On March 11, the Federal Trade Commission (FTC) issued a new Advance Notice of Proposed Rulemaking (ANPRM) to revisit its Rule Concerning the Use of Prenotification Negative Option Plans. The move follows the Eighth Circuit’s 2025 decision vacating the FTC’s 2024 amendments (discussed here), which would have imposed uniform requirements on subscriptions, auto‑renewals, and trial‑to‑pay offers across all marketing channels. The ANPRM makes clear that while the FTC acknowledges that so-called negative options are widely offered and can provide benefits to both sellers and consumers, the FTC intends to address recurring billing and cancellation frictions that continue to generate a high volume of consumer complaints.

The U.S. Department of the Treasury (Treasury) has delivered to Congress the report on Innovative Technologies to Counter Illicit Finance Involving Digital Assets, as required by the Guiding and Establishing National Innovation for U.S. Stablecoins (GENIUS) Act. The report largely reflects the comments Treasury received about how financial institutions (including digital asset service providers (DASPs)) use technologies such as artificial intelligence (AI), digital identity, blockchain analytics, and application programming interfaces (APIs) to detect and disrupt illicit finance involving digital assets, including payment stablecoins. The report highlights many of the challenges and frustrations that institutions are experiencing in trying to adopt these emerging technologies, and promises additional guidance in the future.

In continuation of increased state efforts to regulate state-chartered banks and fintech partnerships,Oregon’s newly enrolled House Bill (HB) 4116 would enact an express “opt‑out” from a key provision of the Depository Institutions Deregulation and Monetary Control Act of 1980 (DIDMCA) for consumer finance loans made in Oregon. HB 4116 also updates licensing requirements and clarifies when Oregon law applies to remote and online loans. This Oregon development comes on the heels of the Tenth Circuit’s decision in Weiser upholding Colorado’s DIDMCA opt-out and holding that a loan is “made in such State” if either the borrower or lender is located in the opt-out state as discussed here. A petition for rehearing en banc has been filed in Weiser, and it remains unsettled where a loan is “made” for purposes of DIDMCA.

Payward Financial’s Wyoming Special Purpose Depository Institution (SPDI), Kraken Financial, has received a master account from the Federal Reserve Bank of Kansas City, giving it direct access to the Federal Reserve’s core payment infrastructure. The approval, initially for a one-year term, allows Kraken Financial to connect directly to Fedwire and other Fed payment rails, a capability traditionally limited to insured financial institutions. As a general matter, digital assets, fintech and other firms that are not FDIC-insured have generally depended on correspondent banking relationships to move fiat funds over these payment rails.

According to a recent report by WebRecon, court filings under the Fair Credit Reporting Act (FCRA), Fair Debt Collection Practices Act (FDCPA), and Telephone Consumer Protection Act (TCPA), as well as complaints filed with the Consumer Financial Protection Bureau (CFPB) were all up compared to January 2025. Compared to December 2025, however, the results are mixed. 

2025 was another consequential year in the consumer finance industry. On the federal level, President Donald Trump started his second term in January 2025 and since then has led an unprecedented rollback of federal agency oversight, impacting everything from the Consumer Financial Protection Bureau to the Federal Trade Commission. State legislatures, regulators, and attorneys general moved quickly to fill the resulting void.

In Bradford v. Sovereign Pest Control of Texas, Inc., the U.S. Court of Appeals for the Fifth Circuit held that the Telephone Consumer Protection Act (TCPA) does not require “prior express written consent” for telemarketing calls that use artificial or pre-recorded voice messages. Instead, the court concluded that the TCPA requires only “prior express consent,” which may be provided orally or in writing.

On February 23, the New York Department of Financial Services (DFS) issued a proposed new Part 423 to Title 3 of the NYCRR to implement New York Banking Law Article 14‑B for Buy-Now-Pay-Later (BNPL) lenders. The proposal would move BNPL firmly into New York’s credit system, imposing licensing, supervision, disclosure, data privacy, and underwriting requirements on both interest‑free and interest‑bearing BNPL products offered to New York consumers. If adopted, the rule would take effect 180 days after the notice of adoption is published in the State Register, with a short transitional period for existing BNPL providers. DFS is accepting pre-proposal comments through March 5, 2026, after which the proposed rule will be published in the New York state register for a formal 60-day comment period.