Thirteen consumer-finance rules now sit unenforced in 2026 — overdraft caps, junk-fee limits, and payday protections still exist on paper but no longer bite

Young woman small business owner with a credit card payment system

Maria Gonzalez, a home health aide in San Antonio, pulled her credit report in April 2026 and found the same $4,200 emergency-room bill that had dragged her score below 600 two years earlier. A federal rule finalized in January 2025 was supposed to strip medical collections from credit reports nationwide. Months later, a Texas judge vacated the rule entirely. Gonzalez’s file never changed.

Her experience captures something broader: across the country, borrowers who were told that overdraft caps, lower late fees, and cleaner credit reports were on the way are still paying the same charges they paid before regulators acted.

At least thirteen Consumer Financial Protection Bureau rules finalized between 2024 and early 2025, spanning payday-lending safeguards, junk-fee limits, buy-now-pay-later disclosures, and overdraft pricing, remain technically on the books as of June 2026, according to a review of the bureau’s final-rules docket and federal court records. The thirteen cover areas including the credit-card late-fee cap (Regulation Z penalty-fee rule), the medical-debt credit-reporting ban, the overdraft-fee pricing rule for large banks, the buy-now-pay-later interpretive rule extending Truth in Lending Act disclosures, the registry of nonbank enforcement orders, updated rules on data-broker oversight under the Fair Credit Reporting Act, small-business lending data collection requirements (Section 1071), the personal-financial-data-rights rule (Section 1033), updated remittance-transfer protections, the payday/small-dollar lending rule, the property-assessed clean energy (PACE) lending ability-to-repay rule, the digital-wallet and payment-app supervision framework, and the nonsufficient-funds fee guidance. Not one of them is reshaping the fees consumers actually see. Courts blocked some. Others stalled when compliance deadlines passed without a single public enforcement action. The gap between what Washington promised and what shows up on monthly statements keeps growing.

Three flagship rules, three paths to irrelevance

The clearest examples involve three marquee CFPB regulations, each neutralized by a different mechanism.

Credit-card late fees. The bureau’s penalty-fee rule, finalized under Regulation Z, would have slashed the safe-harbor late fee charged by large issuers from roughly $32 to $8. The CFPB estimated the cut would save households more than $10 billion a year. A coalition of bank and trade-group plaintiffs won a preliminary injunction, and the rule remains stayed pending litigation. No court has ruled on the merits. No major issuer has voluntarily adopted the $8 benchmark. Cardholders at the largest banks still pay the old amount every time a minimum payment arrives late.

Medical debt on credit reports. The CFPB’s rule removing medical bills from consumer credit files was projected to lift scores for roughly 15 million Americans, according to the bureau’s own analysis. The American Hospital Association and other plaintiffs challenged it in the U.S. District Court for the Eastern District of Texas. The case ended in a consent judgment and full vacatur, meaning the rule did not merely pause; it was erased from the enforceable landscape. Unpaid hospital and physician collections continue to appear on standard credit files, suppressing scores and raising borrowing costs for millions of people who had been told relief was coming.

Overdraft pricing. Aimed at banks with more than $10 billion in assets, the overdraft rule offered three compliance paths: a flat $5 cap on overdraft fees, a cost-recovery model tied to actual lending expenses, or full Truth in Lending Act treatment of overdraft credit. The CFPB said the measure would save Americans billions in annual charges. The original compliance date of October 1, 2025, came and went. Publicly available enforcement dockets show no test cases against institutions that kept charging legacy fees. A handful of large banks, notably Capital One and Ally, had already eliminated or sharply reduced overdraft charges before the rule was written, according to their own product pages, but those were voluntary competitive decisions, not regulatory compliance. Most covered institutions have not followed suit.

A judicial stay. A vacatur. A quiet decision not to enforce. Three different mechanisms, one shared result: rules that were finalized, publicized, and assigned compliance dates have not changed a single line on a single statement.

Why counting the dormant rules is harder than it sounds

Pinning down the exact number of stalled rules is complicated because several federal agencies pursued overlapping fee-reduction goals during the same period. The FTC proposed its own Trade Regulation Rule on Unfair or Deceptive Fees in 2023, targeting hidden charges in lodging, ticketing, and other sectors. That proposal shares policy DNA with several CFPB actions, but the FTC has not published a final rule or a formal withdrawal notice as of June 2026, based on a review of the commission’s Federal Register filings. Because the FTC proposal never reached the final-rule stage, it is not counted among the thirteen CFPB rules discussed here, but its limbo status illustrates how broadly the federal fee-reduction agenda has stalled.

Meanwhile, the CFPB’s interpretive rule extending Truth in Lending disclosure requirements to buy-now-pay-later products was published in the Federal Register in May 2024 (89 FR 41781). It required BNPL providers to furnish the same cost-of-credit disclosures and dispute-resolution rights that traditional credit-card issuers provide. Industry groups challenged the rule’s legal basis, and no public enforcement action has tested its reach. Without updated guidance from CFPB leadership, lenders and fintech firms are left guessing which obligations the bureau considers active.

That uncertainty has split the industry. Some firms have hedged by modestly lowering certain fees or expanding upfront disclosures, anticipating that enforcement could resume at any time. Others have chosen to wait, calculating that early adoption would put them at a competitive disadvantage if rivals keep charging higher amounts. The practical result: two consumers with identical financial profiles can face different fees and different credit-report treatment depending on which lender they happen to use.

How courthouse geography shapes what you pay

Where a lawsuit is filed increasingly determines whether a federal rule survives. The medical-debt rule fell in the Eastern District of Texas, a jurisdiction that has become a magnet for challenges to federal regulation. Plaintiffs seeking to block agency action have filed there repeatedly, drawn by judges who have shown a willingness to grant broad, often nationwide, relief. In the medical-debt case, the consent judgment and resulting vacatur meant the rule did not just pause for appeal; it ceased to exist as enforceable law.

The credit-card late-fee rule, by contrast, is caught in litigation that has produced a stay but no final merits ruling. That distinction matters for what comes next. A vacated rule requires an entirely new rulemaking, or a successful appellate reversal, to come back to life. A stayed rule can, in theory, snap into effect the moment a court lifts the injunction. For consumers checking their statements in June 2026, though, the difference is invisible: late fees and overdraft charges sit right where they were before the rule wave began.

State attorneys general and borrower self-help in a federal enforcement vacuum

State attorneys general in New York, California, Illinois, and several other states have signaled they may use state consumer-protection statutes to pursue some of the same fee practices the federal rules targeted. New York’s Department of Financial Services issued updated guidance on overdraft disclosures in late 2025, and California’s consumer-finance law already caps certain fees independently of federal action. Borrowers in those states may see partial relief even if federal rules remain frozen.

For everyone else, the options are narrower but not nonexistent:

  • File complaints. The CFPB’s public complaint portal continues to accept and publish submissions even as enforcement activity has slowed. Complaint volume is one of the few public metrics that can pressure the bureau to act.
  • Shop aggressively. Credit unions and online banks that never charged high overdraft fees remain a real alternative to legacy institutions.
  • Dispute medical collections. Anyone whose credit report still shows a medical collection can dispute the entry directly with Equifax, Experian, and TransUnion. The bureaus are not legally required to remove it under current law, but disputes create a paper trail and, in some cases, prompt voluntary deletion by the data furnisher.

None of those steps replace the broad, automatic protections the CFPB’s rules were designed to deliver. Until courts resolve the pending litigation, or until regulators publish updated enforcement roadmaps, the thirteen rules on paper will keep doing exactly what they are doing now: nothing at all.