CFPB at the Crossroads: Enforcement Collapse, Supervision Gaps, and the State-Level Response

Research Date: April 2026 | Coverage Period: Biden Administration (2021–2024) vs. Trump Administration (2025–2026)

---

Executive Summary

The Consumer Financial Protection Bureau is undergoing the most consequential restructuring in its 14-year history. Under the Biden administration, the CFPB operated with approximately 1,700 authorized staff and generated $6.2 billion in consumer redress and $3.2 billion in civil monetary penalties across 84 enforcement actions between 2021 and 2025. Under the Trump administration, the bureau has permanently dismissed 22 pending enforcement actions, terminated 10 early consent orders, dropped nearly 70 guidance documents, and filed court plans to reduce its workforce to 556 employees — less than one-third of its peak size.

The most severe cuts fall on the two divisions central to the bureau’s consumer protection mission: Supervision (targeted for an 85% reduction) and Enforcement (targeted for an 80% reduction). The budget has been cut almost 50% through the One Big Beautiful Bill Act. Simultaneously, a parallel regulatory ecosystem is emerging at the state level, with attorneys general in more than a dozen states expanding enforcement teams, coordinating multistate investigations, and in some cases enacting new consumer protection statutes specifically designed to fill federal gaps. This report analyzes the full scope of those shifts, the consumer protection areas most at risk, and what the reorganized enforcement landscape means for banks, fintechs, and regulated entities.

---

Part I: The Biden-Era CFPB — Scale, Scope, and Major Actions

Enforcement by the Numbers (2021–2025)

The Chopra-era CFPB operated at its most aggressive since the bureau’s founding. Between 2021 and early 2025, the bureau:

• Filed 84 public enforcement actions, including 29 after the Supreme Court’s June 2024 ruling in CFPB v. CFSA that upheld the bureau’s independent funding structure (Consumer Federation of America)

• Ordered $6.2 billion in consumer redress and $3.2 billion in civil monetary penalties (Consumer Federation of America)

• Reached a cumulative total of $19.7 billion in consumer relief and $5 billion in civil penalties since the bureau’s 2011 founding (CFPB Enforcement by the Numbers)

• Made 195 million consumer accounts eligible for relief over the bureau’s lifetime

• Conducted 691 supervisory events in FY2024 alone, exceeding its 450-event target (JD Supra on CFPB FY2024 Annual Report)

The year-over-year pattern shows enforcement volume holding steady at 26–31 actions annually, while consumer relief spiked sharply in 2023 — driven primarily by the $2.7 billion Lexington Law/CreditRepair.com credit repair settlement and the $3.07 billion total relief ordered that year (CFPB enforcement blog, January 2024). The 2024 figure appears lower ($507 million in consumer relief, $754 million in penalties) but masks significant activity given that the Capital One lawsuit ($2 billion in alleged harm) was filed just before the administration change and immediately dismissed by Trump’s team.

Major Biden-Era Actions by Sector

Big Banks

The Wells Fargo action remains the bureau’s largest single enforcement action in its history, covering illegal home loan modifications, wrongful foreclosures, vehicle repossessions, and unauthorized credit card and bank account openings — violations documented as far back as a 2016 OCC action but dramatically expanded under Chopra (Consumer Federation of America).

Fintech and Digital Payments

The Zelle case represented the bureau’s most significant foray into payment network oversight — alleging that the consortium of banks behind Zelle created and operated a payment system without adequate fraud controls, resulting in consumers losing over $800 million (New York Times). Its dismissal “with prejudice” in March 2025 permanently forecloses refiling.

Student Loans and Debt Collection

• Navient was effectively shut down in 2024 following years of alleged abuse of borrowers, including disabled veterans (Consumer Federation of America)

• Portfolio Recovery Associates was sanctioned in 2023 for violating a 2015 CFPB order — part of a broader “repeat offender” strategy under Chopra to treat prior consent order violations as independent enforcement triggers

• Pennsylvania Higher Education Assistance Agency (PHEAA) was sued in May 2024 for collecting on student loans discharged in bankruptcy — dismissed by Trump CFPB in early 2025

Supervision Scope Under Biden

The Chopra CFPB dramatically expanded the bureau’s supervisory footprint, particularly over nonbanks. Key milestones included:

• Activating “dormant authority” under § 1024 to supervise nonbanks posing risks to consumers — issuing supervisory designation orders in 2024 for an installment lender and a large technology company’s payment platform (Hudson Cook Fintech 2024 Review)

• Finalizing the Digital Consumer Payment Larger Participant Rule (November 2024) — requiring supervision of companies handling 50+ million annual transactions, covering Apple Pay, Google Pay, Venmo, CashApp, PayPal, and Zelle (Hudson Cook)

• Publishing Supervisory Highlights covering mortgage servicers, payday lenders, auto lenders, credit reporting agencies, and remittance providers across 2021–2024

---

Part II: The Trump Administration’s Dismantling — Staffing, Budget, and Restructuring

Workforce Collapse: From 1,700 to 556

The bureau stood at approximately 1,700 authorized positions when Trump took office in January 2025. A series of escalating cuts have taken the workforce from that peak toward a proposed floor of 556:

The April 2026 plan, filed with the D.C. Circuit, would cut the agency to fewer than one-third of its headcount when Trump took office (Bloomberg Law; American Bazaar). DOJ justified the cut as mathematically necessary: the One Big Beautiful Bill Act capped CFPB’s Fed-based funding at approximately $466.8 million in FY2026, while FY2025 payroll alone ran ~$526.4 million — making current staffing unsustainable under the new statutory ceiling (Credit and Collection News).

Division-Level Cuts: Supervision and Enforcement Bear the Brunt

The proposed restructuring is not evenly distributed across the bureau. The two divisions at the core of consumer protection — Supervision and Enforcement — face the steepest percentage cuts:

Sources: GAO Report GAO-26-108448; The Mortgage Point

A Supervision division of ~73 people — down from 487 — cannot meaningfully conduct routine examinations of the largest U.S. banks, let alone expand to nonbank supervision. The April 2025 Paoletta memo had already reduced supervisory events by 50% from their FY2024 pace; the proposed RIF would further reduce capacity by roughly 85%.

Budget: The One Big Beautiful Bill Act

On July 4, 2025, President Trump signed the One Big Beautiful Bill Act, which reduced the CFPB’s statutory Fed-based funding cap from 12% to 6.5% of Federal Reserve 2009 operating expenses adjusted for inflation — nearly halving the maximum available budget (JD Supra; Holland & Knight). This constraint is durable regardless of how court challenges to the RIF are ultimately resolved — it is codified in statute by Congress amending Section 1017 of Dodd-Frank. The bill also redirects excess civil penalty funds to the U.S. Treasury rather than the CFPB’s victims relief fund, further constraining the agency’s financial resources.

The “Humility in Supervision” Regime

After a 10-month pause in examinations, the bureau announced in November 2025 that it would resume supervisions under a new “Humility in Supervision” framework requiring all examiners to follow a Pledge that (Ncontracts):

• Limits exams to clearly established statutory authority

• Requires advance notice to entities before examinations begin

• Caps information requests to the specific focus of the exam

• Commits to shorter timelines and resolving issues through supervision rather than enforcement

• Encourages self-reporting of violations

The framework represents a fundamental inversion of the Chopra-era model, which prioritized proactive, expansive examinations and used supervisory findings as inputs to enforcement referrals.

---

Part III: What the CFPB Has Abandoned — The Dismissed Cases and Rescinded Rules

22 Permanently Dismissed Enforcement Actions

Acting Director Russell Vought’s CFPB permanently dismissed 22 public enforcement actions inherited from the Biden administration — a number unprecedented in the bureau’s history (Consumer Federation of America enforcement tracker). Notable dismissals include:

By late February 2025, court records showed fewer than 20 pending CFPB enforcement actions remained, with another six paused or likely to be dismissed (Reuters).

10 Early Consent Order Terminations

Beyond outright case dismissals, the bureau terminated 10 consent orders early, in many cases waiving uncompleted redress obligations (Consumer Federation tracker):

• Navy Federal Credit Union: Illegal overdraft fees order terminated July 1, 2025; all redress obligations waived

• Toyota Motor Credit Corporation: Illegal bundled product scheme order terminated May 12, 2025; redress waived

• Bank of America (HMDA order): Terminated June 5, 2025, including ongoing monitoring provisions

• Trident Mortgage / Trustmark National Bank: Fair lending redlining orders terminated 2025; Trident order vacated with prejudice

• Synchrony Bank: 2014 consent order for illegal discriminatory credit card practices terminated May 2025

Major Rules Rescinded or Vacated

---

Part IV: Consumer Protection Gaps by Sector

Big Bank Oversight

The bureau’s April 2025 Paoletta memo announced a “shift back to depository institutions” as opposed to nonbanks — initially suggesting big banks would receive continued scrutiny. In practice, the gutted Supervision division (~73 staff under the proposed RIF) cannot maintain even baseline examination schedules for the 200+ depository institutions over $10 billion in assets that the CFPB has statutory authority to supervise.

The OCC and FDIC, which share overlapping authority over national banks and state-chartered banks respectively, are simultaneously extending examination cycles. The FDIC extended consumer compliance exam intervals to 54–78 months for many institutions — up from the previous 24–36 month cadence — effectively compressing federal oversight across all channels simultaneously (LinkedIn / GeoDataVision).

Key big-bank consumer protection areas with diminished federal oversight:

• Junk fees (overdraft, NSF, late fees): Rules repealed or vacated; no replacement rulemaking signaled

• Repeat offender accountability: Consent order terminations signal banks need not fear ongoing CFPB monitoring post-settlement

• Fair lending / redlining: CFPB explicitly shifted to “intentional discrimination” standard, abandoning disparate impact enforcement; fair lending consent orders terminated

• Payment system fraud responsibility: Zelle dismissal signals no federal appetite to hold banks accountable for platform-wide fraud losses

Nonbank and Fintech Supervision

The nonbank oversight gap is the most dramatic. Under Biden, the CFPB expanded supervision to cover fintech lenders, earned-wage-access providers, BNPL platforms, digital payment apps, and student loan servicers. Under Trump:

• The Digital Payment Larger Participant Rule covering Apple Pay, Google Pay, PayPal, Venmo, and CashApp was nullified by Congressional Review Act resolution (Consumer Finance Monitor)

• The CFPB proposed raising “larger participant” thresholds across consumer reporting, money transfer, debt collection, and auto finance — shrinking the universe of supervised nonbanks

• The bureau proposed a stricter “high likelihood of significant harm” standard for risk-based nonbank supervision — limiting case-by-case designation orders that Biden-era leadership used aggressively (Consumer Financial Services Law Monitor; Greenberg Traurig)

• BNPL: No federal supervisory framework; 7-state AG coalition launched its own probe

• Earned-wage access: No supervisory activity signaled

• AI-driven credit decisioning: States (California, Texas) are filling the gap through AI disclosure legislation; no federal framework

The combined effect is that roughly 154,000 nonbank entities previously subject to potential CFPB oversight face materially lower federal risk — but rising state scrutiny (Greenberg Traurig).

Mortgage Market

The mortgage market saw the sharpest immediate federal enforcement retreat. In February 2025, the CFPB dismissed with prejudice three outstanding mortgage-related enforcement lawsuits inherited from the prior administration, including the Vanderbilt Mortgage (manufactured home) case and the Rocket Homes kickback case (Changeflow / Goodwin).

The April 2025 internal Paoletta memo also:

• Reduced supervisory exams by 50%

• Eliminated disparate-impact discrimination enforcement under ECOA

• Directed that the bureau would “not conduct exams when the CFPB’s authority overlaps with the states’ unless required by law”

• Transferred enforcement cases to DOJ rather than litigating internally

Only 12 publicly announced mortgage enforcement actions were tracked in all of 2025, the second fewest in a decade — with state AGs accounting for 9 of them and federal agencies only 3 (Changeflow/Goodwin).

Small-Dollar Lending and Debt Collection

The CFPB in March 2025 announced it would not prioritize enforcement or supervision related to the Payday Lending Rule’s payment-withdrawal provisions — reversing its 2017–2023 stance. Small-dollar enforcement dropped to approximately 5 actions in 2025, down from 15 in 2024 (Changeflow).

---

Part V: The State-Level Response — Enforcement Surge and New Statutes

The Structural Shift

State attorneys general and state financial regulators have moved into the federal vacuum aggressively, backed by two legal authorities:

1. Dodd-Frank § 1042: Grants state AGs authority to directly enforce federal consumer financial protection laws, including the CFPA, TILA, FCRA, FDCPA, and EFTA — without requiring CFPB involvement

2. State UDAP/UDAAP statutes: Most states now have their own versions of the unfair, deceptive, or abusive acts framework, increasingly expanded to match federal scope

Activity Indicators

• Massachusetts: Reported a record 24,000+ consumer complaints in 2025 (PerformLine Regulatory Roundup)

• Colorado: Consumer complaint volume increased 200%+ since 2019, reaching nearly 27,000 filings in 2025 (PerformLine)

• 21-state coalition sued a major ride-sharing company for misleading subscription and deceptive negative-option practices in early 2026 (PerformLine)

• 23-state coalition led by NY AG James filed a brief defending the CFPB’s existence in February 2025 and pledging to step up state-level enforcement (NY AG Press Release)

• 22-state coalition sued in December 2025 to prevent the Trump administration from defunding the CFPB entirely (Wisconsin DOJ)

• Former CFPB Director Rohit Chopra joined the Democratic Attorneys General Association as senior advisor, leading the Consumer Protection & Affordability Working Group — actively coordinating state enforcement strategies (Ncontracts)

New State Legislation

Sector-Specific State Enforcement Highlights

• BNPL: 7-state coalition (CT, NC, CA, CO, IL, MN, WI) launched inquiry into top 6 BNPL providers in December 2025, following CFPB’s May 2025 withdrawal of BNPL interpretive rule (JD Supra / Goodwin Fintech March 2026)

• Credit Acceptance Corporation: After CFPB withdrew from its case, the New York AG has continued litigating independently (Consumer Federation tracker)

• MoneyGram: After CFPB withdrew, the NY AG is continuing prosecution (Consumer Federation tracker)

• Fair lending / redlining: State AGs coordinating fair lending enforcement as CFPB has retreated to “intentional discrimination only” standard (Ncontracts)

• Payday/small-dollar: State AGs and banking regulators coordinating enforcement on disclosure failures and state usury statute violations; one NY enforcement action generated over $1 billion in recovery in 2025 despite falling total federal action count (Changeflow)

Limitations of the State Response

The state surge is real and consequential, but it cannot fully substitute for federal oversight:

• Jurisdictional patchwork: A firm operating nationally faces 50 different enforcement frameworks; the absence of federal minimum floors creates regulatory arbitrage opportunities in less active states

• Resource asymmetry: Even the most aggressive state AG offices cannot match the CFPB’s examination infrastructure for large depository institutions with multi-state and international operations

• No federal supervisory data access: The CFPB is legally required to provide states with consumer complaints and lending data; defunding and restructuring disrupt this pipeline (Wisconsin DOJ)

• Sovereign immunity gaps: State authority to sue nationally chartered banks and their federal preemption defenses remain contested terrain

• Republican AG divergence: Republican-led state AGs (Texas, Florida, etc.) are largely focusing on ESG/DEI enforcement rather than consumer financial protection, creating geographic coverage gaps for consumers in those states

---

Part VI: Comparative Analysis — Biden vs. Trump CFPB at a Glance

---

Part VII: Implications and Outlook

For Large Banks

Large depository institutions face meaningfully reduced federal consumer compliance examination pressure, at least in the near term. The combination of CFPB Supervision collapse, FDIC exam cycle extensions, and OCC’s community bank deregulation signals a coordinated federal deregulatory posture. However, state AG exposure is rising fastest for large banks — particularly in New York and California — precisely because those states have both the statutory authority (Dodd-Frank § 1042) and the investigative infrastructure to pursue systemically significant institutions.

The termination of consent orders including those against major banks and Toyota Motor Credit creates a free-pass signal: companies that violated prior orders and were subject to ongoing monitoring are now released, often with remaining redress obligations waived.

For Fintechs and Nonbanks

The regulatory gap for fintechs is the widest since the bureau’s founding. The nullification of the Digital Payment Larger Participant Rule removes the framework that would have brought Apple Pay, Google Pay, Venmo, and similar platforms under federal examination authority. The BNPL withdrawal leaves consumers without Reg. Z protections across a rapidly growing credit segment.

The compliance calculus has changed: fintechs now face primarily state-level enforcement risk, concentrated in California (DFPI), New York (DFS + AG), Massachusetts, and a handful of other states. Multi-state AG coalition actions represent the most acute enforcement risk, particularly for BNPL, earned-wage access, and small-dollar lending.

For Consumers in Underserved Markets

The retreat from disparate-impact fair lending enforcement, abandonment of the manufactured home / predatory lending cases, and termination of servicemember-protective actions (TitleMax order vacated) represent the most acute consumer harm concentration — affecting populations historically least likely to have effective private litigation alternatives. These are the consumers for whom the CFPB was most explicitly designed.

For Regulated Industry

The emergence of 50-state compliance as the baseline standard — rather than one federal floor — increases compliance complexity and cost for multi-state operators even as federal pressure declines. Firms that reduce compliance investment based on CFPB inactivity while ignoring state AG coalition risk face substantial exposure. The Chopra enforcement playbook — UDAAP, AI decisioning, pricing transparency, junk fees, platform accountability — has migrated to state AG offices with Chopra himself coordinating strategy from the Democratic AGs Association.

---

Conclusion

The CFPB’s transformation from a 1,700-person enforcement-forward agency to a proposed 556-person, supervision-lite bureau represents a structural break in federal consumer financial oversight — not a temporary regulatory cycle shift. The funding ceiling reduction in the One Big Beautiful Bill Act is permanent legislation, and the 22 dismissed cases and terminated consent orders cannot be revived under current leadership.

The state-level response is genuine, growing, and in some cases producing historically large enforcement outcomes (New York’s $1B+ small-dollar lending action; the coordinated BNPL probe). But it is inherently fragmented, geographically uneven, and unable to replicate the proactive examination infrastructure that federal supervision provided — particularly for the largest banks and most systemically significant payment platforms.

The compliance landscape that emerges is one of heightened complexity rather than reduced risk: a more aggressive multistate enforcement environment layered on a hollowed federal agency, with neither providing the stable, comprehensive federal floor that the Dodd-Frank mandate contemplated.