Read this before you sign anything. You have real rights as a borrower, and plenty of lenders are betting you've never read them. The fine print is where other sites leave this — we keep it up top. Here you get plain language, the law itself, and clear steps for when a deal goes sideways.
Right 1 — A clear disclosure of the loan's total dollar cost
Source: Truth in Lending Act (TILA), 15 U.S.C. § 1601 et seq., and Regulation Z, 12 C.F.R. Part 1026.
Want to know the real price of a loan before you sign? Look for the TILA box. Federal law forces every lender to put it in writing and put it in your hands first. Five numbers live there, always in the same order: the amount financed, the finance charge in dollars, the APR, the total of payments, and the payment schedule. That sameness is the point — it's the one thing that lets you stack two loans side by side and compare them honestly. If a quote shows up without it, that's your answer. Move on.
Remedy: break TILA and the lender owes you. You can collect your actual damages, twice the finance charge (capped at $1,000 in individual actions), plus attorney's fees and costs. And in some situations, the loan can be unwound entirely.
Right 2 — Limits on calls and text messages
Source: Telephone Consumer Protection Act (TCPA), 47 U.S.C. § 227, plus FCC implementing regulations.
Here's the rule: no call, no text, until you've said yes in writing first. And a vague yes won't do. The permission has to name the specific number, spell out the channel — voice, SMS, or both — and the box can't already be checked for you. The FCC is tightening this further with its "one-to-one" approach. Say yes to marketing partner X, and partner Y still has nothing. Changed your mind? You can take that prior express written consent back whenever you like, by whatever means is reasonable. Text "STOP." Leave a voicemail. Send an email. Mail a letter. Any of them works.
Remedy: Every unlawful call or text is worth $500 to you. Make it willful or knowing, and the figure jumps to $1,500. There's no ceiling — the penalties pile up call after call — and on the class-action side the stakes get steep fast, with plenty of TCPA settlements landing in the millions.
Right 3 — Limits on third-party debt collectors
Source: Fair Debt Collection Practices Act (FDCPA), 15 U.S.C. § 1692 et seq.
Your lender may sell or hand off the debt. The moment a third-party collector takes it over — anyone who isn't the company that wrote your loan — federal law boxes in what they're allowed to do. Here's where the line sits:
- They can't dial you before 8 a.m. or after 9 p.m. in your time zone.
- Abusive language is out. So are threats of violence or arrest.
- They can't threaten to garnish your wages unless a court has already ruled against you.
- Tell them in writing to stop calling your job, and they have to leave your workplace alone.
- They can't spill the debt to other people — your family, your neighbors, your boss. The one exception is asking around just to find your contact details.
- Ask for written validation within 30 days of that first contact, and every collection move freezes until they send it.
- Send a written cease-contact demand and the collector is shut out, save for a short list of specific messages they're still allowed to send.
Remedy: a court can award up to $1,000 in statutory damages per case, on top of your actual losses, attorney's fees, and costs. Because the loser pays the legal bills, your lawyer collects from the other side — which is why plenty of borrowers win FDCPA cases without spending a dime of their own.
Important nuance: the FDCPA only reaches third-party collectors — not the lender you originally borrowed from. The good news is that most state UDAAP laws stretch the same rules over original creditors too, and the CFPB carries UDAAP authority over those creditors on top of that.
Right 4 — Your credit-report rights
Source: Fair Credit Reporting Act (FCRA), 15 U.S.C. § 1681 et seq.
Here's a quirk most borrowers don't expect: the majority of payday lenders never report to the three major bureaus, so a late payment may never touch your score at all. Don't relax too soon, though. Once your debt lands with a collection agency that does report, that collection entry shows up — and it drags your score down. Either way, the law puts a lot of control in your hands. You're entitled to a free credit report from all three bureaus once every 12 months at annualcreditreport.com, and you can freeze or unfreeze your credit for free in all 50 states. Spot an error? Dispute it straight with the bureau, and the clock starts: they get 30 days to investigate. If a valid dispute still doesn't fix it, you can take the bureau or the furnisher to court for actual damages — and the FCRA gives you real teeth to do exactly that.
Remedy: actual damages, statutory damages up to $1,000, punitive damages for willful violations, attorney's fees.
Right 5 — Right to revoke ACH authorization
Source: Electronic Fund Transfer Act and Regulation E, 12 C.F.R. Part 1005.
Want to shut off a recurring ACH (Automated Clearing House) payment? You can, anytime, and federal law backs you — the only catch is you have to do it in writing. Now the trap most borrowers fall into: a letter to the lender by itself won't stop the charge. You need to notify both the lender and your bank. Once your bank has the revocation, it has to block the payment, and it can't bill you for doing so. A few will still try to slip in a fee. Push back.
Remedy: say a lender drafts your account after you've already revoked. That counts as an unauthorized EFT. The clock gives you 60 days to file a dispute, and the bank has to put the money back while it looks into it.
Need the actual wording? Our crisis guide walks you through each step and includes sample letters you can copy.
Right 6 — Military APR cap of 36%
Source: Military Lending Act (MLA), 10 U.S.C. § 987, plus DoD implementing regulation 32 C.F.R. Part 232.
If you're active-duty military — or the spouse or dependent of someone who is — the law puts a firm lid on what you can be charged. The number is 36% Military APR, or MAPR, and it covers consumer credit across the board, payday loans included. No lender is allowed to charge more. Period. And MAPR is a bigger figure than the TILA APR you usually see, because it folds in most fees and credit insurance, not interest alone. Cross that line and the consequences are real: the loan can be wiped out, any arbitration clause stops counting, and civil penalties follow. When you apply, Big Daddy Loans pulls your MLA status from the DMDC database right then.
Remedy: loan voided, statutory damages, actual damages, attorney's fees, possible criminal penalties for knowing violations.
Right 7 — ACH 2-strike rule
Source: CFPB Payday Lending Rule (2017 / payment-provisions effective 2022), 12 C.F.R. § 1041.
Think about what happens without a brake on this. Your account is short, the lender's ACH pull bounces, your bank charges an NSF fee. The lender tries again. It bounces again. Another fee. One missed payment quietly becomes a pile of them. The rule stops that cold: two failed ACH attempts back to back, and the lender has to stop. They cannot try again until you sign off in writing. There's a heads-up built in too — if a withdrawal doesn't match the usual amount or timing, the lender owes you written notice before they reach for your account.
Remedy: CFPB enforcement actions; state UDAAP claims; in some cases private claims under TILA's "spreading" doctrine.
Right 8 — No discrimination in credit decisions
Source: Equal Credit Opportunity Act (ECOA), 15 U.S.C. § 1691; Regulation B, 12 C.F.R. Part 1002.
A lender can't hold certain things against you. Your race, color, or religion. Where you're from. Your sex, your marital status, or your age, as long as you're old enough to sign a contract. The fact that some of your income is public assistance. Or that you've used a right the Consumer Credit Protection Act gives you. None of that can be the reason you're turned down or charged more. And if you are turned down, the lender owes you the reasons in writing within 30 days. Want the actual data behind the decision? You can ask for that too.
Remedy: actual damages, punitive damages up to $10,000 for individual actions and the lesser of $500,000 or 1% of net worth for class actions, attorney's fees.
Right 9 — Extended Payment Plan (EPP)
Source: state statute (varies); industry self-regulation under OLA Best Practices.
Here is the deal. An EPP splits one lump-sum payday loan into smaller installments stretched across 60–90 days, and it costs you nothing extra — no new fees on top. In the 23 states that allow payday lending, the lender has to give you this option once every 12 months. Two catches: you have to ask before you miss a payment, and the ask usually has to be in writing.
Hardly anyone uses it, which makes it the most overlooked protection borrowers have. Want the exact words to send? Grab the ready-made script in our guide for people who already took out a payday loan.
Right 10 — State rollover bans and cooling-off periods
Source: state statute (varies by state).
Want to roll one payday loan straight into the next? A lot of states won't let you. Illinois is strict: once you count as a repeat borrower, you're locked out of a new loan for 30 days. Florida is lighter — it makes you wait a 24-hour cooling-off period first. And Ohio drew the hardest line of all, scrapping the single-payment loan model outright after 2018. No two states read the same, so pull up your state hub and see what the rules are where you live.
Remedy: take it to your state regulator — a complaint can put a lender's license on the line. You can also bring a UDAAP claim on your own, and those often recover damages plus your attorney's fees.
Right 11 — State UDAAP claims
Source: state "Unfair, Deceptive, or Abusive Acts or Practices" statutes; the CFPB has parallel federal authority under 12 U.S.C. § 5531.
Here's the part that puts power in your hands: a lot of these laws give you a private right of action. You don't have to wait for a regulator. You can sue the lender yourself — and when you win, the court can hand you treble damages plus your attorney's fees. Your state attorney general can also go after the lender on its own. The reason any of this exists is simple. Almost every state has its own UDAAP-style law that outlaws unfair, deceptive, or abusive lending. The list of banned conduct is long: hidden fees, misleading APR disclosures, harassment, fraudulent collection, and loans pushed by lenders with no valid state license.
Remedy: varies by state; commonly actual damages × 2 or × 3, civil penalties, attorney's fees, costs.
How to use these rights — quick playbook
- Before signing: Look for the TILA box first — if it's missing, walk away. Then confirm the lender is licensed in your state by running them through our license lookup and scam-spotter. Serving in the military? Your rate can't top 36% MAPR.
- While the loan is active: See trouble coming before the due date? Ask for the EPP in writing now — waiting until you're behind only narrows your options. And if marketing calls and texts are wearing you down, send your TCPA revocation in writing too.
- When repayment isn't possible: Work the 72-hour crisis plan first. Got an ACH cascade bearing down on you? Revoke that authorization right away. And keep a record of every move you make.
- When collectors cross the line: Most of it stops with a written FDCPA cease-and-desist — just keep the carve-out language that still lets them notify you of legal action. Note the date and time of every call. After that, file your complaint at consumerfinance.gov/complaint.
- When a lender has wronged you: Spread the word — the CFPB, the FTC at ReportFraud.ftc.gov, your state AG, and your state department of financial institutions all want to hear it. It's also worth calling a consumer-protection attorney; plenty take FDCPA and TCPA cases on contingency, since fee-shifting provisions cover what they're owed.
Who actually enforces these rights?
No single agency owns this. Enforcement is spread out, and the lines blur. Start with the states, since that's where licensing lives: State DFIs hand out lender licenses and can yank them back. State AGs go after violations of state UDAAP, licensing, and rate-cap laws. At the federal level, the CFPB (Consumer Financial Protection Bureau) is the big one — it handles UDAAP, TILA, FDCPA, FCRA, ECOA, and the Payday Rule for consumer credit. The FTC backs up enforcement on some of those, FDCPA and TCPA among them. On TCPA, the regulatory work falls to the FCC. And the DoD writes the rules behind the MLA.
If you're one borrower trying to fix one problem, keep it simple. File with the CFPB first; the company then has 15 days to answer. File a second, parallel complaint with your state AG. And don't sign any "settlement" a lender or collector slides across the table until a consumer-protection attorney has looked at it.
Compliance note: Big Daddy Loans is a lead-generation service, not a lender or law firm. This page is general consumer information based on federal and state law as of May 2026. It is not legal advice. For case-specific guidance, consult a licensed attorney, your state attorney general's consumer-protection office, or a CFP®/AFC®.
FAQ
Are these rights different for installment loans than payday loans?
Mostly, no. The big federal protections — TILA, TCPA, FDCPA, FCRA, Reg E, MLA, and ECOA — apply to consumer credit no matter the label. The only real split is on payday-specific rules: the CFPB Payday Rule and EPP rules. Outside of those two, an installment borrower gets the same coverage a payday borrower does.
Can I sue a payday lender personally?
Yes, and the doors are wide. TILA, FCRA, ECOA, MLA, and state UDAAP each let you bring a claim. When a third-party collector is in the picture, FDCPA kicks in. TCPA suits show up the most in payday litigation. Here's the part that matters in practice: several of these laws force the lender to cover your attorney's fees if you win — so plaintiff's lawyers will frequently work on contingency.
Does a forced arbitration clause kill these rights?
No. It moves the fight to a different venue; it doesn't end it. For covered borrowers, the MLA flatly forbids arbitration. The CFPB moved to ban mandatory arbitration back in 2017, then Congress reversed that rule using the Congressional Review Act. Even with that history, borrowers win TCPA and FDCPA claims in arbitration all the time. Before you decide your next step, read the clause word for word and run it past a lawyer.
What's the statute of limitations on these claims?
The clock runs differently for each one. TILA splits it: 1 year to seek damages, 3 years for rescission. FDCPA gives you 1 year from the violation. FCRA runs 2 years from when you discover it or 5 years from the violation — whichever lands first. TCPA is the most generous at 4 years. The bottom line is the same across all of them: don't sit on it, act quickly.
Where can I read the laws themselves?
Start with the CFPB's consumer-finance regulations at consumerfinance.gov/rules-policy/regulations/. Want the statutes by citation? Here they are: TILA at 15 U.S.C. § 1601; FDCPA at § 1692; TCPA at 47 U.S.C. § 227; FCRA at 15 U.S.C. § 1681; MLA at 10 U.S.C. § 987; ECOA at 15 U.S.C. § 1691.
Where to go next
Start with where you live. The rules change state by state, so pull up yours: Texas, California, Florida, Illinois, or Ohio. Thinking about a specific lender? Don't sign a thing until you confirm they're licensed where you are — our license lookup and scam-spotter tells you in seconds. And if a loan has already gone sideways, you're not stuck. The 72-hour crisis plan walks you through exactly what to do next.