The Federal Register published the CFPB's final Regulation B rewrite yesterday, effective July 21, 2026. The headlines say fair lending enforcement just died. For MCA providers, factoring companies, equipment finance originators, and revenue-based lenders who never collected protected-class data in the first place, that reading misses the point. Here is what actually moved this week, and the four exposure surfaces that did not.

Why this matters this week. The rule drops into a crowded compliance calendar. Section 1071 Tier 1 compliance lands twenty days before the ECOA rule takes effect, creating a back-to-back Q3 gate for non-bank commercial lenders whose small-business origination volume places them in Tier 1. Sommerfield's Troutman note flags the likely litigation timeline directly: "Lawsuits from consumer advocates are likely to follow quickly. As a result, the validity of these changes will be subject to litigation, potentially over a period of years, before they become final."³ The operator takeaway is practical: the work this quarter is to revalidate what was not touched by the rule, not to write a press release on what was.

The three substantive changes do not operate at the same level of impact for non-bank commercial lenders. The effects-test elimination is the headline, but Regulation B disparate-impact liability was always a secondary exposure for lenders who do not collect protected-class data. Commercial lenders who relied on disparate-treatment analysis and proxy discrimination testing as their primary fair-lending controls can continue those programs; nothing in the final rule removes the prohibition on intentional discrimination.³

The narrowed discouragement standard is the practical compliance win for most commercial lenders. Prior interpretations swept in branch siting, marketing footprint, and outreach patterns. Under the final rule, liability requires oral or written statements directed at applicants with a reasonable-person test, per ABA Banking Journal and Troutman.⁷³ Targeted outreach to underserved communities is expressly protected. For lenders running capital-access programs or industry-vertical-specific marketing, the administrative risk drops materially.

The special-purpose-credit-program restriction is the change most likely to hit non-bank commercial lenders who operate targeted small-business or minority-owned-business programs. For-profit creditors can no longer use race, color, national origin, or sex as eligibility criteria. Religion, age, marital status, and receipt of public assistance income remain permissible SPCP categories for for-profit creditors, but only under the tightened documentation standard. Written plans must now include evidence that the specific borrower would not otherwise receive the credit, per American Banker's summary of the rule text.² Non-profit and government-authorized programs remain available as SPCP structures without the for-profit eligibility restriction, per Troutman.³ If your platform operates a for-profit SPCP today, revalidate the documentation before July 21; the standard for what counts as "evidence of need" is materially tighter.

This is the reframe most commercial-lending coverage missed this week. Disparate-impact liability under ECOA requires a plaintiff or enforcer to demonstrate that a facially neutral practice produced a disproportionate adverse effect on a protected class. To defend, a lender reviews application-level data that codes protected-class membership, typically voluntarily self-reported at intake or inferred via surname-and-geography proxies. In mortgage lending, where Home Mortgage Disclosure Act reporting has required this data for decades, the infrastructure exists. In non-bank commercial lending, it does not.

Commercial lenders underwriting MCA, factoring, equipment finance, and revenue-based financing typically do not collect race, ethnicity, or sex at intake. They underwrite at the business-entity level on cash flow, bank statements, origination volume, and industry code. The practical fair-lending risk for these lenders has always concentrated in four other theories: disparate treatment (still prohibited under ECOA post-rule), proxy discrimination (using facially neutral variables as stand-ins for protected class, still actionable), steering and pricing discrimination (where broker-network structures create comparability exposure), and UDAP theories at FTC Section 5 and state analogs, which the rule does not touch.

The implication: compliance programs built around proxy discrimination analysis, broker-conduct monitoring, and pricing consistency audits do not change on July 21. Programs that relied heavily on the pre-rule disparate-impact framework as a shield for weaker controls elsewhere should reevaluate, because the shield is now narrower federally and essentially unchanged at the state level in CA, MA, and NJ.

Four surfaces where disparate-impact theory continues to apply, per Troutman's analysis and the state-law landscape:³²

1. Fair Housing Act via Inclusive Communities. The Supreme Court's 2015 ruling in Texas Department of Housing and Community Affairs v. Inclusive Communities Project, Inc. recognized disparate-impact liability under the FHA. The CFPB's Regulation B rule does not touch that precedent. Any alt-lender with a product that touches real estate, including bridge loans on residential or mixed-use properties, commercial mortgage facilities, or equipment financing secured by real property, retains FHA disparate-impact exposure.

2. State fair lending statutes in California, Massachusetts, and New Jersey. American Banker's reporting identifies these three as states with statutory disparate-impact authority independent of ECOA.² Practically, any lender that originates across state lines needs to treat these jurisdictions as a separate compliance tier.

3. CFPB Section 1071 small business lending data collection. Section 1071 itself is a data-collection mandate, not a disparate-impact prohibition, but it produces the exact demographic dataset that plaintiffs and state AGs will use to build disparate-impact cases going forward. Tier 1 lenders (highest origination volumes) have a July 1, 2026 compliance date, as finalized in the CFPB's October 2, 2025 compliance-dates extension rule. Tier 2 starts January 1, 2027, and Tier 3 October 1, 2027, per the Consumer Financial Services Law Monitor.⁵ CFPB has publicly stated it plans new rulemaking to narrow the rule's scope, likely excluding revenue-based financing, agricultural loans, and loans under $1,000 (inflation-adjusted), and raising the coverage threshold from 100 to 1,000 originations per year, per the same source.⁵ That narrowing is not finalized, and the current compliance dates remain operative. Note for ABA member banks: the Fifth Circuit stay in the ongoing industry litigation suspends the compliance clock until further court action, but non-bank lenders are not covered by that stay.

4. FTC Section 5 UDAP enforcement. The FTC retains authority over unfair and deceptive practices for non-bank commercial lenders. Broker conduct, marketing claims, collections practices, and pricing disclosures are all within Section 5 reach regardless of the ECOA rule.

Ten states now have commercial financing disclosure statutes: California, Connecticut, Florida, Georgia, Kansas, Missouri, New York, Texas, Utah, and Virginia, per Venable's March 2026 landscape report.⁴ California, New York, and Utah run the broadest scope, covering closed-end loans, open-end financing, lease financing, sales-based financing, and invoice factoring. Virginia is narrower, covering sales-based financing only. Georgia's law applies to commercial financings of $500,000 or less and took effect for transactions consummated on or after January 1, 2024, per Venable.⁴ Texas HB 700, enacted in 2025, is the newest entrant, covering sales-based financing with required disclosure of the total amount financed, finance charge, total repayment amount, fees, and repayment terms.⁴

Penalties range from $500 per violation up to $10,000 for willful violations in California and New York, per the same Venable analysis.⁴ California's DFPI entered a consent order in November 2025 with a financial services company that leased equipment to California businesses without providing the required commercial financing disclosures, a directly on-point enforcement action for the equipment-finance segment.⁴

The state-level trajectory is expansion, not retreat. For non-bank commercial lenders, the compliance arithmetic on July 22 looks different from the headlines: federal ECOA disparate-impact exposure narrows, state commercial-financing-disclosure exposure holds steady or widens, state fair-lending exposure in CA/MA/NJ remains, and Section 1071 data-collection obligations land on schedule.

1. Revalidate any for-profit SPCP documentation. If you run a targeted small-business program, lending circle, or minority-business capital-access vehicle and your eligibility criteria reference protected-class status, the program needs restructuring or sunsetting before July 21. Non-profit partnerships remain a workable structure per Troutman.³ Document the alternative-credit-access analysis required by the final rule.

2. Confirm Section 1071 Tier 1 compliance readiness. If your small-business origination volume places you in Tier 1, your compliance date is July 1, 2026, nine weeks from this issue. The CFPB's planned narrowing via new rulemaking is not finalized and does not defer the current timeline, per the Consumer Financial Services Law Monitor.⁵ Verify your demographic-data-collection tooling, applicant-notice language, and reporting pipeline are operational.

3. Audit your state commercial-financing-disclosure compliance in the ten covered states. Disclosure requirements vary by state and by product type (closed-end, open-end, sales-based, factoring). The California DFPI's November 2025 consent order against an equipment-finance company is the reference point for enforcement tempo.⁴ If your platform has added products or expanded into new states since your last compliance review, rerun the disclosure-template review against the current state list.

_{Sources
1 Federal Register | Equal Credit Opportunity Act (Regulation B), Docket CFPB-2025-0039 (published Apr 22, 2026, effective Jul 21, 2026)
2 American Banker | CFPB finalizes new ECOA rule in major fair lending pivot (Apr 22, 2026)
3 Troutman Pepper Locke (Lori Sommerfield et al.) via JDSupra | CFPB Finalizes Regulation B Subpart A Rule Largely as Proposed (Apr 22, 2026)
4 Venable LLP | State Commercial Financing Disclosure Laws: Recent Developments and Compliance Considerations (Mar 2026)
5 Consumer Financial Services Law Monitor | CFPB Officially Extends Compliance Dates for Section 1071 Rule; New Rulemaking Expected Soon (Oct 2025)
6 Bloomberg Law | CA Businesses Will Face New Era of Financial Scrutiny in 2026
7 ABA Banking Journal | CFPB finalizes rule to revise fair lending enforcement (Apr 2026)
8 HousingWire | CFPB ECOA rule rejects effects test, changes SPCP rules (Apr 22, 2026)
9 PYMNTS | CFPB Final Rule on Credit Unchanged From Industry-Supported Proposal (Apr 22, 2026)
10 Consumer Financial Protection Bureau | Small Business Lending Rulemaking (Section 1071) resource page
11 American Bar Association | State Survey of the Standard Commercial Financing Disclosure Laws (Spring 2025)
12 National Mortgage News | CFPB finalizes new ECOA rule in major fair lending pivot (Apr 22, 2026)
13 California Department of Financial Protection and Innovation | official site
14 The Real Deal | Austin Investor Ari Rastegar Faces Foreclosure on Multifamily Asset (Nov 24, 2025); source for the Rastegar Capital item in Headlines You Don't Want to Miss}

BSA/AML compliance requires screening every applicant against Treasury sanctions lists, including the individuals behind the business.

Manual list checking doesn't scale past a handful of deals per week, and examiners want structured evidence on every one.

An OFAC screening API collapses that work into milliseconds. Match scores route automatically, responses log verbatim, and the compliance team has the exact evidence a regulator will ask for.

Want to see how the Cobalt OFAC API fits inside an alt-lender compliance stack? in our new resource page?

Read Blog or Schedule a FREE demo call

Direct lending funds raised approximately $10.7 billion in Q1 2026, the lowest quarterly total in three years and roughly 40% below the prior-year quarter, per Bloomberg's private-credit tracking. The reported drivers are tariff volatility, rate-path uncertainty, and institutional-investor capital-allocation pauses that have frozen new fund formation. For alt-lenders who rely on private-credit funds as co-lending counterparties, secondary-market buyers of participations, or warehouse alternates, the Q1 data is a funding-availability signal. Capital contraction at the fund layer does not stop origination at the platform level, but it changes pricing and terms on outbound participations and syndications. The read for direct balance-sheet alt-lenders: the competitive picture improves relative to leveraged private-credit GPs who are raising less this year, and the pricing on participation buyers tightens. Treat the Q1 number as the new floor, not a one-quarter dip, until Q2 fundraising data arrives in July.

Maine Governor Janet Mills signed LD 1901, the "Act to Regulate Shared Appreciation Agreements Relating to Residential Property," on April 13, 2026, making Maine the first state to reclassify home equity investment (HEI) contracts as residential mortgage loans, per Scotsman Guide and NCLC. The bill, sponsored by Rep. Arthur Bell (D-Yarmouth), imposes cost-disclosure requirements, mandatory housing-counseling and legal-representation provisions, restrictions on property-use clauses, and APR-equivalent annualized-cost disclosures for each year of the agreement based on a real-estate-appreciation index. NCLC has published a model law expected to inform similar bills in other states. The operational read for alt-lenders is not direct, because few commercial-lending platforms originate HEIs. The precedent matters because the legal mechanic, treating a product structured to look like equity as a loan for consumer-protection purposes, directly parallels the MCA recharacterization debate in state courts and regulators. If a state will reclassify HEI contracts as loans, the same analytical path runs to any alt-financing product marketed on a not-a-loan theory.

Commercial Loan Broker Association co-founders Terry Luker and Jeff Luker characterized recent SBA rule changes as "almost comical" in reporting from Mortgage Professional America. The central change: as of March 1, 2026, lawful permanent residents (green card holders) are no longer eligible for SBA 7(a) or 504 loans, with the program now requiring 100% US citizen or US-national ownership. Terry Luker stated "those changes have really affected SBA and have made it harder. It's now a longer process," per MPA. Expected effects include fewer SBA approvals, higher SBA borrowing costs where approvals clear, and tighter credit availability for immigrant-owned small businesses. The read for non-bank commercial lenders: the subset of immigrant-owned SMBs that previously qualified for SBA-backed financing is now in market for alternative capital. That expands the top-of-funnel pool for MCA providers, revenue-based financing platforms, and equipment-finance originators who do not condition eligibility on ownership citizenship. The tradeoff is higher expected-loss pricing to reflect the underlying profile of borrowers who just lost SBA optionality.

Accounts-receivable automation platform Monk announced a $25 million Series A on April 21, 2026, co-led by Footwork and Acrew Capital with continued participation from BTV, per PRNewswire and Axios. The round brings total funding to $29 million following a $4 million seed led by BTV in spring 2025. Co-founded by George Kurdin and Joe Zhou, the New York-headquartered company claims its platform delivers approximately 40% reduction in days sales outstanding, 25-plus hours per month saved for AR teams, and a 24% higher collections response rate on customer accounts. Named customers include AI-native companies ElevenLabs and Profound. The read for alt-lenders: receivables-automation tooling at this quality tier changes the underwriting signal for any lender that relies on AR aging and collections velocity as an underwriting input. For factoring companies, invoice-finance platforms, and RBF lenders, borrower-operated AR automation compresses the information asymmetry that previously justified factoring discount rates. For a factoring company, the practical consequence is that a borrower who can demonstrate AR automation at underwriting is structurally less risky than one who cannot, and pricing should reflect that; for RBF lenders, the AR-velocity data point becomes a direct input to the revenue-share calibration. Expect pricing compression on borrowers who can demonstrate AR automation in place at underwriting. The vendor-reported metrics are vendor-published and should be validated against independent data; treat as directional.

Austin-based Rastegar Property Company, LLC is facing foreclosure on multiple multifamily properties tied to a reported $22.7 million loan from Greystone, per The Real Deal. The reported properties include Hyde Park Square (48 units, 206 West 38th Street), Sunset Palms (36 units, 902 Romeria Drive), The Chateau (30 units, 1211 West 8th Street), and The Highlander (49 units, 803-809 Tirado Street). CEO Ari Rastegar stated the foreclosure is the result of "a knock-down, drag-out fight with the lender," a dispute he said he plans to continue litigating regardless of the outcome on the properties, per The Real Deal.¹⁴ Rastegar attributed the distress to Austin Class C multifamily market conditions, noting deliveries peaked in 2024 with roughly 26,715 units projected for 2025. No findings of fraud or wrongdoing have been reported in connection with the foreclosure; the underlying dispute is a contractual matter between borrower and lender. The operational read for alt-lenders with CRE-adjacent exposure: Austin's Class C multifamily segment is the current reference point for supply-driven distress, and any platform holding bridge or mezzanine exposure in markets with 2023 to 2025 delivery concentration should stress-test the portfolio against similar supply-delivery profiles. Sunbelt MSAs with comparable 2023-2025 delivery concentration warrant the same portfolio review; a platform's own supply-pipeline tracker is the appropriate source for that list.