Alston & Bird Consumer Finance Blog

fintech

Illinois Enacts Comprehensive Buy-Now-Pay-Later Law: Implications for Licensing, Bank Partnerships, and Program Structure

What Happened?

On June 25, 2026, Illinois enacted Senate Bill 3561, which establishes the Buy-Now-Pay-Later Loan Consumer Protection Act. The measure creates a new state-level licensing and regulatory framework governing certain buy-now-pay-later (“BNPL”) products offered to Illinois consumers.

The Act applies to closed-end consumer credit products offered in connection with a specific purchase of goods or services where the credit is either (i) payable in four or fewer installments or (ii) has a term of 120 days or less. The definition expressly includes both interest-free “pay-in-four” products and BNPL products that carry interest or finance charges.

With this legislation, Illinois joins a growing number of states seeking to impose a tailored regulatory framework on BNPL products. The law is effective immediately, although it includes a transitional compliance period for existing market participants.

Overview of the Act

At a high level, the Act:

  • Requires licensure for persons engaged in the business of offering BNPL loans in the state
  • Establishes a regulatory regime administered by the Illinois Department of Financial and Professional Regulation
  • Imposes consumer protection, underwriting, reporting, and examination requirements
  • Applies broadly to a wide range of market participants involved in BNPL programs
  • Provides that violations constitute an unlawful practice under the Illinois Consumer Fraud and Deceptive Business Practices Act

The Act also provides that BNPL loans made in compliance with its requirements are not subject to certain existing Illinois lending statutes, including the Consumer Installment Loan Act and the Payday Loan Reform Act.

Scope of Coverage: Broad and Functional

A defining feature of the Illinois law is its expansive approach to coverage. The Act applies not only to entities that directly originate BNPL loans, but also to persons that:

  • Arrange or broker loans
  • Acquire or hold whole or partial interests in loans
  • Act as agents or service providers in connection with BNPL programs

In addition, the Act includes anti-evasion language intended to capture transactions that are “in substance” loans or structured to avoid application of the statute.

This framing reflects a broader trend in state legislation focusing on functional activity and economic substance, rather than formal labels or contractual roles.

Merchant and Passive Investor Carve-Outs

The Act includes several notable exceptions:

  • Merchant platform exception: A merchant or platform is not covered solely by offering BNPL options to consumers, provided it does not originate, underwrite, service, or hold an ownership interest in the underlying loans.
  • Passive investor exception: Persons holding a partial interest in a BNPL loan as a passive investor are excluded, so long as they do not control origination or servicing functions.

These carve-outs are consistent with approaches seen in other recent legislation, but their practical scope will depend on how regulators interpret concepts such as “control” and “participation” in the lending program.

Bank Partnership and “True Lender” Considerations

Although the Act exempts banks, credit unions, and certain other depository institutions, it does not automatically exempt nonbank participants in bank-partner BNPL programs.

Instead, the statute’s broad applicability provisions—combined with its anti-evasion framework—suggest that Illinois regulators may evaluate BNPL programs based on economic interest and operational control, rather than the nominal identity of the originating lender.

As a result, fintech companies and other nonbank program participants should consider how their roles—particularly in marketing, underwriting, funding arrangements, and servicing—may be viewed under the Act.

Underwriting and Consumer Protections

The Act introduces a set of consumer protection requirements that align BNPL products more closely with traditional consumer lending obligations.

Among other things, the law:

  • Requires disclosure of loan terms, costs, and repayment structure
  • Mandates processes for handling consumer disputes and refunds
  • Imposes an expectation that lenders assess a borrower’s ability to repay prior to extending credit

While the statute does not prescribe a specific underwriting formula, it signals a shift toward ability-to-repay–type standards in the BNPL context.

Transition Period and Implementation Timeline

The Act provides a transition pathway for existing BNPL providers.

Specifically, a person that was offering BNPL products in Illinois prior to January 1, 2028, and submits a license application by that date, may continue operating while the application is pending.

Key Takeaways

The Illinois BNPL Act raises several important considerations for market participants:

  1. Licensing analysis will be broader than traditional lender-focused regimes. Entities involved in program structure, marketing, servicing, or funding should assess whether they fall within scope.
  2. Form will not control over substance. The Act’s anti-evasion provisions suggest regulators will look beyond contractual labels to determine who is effectively acting as the lender.
  3. Bank partnership structures may be subject to scrutiny. Nonbank participants should evaluate their role in underwriting, economic exposure, and program governance.
  4. Merchant and investor carve-outs are helpful—but limited. These exclusions depend heavily on the absence of operational control or program-level influence.
  5. Compliance will extend beyond licensing. The Act introduces substantive obligations around disclosures, underwriting, dispute resolution, and regulatory oversight.

Looking Ahead

Illinois’s enactment of a comprehensive BNPL framework reflects an accelerating trend toward state-level regulation of point-of-sale financing products.

As additional states consider similar legislation, market participants should expect continued divergence in regulatory requirements—and a growing need to align program structures with evolving expectations around licensing, consumer protection, and risk management.

California Settlement Offers Reminder that Buy Now Pay Later Participants are Subject to California Financing Law

In August 2022, the California Department of Financial Protection and Innovation (“Department” or “DFPI”) entered into a consent order with a company offering point of sale financing products that the DFPI deemed to be buy now, pay later (“BNPL”) financing, for which a California Financing Law (“CFL”) license is required. The company is required to pay a penalty, refund previously collected fees from California residents, and obtain a CFL license.

The settlement follows an annual report released in October of 2021 in which the DFPI noted a sharp increase in BNPL “consumer loans.” In the accompanying press release to that report, the DFPI stated:

BNPL loans are an increasingly common type of short-term financing that allows consumers to make purchases and pay for them at a future date, often interest-free. Sometimes referred to as point-of-sale installment loans, BNPL products are becoming a popular payment option. The report shows a surge in BNPL unsecured consumer loans reported to the DFPI. This product has grown in recent years and has come under the DFPI regulatory umbrella.

The press release also noted that the Department had rendered prior legal opinions and entered into settlements with three separate BNPL / point-of-sale financers in 2019 and 2020 that were deemed to be structuring their BNPL products in a manner designed to evade regulation under the CFL. These companies had agreed to refund fees to consumers and obtain CFL licenses, and among other requirements, must: (i) consider consumers’ ability to repay loans, (ii) comply with rate and fee caps, and (iii) respond to consumer complaints

In one of those prior opinions, the DFPI (formerly, the Department of Business Oversight) asserted that the CFL applies to making consumer loans and noted that the CFL defines “consumer loan” as a loan “the proceeds of which are intended by the borrower for use primarily for personal, family, or household purposes.” (Note that loans in the principal amount of $5,000 or less for other than personal, family, or household purposes are also included in the definition, bringing certain commercial or business-purpose loans within the scope of the CFL). The Department further stated that the CFL incorporates certain aspects of the common law, including that merchants may sell goods in exchange for cash or in exchange for a consumer’s promise to pay later (a “credit sale”) and that a merchant may charge a premium for credit sales without the transaction being subject to the state’s loan laws and without the premium being subject to the state’s usury limit. The DFPI concluded, however, that “[e]xtensive third-party involvement may cause transactions to be deemed loans even if the underlying credit sale is bona fide.”

Taken together, the Department’s prior statements, opinions, and enforcement actions signal a broad interpretation of the CFL that could potentially apply to many lenders and third parties involved in point-of-sale financing, including the offering of buy now, pay later products. In the press release accompanying the most recent enforcement action, the DFPI concluded that it “continues investigating other companies offering Buy Now, Pay Later products.”

Arizona Seeks to Improve FinTech Sandbox with HB 2177

A&B ABstract: Arizona launched a first-in-the-nation FinTech Sandbox in August 2018, which has been a successful venture by the state. Arizona seeks to improve this program with the enactment of HB 2177 and the Arizona Attorney General Office’s involvement in the CFPB’s American Consumer Financial Innovation Network.

Arizona’s FinTech Sandbox

In August 2018, Arizona was the first state to launch its “FinTech Sandbox” to ease state regulatory burdens for persons offering innovative financial technologies. (The July 2019 Alston & Bird LLP Structured Finance Spectrum provides further details).  This program allows such persons to register with the Attorney General’s Office and conduct limited tests of their technologies under its supervision without otherwise complying with more burdensome licensing and regulatory requirements. Arizona Attorney General Mark Brnovich has touted the success of this program, stating that it is “the most active and successful regulatory sandbox in North America.”

House Bill 2177

To improve this program, Arizona enacted HB 2177, which:

  • Makes businesses that provide a “substantial component of a financial product or service” eligible to participate, which will (i) allow for tests of products that affect how financial services are provided in the marketplace even if the product itself is not regulated and (ii) enable regulatory technology (“RegTech”) products to now seek entry into the program as stand-alone participants;
  • Requires applicants to demonstrate the cybersecurity measures they will undertake as part of a sandbox test to ensure consumer data remains private and protected; and
  • No longer requires that sandbox tests involving payments involve the participation of Arizona residents, as long as the transaction occurs in Arizona.

In a recent announcement regarding HB 2177, Attorney General Brnovich also announced his office’s participation in the American Consumer Financial Innovation Network (“ACFIN”).  ACFIN is a new CFPB initiative that seeks to bring together state and federal financial services regulators to collaborate on innovation-fostering programs like the FinTech Sandbox.  Given his office’s experience administering the program, Brnvich is encouraged by the federal efforts evident in ACFIN.

Takeaway

In addition to Arizona, Alabama, Georgia, Indiana, South Carolina, Tennessee and Utah are members of ACFIN. We are keeping our eyes on ACFIN, as we believe this to be an important initiative, and look forward to what is to come.

New York DFS Launches Research and Innovation Division

A&B Abstract:

In an effort to position itself as the “Regulator of the Future,” the New York State Department of Financial Services (“NYDFS”) recently launched the Research and Innovation Division, which will be responsible for ensuring that the NYDFS keeps pace with the rapid changes in all sectors of the financial services industry.

Earlier this year, the NYDFS announced the creation of two other divisions, Consumer Protection & Financial Enforcement Division and the Cybersecurity Division of the NYDFS.  We addressed those developments in a previous post.

Creation of the Division

On July 23, 2019, Linda A. Lacewell, the Superintendent of the New York State Department of Financial Services (“NYDFS”), announced the establishment of a new Research and Innovation Division  (“Division”). Superintendent Lacewell remarked; “The financial services regulatory landscape needs to evolve and adapt as innovation in banking, insurance and regulatory technology continues to grow. This new division … position[s] the DFS as the regulator of the future, allowing the [NYDFS] to better protect consumers, develop best practices, and analyze market data to strengthen New York’s standing as the center of financial innovation.”

Division Responsibilities

Superintendent Lacewell established the Division so that New York “remains the jurisdiction of choice for innovators.” The Division is tasked with supporting internal transformation and market innovation. Importantly, the Division will be responsible for:

  • Licensing and supervising virtual currencies;
  • Assessing new efforts to use technology to address financial exclusion;
  • Identifying and protecting consumer data rights; and
  • Encouraging innovations in the financial services marketplace to preserve New York’s competitiveness as a financial innovation hub.

Division Leadership

Along with the creation of the Division, Superintendent Lacewell announced several leadership appointments within the Division. Matthew Homer will lead the Division as Executive Deputy Superintendent. Prior to this appointment, Mr. Homer was the Head of Policy and Research at Quovo, a New York fintech company providing open banking functionality for the financial services ecosystem, leading up to the company’s acquisition by fintech company Plaid, where he has worked since. Matthew Siegel and Olivia Bumgardner will be Deputy Superintendents of the Division. Mr. Siegel most recently served as a Trial Attorney in the Antitrust Division of the U.S. Department of Justice. Ms. Bumgardner is currently Director of Research for the NYDFS.  She has served as an economist responsible for the analysis of the NYDFS’ most complicated financial transactions and a leader of the NYDFS’s key initiatives relative to virtual currency, cybersecurity and financial inclusion. Andrew Lucas will serve as Counsel to the division. Previously, Mr. Lucas served as the Director of the NYDFS’s Department of Financial Innovation.

Takeaway

The creation of the Division marks a substantial change in the NYDFS’s relationship with rapidly evolving financial services technology companies. We believe that this will impact such companies that do business in New York, particularly those seeking BitLicenses with the NYDFS. We are actively monitoring the development of the Division, and are hopeful that this results in more favorable treatment of fintech companies by the NYDFS.