New York's buy now pay later regulation just grew teeth

What New York's buy now pay later regulation actually says#

Every fox learns to tell a fresh scent from a cold one, and bnpl regulation in the United States has just turned blazing hot. On 23 February 2026 the New York Department of Financial Services announced what Governor Kathy Hochul called protections against products "designed to trip them up with junk fees and overly burdensome fine print," and by 15 July 2026 that announcement had grown into a full draft rule. This week's coverage from PYMNTS, 2026 confirms the rule is moving toward implementation, which means every fintech marketer selling into New York now has homework.

Acting Superintendent Kaitlin Asrow put the logic plainly in the DFS press release, 2026: "It is our responsibility to ensure that innovation is paired with strong consumer protections, so that New Yorkers can safely and securely use new financial products." That single sentence is the whole shape of buy now pay later regulation as New York now practises it: let the product exist, but stop it hunting in the dark.

The licence, the ceiling and the interface#

The August update adds three teeth. First, a mandatory licence: BNPL lenders and "certain platform operators where a substantial purpose of the consumer interaction is to obtain BNPL loans from third parties" now sit inside the same supervisory perimeter as any other consumer lender, per Venable's analysis, 2026. Second, New York's 16% civil usury ceiling now applies to covered BNPL loans, with the state, not the federal Truth in Lending Act, deciding what counts as interest. Third, lenders must offer a "reasonably accessible interface" showing total balance, next payment and APR without a scavenger hunt through settings menus.

There is a fourth tooth easy to miss: the new bnpl late fees rule sets an $8 safe-harbor cap per violation, with total penalty fees capped at the original amount financed, confirmed by Cooley's Finsights briefing, 2026. Comments on the current draft close 14 September 2026, and once adopted the rule takes effect 180 days later, with existing lenders given 45 days after that to apply for a licence. That is not a long trail to walk before enforcement starts.

Why a state regulator is moving before Washington#

The obvious question is why a state agency, not a federal one, is writing the strictest buy now pay later rules in the country. The answer is a vacancy. The Consumer Financial Protection Bureau withdrew its 2024 BNPL Interpretive Rule on 12 May 2025, and its own compliance resources page, last updated July 2025, now reads as a quiet retreat rather than a rulebook. Federal enforcement went quiet, and states filled the den it left empty.

New York is not hunting alone, either domestically or abroad. The pattern below shows how three separate regulators are converging on the same handful of protections from three different starting points, each one worth watching if your BNPL product, or your BNPL marketing, crosses a border.

None of this is abstract for a marketing team. A claim that clears an FTC truthfulness bar might still trip New York's new disclosure requirements, and a bank-partnership BNPL product marketed as "outside state rules" is precisely the arrangement this proposal was written to catch. Getting the compliance thicket wrong here does not stay a legal problem; it becomes an ad-copy problem within a quarter.

The money behind buy now pay later regulation#

Regulators do not write rules for a market that is not moving, and this one has been moving fast. A June 2026 Federal Reserve Board FEDS Notes study by Acree, Barnes, Bruce and Hannon estimates BNPL providers originated close to $156.7 billion in consumer credit in 2025, drawn from six major providers' own regulatory filings, per the Federal Reserve FEDS Notes, June 2026. "Pay in 4" plans, the product most people picture when they hear buy now pay later regulation discussed, account for roughly half of that: $78.3 billion, up nearly 80% since the CFPB last measured it in 2023.

The other half of the market, longer-duration and interest-bearing point-of-sale instalment products, is exactly the "broader universe" of BNPL credit that New York's draft explicitly reaches, per Venable, 2026, regardless of whether it is marketed under the BNPL name at all. That distinction is the whole reason a rule aimed at four-payment checkout widgets ended up covering products your compliance team may not have labelled BNPL internally.

Zero percent is the norm, not the exception#

The same Federal Reserve study found that 63% of total BNPL issuance carried 0% APR, which is worth sitting with. Most of this market is not usurious in the way headlines imply; the fox metaphor for this rule is not a trap set for every path, it is a trap set for the minority of paths that do carry interest, fees or hidden cost.

Read together, the two charts explain the shape of buy now pay later regulation in 2026. Regulators are not trying to outlaw a $156.7bn market; they are trying to make the minority slice that does carry cost, in interest or in fees, as visible to the borrower as the majority slice that does not.

Debt stacking and the borrower nobody can see#

Here is the evidence that gave buy now pay later regulation its urgency. The CFPB's own matched-data study, before the agency's 2025 retreat, found that "approximately 63 percent of borrowers originated multiple simultaneous loans at some point during the year," and 33% borrowed from more than one lender at once, per the CFPB, January 2025. Because BNPL loans rarely reach the nationwide credit bureaus, no single lender, and no single regulator, could see the full stack a borrower was carrying. That invisibility is precisely what New York's licensing and reporting requirements are built to end.

The trail has only gotten busier since. LendingTree's most recent tracker, updated 19 August 2026, found 47% of BNPL users say they paid late in the past year, up from 41% in 2025 and 34% in 2024, and that a quarter of users have carried three or more active loans at once, per LendingTree, 2026. The Federal Reserve's own 2025 Survey of Household Economics and Decisionmaking put overall adoption at 16% of adults, and found 11% of BNPL users had a payment trigger a bank overdraft or non-sufficient-funds fee in the prior year, rising to 38% among users already paying a late fee, per the Federal Reserve, 2026.

None of that makes BNPL predatory by design. The Richmond Fed's own February 2026 assessment found the product's "impact on financial stability appears limited at present," given its current scale and observed default rates, per the Richmond Fed Economic Brief, February 2026. What it does show is a visibility gap between what any one lender sees and what a borrower is actually carrying, and that gap, more than any single fee, is what buy now pay later regulation across three jurisdictions is now built to close.

Is buy now pay later predatory, or just unwatched?#

Type the query, is buy now pay later predatory?, into a search bar and autocomplete finishes it before you do. It is one of the most-asked questions about the sector, and the honest answer sits between the two easy ones. A product that is 63% interest-free is not, by construction, a debt trap. A product where a quarter of frequent users are juggling three or more simultaneous balances that no single lender or bureau can see is not, by construction, safe either. New York's draft is an attempt to regulate the second fact without punishing the first.

The clearest way to see the shift is to compare the version DFS floated in July with the version now open for comment. Nothing in the underlying product changed between those two drafts; what changed is how much of the fintech-bank stack the rule is willing to reach, and how loudly a lender must now disclose what a shopper owes.

Set beside the United Kingdom's finalised regime, the family resemblance is obvious even though the two rulebooks were drafted independently, on different sides of an ocean, for different legal systems.

So is buy now pay later predatory? Not for the 63% of volume carrying no interest at all. But for the borrower stacking a fourth loan against a fifth income that has not arrived yet, invisibly to every lender in the chain, the honest answer is that it was never the loan that was predatory, it was the darkness around it. New York's buy now pay later regulation is, at bottom, a light switch.

What this buy now pay later regulation means for your marketing team#

None of the above is a legal memo, and folkfox is not your compliance counsel. But every regulated disclosure eventually becomes a line of ad copy, a checkout microcopy string, or a landing-page claim, and that is the terrain where a marketing team earns or loses trust with a regulator who is already reading closely.

The pattern here rhymes with two other compliance stories folkfox has tracked this year: GENIUS Act stablecoin compliance crawling downstream past the issuer, and payment provider compliance stopping being someone else's problem. In every case, a rule written for lenders ends up read by marketers, because the marketing is where the claim meets the customer.

There is a pricing-disclosure parallel worth naming too: the FTC's own guidance on surveillance pricing becoming the FTC's fine-print problem made the same point about a different fintech mechanic. Whenever a regulator decides that fine print is the product, marketing copy becomes the audit trail.

If you sell BNPL, or advertise a fintech product that touches BNPL rails, the smart move is not to wait for the Notice of Adoption. Build the disclosure language now, get brand strategy and legal reading from the same draft, and treat the 180-day countdown as a runway rather than a deadline sprung on you in March 2027. That is the kind of work folkfox does inside fintech marketing engagements, alongside the content and search visibility work that keeps a compliant claim findable, not just correct.

Frequently asked questions#