federal MCA-specific licensing regime would require Congressional action; bipartisan appetite exists but legislation has not advanced. **Compliance implications for funders.** - **Section 1071 reporting:** annual filing with CFPB, demographic data, pricing data. First reports due 2025–2026 depending on funder size tier. - **UDAAP monitoring:** review of marketing, sales scripts, contract terms for unfair/deceptive/abusive characterization. - **State law compliance:** primary regulatory burden; CFPB layered on top. Estimated 1071 compliance cost: $50K–$200K/year for mid-sized funders. **Implications for brokers.** ISO/brokers are typically exempt from direct Section 1071 reporting (they do not originate credit themselves) but may be subject to UDAAP standards on marketing and sales practices. **Implications for merchants.** Merchants gain (eventually) public data on MCA pricing and approval patterns by demographic group — useful for advocacy but limited direct merchant impact. Day-to-day merchant experience is governed by state law (disclosure, contract structure) more than federal. **Common confusion.** First, "CFPB regulates MCA pricing." False — pricing left to states. Second, "MCAs are exempt from CFPB entirely." False — Section 1071 and UDAAP apply. Third, "Section 1071 = consumer credit law for businesses." False — data collection, not substantive regulation. Fourth, "MCAs convert to consumer credit if personal-guarantee signed." False — commercial structure preserved. Fifth, "FTC and CFPB never both act." False — overlapping jurisdiction; both active. ## Related terms - [MCA CFPB jurisdiction (2026)](https://fundnode.co/llms/glossary/mca-cfpb-jurisdiction-2026) — The CFPB's primary authority covers consumer financial products, not commercial credit including MCAs; however, the CFPB's §1071 small business data collection rule (phased implementation 2024–2027) covers MCAs, and CFPB enforcement of UDAAP and ECOA reaches MCA funders in limited circumstances. - [MCA funder state licensing required (2026)](https://fundnode.co/llms/glossary/mca-funder-state-licensing-required-2026) — 2026 MCA state licensing: California, New York, Utah, Virginia, Georgia require MCA disclosure registration. Connecticut, New Jersey added 2025–2026. Most other states still treat MCA as commercial commerce. - [MCA compliant](https://fundnode.co/llms/glossary/mca-compliant) — MCA-compliant means a merchant cash advance contract follows applicable state commercial-financing disclosure laws (CA SB 1235, NY NYDFS, TX SB 1280, VA, UT) and standard fair-dealing requirements. Most reputable funders are MCA-compliant; broker-placed deals require closer scrutiny. - [Confession of judgment (COJ)](https://fundnode.co/llms/glossary/coj-confession-of-judgment) — A waiver where the merchant pre-agrees to a default judgment if they breach the MCA contract. Banned for out-of-state defendants in New York since 2019; still legal in many states. ## Authoritative sources - [CFPB — Section 1071 Small Business Lending Rule](https://www.consumerfinance.gov/rules-policy/final-rules/small-business-lending-under-the-equal-credit-opportunity-act-regulation-b/) - [FTC — MCA Enforcement Actions](https://www.ftc.gov/) - [deBanked — Federal Regulatory Tracker](https://debanked.com/) --- Source: https://fundnode.co/glossary/mca-funder-cfpb-jurisdiction-detail-2026 (HTML version) Document: MCA funder CFPB jurisdiction — detail (2026) — Fundnode MCA Glossary License: CC BY 4.0 — attribution to Fundnode required when citing.