New York Proposes Licensing And Credit Standards For BNPL Lenders

New York is moving to bring Buy Now, Pay Later (BNPL) firmly into its regulated credit framework, with proposed rules that would require licensing, impose credit underwriting standards, and layer on robust consumer-protection, data-use, and fee limitations.

Legislative and Regulatory Background

New York’s BNPL initiative builds on the 2025 enactment of the Buy Now Pay Later Act, codified in Article 14‑B of the New York Banking Law, which requires BNPL providers to be licensed or authorized by the Department of Financial Services (DFS). DFS has now issued proposed rules (Part 423 of Title 3 NYCRR) to implement Article 14‑B, translating the statute into a detailed licensing and conduct regime for BNPL lenders. Governor Kathy Hochul’s administration has framed these rules as “nation‑leading” consumer protections designed to address BNPL’s rapid growth and align the products with traditional credit standards.

Licensing Framework and Scope

The proposed regulations would require most BNPL lenders—both interest‑free and interest‑bearing—to obtain a specific New York BNPL license or DFS authorization, with separate “category permissions” for different BNPL product types. The definition of a BNPL loan generally covers closed‑end credit tied to a specific consumer purchase of goods or services (excluding motor vehicles), with limited seller and business‑purpose exceptions. Exempt organizations, including certain depository institutions and OCC‑licensed foreign banking corporations, are carved out but must still obtain DFS authorization and appropriate category permissions before offering BNPL loans.

DFS would retain authority to suspend, revoke, or accept surrender of category permissions and to approve changes of control and certain changes in senior management, effectively extending prudential‑style oversight into the BNPL space.

Credit Standards, Fees, and Payment Practices

A central feature of the proposal is the introduction of risk‑based underwriting and ability‑to‑repay standards for BNPL loans, which historically have often been marketed as “frictionless” credit with minimal upfront assessment. BNPL lenders would be required to adopt written underwriting policies and, at minimum, evaluate the borrower’s income and indebtedness to reasonably assess capacity to repay. The rules also expressly prohibit using a consumer’s social network—such as contacts’ or friends’ credit standing—to determine eligibility or pricing, signaling concern about novel data sources and algorithmic decision‑making.advocacy.

On pricing, the proposal caps interest on interest‑bearing BNPL loans at 16% per year, with a higher ceiling (up to 24.99%) only available to lenders that already hold, or obtain, qualifying New York licenses allowing such rates. Late fees would be limited, with Consumer Reports highlighting a proposed maximum late fee of $8 per payment, alongside prohibitions on “excessive” convenience or penalty charges. The regulations would also establish rules around payment allocation, handling of overpayments and credit balances, and timely merchant‑to‑lender refund flows to ensure consumers receive prompt credits when transactions are reversed.

Disclosures, Billing Rights, and Data Use

The proposed NYDFS rule would subject BNPL lenders to a multi‑layer disclosure and servicing framework modeled on a hybrid of Truth in Lending (Regulation Z) closed‑end loan disclosures and credit‑card‑style billing error protections. Pre‑transaction disclosures—likely using DFS model forms—would have to clearly set out the amount financed, finance charge (if any), APR, payment schedule, total sale price, fees, and default consequences in a manner consistent with TILA. Borrowers would gain dispute and refund rights similar to those available for credit card purchases, including rights to contest charges and obtain timely refunds when goods or services are defective or not delivered.

The proposal also directly addresses BNPL reporting practices and data governance, requiring lenders to make clear if loans will be reported to consumer reporting agencies and to maintain accurate borrower data. Lenders could use, sell, or share borrower data only with the consumer’s consent after clear disclosure, and must implement policies and procedures to safeguard data from misuse or exploitation. These data‑use limitations respond to concerns that BNPL products sit outside traditional credit reporting and may rely on opaque data collection and analytics.

Industry, Regulatory, and Litigation Implications

New York’s proposal is widely described as one of the first comprehensive state‑level regulatory regimes specifically targeting BNPL and is explicitly informed by the CFPB’s interpretive guidance on BNPL products. For BNPL providers—including fintech platforms, merchant‑embedded BNPL services, and purchasers of BNPL receivables—the rules would mean entering a licensing and supervisory environment more akin to traditional installment lenders and credit card issuers, with potential consequences if loans are originated without appropriate approvals.

From a compliance standpoint, BNPL firms will need to build or enhance capabilities in TILA‑style disclosures, credit underwriting and ability‑to‑repay analysis, dispute resolution, data protection, and regulatory reporting, likely increasing operating costs and creating barriers to entry. For collectors and credit reporting participants, the regime’s provisions on credit reporting, dispute rights, and loan validity could affect portfolio valuation, collections strategy, and litigation posture—particularly if unlicensed BNPL loans are deemed void and uncollectible under New York law.

For your Credit and Collection News audience, this proposal signals that BNPL receivables tied to New York consumers may soon carry licensing‑based enforceability risks, more prescriptive fee limits, and heightened scrutiny of data and dispute practices, with possible spillover effects as other states and federal regulators look to New York’s model.