You do have rights when you borrow money, and they are not "nice to haves" — they are federal laws with cash penalties attached when lenders step over the line. The core takeaway: nine separate statutes give you specific, actionable tools to stop predatory contact, cap what you owe, and even collect statutory damages if a lender violates the rules.

Most borrowers never invoke these protections because they do not know they exist. This guide dismantles the common myths that keep you paying more than you owe.

"Lenders Don't Have to Tell Me the Total Cost Up Front"

They absolutely do, and in writing.

The Truth in Lending Act (TILA), backed by Regulation Z, requires every lender to disclose the full dollar amount your loan will cost you before you sign. This is not a courtesy. It is a federal mandate with teeth: if they hide fees, miscalculate the finance charge, or bury the total repayment amount in fine print, you can sue for actual damages, twice the finance charge (capped at $1,000 in individual actions), plus attorney's fees and costs.

What this means practically: that loan document must show, in bold or boxed format, the "total of payments" — the actual sum you will hand over if you pay as scheduled. If a lender verbally assures you "$15 per $100" but the paperwork shows something else, trust the paper and walk away. Verbal promises are not binding; the signed disclosure is.

Check your documents against the scam spotter tool if anything looks off.

"Once I Give ACH Access, They Can Debit Forever"

You can revoke that authorization, and you have backup if they ignore you.

The Electronic Fund Transfer Act and Regulation E give you the right to withdraw electronic payment authorization at any time. Tell your bank, tell the lender, put it in writing. The lender must comply. If they debit after revocation, you have 60 days to dispute, and your bank must restore the funds while investigating.

Per the CFPB Payday Lending Rule's payment provisions (effective 2022), lenders face a "two-strike" rule on ACH attempts: after two consecutive failed debits, they cannot try again without fresh authorization from you. This stops the drowning-in-fees cycle where lenders keep retrying to trigger overdraft charges.

If you are already trapped in repeat debits, see what to do with an existing loan and the specific step-by-step to stop unauthorized withdrawals.

"Debt Collectors Can Call Me Whenever They Want"

There are hard boundaries on when and how they can contact you.

The Telephone Consumer Protection Act (TCPA) and Fair Debt Collection Practices Act (FDCPA) work together. Under TCPA, every unauthorized call or text to your mobile phone carries a $500 statutory penalty — $1,500 if the violation was willful or knowing. Under FDCPA, collectors cannot ring you before 8 a.m. or after 9 p.m., and they must cease contact if you demand written proof of the debt within 30 days of first contact. They also cannot refuse to pause collection while verifying.

The FDCPA adds statutory damages up to $1,000 per case for broader violations — harassment, threats, false representation — plus actual damages, attorney's fees, and costs.

Sample math: a collector who texts you three times without consent, knowing they lacked permission, costs you zero stress but earns you $4,500 in statutory damages if you document and pursue it.

State rules layer on top. In Texas and California, additional restrictions apply; check your specific jurisdiction.

"If I'm Denied, I Just Have to Accept It"

Lenders must explain why, and you can challenge discrimination.

The Equal Credit Opportunity Act (ECOA) requires written reasons within 30 days if your application is denied or approved on worse terms than you requested. "Computer said no" is not sufficient. They must cite specific reasons — insufficient income, poor credit history, high debt-to-income ratio — not vague character assessments.

ECOA prohibits discrimination on protected bases including race, religion, national origin, sex, marital status, age, or reliance on public assistance. Remedies include actual damages, punitive damages up to $10,000 for individual actions, and for class actions, the lesser of $500,000 or 1% of the creditor's net worth, plus attorney's fees.

If you suspect a pattern in your denials — similar applicants approved, you rejected — document everything and consult a fair lending attorney.

"My Credit Report Is Whatever the Bureau Says It Is"

You have active editing rights over your own file.

The Fair Credit Reporting Act (FCRA) grants you three key powers: free annual reports from each bureau (Experian, Equifax, TransUnion), the right to dispute inaccurate entries, and a mandatory 30-day investigation window for the bureau to verify or delete challenged items.

Remedies for willful violations include actual damages, statutory damages up to $1,000, punitive damages, and attorney's fees. A lender who knowingly reports a paid debt as outstanding, or a bureau that ignores your dispute, pays for that carelessness.

Start your dispute paper trail before a loan application, not after a denial. Clean reports get better terms.

"Military Borrowers Pay the Same Rates as Everyone Else"

Servicemembers, spouses, and dependents get a hard ceiling: 36% Military APR.

The Military Lending Act (MLA) caps all costs — interest, fees, add-on products — for active-duty service members and covered dependents. This includes payday loans, vehicle title loans, and deposit advance products. The 36% figure is comprehensive; lenders cannot bury costs elsewhere to evade it.

Enforcement is automatic through MLA database checks; lenders must verify covered borrower status before extending credit. If a lender extends credit at higher rates to a covered borrower, that contract is void and unenforceable.

If you are near a base or serving in the Guard or Reserve, always identify your status upfront. The protection only applies if triggered.

"I Have to Pay Extra to Stretch Out My Loan"

In states permitting payday lending, you can get an Extended Payment Plan once per year at no added cost.

This is not lender generosity — it is state law in all 23 states that allow payday lending, reinforced by industry self-regulation under OLA Best Practices. Ask before you default. The EPP converts your single-payment loan into a 60–90 day installment schedule with no new fees.

Critical timing: you must request the EPP before the due date, not after. Once you default, the option often disappears and collection activity accelerates.

State variations matter. Florida imposes a 24-hour cooling-off period between loans. Illinois mandates 30 days if you are a repeat borrower. Ohio eliminated single-payment payday loans entirely after 2018. These rules exist to prevent the debt spiral; use them intentionally.

When to Escalate: A Quick Checklist

  1. Document everything. Save all loan documents, texts, emails, and call logs. Screenshots with timestamps beat memory.
  2. Send written disputes. Verbal complaints evaporate. Certified mail, return receipt requested, creates a paper trail.
  3. Check your state. UDAAP statutes (unfair, deceptive, or abusive acts and practices) vary by state, often doubling or tripling actual damages.
  4. Contact a consumer attorney. Many FDCPA, TCPA, and FCRA cases settle quickly; attorneys take these on contingency because fee-shifting provisions make lenders pay your counsel.
  5. File CFPB and state AG complaints. Regulators track patterns; your complaint may join others to force systemic change.

Need scripts for these conversations? We have word-for-word scripts for lender calls and dispute letters.

Frequently Asked Questions

Can a payday lender really call my employer?

Under the FDCPA, third-party contact is limited. They may call your employer once to verify employment, but cannot reveal the debt is owed or call repeatedly. If they harass you at work, document each call — that is potential statutory damages.

What if I already revoked ACH but they charged me anyway?

Dispute immediately with your bank under Regulation E. You have 60 days from the statement showing the unauthorized debit. The bank must credit you provisionally while investigating. Then pursue the lender for actual damages plus costs.

Does the 36% MLA cap include all fees or just interest?

All-in. The Military APR includes interest, charges, credit insurance premiums, debt cancellation fees, and any add-on products. If the total exceeds 36%, the contract is void for covered borrowers.

Can I get an Extended Payment Plan if I already have one open?

State laws guarantee at least one EPP per year, not per loan. If you used your annual EPP 10 months ago, you may need to wait or explore other hardship options. Ask before the due date — timing is everything.

What counts as a "willful" TCPA violation worth $1,500?

Willful or knowing means the caller knew they lacked consent or acted with reckless disregard. Robocalls to numbers on the national DNC list, texts after you replied STOP, or calls after written revocation all qualify. Document everything; penalties add up fast.

Your rights are not theoretical. They are codified, enforceable, and designed to keep small-dollar borrowing from becoming permanent damage. Know the tools, use the tools, and remember: every violation you stop helps the next borrower too.