Search
Choose a style
Dark
Light
Time to read: 7 min

Is the CFPB about to roll back supervision? 

Consumer Financial Protection Bureau (CFPB)
Editorial credit: EQRoy / Shutterstock

The CFPB has opened four advance notices that would lift the “larger participant” thresholds, refocusing routine federal exams on a smaller set of giants and pushing mid-tier firms to rely more on state supervision and bank-partner diligence.

The Consumer Financial Protection Bureau (CFPB) has set in motion a coordinated rethink of who it supervises. 

On August 8, the Bureau published four advance notices of proposed rulemaking (ANPRMs) to reconsider the tests that define “larger participants” in four markets: international money transfers, consumer debt collection, consumer reporting and automobile financing

Each notice says, in near-identical terms, that the benefits of current thresholds “may not justify the compliance burdens” for many firms now within scope and that limited supervisory resources are being diverted to determining who qualifies for examination in a given year. 

All four have been tagged by the Office of Management and Budget as “significant regulatory action,” are signed by Acting Director Russell Vought, and carry the same comment deadline: 22 September 2025.

For payments professionals, the most immediate relevance lies with international remittances, where the Bureau is weighing a ten- to fifty-fold increase in the activity threshold that triggers routine supervision for nonbank providers. 

But taken together, the four notices sketch a supervisory perimeter tightening around the very largest players, while relying more heavily on state licensing regimes, prudential supervisors for banks and credit unions, and the CFPB’s own enforcement arm for everyone else.


Key changes at a glance

  • International money transfers (nonbanks): Today, ≥1,000,000 transfers/year qualifies a firm as a larger participant. The Bureau floats higher bars at 10m, 30m or 50m transfers, which would narrow coverage from roughly 28 providers handling 98% of transfers to about 15 (94%), 8 (77%) or 4 (61%).
  • Consumer debt collection: Today, >$10m in annual receipts. The Bureau discusses thresholds at $25m, $50m or $100m. Since 2012 the industry has consolidated to roughly 2,500–3,000 firms, of which ~200–250 exceed $10m.
  • Consumer reporting: Today, >$7m in annual receipts. The Bureau points to alignment with the SBA’s $41m size standard; in practice, most CFPB exams already target firms with >$50m in receipts.
  • Automobile financing: Today, ≥10,000 aggregate annual originations. Options include 300k, 550k or 1.05m; under the highest bar only 5 captives would remain in scope, shrinking coverage from 63 entities (94% of originations) to 42%.

What the CFPB is really doing

Although framed as updating decade-old thresholds using fresher data, the combined effect of these changes is undoubtedly strategic. TheCFPB would concentrate routine supervision where consumer exposure is greatest by volume or receipts, while reducing compliance overhead for smaller and mid-market firms now captured by low or dated thresholds. 

The notices repeatedly cross-reference Small Business Administration size standards to underscore the point: in several markets the CFPB’s line has drifted below the SBA’s definition of a small business.

This is not deregulation in the strict sense. The underlying rules remain; the Remittance Rule still applies to banks, credit unions and nonbank transmitters; and the CFPB keeps enforcement authority over nonbanks regardless of supervisory status. 

But, if finalised along the lines sketched here, fewer companies will receive the Bureau’s periodic on-site scrutiny and associated exam letters. For many nonbanks, the centre of gravity for oversight could tilt back to state regulators and the gatekeeping of sponsor banks and correspondent networks.

Consumer Financial Protection Bureau entrance, following overdraft fee verdict against Navy Federal amid Open Banking delay
WASHINGTON, DC – MARCH 14, 2019: Consumer Financial Protection Bureau entrance, aka the CFPB at sunset. Note logo through lobby window. 17th Street downtown DC.

Remittances: the headline risk for payments

The international money transfer ANPRM is the most consequential for nonbank transmitters. The current bar (one million consumer-initiated transfers per year) captures about 28 providers the CFPB estimates account for roughly 98% of transfers. 

The CFPB now floats thresholds of 10m, 30m or 50m transfers, which would still envelop the dominant digital and cash-to-cash networks but release a tranche of mid-tier specialists and regional corridor players from routine CFPB exams. 

The Bureau notes the market’s concentration (the top eight non-depository firms handle ~77% of volume) and questions whether supervising dozens of smaller providers is a good use of limited resources when state data sets don’t cleanly separate consumer from business transfers.

For product and compliance teams, this poses two practical questions. First, would exiting CFPB supervision adversely affect bank-partner due diligence or correspondent relationships that prize the “federal examiner” imprimatur? 

Second, could any reduction in exam cadence embolden pricing or corridor expansion where state oversight is perceived as steadier or more predictable? 

Neither answer is automatic: AML/BSA obligations and Remittance Rule duties remain; states will keep examining licensees; and the CFPB can and does enforce without being a firm’s primary supervisor. But the signalling matters.

Collections and credit reporting: re-sighting the lens

In collections, the threshold has sat at $10m of annual receipts since 2012, originally just above the SBA’s $7m small-business line. The SBA standard is now $19.5m, and the industry itself has consolidated. 

The Bureau’s scenarios at $25m, $50m and $100m would winnow the supervised population markedly; depending on the cut-off, a substantial share of supervised entities today are small by SBA lights. Payments-adjacent impacts are indirect but real; many collections strategies depend on card, ACH and debit rails, and federal exams have historically driven upgrades in dispute handling, call recording, payment authorisation and data security that spill over to vendors.

For consumer reporting, the Bureau’s $7m receipts threshold has long swept in a tail of resellers and specialty bureaus. The notice points to an updated SBA small-business line at $41m, notes that “the vast majority” of companies examined already have >$50m in receipts, and estimates at least six firms would remain covered if it simply adopted the SBA line. 

Here the payments angle is underwriting and fraud: BNPL, account opening and risk-scoring often lean on specialty data. If fewer specialty agencies see federal exams, counterparties may place more weight on SSAE/SOC reports, ISO certifications and bank sponsor audits to judge controls.

Auto finance: a sharper focus on captives

The least payments-proximate ANPRM is nonetheless revealing about supervisory philosophy. The CFPB suggests lifting the “larger participant” bar in auto finance from 10,000 to as high as 1.05m annual originations. 

That would reduce the supervised population by more than 90% (from 63 entities to five) and cut coverage of originations from 94% to 42%, largely leaving OEM captives in scope. The Bureau says smaller lenders bear disproportionate compliance burden and that defining who qualifies now consumes resources better spent examining the biggest players. 

For payments providers tied into dealer management systems, e-contracting and auto-pay servicing, fewer nonbank clients would draw the CFPB into vendor reviews via exam requests.

The supervisory map if these ideas stick

If the thresholds rise materially, mid-market firms could see less frequent federal exams, some reduction in exam-prep cost lines, and fewer CFPB data calls routed through bank partners. 

Offsetting that, expect: more reliance on state examinations (and multi-state coordination), heightened upstream diligence from sponsor banks, and no let-up on federal enforcement for UDAAP or rule breaches. The Bureau emphasises this is a resource-allocation exercise, not a retreat from rulemaking or enforcement.

Politically, the ANPRMs sit alongside a recent pattern of re-scoping the Bureau’s perimeter. (The notices themselves nod to the general-use digital payment applications rule being nullified by Congress under the Congressional Review Act.) 

Whether these four ultimately narrow supervision as much as the upper-bound scenarios suggest will depend on the evidence the Bureau receives: the data are imperfect in every market, and the remittance notice in particular invites submissions on better sources and corridor-level effects.

Subscribe to our newsletter