House GOP Bill Would Reshape the CFPB: What Merchants Should Track

The House Republican CFPB reform bill would move the bureau to congressional funding and narrow its powers. What it means for lenders, BNPL and subscriptions.

Adrian ReyesSenior Payments & Fintech Editor

October 27, 2026 · 8 min read

U.S. Capitol dome in Washington, D.C. under an overcast sky, with trees in front of the building

Photo: Pixabay

On this page 6 sections

What the House Republican CFPB Reform Bill Would Change
Which CFPB Powers Touch Merchants: BNPL and Payment App Oversight
High-Risk Verticals Most Exposed: Lending, Credit Repair, Debt Collection
Why State AGs and the FTC Become the Enforcers to Watch
What Stays the Same: Card Network Rules and Processor Underwriting
Compliance Steps That Make Sense Whatever Happens to the Bill

Key takeaways

H.R. 10184 would put the CFPB on congressional appropriations, narrow "abusive," cut penalties and raise the bank supervision threshold to $30 billion. American Banker reports it is unlikely to move before the next Congress.
The small-dollar safe harbor has been described as covering products from banks. Nonbank lenders and cash advance companies shouldn't assume it applies to them.
Lower federal penalties don't limit state attorneys general or the FTC. Online and recurring sellers answer to every state they sell into.
Card network rules and processor underwriting don't change under this bill, so don't expect easier high-risk approvals if it passes.

The House Republican CFPB reform bill, formally the Consumer Financial Protection Accountability and Reform Act of 2026 (H.R. 10184), would put the Consumer Financial Protection Bureau on annual congressional funding, narrow what counts as an "abusive" practice, shrink the penalties it can seek and cut the number of banks it supervises. For most merchants, the direct effect is small. The real exposure sits with businesses the bureau regulates or polices: consumer lenders, debt collectors, credit repair firms, BNPL and payment app providers, and the online and subscription sellers who work with them. Whatever happens to the bill, card network rules, your processor's underwriting, the FTC and state attorneys general stay where they are.

What the House Republican CFPB Reform Bill Would Change

Rep. Andy Barr (R-Ky.), chair of the Financial Institutions Subcommittee, introduced H.R. 10184 on Aug. 31, 2026, and the House Financial Services Committee unveiled it on Sept. 1. Committee Chair French Hill (R-Ark.) and 28 other Republicans co-sponsored it, according to Banking Dive. Punchbowl News described the package as far more ambitious than earlier GOP efforts to rein in the bureau. This week it returned to the question of what the CFPB looks like going into the next Congress.

Based on the committee's materials and coverage by Banking Dive, the ABA Banking Journal, PYMNTS and Bloomberg, the bill would:

Change the funding. The bureau would get its money through congressional appropriations. Today it draws funds from the Federal Reserve, up to a cap set in law, the arrangement it has used since it was created in 2010.
Narrow "abusive." A practice would be "deemed abusive only if there is risk of substantial injury to the consumer which countervailing benefits do not outweigh," in the committee's words. The bureau also could no longer read UDAAP (unfair, deceptive, or abusive acts or practices) to cover discrimination.
Cut penalties. Civil money penalties would be smaller, and the bureau would have less power to seek monetary relief from businesses.
Require cost-benefit analysis. Both new and existing rules would be weighed for their effect on small businesses, competition, innovation and access to credit.
Raise the bank supervision line. The asset threshold for CFPB supervision would rise from $10 billion to $30 billion, with GDP-based adjustments every five years starting in 2031.
Address specific products. The bill includes a safe harbor for small-dollar credit and separate provisions on earned wage access, BNPL, regulatory guidance and consumer complaints. It would also create an inspector general just for the CFPB.

The bill was referred to four committees: Financial Services, Judiciary, Small Business, and Oversight and Government Reform, per FinanceBuzz. Financial Services put it on its Sept. 16 markup agenda. To become law, it still needs a House floor vote, Senate passage and a presidential signature. In the Senate, most bills need some Democratic support to clear a filibuster. American Banker reported that the package is unlikely to move this Congress and is meant to build consensus for the next one.

Read it as a blueprint for 2027. The bureau has already shrunk without it. Bloomberg noted the CFPB has been tied up in legal fights as the administration moves to cut its funding and staff. In May 2025, the Financial Services Committee voted 30-22 on its piece of the budget reconciliation bill, which would have capped the bureau's 2025 funding at $249 million. That cap didn't make it into the final law.

The reconciliation law signed on July 4, 2025 (P.L. 119-21) instead cut the ceiling on what the bureau can draw from the Fed from 12% to 6.5% of the Fed's 2009 operating expenses, adjusted annually, according to the Congressional Research Service and Consumer Finance Monitor. Punchbowl's view is that budget limits set by congressional Republicans could hold the bureau back even under a future Democratic president.

Which CFPB Powers Touch Merchants: BNPL and Payment App Oversight

The CFPB doesn't set interchange, write card network rules or approve merchant accounts. A plumber or a Shopify store selling its own goods mostly sits outside its direct reach. The bureau reaches merchants in three ways.

Through UDAAP enforcement. The bureau polices companies that offer consumer financial products. That includes businesses that finance purchases themselves, collect consumer debts or sell credit repair. A narrower "abusive" standard and smaller penalties would lower the federal risk for those businesses.

Through nonbank supervision. BNPL providers, payment apps and many lenders aren't banks, so the bureau uses its nonbank authority to watch them. PYMNTS reports the bill would keep that authority, operating under revised statutory standards. If you offer BNPL at checkout through a provider, the provider is the lender and carries the compliance load. Federal rules reach you through your merchant agreement with that provider, which sets disclosure language, how you can advertise "pay in four" and how disputes are handled. A lighter federal hand on BNPL and payment apps likely means fewer federally driven changes to those contracts. It doesn't stop states from licensing and regulating the same providers.

Through rules that flow downstream. The cost-benefit requirement applies to existing rules too, which gives future bureau leaders a legal basis to reopen them. If you accept pay-by-bank, the bureau's open banking rule matters more to you than this bill. We track it in our update on pay by bank and the CFPB open banking rule.

One point is often misread. A weaker federal "abusive" standard does not lower your chargeback risk, and it doesn't make an aggressive billing practice acceptable to Visa or Mastercard. Those are separate systems with separate penalties.

High-Risk Verticals Most Exposed: Lending, Credit Repair, Debt Collection

Consumer lending and cash advance. The small-dollar safe harbor is the headline item, but read the details before you count on it. American Banker describes it as covering some small-dollar products offered by depository institutions, meaning banks. A nonbank lender or cash advance company shouldn't assume it's covered until the final text says so. A federal bill like this leaves state licensing and state rate limits untouched. On the payment side, network rules govern how you can take loan repayments by card; see the rules on accepting credit cards for loan payments.

Credit repair and debt relief. These businesses answer to the FTC and state regulators as much as to the CFPB. Nothing reported about the bill changes the separate federal and state laws on when credit repair and debt relief companies may collect fees. Those fee-timing rules are what underwriters check first. Our guide to what underwriters need to approve a credit repair merchant account walks through the file.

Debt collection. Collectors operate under the federal debt collection law and the bureau's rule that puts it into practice. Lower penalties would reduce federal exposure, and a cost-benefit review of existing rules could eventually reopen parts of that rule. Until something actually changes, the current rule applies. Card acceptance for collectors also depends on state law and network rules on convenience fees. That's a big reason collection agency merchant accounts get declined.

Why State AGs and the FTC Become the Enforcers to Watch

When federal enforcement pulls back, the cases tend to move rather than disappear. Every state has its own consumer protection law and an attorney general who enforces it, and many states license lenders, collectors and credit repair companies directly. A cap on CFPB penalties doesn't cap what a state can seek. A narrower federal definition of "abusive" doesn't narrow a state law.

The FTC's power over unfair and deceptive practices covers most nonbank businesses and doesn't depend on the CFPB at all. The FTC has long brought cases over subscription billing, debt relief and collection practices.

This matters most for online and recurring sellers, because a business that sells nationally answers to every state it sells into. Subscription and membership merchants already deal with this under state auto-renewal laws, which differ on disclosure, consent and cancellation. Our state-by-state map of automatic renewal laws is the place to start. In practice, build your checkout and cancellation flow to meet the strictest state you sell into.

What Stays the Same: Card Network Rules and Processor Underwriting

Three layers of rules apply to every card sale, and Congress controls only one of them.

Layer	Who sets it	Does H.R. 10184 change it?
Federal and state law	Congress, regulators, state legislatures and AGs	Federal CFPB powers only
Card network rules	Visa, Mastercard, American Express, Discover	No
Processor and sponsor bank underwriting	Your processor and the bank behind it	No

Network rules are private contracts. Visa and Mastercard's free trial and subscription billing rules apply the same way no matter who runs the CFPB. So does Visa's fraud and dispute monitoring, explained in our VAMP breakdown.

Underwriting won't loosen either. Processors and their sponsor banks set their own risk policies, and the banks answer to their own regulators. When an underwriter reviews a collection agency or a credit repair company, the questions cover chargeback history, licensing, refund terms and whether fees are collected lawfully. A smaller CFPB doesn't change any of those answers, so don't expect easier approvals if the bill passes.

Compliance Steps That Make Sense Whatever Happens to the Bill

List who regulates you today. Write down every state license you hold, the federal laws that apply to your product and the card network programs you're enrolled in. If the CFPB shrinks, you'll know which regulator is next in line.
Check fee timing and disclosures against state law. For lenders, collectors and credit repair firms, this is where state AGs start.
Make cancelling as easy as signing up, and keep proof. Save timestamps, the disclosure text the customer saw and the cancellation confirmations you sent.
Keep your payment authorizations clean. For recurring bank debits, follow the wording and record-keeping in our ACH authorization requirements guide.
Log complaints from every channel. Chargebacks, emails, online reviews and state AG referrals often point to the same problem before any regulator does.
Line up a second processor. High-risk accounts get reviewed when a bank's risk appetite changes, not when a law does. A backup payment processor keeps one bank's decision from stopping your revenue.

This is general information, not legal advice. Confirm how any change applies to your business with a qualified attorney or compliance professional.

Three things to watch: the committee's Sept. 16 markup record, any action in the other three committees, and whether the bill comes back when the next Congress convenes in 2027. For lenders, collectors, credit repair firms and subscription sellers, the more urgent job is closer to home. Make sure your merchant account matches how you actually bill today. MannyPay offers high-risk processing, and a free quote request gets a reply from a specialist within one business day.

Sources

About the author

Adrian Reyes

Adrian Reyes is Senior Payments & Fintech Editor for Beyond the Swipe, covering credit card processing, merchant accounts, payment technology and processing fees.

This article is for general educational purposes and is not legal, tax or financial advice. Card network rules and state laws change; confirm current requirements for your business.