How to Report an Illegal Lender: A Step-by-Step Guide for First-Time Filers

Fact-checked by the onlinepaydaynews.com editorial team

To report an illegal lender, you need to act through the right federal and state channels. Filing in the wrong place delays action and weakens your case. According to CFPB complaint data, loan-related complaints consistently rank among the bureau’s top five received categories each year. Knowing exactly where to file makes the difference between a resolved case and a stalled one.

Predatory and unlicensed lenders are actively targeting borrowers who feel they have no recourse. Understanding the reporting process gives you real leverage.

How Do You Know a Lender Is Operating Illegally?

An illegal lender is one that operates without a required state license, charges interest rates above the legal cap, or violates federal consumer protection laws. These lenders often disguise themselves as legitimate online lenders or tribal finance companies to obscure accountability.

The most common red flags include: no physical address, pressure to pay upfront fees before receiving funds, and refusal to disclose the Annual Percentage Rate (APR) in writing. The Truth in Lending Act (TILA), enforced by the CFPB, legally requires all lenders to disclose APR, total loan cost, and repayment terms before you sign. If a lender skips those disclosures, that alone constitutes a federal violation.

It is also worth knowing that “online-only” status is not itself a red flag. Many fully licensed lenders operate without storefront locations. The question is whether the lender appears in your state’s banking registry, not whether it has a physical office you can walk into.

Tribal and Offshore Lender Loopholes

Some lenders claim tribal sovereignty to avoid state usury laws, which cap interest rates ranging from 36% APR in many states to no cap in others. Federal courts have increasingly ruled that tribal lender claims do not automatically exempt them from federal law. Read more about how tribal lenders compare to licensed state lenders to understand your actual protections before filing.

Offshore lenders present a related but distinct problem. A lender incorporated in a foreign jurisdiction may argue that neither U.S. state nor federal law applies. In practice, regulators have successfully pursued offshore lenders whose operations were clearly directed at U.S. consumers. The key factor courts and regulators consider is where the borrower was located, not where the lender was incorporated.

Where Should You Report an Illegal Lender?

File your complaint with all three of the following: the CFPB, your state attorney general, and the Federal Trade Commission (FTC). Each agency has different enforcement powers, and filing with multiple bodies increases the chance of action.

The CFPB is your primary federal resource. Its online portal at consumerfinance.gov/complaint accepts complaints about payday lenders, installment loan companies, and debt collectors. The FTC handles fraud and deceptive practices through ReportFraud.ftc.gov. State attorneys general hold additional power to pursue civil penalties against lenders violating state licensing or usury laws.

None of these filings costs you anything. The complaint forms are free, and you do not need a lawyer to submit them.

State Regulators and Banking Departments

Your state’s department of financial institutions or banking regulator can confirm whether a lender holds a valid license. A lender operating without that license is committing a criminal offense in most states. The Conference of State Bank Supervisors (CSBS) maintains a national directory to help you locate your state regulator quickly.

State banking departments are sometimes underutilized in the reporting process because borrowers focus on federal agencies. That is a mistake. State regulators have direct authority to revoke licenses, freeze operations, and in some cases compel restitution without the longer timelines that federal enforcement can require. If the lender is operating in your state without a license, your state banking department may be the fastest path to a concrete outcome.

What Is the Step-by-Step Process to Report an Illegal Lender?

Filing a complaint takes fewer than 30 minutes when you have the right documents ready. Follow these steps in order to build the strongest possible case.

1. Gather documentation first. Collect your loan agreement, all payment receipts, communications from the lender (texts, emails, call logs), and any fee disclosures — or lack thereof.
2. Verify the lender’s license status. Search your state banking department’s online registry. Absence from the registry is itself evidence of illegal operation.
3. File with the CFPB. Use the online portal at consumerfinance.gov/complaint. You will need to describe the issue, select a product type, and upload supporting documents.
4. File with the FTC. Go to ReportFraud.ftc.gov. The FTC uses these reports to identify patterns and build enforcement cases. Individual reports matter even if no direct action is taken on your specific file.
5. File with your state attorney general. Most state AG offices have online complaint forms. Search “[your state] attorney general consumer complaint” to find the correct page.
6. Follow up in writing. Send a certified letter to the lender notifying them you have filed regulatory complaints. This creates a paper trail and sometimes triggers faster resolution.

If the illegal lender also used illegal debt collection tactics, avoid the common CFPB filing mistakes borrowers make that can delay your case or reduce its strength.

What to Include in Your Complaint Narrative

The written narrative section of your complaint is where most filers underperform. Regulators need a clear, chronological account: when you applied, what you were told, what the documents actually said, when payments were taken, and what problems arose. Keep it factual and specific. Dates and dollar amounts carry more weight than general descriptions of feeling misled.

Avoid emotional language in the complaint form itself. That is not because your frustration is invalid; it is because regulatory analysts are looking for legal violations, and a complaint framed around specific facts maps directly onto specific laws. “The lender charged me a $150 origination fee that was not listed in the loan agreement I signed on [date]” is far more actionable than “they tricked me into paying hidden fees.”

Upload every relevant document you have. Incomplete complaints get closed or returned more often than thorough ones. If you are missing the original loan agreement, note that in your narrative and explain why you do not have it. That absence can itself be evidence of a TILA disclosure failure.

Which Agency Is Best for Your Specific Complaint?

Different agencies handle different violations. Choosing the right combination is essential to getting results.

Violation Type	Best Agency to Contact	Typical Response Time
Unlicensed lending	State banking department + State AG	30–60 days
APR/fee non-disclosure	CFPB	15 days to lender; 60 days to close
Fraud or advance-fee scam	FTC + FBI’s IC3	No direct response; pattern tracking
Illegal debt collection	CFPB + State AG	15–30 days
Racial or protected-class discrimination	CFPB + HUD	30–180 days
Tribal lender violations	CFPB + FTC + State AG	Varies; 60–180 days

For borrowers who were charged for loan rollovers without proper notice, understanding the law around payday loan rollover rules and required disclosures will strengthen your complaint narrative significantly.

How Should You Document Violations Before Filing?

Documentation is the foundation of any successful complaint. Before you file a single form, spend time building a complete record. Regulators cannot act on what they cannot see.

Start with everything in writing. Forward all email correspondence to a personal account you control. Screenshot text message threads with timestamps visible. If you received verbal promises over the phone, write down what was said, when, and the approximate phone number that called you. Courts and agencies treat contemporaneous written notes as credible evidence even when recordings are unavailable.

Organize your documents chronologically. Create a simple timeline: application date, approval date, funds received date, each payment date and amount, and the date you first noticed a problem. This structure makes it easy for a regulator to understand your case without having to piece it together.

Bank Statements as Evidence

Your bank statements are often the most powerful documentation you have. They show exactly what the lender took, when they took it, and whether those amounts matched what your agreement stated. If a lender charged an unauthorized fee or debited your account multiple times in a single billing period, your bank statement proves it with no room for dispute.

Pull statements covering the full period of the loan, not just the months where you noticed problems. Regulators sometimes identify violation patterns across the entire loan history rather than a single incident, and a complete record is easier to work with than a selective one.

If the lender had access to your bank account through a pre-authorized debit agreement, get a copy of that authorization as well. Charges taken beyond what that authorization covered are potentially actionable under both TILA and the Electronic Fund Transfer Act (EFTA).

How Do State Laws Change What You Can Report?

Federal law sets a floor for consumer protection, but state law determines how high the ceiling goes. This matters significantly when you are deciding how to frame your complaint and which agencies to prioritize.

States with rate caps tend to have more active enforcement environments. California, Colorado, and Illinois, for example, have enacted laws capping consumer loan rates at or near 36% APR, which creates a clear, enforceable legal standard. In those states, a lender charging 300% APR is not in a gray area. The violation is straightforward, the state AG has clear authority, and the complaint has a direct path to enforcement.

In states without rate caps, the analysis shifts. The strongest claims are often federal ones: TILA disclosure failures, FDCPA violations, or fraud. Your state AG may still have authority under general consumer protection statutes, but the specific usury violation that would be obvious in a capped state is not available to you in the same way.

Checking Your State’s Usury Cap

The Conference of State Bank Supervisors directory will connect you to your state regulator, who can confirm the applicable rate cap. Many state banking department websites also publish the cap directly alongside their licensing database. Look up both the cap and the lender’s license status in a single visit.

Some states distinguish between payday loans, installment loans, and personal loans, applying different caps to each. The loan product type matters. A lender may be technically licensed for one product type while charging terms that would only be legal for a different, unregulated product type. That kind of misclassification is worth noting explicitly in your complaint.

What Happens After You Report an Illegal Lender?

After you report an illegal lender to the CFPB, the bureau forwards your complaint to the company within 15 calendar days and asks for a written response. You can track the status through your online account and review the lender’s response directly in the portal.

State regulators may launch formal investigations that result in license revocation, civil fines, or consumer restitution funds. The CFPB has returned more than $19.7 billion to consumers through enforcement actions since its founding, according to CFPB enforcement data. Individual complaints contribute directly to these actions when patterns emerge across multiple filers.

Do not expect a personal resolution in every case. The honest reality is that regulatory agencies prioritize complaints that reveal systemic violations affecting many borrowers. A single complaint rarely triggers a full investigation on its own. What it does do is add to a body of evidence that regulators track over time. When enough complaints accumulate against a single lender, the agency has grounds to act. Your complaint is one piece of that process.

Your Right to Private Legal Action

Filing a regulatory complaint does not waive your right to sue. Under TILA and the Fair Debt Collection Practices Act (FDCPA), consumers can pursue private lawsuits against lenders who violate federal law. Statutory damages under the FDCPA reach up to $1,000 per lawsuit, plus attorney fees. If you experienced illegal auto-renewal charges, see how one borrower successfully fought an illegal auto-renewal loan charge for a real-world example of this process.

Many consumer protection attorneys take these cases on contingency, meaning no upfront cost to you. If you think you have a viable private claim, contact a consumer law attorney before the statute of limitations runs. Most federal consumer claims allow 1 to 3 years from the date of the violation, but that window closes whether or not a regulatory investigation is still open.

How Do You Protect Yourself After Filing a Complaint?

Filing a complaint does not automatically stop collection calls or freeze the debt. You need to take a few additional steps to protect yourself while the regulatory process moves forward.

If the illegal lender is still attempting to collect, send a written cease-and-desist letter via certified mail. Under the FDCPA, a debt collector (though not always the original lender) must stop contacting you after receiving such a letter. Keep the certified mail receipt as proof of delivery.

Check your credit reports. If the lender has reported the debt to the three major bureaus, Experian, Equifax, or TransUnion, you may need to dispute that reporting separately under the Fair Credit Reporting Act (FCRA). The complaint you filed with regulators is a separate process from a credit bureau dispute, and one does not automatically trigger the other.

Closing Unauthorized Account Access

If the lender has access to your bank account through an ACH debit authorization, contact your bank to revoke that authorization in writing. Federal Regulation E gives you the right to revoke pre-authorized electronic transfers. Banks are sometimes slow to act on verbal revocations; a written request creates a record they must honor.

In cases where the lender is continuing unauthorized debits despite a revocation request, you can ask your bank to block future transactions from that company’s ACH routing details. This is not always straightforward, but most banks have a process for it. If your bank is unresponsive, that is worth noting in a complaint to the CFPB as well.

Frequently Asked Questions

How do I report an illegal lender anonymously?

You can submit complaints to the FTC at ReportFraud.ftc.gov without creating an account. The CFPB requires contact information to process a formal complaint, but your personal details are not shared publicly. State AG offices vary. Many allow anonymous submissions for initial tip-offs.

What counts as an illegal interest rate?

An illegal interest rate is one that exceeds your state’s usury cap. Caps range widely. For example, California caps payday loan fees at 15% of the check amount, while some states allow no payday lending at all. If you signed a loan without a clear APR disclosure, that is also a federal violation under TILA regardless of the rate charged.

Can I report an illegal lender if I already paid off the loan?

Yes. You can still report an illegal lender after repayment. Regulators use historical complaints to build pattern-based enforcement cases, and you may be eligible for restitution if a class action or enforcement action results from your complaint. Statutes of limitations vary, but most federal consumer claims allow 1 to 3 years from the date of the violation.

Will reporting a lender hurt my credit score?

Filing a complaint with the CFPB, FTC, or state AG does not affect your credit score. These are regulatory channels, not credit transactions. However, if the illegal lender has already reported negative information to Experian, Equifax, or TransUnion, you may need to separately dispute those entries under the Fair Credit Reporting Act (FCRA).

How long does a CFPB complaint investigation take?

The CFPB sends your complaint to the company within 15 days and requests a response. Most cases are closed within 60 days. Complex investigations involving multiple violations or class-level patterns can take longer. You can monitor your case status through your CFPB account portal throughout the process.

What if the illegal lender is threatening me?

Threats, harassment, or intimidation from a lender or its debt collector are violations of the FDCPA. Document every threat immediately: screenshot texts, save voicemails, and note the date and time of calls. Report these to both the CFPB and your local law enforcement. For help understanding what collectors are legally allowed to say, read about debt collector workplace call rules and your legal rights.