How the CFPB Section 1071 MCA Exclusion Reshapes Bank Verification Compliance for Funders

The CFPB Just Confirmed MCAs Are on Their Own

The Consumer Financial Protection Bureau recently published its annual Fair Lending Report, and one detail stands out for every funder in the merchant cash advance space: MCAs remain excluded from Section 1071 reporting requirements. The final rule, issued on May 1, 2026, narrows the scope of "covered credit transactions" and leaves merchant cash advances outside the perimeter of federal small business lending data collection.

For MCA funders, this is not a free pass. It is a signal that no federal framework will define what good underwriting looks like for your deals. The burden of proof falls entirely on you. When a securitization partner asks how you verified a merchant's cash flow, when a state regulator audits your portfolio, when a bankruptcy court questions whether your advance was responsible, the answer has to come from your own records. Bank verification software for funders is now the frontline compliance tool, not because a regulation requires it, but because every stakeholder except the CFPB is demanding it.

This article breaks down what the Section 1071 exclusion actually means, why the compliance pressure is intensifying from other directions, and how async bank verification creates the audit trail funders need to operate confidently in a self-regulated environment.

What the Section 1071 Exclusion Actually Changes

No Federal Data Mandate Does Not Mean No Accountability

Section 1071 of the Dodd-Frank Act requires covered lenders to collect and report demographic and decision data on small business credit applications. The intent is to surface patterns of discrimination and ensure fair access to capital. When the CFPB finalized its rule in 2026, it explicitly limited "covered credit transactions" to products that meet the legal definition of credit. Merchant cash advances, structured as purchases of future receivables rather than loans, fall outside that definition.

This exclusion removes one layer of federal oversight. MCA funders will not need to report application demographics, approval rates, or pricing data to the CFPB. But the absence of a federal mandate does not eliminate the need for documentation. It simply means funders must build their own compliance infrastructure without a regulatory template to follow.

The practical effect is that MCA funders who already invested in robust verification workflows gain a competitive advantage. Those who relied on the assumption that light regulation meant light documentation are increasingly exposed.

Investor Scrutiny Is Filling the Regulatory Gap

The most immediate pressure is coming from capital markets. Securitization volume in the MCA space has surged, with deals like OnDeck's $500M securitization setting new benchmarks for what institutional investors expect from originators. Rating agencies and bond buyers want to see standardized underwriting documentation. They want to know how each merchant's cash flow was verified, what evidence supports the funding decision, and whether that evidence is auditable.

Without Section 1071 reporting as a baseline, investors are imposing their own requirements. Funders that can produce timestamped screen recordings of live banking sessions, complete with activity logs showing when links were opened and recordings submitted, meet these requirements with minimal friction. Funders that rely on phone-based verification or emailed screenshots face increasingly skeptical due diligence teams.

State Regulation Is Intensifying Independent of Federal Rules

While the CFPB stepped back, states have stepped forward. New York, California, Connecticut, Virginia, and Vermont have all introduced or enacted commercial financing disclosure requirements that directly affect MCA funders. Virginia alone has 229 registered MCA providers navigating state-level compliance obligations.

These state frameworks do not prescribe specific bank verification methods, but they create documentation expectations that funders must meet. If a state examiner asks how you determined a merchant could afford your advance, your answer needs to be backed by evidence. A recorded banking session showing real-time account balances, transaction history, and deposit patterns provides that evidence in a format that is nearly impossible to dispute.

Why Self-Regulated Verification Matters More Than Ever

Litigation Risk Without Federal Cover

The Section 1071 exclusion has an unintended consequence for MCA funders navigating legal disputes. When a product falls under federal reporting requirements, the existence of standardized data can actually help defend underwriting decisions. Funders can point to compliance with established frameworks. Without that framework, every underwriting decision is judged on its own merits, and the quality of your documentation becomes the determining factor.

Bankruptcy courts have already shown willingness to scrutinize MCA funding decisions. In cases where merchants allege that advances were unaffordable, the funder's ability to demonstrate pre-funding cash flow verification directly affects the outcome. As we explored in our analysis of True Food Kitchen's $2.2M MCA bankruptcy, the absence of thorough pre-funding verification creates legal exposure that no contract clause can fully mitigate.

Async Verification as Compliance Infrastructure

Building a compliance infrastructure that satisfies investors, state regulators, and litigation defense does not require a massive technology overhaul. It requires a systematic approach to capturing verifiable evidence of each funding decision's foundation.

Exact Balance provides this infrastructure through asynchronous bank verification. Instead of scheduling live calls across time zones, funders send applicants a secure link. The applicant records their banking portal at their convenience, guided by an AI coach that ensures all required information is captured. The recording is encrypted, timestamped, and stored with a complete activity log. Every step, from link delivery to recording submission, is tracked and auditable.

This workflow produces documentation that meets the highest standard any stakeholder might demand: visual evidence of a live banking session, captured in real time, with metadata proving authenticity. Whether a securitization partner, a state examiner, or a judge asks to see your verification process, you have a recording to show them.

The Cost of Doing Nothing

Some funders may interpret the Section 1071 exclusion as permission to maintain minimal documentation standards. This is a strategic miscalculation. The MCA industry's growth in 2026 has attracted attention from institutional investors, state legislators, and media outlets. Each of these audiences expects professionalism and transparency. Funders that cannot demonstrate rigorous verification practices will find themselves excluded from the capital markets, restricted by state regulators, and vulnerable in court.

The cost of implementing bank verification software is measured in hundreds of dollars per month. The cost of a failed securitization due diligence, a state enforcement action, or an adverse court ruling is measured in millions.

Building a Verification Workflow for a Self-Regulated Industry

The practical question for MCA funders is not whether to invest in verification infrastructure, but how to build a workflow that scales with deal volume while producing audit-ready documentation.

Start with the verification request itself. Exact Balance lets underwriters specify exactly what an applicant needs to show: account summaries, specific date ranges, transaction details, deposit patterns. This eliminates the ambiguity that plagues phone-based verification, where the quality of the session depends on the underwriter's ability to direct the applicant in real time.

Next, consider the applicant experience. Browser-based screen recording requires no software installation. Applicants receive a branded email with clear instructions and a secure link. The AI-guided recording coach walks them through each step, verifying completion in real time. This reduces abandoned verifications and ensures consistent data capture regardless of the applicant's technical sophistication.

Finally, build the review and audit layer. Every recording in Exact Balance is accessible from a centralized dashboard. Underwriters can filter by status, review recordings at their own pace, and mark verifications as complete with a single click. The activity log provides a full audit trail: when the link was sent, when it was opened, when the recording started, and when it was submitted. This metadata is as valuable as the recording itself for compliance purposes.

The result is a verification workflow that operates asynchronously, scales with volume, and produces documentation that satisfies the most demanding stakeholders in the industry.

Frequently Asked Questions

Does Section 1071 affect merchant cash advance funders?

No. The CFPB's final Section 1071 rule, issued in May 2026, excludes merchant cash advances from its small business lending data collection requirements. MCAs are structured as purchases of future receivables rather than credit products, placing them outside the rule's scope. However, this exclusion does not eliminate compliance obligations from state regulators, investors, or litigation risk. Funders should maintain robust verification documentation regardless of the federal exemption.

Why do MCA funders need bank verification software if there's no federal regulation requiring it?

Federal regulation is only one source of compliance pressure. Securitization investors require standardized underwriting documentation before purchasing MCA portfolios. State regulators in New York, California, Connecticut, and Virginia have enacted commercial financing disclosure requirements. Bankruptcy courts scrutinize pre-funding verification when merchants allege unaffordable advances. Bank verification software provides the timestamped, auditable evidence that satisfies all of these stakeholders simultaneously.

How does async bank verification compare to live verification calls for compliance purposes?

Async bank verification produces stronger compliance documentation than live calls. A recorded banking session is timestamped, stored securely, and reviewable at any time. Live calls depend on the underwriter's notes and memory. Async recordings also eliminate scheduling delays, reduce the risk of human error during the session, and create a visual record that is nearly impossible to dispute in legal or regulatory proceedings. Platforms like Exact Balance add AI-guided coaching to ensure consistent data capture across every session.

What do securitization investors look for in MCA underwriting documentation?

Institutional investors evaluating MCA portfolios want to see evidence that each funding decision was based on verified cash flow data. This includes bank account balances, deposit patterns, transaction history, and evidence that the verification was conducted on a live banking portal rather than static documents. Timestamped screen recordings with activity metadata provide the strongest form of this evidence, as they demonstrate both the content of the verification and the process by which it was captured.

Conclusion

The CFPB's decision to exclude MCAs from Section 1071 reporting does not reduce the compliance burden on MCA funders. It shifts ownership of that burden entirely onto the funders themselves. Investors, state regulators, and courts are all demanding documentation that proves underwriting rigor. The funders who thrive in this environment will be the ones who build verification infrastructure now, before the next audit, the next securitization review, or the next legal challenge forces them to produce evidence they do not have.

Exact Balance gives MCA funders the async bank verification workflow that produces audit-ready documentation at scale. Visit exactbalance.ca to see how screen-recorded banking sessions, AI-guided applicant coaching, and full activity tracking fit into your compliance strategy.