You have ten specific, enforceable rights when you take out a payday loan in the United States. These protections come from federal statutes, CFPB regulations, and state laws — and they give you concrete tools to stop harassment, dispute errors, cap your costs, and restructure unmanageable debt. Below is a checklist you can use today, followed by a full explanation of how each right works and what you can do if a lender or collector ignores it.
What must a lender tell me before I sign?
Before you sign any payday loan agreement, the lender must hand you a clear, written disclosure of the total cost in dollars — not just percentages or vague estimates. This requirement comes from the Truth in Lending Act (TILA), 15 U.S.C. § 1601 et seq., and its implementing Regulation Z, 12 C.F.R.
What does "complete dollar-amount disclosure" actually mean? Your paperwork must show: the finance charge expressed as a dollar figure, the amount financed, the total of payments you will make, and the payment schedule. If any of these elements are missing, misleading, or buried in fine print, the lender has violated TILA.
Why this matters for payday borrowers specifically: these loans often carry fees structured as flat dollar amounts per $100 borrowed, which can obscure the true cost. TILA forces the lender to translate everything into the actual dollars you will pay, making comparison possible.
If a lender violates TILA, the remedy is substantial. You can recover actual damages, twice the finance charge (capped at $1,000 in individual actions), plus attorney's fees and court costs. This creates real leverage — lenders know that sloppy disclosures expose them to liability.
How do I stop unwanted calls and texts about my loan?
You have the right to limit how lenders and collectors contact you by phone. The Telephone Consumer Protection Act (TCPA), 47 U.S.C. § 227, restricts calls and text messages to your cell phone unless you have given prior express consent — and you can revoke that consent at any time.
The TCPA applies to automated calls, prerecorded voice messages, and texts. If a lender or collector uses an automatic telephone dialing system without proper consent, each violation carries a $500 statutory penalty. If the violation was willful or knowing — for example, if you documented your revocation of consent and they called anyway — the penalty triples to $1,500 per call or text.
Practical steps to protect yourself:
- Document every call and text with date, time, and number.
- Revoke consent in writing — email or text works if you keep a copy — stating clearly: "I revoke any prior consent to call or text this number."
- If calls continue, mention the TCPA specifically; many lenders will stop immediately to avoid liability.
- For persistent violations, consult a consumer attorney; the statute provides for attorney's fees, making representation accessible.
For borrowers already managing an existing loan, our guide on handling payment difficulties includes additional communication strategies.
What rules apply when my debt goes to a collection agency?
Once your original lender transfers your debt to a third-party collection agency — meaning any entity other than the lender who originally issued your loan — that collector must follow the Fair Debt Collection Practices Act (FDCPA), 15 U.S.C. The FDCPA establishes strict conduct boundaries designed to eliminate harassment and deception.
Key protections include: restrictions on call times (generally 8 a.m. to 9 p.m. in your time zone), prohibitions on contacting you at work if you've told them not to, bans on false threats or misrepresentations about legal consequences, and requirements to honor written requests to cease communication.
Within 30 days of a collector's first contact, you may request written validation of the debt. Once you make this request, all collection activity must pause until the collector delivers documentation proving the debt's validity, amount, and their authority to collect it. This is a powerful tool — many collection attempts collapse when borrowers demand validation.
FDCPA violations trigger statutory damages up to $1,000 per case, plus actual damages, attorney's fees, and costs. Unlike many consumer protections, FDCPA claims can be brought in either federal or state court, and the fee-shifting provision means successful plaintiffs pay nothing for legal representation.
If you're dealing with aggressive collection tactics, our sample scripts and response templates can help you assert your rights effectively.
How do I protect and correct my credit report?
Your credit file accuracy is guarded by the Fair Credit Reporting Act (FCRA), 15 U.S.C., which gives you three specific, actionable rights.
First, every 12 months you may obtain one free credit report from each of the three major bureaus — Equifax, Experian, and TransUnion — through the official site annualcreditreport.com. This is the only federally authorized source; avoid imposter sites with similar names.
Second, in all 50 states you can place and remove a credit freeze at no charge. A freeze blocks lenders from accessing your credit report, which prevents new account openings in your name. This is particularly valuable if you suspect identity theft or want to control when lenders can evaluate your credit.
Third, if you identify inaccurate information — whether a payment incorrectly marked late, a loan you never took, or a balance that doesn't match your records — you may dispute it directly with the relevant bureau. The bureau must investigate within 30 days and correct or remove information it cannot verify.
FCRA remedies include actual damages, statutory damages up to $1,000, punitive damages for willful violations, and attorney's fees. Willful violations occur when a furnisher or bureau knowingly includes false information or fails to investigate properly despite your dispute.
Can I stop automatic withdrawals from my bank account?
Yes. Under the Electronic Fund Transfer Act and Regulation E, 12 C.F.R., you have the right to revoke ACH authorization — the electronic permission that lets lenders debit your checking account automatically. This revocation is effective when you communicate it, whether to your bank or to the lender.
Beyond revocation, Regulation E provides a 60-day window to dispute unauthorized or incorrect electronic transfers. During this period, your bank must restore the disputed funds while investigating, giving you immediate financial relief rather than forcing you to wait for resolution.
To revoke ACH authorization effectively:
- Notify your bank in writing — a signed letter or secure message creates a record.
- Notify the lender separately, keeping copies of all communications.
- Consider closing the account if the lender has a history of ignoring revocations, though this has its own complications.
- Monitor your account closely; if unauthorized debits occur after revocation, dispute immediately within the 60-day window.
Our comprehensive guide on managing existing payday loans covers account closure considerations in more detail.
What special protections exist for military borrowers?
Active-duty service members and their covered dependents receive enhanced protections under the Military Lending Act (MLA), 10 U.S.C. § 987. The centerpiece is a hard cap on credit costs: the Military Annual Percentage Rate, or MAPR, cannot exceed 36%.
The MAPR calculation includes more than just interest. It encompasses all finance charges, credit insurance premiums, add-on products, and most fees — making it a comprehensive cost measure that often produces a higher figure than the standard APR disclosure. If the total MAPR exceeds 36%, the loan is prohibited for covered borrowers.
MLA protections apply to payday loans, vehicle title loans, refund anticipation loans, and deposit advance products. Lenders must verify military status before extending credit, and the 36% cap is absolute — no waivers, no exceptions for state law variations.
Violations of the MLA can result in contract voiding, refund of all charges, and administrative penalties. Service members who believe their rights have been violated should contact their Judge Advocate General office or the Consumer Financial Protection Bureau.
What state-level rules limit repeat borrowing?
Beyond federal protections, state laws create additional guardrails against debt cycles. These vary significantly by jurisdiction, but several concrete examples illustrate the patterns.
In Florida, borrowers must wait 24 hours between loans — a cooling-off period designed to prevent impulse reborrowing. Illinois bars any new loan within 30 days once a borrower reaches repeat-borrower status, defined by specific consecutive loan patterns. Texas does not cap rates but requires specific disclosures and maintains a statewide loan database to track borrowing patterns.
Ohio, following its 2018 reform law, eliminated the traditional single-payment payday loan structure entirely, requiring loans to be repayable in installments with longer terms and lower total costs.
Before you borrow, verify your specific state's rules. The California page in our state directory provides another example of how disclosure requirements and fee structures differ from federal baselines.
What is the CFPB's two-strike rule on payments?
The Consumer Financial Protection Bureau's Payday Lending Rule, with payment provisions effective 2022, establishes what borrowers often call the "two-strike rule." Under 12 C.F.R., lenders face restrictions after two consecutive failed payment attempts.
Specifically, after two unsuccessful attempts to withdraw payment from a borrower's account — whether due to insufficient funds, account closure, or other reasons — the lender cannot make further withdrawal attempts without obtaining new, specific authorization from the borrower. This prevents the common scenario where repeated failed attempts generate cascading overdraft fees while the borrower falls deeper into debt.
This protection works alongside your Regulation E rights. While Regulation E lets you revoke authorization entirely, the CFPB rule creates an automatic checkpoint that forces lender-borrower communication after two failures, even if you haven't actively revoked anything.
How can I restructure my loan before defaulting?
Before you reach default, you typically have the right to request an Extended Payment Plan (EPP) — a lender-provided option that converts your single-payment loan into a series of installments spread over 60–90 days with no additional fee attached.
This protection derives from state statutes where payday lending is permitted, supplemented by industry self-regulation under OLA Best Practices. In all 23 states that allow payday lending, lenders are required to offer at least one free EPP per 12-month period upon borrower request.
The key word is "request." EPPs are generally not automatic — you must ask, and timing matters. Request before your payment due date, not after you've already missed it. Once granted, the EPP freezes additional fees and interest accumulation, giving you a structured path to repayment without the balloon payment that typically triggers reborrowing.
If a lender denies your EPP request despite state requirements, document the denial and contact your state financial regulator. The right exists; enforcement varies by state.
What protections exist against lending discrimination?
The Equal Credit Opportunity Act (ECOA), 15 U.S.C. § 1691, and Regulation B, 12 C.F.R., prohibit discrimination in any aspect of a credit transaction on the basis of race, color, religion, national origin, sex, marital status, age, or because you receive public assistance.
ECOA creates two specific procedural rights. First, within 30 days of a denial, the lender must provide you the specific reasons in writing — not just a generic "credit score" reference, but the actual factors that led to the adverse decision. Second, you have the right to request your credit-decision data directly, including the specific information used in any automated underwriting system.
Remedies for ECOA violations are among the strongest in consumer credit law: actual damages, punitive damages up to $10,000 for individual actions, and for class actions, the lesser of $500,000 or 1% of the creditor's net worth, plus attorney's fees. This structure creates significant deterrent value against discriminatory practices.
If you suspect discrimination, document every interaction and request written reasons immediately. The 30-day window for the lender's response is mandatory, and failure to comply is itself a violation.
How do I spot violations and protect myself?
Knowing your rights means little if you cannot recognize when they're violated. Watch for these warning signs that should trigger documentation and potential complaint:
- Loan documents missing total dollar-cost disclosures or burying them in dense text.
- Calls or texts continuing after you've revoked consent in writing.
- Third-party collectors refusing to provide debt validation within 30 days of your request.
- Credit report errors persisting after you've filed a dispute.
- ACH debits occurring after you've revoked authorization.
- Lenders making a third or fourth withdrawal attempt after two consecutive failures.
- Denial letters lacking specific reasons or arriving after the 30-day deadline.
For help evaluating whether a lender's behavior crosses into illegality, use our scam spotter tool to compare reported practices against known violation patterns.
Frequently Asked Questions
Can a payday lender really call me at work?
Third-party debt collectors cannot contact you at work if they know or have reason to know your employer prohibits such calls. Original lenders face fewer restrictions under federal law, but many states impose similar limits. Tell any caller explicitly: "My employer does not allow personal calls at work." Document this notice. If calls continue, you may have a TCPA or state-law claim.
What if I already signed but the costs were higher than I expected?
Review your TILA disclosure immediately. If the total dollar amount of finance charges or total payments was not clearly disclosed before you signed, you may have a Truth in Lending Act claim. You have one year from the violation to bring suit, but act quickly to preserve evidence. Even if the disclosure was technically present but misleadingly placed, you may have remedies.
Do these rights apply to online payday loans too?
Yes. Federal protections including TILA, TCPA, FDCPA, FCRA, Regulation E, ECOA, the MLA, and CFPB rules apply regardless of whether you borrowed from a storefront or an online lender. State laws apply based on where you reside, not where the lender is headquartered. Online lenders must comply with the laws of your state of residence.
How do I actually get my free credit reports?
Visit annualcreditreport.com — the only federally authorized source. You can request all three bureau reports at once or stagger them throughout the year for ongoing monitoring. The site will not ask for payment; if you're asked for a credit card, you're on the wrong site. Beware of lookalike domains with similar names.
What should I do if a lender ignores my ACH revocation?
First, confirm your revocation was in writing and keep copies. Second, notify your bank immediately that you've revoked authorization for that specific payee — this creates a record under Regulation E. Third, if debits continue, dispute them within 60 days; the bank must restore funds while investigating. Fourth, document everything and consider consulting an attorney; willful violations of electronic transfer rules carry significant penalties.
Your rights as a payday borrower are real, enforceable, and designed to prevent the worst outcomes of short-term lending. Use this guide as a reference, document your interactions, and don't hesitate to assert protections when lenders overstep. For borrowers currently managing repayment challenges, our complete guide to handling existing payday loans offers step-by-step strategies for using these rights in practice.