California Consumer Financial Protection Law and MCAs

Legal Notice

Are You Protected by the CCFPL?

The California Consumer Financial Protection Law provides the DFPI with broad authority to target “unfair, deceptive, or abusive” acts by MCA funders. If your business has been subjected to predatory collection or hidden terms, you have rights.

Speak with a Specialist in MCA Defense:

Request a Free Case Review

Direct Line: 888-201-0441

Credible Law: Connecting California businesses with expert legal advocacy for financial protection claims.

California Consumer Financial Protection Law and Merchant Cash Advances

California enacted one of the broadest state-level financial protection frameworks in the country through the California Consumer Financial Protection Law (CCFPL). The law significantly expanded the authority of the Department of Financial Protection and Innovation (DFPI) to investigate, supervise, and take enforcement action against unlawful, unfair, deceptive, or abusive acts or practices in financial services.

Although merchant cash advance (MCA) transactions are often framed as commercial financing arrangements rather than consumer loans, California regulators have publicly warned small businesses about potentially unfair or deceptive MCA practices and have actively encouraged affected businesses to file complaints. The DFPI issued a 2025 advisory specifically inviting small businesses to report unfair, deceptive, or abusive conduct connected to merchant cash advances.

Many business owners do not begin examining the regulatory side of an MCA relationship until after something goes wrong — a default notice that does not match the agreement, aggressive collection activity, misleading funding terms, a bank levy, an MCA lawsuit, broker misconduct, or disputes over disclosures, reconciliation rights, or contract structure. By the time those issues surface, multiple legal questions may already be in play.

This page is a legal authority guide explaining how the CCFPL, DFPI enforcement power, and MCA-related complaint pathways may matter in real-world California disputes. For businesses already facing MCA litigation or collection pressure, working with a California MCA defense attorney familiar with these issues can help clarify both the immediate risks and the broader regulatory landscape.

What Is the California Consumer Financial Protection Law?

The California Consumer Financial Protection Law, codified under Division 24 of the California Financial Code (Section 90000 et seq.), was enacted in 2020 through Assembly Bill 1864. It gave the DFPI broad new authority modeled in part on the federal Consumer Financial Protection Bureau’s powers.

The CCFPL accomplished several important things for financial oversight in California.

First, it expanded the DFPI’s jurisdiction to cover providers of certain financial products and services that were previously unregulated by the department, including debt-relief companies, credit repair services, and other financial service providers that fell outside of existing licensing categories.

Second, it gave the DFPI explicit authority to stop unlawful, unfair, deceptive, or abusive acts or practices — a framework often referred to as UDAAP — across a broader range of financial conduct than the agency could previously reach.

Third, it created new internal structures within the DFPI, including a Consumer Financial Protection Division, an Office of Financial Technology Innovation, and an Office of the Ombuds.

Fourth, subsequent rulemaking extended the CCFPL’s UDAAP protections to commercial financing offered to small businesses, nonprofits, and family farms, making California the first state to apply abusive-acts-or-practices standards to commercial financing transactions.

And in 2025, SB 825 closed a prior loophole by clarifying that even entities already licensed under other DFPI-administered laws are now subject to the department’s UDAAP enforcement authority under the CCFPL. That change took effect January 1, 2026.

This page is focused on the practical relevance of the CCFPL to merchant cash advance conduct specifically. For a broader overview of the state’s MCA regulatory environment, see CredibleLaw’s guide to California merchant cash advance laws. For disclosure-specific requirements, see the page on California commercial financing disclosure law.

External resources:

Why the CCFPL Matters in the Merchant Cash Advance Industry

Merchant cash advances occupy a gray zone in commercial financing. MCA providers typically structure their products as purchases of future receivables rather than loans, which has historically allowed some operators to avoid interest rate caps, traditional lending regulations, and Truth in Lending Act requirements. But the structural label a provider applies to a transaction does not necessarily shield all of its conduct from regulatory scrutiny.

The CCFPL matters in the MCA context for several reasons.

MCA-related conduct can involve the types of practices the CCFPL was designed to address — misleading representations about cost, broker conduct that obscures the real terms of the funding, collection pressure that misstates the business owner’s legal rights, and repayment structures that are difficult for the recipient to fully understand before signing. Business owners may encounter conduct that feels deceptive or abusive even when the MCA provider does not label the product as a loan.

California regulators have separately signaled concern about MCA practices. The DFPI’s 2025 advisory to small businesses specifically asked business owners to speak up about unfair, deceptive, or abusive conduct in connection with merchant cash advances. That advisory is a meaningful regulatory signal — it tells businesses, attorneys, and providers alike that the DFPI views MCA conduct as falling within the scope of its oversight interests.

The CCFPL framework also matters for lender conduct review, broker conduct review, regulatory complaint strategy, litigation analysis, and the credibility of claimed disclosures and representations. When a California business is evaluating whether to challenge MCA terms, pursue a complaint, or respond to an MCA lawsuit, the regulatory environment is part of the broader analysis.

For more on how MCA disputes can be evaluated, see the pages on MCA defense strategies in California and when an MCA contract may be challenged.

What Does “Unfair, Deceptive, or Abusive” Mean in an MCA Context?

The UDAAP framework is central to the CCFPL’s enforcement power. Understanding what “unfair,” “deceptive,” and “abusive” mean in practice — and how those terms may apply to MCA conduct — is critical for any business evaluating its legal position.

Deceptive conduct generally involves representations, omissions, or practices that are likely to mislead a reasonable person. In the MCA context, that could include misrepresenting the total cost of the advance, presenting factor rates in a way that obscures the true repayment burden, advertising speed and flexibility while burying restrictive terms in the contract, or providing pre-funding disclosures that do not match the actual agreement.

Unfair conduct typically refers to practices that cause or are likely to cause substantial harm to the recipient that is not reasonably avoidable and is not outweighed by countervailing benefits. MCA-related examples might include repayment structures where daily or weekly ACH withdrawals create unsustainable cash flow pressure, shifting payment terms after funding without clear contractual authority, or collection activity that effectively forces a business to choose between staying open and complying with repayment demands.

Abusive conduct involves practices that materially interfere with the ability of the recipient to understand the terms or conditions of a product, or that take unreasonable advantage of the recipient’s lack of understanding, inability to protect their interests, or reasonable reliance on the provider to act in the recipient’s interest. In MCA transactions, that might involve high-pressure broker conduct aimed at business owners who lack financing sophistication, document packages that are difficult to reconcile with the verbal promises made during the sales process, or reconciliation rights that appear favorable on paper but are structured in a way that makes them effectively unusable.

It is important to be clear about what this section does and does not represent. The examples above describe patterns and risk areas — they do not mean that every unpleasant MCA experience automatically violates the law. Whether particular conduct crosses the line into unlawful territory depends on the specific facts, the documents, the representations made, and the applicable legal standards. But the CCFPL’s UDAAP framework gives California regulators and, in some circumstances, affected businesses a basis for evaluating MCA conduct through a more rigorous lens.

For related analysis, see the page on true sale vs. loan analysis and the guide to California merchant cash advance lawsuits.

The DFPI, MCA Complaints, and California Regulatory Oversight

The Department of Financial Protection and Innovation is the state agency responsible for administering and enforcing the CCFPL. It has supervisory, examination, and enforcement authority over covered persons offering financial products or services in California, including the ability to pursue administrative actions, civil money penalties, restitution, and disgorgement.

In the MCA space specifically, the DFPI has taken several concrete steps.

The agency finalized CCFPL regulations in August 2023 that became effective October 1, 2023. Those regulations extended UDAAP protections to commercial financing transactions — including merchant cash advances — offered to small businesses (defined as for-profit entities with annual gross receipts of no more than $16 million, as adjusted), nonprofits, and family farms principally directed or managed from California. The regulations also created annual reporting requirements for covered providers of commercial financing.

In April 2025, the DFPI issued a public advisory specifically addressed to small businesses, encouraging them to report unfair, deceptive, or abusive practices connected to merchant cash advances. The advisory noted that MCA providers are covered by the 2023 UDAAP regulations and that California businesses have the right to file complaints.

The DFPI also publishes annual reports detailing its CCFPL implementation activities, including rulemaking, enforcement, oversight, complaints, and outreach.

California is, by most assessments, one of the most active states in the country when it comes to small-business financing oversight. The combination of CCFPL authority, commercial financing disclosure requirements, UDAAP regulations covering commercial transactions, and public complaint pathways makes the state a particularly consequential regulatory environment for MCA providers.

External resources:

How the CCFPL Connects to MCA Disclosures, Collections, and Lawsuits

The CCFPL is not the only California law relevant to MCA disputes, but it can overlap with — and reinforce — other legal issues a business may be facing.

A California business dealing with an MCA problem may be confronting multiple issues at once: disclosure deficiencies under the state’s commercial financing disclosure law, unfair or deceptive practices under the CCFPL’s UDAAP framework, aggressive or misleading collection activity, threats of bank levies or asset restraints, and litigation from the MCA provider or a debt buyer.

The CCFPL’s relevance often becomes clearer when the conduct is viewed as a whole rather than in isolation. A provider that failed to deliver compliant disclosures at the time of funding, misrepresented the nature of the repayment obligation, applied collection pressure based on overstated legal rights, and then filed suit to enforce a contract of questionable validity may be exhibiting a pattern of conduct that touches several overlapping legal frameworks simultaneously.

Understanding where the CCFPL fits alongside the disclosure requirements, lien-filing issues, collections law, and contract defenses is part of building a complete picture of the business’s legal position.

For specific coverage of these related topics, see:

Common MCA Conduct Issues That May Trigger Legal Review

Not every MCA dispute involves the same set of problems, but certain patterns appear frequently enough that they are worth identifying. Business owners evaluating their situation against California law — including the CCFPL — may want to consider whether any of the following apply:

Financing costs that were presented in a way that made the total repayment amount unclear or difficult to compare against alternatives
Broker promises about repayment flexibility, approval terms, or cost that did not match the final contract
Failure to clearly explain how daily or weekly repayment amounts would be calculated or when they could change
Payment terms that shifted after funding without adequate notice or clear contractual authority
Default notices that did not accurately reflect the terms of the original agreement
Threats of legal action, asset seizure, or bank restraints without clear support in the contract or under applicable law
Unexplained ACH withdrawals or withdrawals that exceeded the agreed repayment structure
Document packages where the contract, the funding summary, and the verbal representations all told different stories
Pressure tactics tied to personal guaranties, confessions of judgment, or asset restraints that the business owner did not fully understand at the time of signing
Failure to honor reconciliation language, hardship provisions, or repayment adjustment processes where such terms existed in the agreement

This section is intended to help businesses compare the law against what actually happened. Not every issue on this list necessarily gives rise to a legal claim, but identifying the specific conduct problems is an important first step in any legal analysis.

For deeper discussion of contract-level issues, see when an MCA contract may be challenged and legal defense strategies for MCA disputes.

Can the CCFPL Matter in an MCA Lawsuit or Defense Strategy?

This is one of the most important practical questions for business owners already facing litigation or collection activity.

The CCFPL does not automatically erase an MCA obligation. A business cannot simply cite the law’s existence and expect a court to dismiss a claim or void a contract. But conduct that falls within California’s unfair, deceptive, or abusive framework may matter in several important ways.

It may be relevant when evaluating the strength or weakness of potential defenses to an MCA enforcement action. It may affect negotiation leverage, particularly when the provider’s conduct raises questions about whether the transaction was properly disclosed, honestly represented, and lawfully administered. It may support a regulatory complaint that runs parallel to the litigation. It may inform the analysis of potential counterclaims or affirmative defenses. And it may shape the overall litigation posture — including how a court views the credibility and good faith of the parties.

Whether the CCFPL helps in a particular case depends on the specific documents, the conduct of the provider and broker, the timing of the representations, and the procedural posture of the dispute. These are fact-intensive questions that require careful legal analysis.

What businesses should not do is ignore lawsuits, bank levies, or formal collection notices while trying to assess these issues on their own. Time-sensitive litigation deadlines and asset-protection concerns often require immediate legal attention, even while the broader regulatory analysis is still developing.

For legal help with an active MCA dispute, see:

Does the CCFPL Apply Only to Consumers?

The name — California Consumer Financial Protection Law — reasonably raises this question, particularly on a page focused on business financing and merchant cash advances.

The CCFPL is framed as a financial protection statute, and many of its provisions are organized around “consumer financial products or services.” However, the DFPI’s enforcement, reporting, and oversight structure is broader than many readers initially assume.

Through rulemaking completed in 2023, the DFPI extended the CCFPL’s UDAAP prohibitions to the offering and provision of commercial financing and other financial products and services to small businesses, nonprofits, and family farms. That extension was a deliberate regulatory choice — California determined that the same standards governing unfair, deceptive, and abusive conduct in consumer transactions should also protect small businesses in commercial financing.

The DFPI also requires annual reporting from covered providers of commercial financing under CCFPL authority, and it publishes reports and enforcement summaries that encompass both consumer and commercial activity.

The state’s MCA advisory to small businesses further demonstrates that California regulators are willing to engage directly with MCA-related harms affecting small businesses — not just individual consumers. That advisory was addressed to small businesses specifically, and it cited the 2023 UDAAP regulations as the source of the protections being described.

This section is not claiming that the CCFPL gives small businesses all of the same rights as individual consumers under every provision. But the regulatory framework is clearly relevant to commercial MCA transactions in California, and the DFPI has made that relevance explicit.

For additional context, see California commercial financing disclosure law and the full guide to California merchant cash advance laws.

How the CCFPL Fits Into the Larger California MCA Legal Framework

The CCFPL is one layer of a broader California MCA legal ecosystem. It does not operate in isolation, and understanding its role requires seeing how it connects to the state’s other relevant laws and regulatory frameworks.

California’s MCA-related legal landscape includes the commercial financing disclosure law (implementing SB 1235), the California Financing Law, the Unfair Competition Law (Business and Professions Code Section 17200), the False Advertising Law, UCC lien and enforcement provisions, true sale versus loan classification disputes, and a range of collections, levy, and contract-defense issues that arise in MCA litigation.

The CCFPL adds a regulatory enforcement and UDAAP dimension to this ecosystem. It gives the DFPI direct authority to investigate and act against conduct that may be unfair, deceptive, or abusive — even in transactions that do not clearly fall under traditional lending or consumer protection statutes. That authority is particularly significant in the MCA space, where providers have historically argued that their products sit outside the regulatory perimeter.

For a comprehensive view of the full California MCA legal framework, see:

What Businesses Should Do If They Believe an MCA Provider Acted Unfairly or Deceptively

If a California business believes it has been subjected to unfair, deceptive, or abusive MCA practices, the following steps can help build a clearer picture of the legal situation:

Gather the core documents. Collect the MCA contract, the funding summary, any disclosure documents provided at or before signing, and the full payment history including all ACH withdrawals.

Preserve all communications. Save emails, text messages, call notes, voicemails, and any written correspondence with the MCA provider, broker, or collection agent. These records often contain representations that differ from the contract terms.

Collect bank records and default notices. Obtain bank statements showing the timing and amounts of all withdrawals. Preserve any default notices, demand letters, or litigation filings received from the provider.

Compare the representations against the contract. Identify whether the cost, repayment, and flexibility promises made before funding match what the contract actually says and how the provider actually administered the repayment.

Document any unexplained withdrawals or reconciliation failures. If the provider withdrew amounts that exceeded the agreed structure, changed the payment frequency without notice, or refused to honor reconciliation or hardship provisions, those facts may be relevant to the legal analysis.

Do not ignore lawsuits, bank levies, or collection notices. These are time-sensitive legal events that require a response. Failing to answer a lawsuit or respond to a levy can result in a default judgment or asset loss, regardless of the strength of the business’s underlying position.

Consider both regulatory and legal options. Filing a complaint with the DFPI is one available pathway. Consulting with an attorney experienced in MCA disputes in California is another. In many cases, both options can be pursued simultaneously.

Speak With a California MCA Defense Attorney

Regulatory issues and litigation often overlap in MCA disputes. Many businesses focus exclusively on the amount of the cash advance and overlook the legal significance of disclosure deficiencies, broker misrepresentations, collection conduct, or unfair practices that may affect their legal position.

If an MCA lawsuit has been filed, a bank levy has been imposed or threatened, or collection pressure is escalating, timing matters. Early legal review can help identify potential defenses, evaluate the viability of regulatory complaints, and determine whether the provider’s conduct raises issues that could affect the outcome.

CredibleLaw connects California businesses with attorneys who focus on merchant cash advance defense, commercial financing disputes, and related litigation. Whether the issue involves contract structure, UDAAP-related conduct, collection abuse, or active litigation, getting qualified legal guidance as early as possible strengthens the business’s ability to respond effectively.

Speak with a California MCA defense attorney →

Get help with a merchant cash advance lawsuit →

Legal help for an MCA dispute in California →

Are You Facing Abusive Lending Practices?

Under the California Consumer Financial Protection Law, your business may have defenses against deceptive MCA contracts. Speak with an expert to see if you qualify for a claim.

Start My Case Review

Confidential Consultation 888-201-0441

Credible Law: Protecting California Business Owners from UDAAP Violations & Predatory Financing.

Frequently Asked Questions

What is the California Consumer Financial Protection Law?

The California Consumer Financial Protection Law (CCFPL) is a state statute enacted in 2020 that expanded the authority of the Department of Financial Protection and Innovation (DFPI) to regulate and take enforcement action against unlawful, unfair, deceptive, or abusive acts or practices in connection with financial products and services. Through subsequent rulemaking, the DFPI extended CCFPL protections to commercial financing transactions, including merchant cash advances, offered to small businesses, nonprofits, and family farms in California.

Does the CCFPL apply to merchant cash advances?

The CCFPL’s UDAAP protections were extended to commercial financing transactions through regulations that became effective on October 1, 2023. Those regulations cover providers offering commercial financing — including MCAs — to small businesses with annual gross receipts of no more than $16 million (as adjusted), nonprofits, and family farms whose activities are principally directed or managed from California. The DFPI has also issued a public advisory specifically addressing MCA practices.

What does unfair, deceptive, or abusive mean in an MCA context?

In the MCA context, deceptive conduct may include misrepresenting the total cost of an advance or the terms of repayment. Unfair conduct may involve practices that cause substantial, unavoidable harm to the business that is not outweighed by countervailing benefits. Abusive conduct may involve taking unreasonable advantage of a business owner’s lack of understanding of the transaction. Whether specific conduct crosses the legal threshold depends on the facts, documents, and representations involved.

Can I complain to the DFPI about a merchant cash advance?

Yes. The DFPI accepts complaints from businesses that believe they have been subjected to unlawful, unfair, deceptive, or abusive practices in connection with financial products or services, including merchant cash advances. The DFPI’s complaint page explains the process. The agency’s 2025 advisory specifically encouraged small businesses to report MCA-related problems.

Can the CCFPL matter in an MCA lawsuit?

The CCFPL does not automatically void an MCA obligation, but conduct that falls within California’s unfair, deceptive, or abusive framework may be relevant to defense strategy, negotiation leverage, counterclaim analysis, and regulatory complaint strategy. Whether the law helps in a particular case depends on the specific documents, conduct, and procedural posture of the dispute.

Does California regulate deceptive MCA practices?

California has built one of the most comprehensive regulatory frameworks in the country for commercial financing oversight. Through the CCFPL’s UDAAP regulations, commercial financing disclosure requirements, and the DFPI’s enforcement authority, the state has the tools to address deceptive practices in the MCA industry. The DFPI has publicly invited complaints about deceptive MCA conduct.

What should I do if an MCA provider misled my business?

Gather all contracts, disclosures, broker communications, payment records, and correspondence. Compare the representations made before and during funding against what the contract says and how repayment was actually administered. Consider filing a complaint with the DFPI. Consult with an attorney experienced in California MCA disputes, especially if you are already facing a lawsuit, bank levy, or aggressive collection activity. Do not ignore formal legal notices while evaluating your options.

This page is published by the CredibleLaw Editorial Team as a legal authority resource. CredibleLaw is a legal resource and attorney referral platform — not a law firm. This content is provided for informational purposes and does not constitute legal advice. Consult with a qualified attorney for advice specific to your situation.

Last reviewed: April 2026

California Consumer Financial Protection Law and Merchant Cash Advances: What Businesses Need to Know