Regulation Z does not punish buy-here-pay-here (BHPH) dealers for the interest rate they charge. It punishes them for what got left out of the APR and finance-charge calculation. In one CFPB case, a dealer paid $700,000 in restitution after a $1,650 warranty and a $100 GPS device never made it into the disclosed APR.
Key insight
Compliance risk doesn't live in the contract rate. It lives in the F&I menu.
What Regulation Z actually requires
The Truth in Lending Act (TILA), passed in 1968, exists so a consumer can comparison-shop credit the same way they’d comparison-shop price. It’s implemented through Regulation Z, codified at 12 CFR Part 1026. For closed-end vehicle financing, it requires standardized disclosure of the credit terms that actually determine what the loan costs: the APR, the finance charge, the amount financed, and the payment schedule.
The part that trips up BHPH dealers isn’t the disclosure format. It’s the definition of “finance charge.” Under Reg Z, a finance charge is any cost imposed as an incident to, or a condition of, the extension of credit, not just the interest rate typed onto the retail installment contract. If a warranty, a service contract, a GPS tracker, or a starter-interrupt device is effectively required to get financed (or priced differently for a credit customer than a cash customer), that cost belongs in the finance charge and the APR math. Leave it out, and the disclosed APR understates the true cost of the loan, which is exactly the kind of gap TILA was written to close.
This matters more at BHPH stores than at a typical new-car franchise, because the dealer is usually the creditor of record. There’s no third-party bank underwriting the paper and re-checking the disclosure before it gets sold off. The dealer’s F&I desk is the only compliance check the deal gets.
What the CFPB has actually enforced
The Consumer Financial Protection Bureau’s action against Y King S Corp., doing business as Herbies Auto Sales, a Colorado BHPH dealer, is the clearest public example of how this plays out in practice. According to the CFPB’s own account of the case, the dealer advertised a 9.99% APR without folding in a $1,650 repair warranty and a $100 GPS payment-reminder device, both effectively required as part of the deal. Those costs never showed up as finance charges in the marketing or in the TILA disclosures the buyer signed, so the advertised rate understated what customers actually paid to finance the car.
The case also surfaced a second mechanism, one that’s easy to miss because it doesn’t look like a finance charge at all: Herbies negotiated the vehicle price down for cash buyers but not for finance buyers. The price differential between what a cash customer paid and what a credit customer paid for the identical car functioned as an undisclosed finance charge, because the only reason the finance customer paid more was the financing itself.
The consent order required $700,000 in restitution to affected consumers, with a $100,000 civil penalty suspended contingent on paying that restitution. It also required the dealer to post prices and provide financing terms to customers before extending credit.
Say your store finances an $18,000 vehicle over 48 months and the contract rate reads 9.99%. If a required warranty and a starter-interrupt device add another $1,500 to $2,000 that never gets folded into the finance charge, the true APR the buyer is actually paying can run meaningfully higher than the number on the disclosure, sometimes by more than a full percentage point, depending on loan size and term. That gap between quoted and actual APR is precisely what a CFPB exam is built to find.
Why the excluded add-ons are the real exposure, not the rate
Most BHPH dealers get the interest-rate math right. Loan software calculates amortization correctly; nobody’s typing a fake APR into the contract. The exposure sits one layer up, in how the F&I menu gets built and whether the APR gets recalculated after it’s finalized.
A typical deal moves through several people and a few different systems before it’s funded: sales negotiates the vehicle price, F&I sells the warranty and any add-on products, and someone (sometimes a different person entirely) runs the payment and prints the TILA disclosure. If the add-on products get treated as separate line items on the buyer’s order form rather than inputs to the finance-charge calculation, the disclosed APR was computed before the deal was actually finished. Nobody re-ran it. That’s not fraud in most cases; it’s a workflow gap between the sales desk and the disclosure document, and it’s the kind of gap that shows up cleanly in a regulator’s file review because the source documents (the buyer’s order, the warranty contract, the GPS install invoice) don’t match what’s on the TILA disclosure.
Ancillary products the CFPB has flagged in BHPH enforcement follow a consistent shape: extended warranties, GPS/payment-reminder devices, starter-interrupt devices, and any other cost that’s functionally required to get financed even if it’s labeled optional on paper. If a customer can’t get approved without it, or if declining it changes the deal terms, it belongs in the finance-charge math.
Who enforces Regulation Z today
Rulemaking and enforcement authority for Regulation Z moved from the Federal Reserve to the CFPB in 2011, following the Dodd-Frank Act. The CFPB is now the primary federal regulator examining BHPH lenders for TILA compliance, and it has shown a specific pattern of interest in exactly this add-on-versus-finance-charge gap rather than in contract-rate accuracy. State attorneys general and private TILA litigation (which carries statutory damages and attorney’s fee exposure) add further layers of risk beyond a CFPB exam.
Building the check into your deal jacket
The practical fix isn’t a new disclosure template. It’s a review step that catches the gap before the deal funds:
- Confirm every product on the F&I menu that's functionally required (not truly optional) is reflected in the finance-charge calculation, not treated as a separate add-on line.
- Check whether cash-customer and finance-customer pricing differ for the same vehicle. If they do, that differential needs to be disclosed as a finance charge, not absorbed into "negotiated price."
- Recalculate the APR after the F&I menu is finalized, not just at the initial payment quote, since add-ons are frequently sold after the base deal is structured.
- Treat this as a deal-jacket completeness check, the same category of review that catches a missing signature or an unnotarized affidavit before it becomes a DMV rejection or, worse, a compliance exam finding.
This is the same discipline covered in our deal jacket audit compliance checklist and it sits inside the broader compliance picture in the auto dealer compliance stack guide. If your F&I desk is also running Red Flags Rule identity checks on the same deals, that verification step and the TILA math tend to break down together when volume spikes, which is worth reading alongside our piece on the Red Flags Rule and F&I identity theft checks. And since the FTC’s Used Car Rule Buyers Guide governs a related but separate disclosure obligation on the same transaction, it’s worth reviewing the FTC Used Car Rule requirements as a companion check, not a substitute.
FAQ
What does TILA require in vehicle financing?
TILA, implemented through Regulation Z, requires standardized disclosure of credit terms, including APR, finance charge, amount financed, and payment schedule, so consumers can compare credit offers across lenders and dealers. The disclosure has to reflect every cost that’s functionally required to get the credit, not just the stated interest rate.
What has the CFPB actually enforced against BHPH dealers?
The most publicly documented case, the CFPB’s action against Herbies Auto Sales, targeted a dealer for excluding a required warranty and a GPS payment-reminder device from its APR and finance-charge disclosure, along with a price differential between cash and finance customers that functioned as a hidden finance charge. The case resulted in $700,000 in consumer restitution.
Who enforces Regulation Z today?
Rulemaking and enforcement authority moved from the Federal Reserve to the CFPB in 2011 under the Dodd-Frank Act. The CFPB now examines BHPH lenders directly, alongside potential state attorney general actions and private TILA litigation.
If your deal jacket process relies on manual cross-checks between the F&I menu and the TILA disclosure, that’s exactly the kind of gap an AI coworker can flag automatically before a deal funds, by comparing every add-on line against what actually made it into the finance-charge calculation.
This article summarizes public information for operations teams and is not legal advice. Requirements change; always confirm with the linked official state source or your compliance counsel.