Regulation Z (Truth in Lending) testing requirements
Regulation Z (12 CFR Part 1026) implements the US Truth in Lending Act for creditors that regularly extend consumer credit. Regulation Z testing verifies APR and finance charge calculations against Appendix J and the 1026.22 tolerances, credit card statement fields, fee limits, and billing error timelines. FintechAssuranceLabs delivers an independent reference model and a discrepancy report with monetary impact.
- Jurisdiction
- US (Truth in Lending Act, 15 U.S.C. 1601 et seq., implemented by 12 CFR Part 1026)
- Primary source
- ecfr.gov
Engineering interpretation of testing requirements, not compliance advice.
What Regulation Z requires
Regulation Z is 12 CFR Part 1026, issued by the Consumer Financial Protection Bureau (CFPB) to implement the Truth in Lending Act. Supplement I holds the Official Interpretations (eCFR, Part 1026, up to date as of 2026-09-14, checked on 2026-09-16). Subpart E mortgage rules are outside this page. Requirements that set test scope:
- Coverage (1026.1(c), 1026.2(a)(17), 1026.3). A creditor regularly extends consumer credit that carries a finance charge or is payable by written agreement in more than four installments. "Regularly" means more than 25 extensions in the preceding or current calendar year (more than 5 for credit secured by a dwelling). Business-purpose credit is exempt (1026.3(a)). Credit above the threshold amount is exempt unless it is secured by real property or a principal dwelling, or is a private education loan (1026.3(b)); the threshold is $73,400 for 2026 (Supplement I, comment 3(b)-3.xvii).
- Finance charge (1026.4). The finance charge includes interest, loan fees, credit report fees, and premiums for debt cancellation coverage, unless a paragraph of 1026.4 excludes the charge.
- Closed-end disclosures (1026.17, 1026.18). The creditor discloses in writing before consummation; electronic delivery follows the E-Sign Act. The content includes amount financed, finance charge, annual percentage rate (APR), payment schedule, total of payments, and late payment charges. A finance charge is treated as accurate within $5 when the amount financed is $1,000 or less, and within $10 above $1,000 (1026.18(d)(2)).
- APR accuracy (1026.22, appendix J). The APR is computed by the actuarial method (appendix J) or the United States Rule method. The disclosed APR is accurate within 1/8 of 1 percentage point for a regular transaction and 1/4 of 1 percentage point for an irregular one: multiple advances, irregular payment periods, or irregular payment amounts.
- Open-end credit (1026.5 to 1026.10). Account-opening disclosures come before the first transaction (1026.5(b)(1)(i)) in the 1026.6(b)(1) table format. Each periodic statement carries the 1026.7(b) fields, including the minimum payment warning and appendix M1 repayment estimates for credit cards. Card issuers adopt reasonable procedures so that statements are mailed or delivered at least 21 days before the due date (1026.5(b)(2)(ii)(A)). Payments are credited as of the date of receipt, with no cut-off earlier than 5 p.m. on the due date (1026.10). A significant change in account terms needs written notice at least 45 days before it takes effect (1026.9(c)(2)).
- Billing errors (1026.13). The creditor acknowledges a billing error notice within 30 days and resolves it within two complete billing cycles, and no later than 90 days. The disputed amount is not collected in the meantime.
- Credit card accounts (subpart G). Fees in the first year, other than late payment, over-the-limit, and returned-payment fees, are capped at 25% of the credit limit at account opening (1026.52(a)). Penalty fees cannot exceed the dollar amount of the violation (1026.52(b)(2)). Excess payments go to the highest-APR balance first (1026.53). Rates and fees do not increase outside the 1026.55 exceptions.
Status verified on 2026-09-16: the CFPB lists its 2024 credit card penalty fees rule as vacated by court order on 15 April 2025 (CFPB), but the eCFR text of 1026.52(b)(1)(ii) still shows the $8 late fee safe harbor from that rule. The 2024 interpretive rule that treated pay-later digital accounts as credit cards was withdrawn on 12 May 2025 (90 FR 20084). A pay-later plan is covered when it meets the 1026.2(a)(17) creditor definition.
What Regulation Z testing verifies
| Requirement | What we test | Evidence produced |
|---|---|---|
| 1026.22(a)(2): APR within 1/8 of 1 percentage point in a regular transaction | Disclosed APR on loans with equal payments at equal intervals against an appendix J actuarial recalculation | APR recalculation log per loan with the variance in percentage points |
| 1026.22(a)(3): APR within 1/4 of 1 percentage point in an irregular transaction | Disclosed APR on loans with multiple advances, irregular payment periods, or irregular payment amounts | APR variance table per irregular loan with the irregularity type |
| 1026.18(d)(2): finance charge within $5 or $10 by amount financed | Disclosed finance charge on loans with an amount financed of $1,000 and $1,000.01 | Finance charge variance log per amount financed band |
| 1026.4(b): charges that belong in the finance charge | Classification of origination, credit report, and debt cancellation fees in the disclosure engine | Fee classification matrix with the 1026.4 paragraph for each fee |
| 1026.7(b)(12): minimum payment warning and repayment estimates | Repayment estimate and total cost on card statements against an appendix M1 calculation | Statement field check with the appendix M1 recalculation per test balance |
| 1026.5(b)(2)(ii)(A): statement 21 days before the due date | Statement delivery timestamps against due dates, and the late fee decision for a minimum payment received on day 21 | Statement timing log with the late fee decision per account |
| 1026.10(b)(2)(ii): payment cut-off no earlier than 5 p.m. on the due date | Payments at 4:59 p.m., 5:00 p.m., and 11:59 p.m. local time on the due date | Payment posting log with the credited date for each payment timestamp |
| 1026.53(a): excess payment to the highest-APR balance first | Payments above the minimum on card accounts with purchase, cash advance, and promotional balances | Payment allocation table per balance before and after each payment |
| 1026.13(c): acknowledgement in 30 days and resolution in two billing cycles, at most 90 days | Billing error notices received early, mid, and late in a billing cycle, tracked to resolution | Billing error timeline log with the deadline and action date per notice |
The interest accrual and day-count testing guide covers the accrual inputs behind the finance charge.
Artifacts examiners and partner banks request
- Evidence of compliance kept for two years under 1026.25(a), available for inspection by the enforcing agency under 1026.25(b).
- The APR method, actuarial or United States Rule, and evidence that a computation tool other than the CFPB APR tables matches appendix J within the 1026.22(a) tolerances (1026.22(b)(2)).
- Sample closed-end disclosures per product with the calculation inputs: amount financed, prepaid finance charge, payment schedule, and first-period length.
- The fee inventory with the 1026.4 paragraph that includes or excludes each charge from the finance charge.
- Account-opening tables and periodic statements for each card product against the 1026.6(b) and 1026.7(b) fields.
- Billing error files: notice receipt date, acknowledgement, correction notice or written explanation, and the dates for each step (1026.13).
- Change-in-terms and penalty rate notices with the send date and the effective date (1026.9(c)(2) and 1026.9(g)).
- For card issuers setting penalty fees by cost, the yearly reevaluation required by 1026.52(b)(1)(i).
Common Regulation Z findings
- Note rate disclosed as APR. A 12-month installment loan with a 5% origination fee shows the interest rate in the APR field. The APR falls outside the 1/8 of 1 percentage point tolerance in 1026.22(a)(2).
- Origination fee left out of the finance charge. A $150 origination fee on a $3,000 loan is kept out of the disclosed finance charge. The defect breaks 1026.18(d)(2) and the loan fee rule in 1026.4(b)(3).
- Long first period ignored. A 24-month loan with a 60-day first period is disclosed as a regular monthly schedule. For a term of at least 1 year and under 10 years, 1026.17(c)(4)(ii) lets a creditor disregard a first period only up to 21 days longer than a regular period, so the disclosure breaks 1026.17(c)(4).
- Cut-off in UTC. A card payment made at 8 p.m. Eastern on the due date posts the next day and triggers a late fee. The defect breaks 1026.10(a) and the 5 p.m. floor in 1026.10(b)(2)(ii).
- Excess payment applied to the promotional balance. A payment above the minimum reduces the 0% balance before the 29.99% cash advance balance. The defect breaks 1026.53(a).
- Autopay collects a disputed amount. The scheduled debit includes a charge named in a billing error notice received five business days before the payment date. The defect breaks 1026.13(d)(1).
- Dispute closed by silence. A billing error case stays open past 90 days with no correction notice or written explanation. The defect breaks 1026.13(c)(2) and 1026.13(f)(1).
- Fee on a declined transaction. The card program charges a fee when an authorization is declined. The defect breaks 1026.52(b)(2)(i)(B)(1).
How we cover Regulation Z
Financial calculation testing recalculates APR, finance charge, and appendix M1 estimates in an independent reference model and reports each variance in a discrepancy report with monetary impact. Lending and credit decisioning testing checks repayment schedules and late fee rules against the disclosed terms. Chargeback and dispute testing runs the 1026.13 timeline inside the dispute lifecycle test suite.
We test Regulation Z flows for consumer lending and buy now pay later products, credit cards issued by neobanks and Banking-as-a-Service programmes, and loan management software. Adverse action notices on the same credit decisions fall under Regulation B, and debit card and remittance flows fall under Regulation E.
Related
Services
Segments
Adjacent standards
Questions
What is Regulation Z?
Regulation Z is 12 CFR Part 1026, the rule the Consumer Financial Protection Bureau issues to implement the Truth in Lending Act. Regulation Z requires cost-of-credit disclosures such as the finance charge and the annual percentage rate, sets credit card fee and payment rules, and gives consumers a billing error resolution procedure for open-end credit.
What does Regulation Z require?
Regulation Z requires closed-end credit disclosures before consummation (12 CFR 1026.17 and 1026.18), account-opening disclosures and periodic statements for open-end credit (1026.6 and 1026.7), an APR accurate within the 1026.22 tolerances, billing error resolution within 1026.13 time limits, and credit card limits on fees and rate increases (1026.52 and 1026.55).
Does Regulation Z apply to business loans?
Regulation Z does not apply to credit extended primarily for a business, commercial, or agricultural purpose, or to credit extended to a borrower that is not a natural person (12 CFR 1026.3(a)). The rules on credit card issuance and on liability for unauthorized use in 12 CFR 1026.12 still apply to cards issued for business use.
Scope your testing
Send FintechAssuranceLabs your product, segment, money flows, and the standards that need evidence, and get a proposed test scope with its deliverables.
Scope your testing