CFPB Action Against GreenSky: What Consumers Need to Know
How a federal enforcement action against GreenSky reshaped protections for consumers facing unauthorized point-of-sale loans.
The Consumer Financial Protection Bureau (CFPB) issued a major enforcement action against GreenSky, LLC, a financial technology company that facilitates point-of-sale loans, after finding that thousands of consumers were saddled with loans they never authorized. The case highlights serious risks in the rapidly growing market for home improvement and retail financing and underscores why robust consumer protections and oversight of fintech companies are essential.
Background: Who Is GreenSky and How Does Its Financing Work?
GreenSky is a fintech platform headquartered in Atlanta that partners with banks and merchants—such as home improvement contractors, medical providers, and other retailers—to offer loans to consumers at the point of sale. Instead of applying directly through a bank, consumers typically encounter GreenSky when a merchant offers financing as part of a project or purchase.
Key features of the GreenSky program include:
- Bank partnerships: GreenSky is not itself a bank; it provides technology and servicing support to banks that fund the loans.
- Merchant-driven applications: Merchants use GreenSky’s website or mobile tools to submit loan applications on behalf of consumers.
- Fast approvals: Credit decisions can be delivered in a very short time, enabling on-the-spot financing offers.
- Direct payment to merchants: Once a loan is approved and activated, GreenSky disburses proceeds directly to the merchant rather than to the consumer.
In theory, this structure can make it easier for consumers to finance major purchases like home repairs or renovations. But the CFPB found that weaknesses in GreenSky’s controls and merchant oversight opened the door to loans being issued in consumers’ names without their knowledge or consent.
What the CFPB Found: Unauthorized Loans and Weak Controls
The CFPB concluded that GreenSky engaged in unfair practices under the Consumer Financial Protection Act by originating and servicing loans that consumers had never authorized and by failing to design its program to prevent such abuses.
Core Problems Identified by the CFPB
- Processing unauthorized applications: GreenSky serviced loans for consumers who reported that they had not agreed to apply for credit and, in many cases, had never heard of GreenSky until they started receiving billing or collection notices.
- Large volume of complaints: Between 2014 and 2019, GreenSky received thousands of complaints from consumers claiming their information was used to apply for loans without permission; in a significant number of cases, the company’s own investigations found merchants at fault.
- Ineffective merchant oversight: The company relied heavily on merchants to obtain consumer consent, but it did not consistently verify that written authorization was obtained before funding loans.
- Incomplete documentation practices: Until at least 2019, GreenSky did not require consumers to sign and return loan documents before treating the loan as consummated, enabling merchants to move forward with little direct interaction with borrowers.
- Weak complaint management: The CFPB found deficiencies in GreenSky’s complaint-handling processes, which made it harder to identify patterns of abuse and respond effectively to affected consumers.
The Future of AI: Preventing a Big Tech Monopoly >
These problems, according to the CFPB, made it foreseeable that some merchants could exploit the system to obtain financing using consumers’ personal information without their explicit authorization, particularly in settings where consumers were seeking urgent or high-cost services such as home repairs.
How the GreenSky Program Created Risk for Unauthorized Loans
To understand why unauthorized loans became such a concern, it helps to look at how the program operated in practice and which structural elements increased the risk of misuse.
| Program Feature | Intended Benefit | Risk Identified by Regulators |
|---|---|---|
| Merchant-submitted applications | Faster process; consumer can apply during a sales or service visit | Merchant could submit applications using consumer data without clear proof of consent |
| No signed documents required to finalize loan (historically) | Streamlined experience; less paperwork | Loans could be treated as valid even if the consumer never reviewed or signed the agreement |
| Proceeds disbursed directly to merchants | Ensures funds are used for the intended project or purchase | Consumer might not realize a loan exists until billing begins, since they never handle the funds |
| Insufficient merchant training and oversight | Lower onboarding burden for participating businesses | Inconsistent practices, higher potential for misconduct or sloppy documentation |
| Weak complaint tracking and escalation | Reduced operational costs in the short term | Delayed detection of patterns indicating widespread unauthorized activity |
The CFPB determined that these combined factors made GreenSky’s practices unfair because consumers could not reasonably avoid being harmed by loans they never authorized, and the harm—such as unwanted debt, damage to credit, and time spent resolving disputes—was significant.
The CFPB’s Enforcement Order: Remedies and Requirements
Under its authority to address unfair, deceptive, or abusive acts or practices, the CFPB entered a consent order requiring GreenSky to provide monetary relief and implement structural reforms.
Financial Relief for Affected Consumers
- Refunds and loan cancellations: GreenSky must provide up to $9 million in cash refunds and loan cancellations for consumers whose accounts were impacted by unauthorized loan activity.
- Civil money penalty: The company must pay a $2.5 million civil penalty to the CFPB’s Civil Penalty Fund, which supports relief for harmed consumers in various enforcement matters.
Operational Changes Required by the Consent Order
The order also compels GreenSky to change how it originates and services loans, with the goal of preventing future unauthorized financing.
- Verification of consumer identity and authorization: Before activating a loan or disbursing proceeds, GreenSky must obtain evidence that the consumer whose name is on the application actually authorized the loan.
- Improved merchant oversight: GreenSky must strengthen controls over contractors and other participating merchants, including training, monitoring, and, when appropriate, disciplining or terminating merchants who fail to follow policies.
- Effective complaint management system: The company is required to implement a more robust complaint-handling program that can identify trends, escalate serious issues, and ensure that consumers receive timely resolutions.
- Consistent standards for illegal loan write-offs: GreenSky must adopt clear criteria for recognizing and writing off loans identified as unauthorized or otherwise illegal, so affected consumers are not held responsible for debts they did not incur.
Through these measures, the CFPB sought not only to remediate past harm but also to signal expectations for other fintechs and lenders operating in point-of-sale environments.
Broader Implications for Fintech and Point-of-Sale Financing
The GreenSky enforcement action fits into a larger pattern of scrutiny over point-of-sale credit products—ranging from traditional installment loans to newer “buy now, pay later” offerings—where consumers may not fully understand the nature of the debt they are taking on.
Key Lessons for the Fintech Industry
- Technology does not replace compliance: Fast, app-based lending can increase convenience, but it also increases the speed at which harm can spread if proper controls are not in place.
- Merchant partners are extensions of the lender: Regulators expect banks and fintech platforms to treat merchants and third parties as part of their own risk environment, with appropriate due diligence, training, and monitoring.
- Consent must be provable, not assumed: Systems that do not require clear consumer signatures or affirmative actions are more vulnerable to disputes over authorization.
- Complaint data is a critical early-warning tool: Thousands of similar complaints should trigger rapid review and structural changes, not slow, case-by-case handling.
Regulatory guidance has increasingly emphasized that financial institutions and service providers must maintain strong third-party risk management and vendor oversight programs, recognizing that customer harm often arises where governance is weakest.
What Consumers Can Do If They Suspect an Unauthorized Loan
While the GreenSky case is specific to one company, its core problem—consumers discovering debts they never knowingly agreed to—is not unique. Consumers can take a series of steps if they believe a loan or line of credit has been opened in their name without permission.
Immediate Actions
- Contact the lender or servicer in writing: Request documentation showing how and when you supposedly authorized the loan. Clearly state that you dispute the account as unauthorized.
- File a dispute with credit reporting agencies: If the loan appears on your credit reports, submit a written dispute to each major credit bureau, explaining that the account was opened without your consent.
- Monitor for identity theft: Consider placing a fraud alert or security freeze with credit bureaus, particularly if you suspect your personal information has been misused in other ways.
- Keep detailed records: Save copies of all letters, emails, and notes of phone calls, including dates and names of representatives with whom you spoke.
Escalation and Regulatory Help
- Submit a complaint to the CFPB: Consumers can file complaints about financial products or services directly with the CFPB, which forwards them to companies for response and uses the data to inform supervision and enforcement.
- Contact state regulators or attorney general offices: Many states have consumer protection agencies that can investigate patterns of unauthorized lending or deceptive practices.
- Seek legal advice where appropriate: In cases involving substantial financial harm, consumers may benefit from consulting attorneys experienced in consumer finance or identity theft matters.
Best Practices to Protect Yourself When Offered Point-of-Sale Financing
Consumers can reduce the risk of unwanted or misunderstood debt by taking a cautious, informed approach whenever a merchant offers financing on the spot.
- Insist on seeing all loan terms: Ask to review the full loan agreement, including interest rate, repayment schedule, fees, and any promotional terms, before agreeing to anything.
- Sign only what you understand: Do not provide electronic signatures, initials, or personal information on forms that you have not read carefully.
- Request copies immediately: Ask for copies of all loan documents—either printed or emailed—and save them for your records.
- Verify the lender’s name: Confirm which bank or finance company is issuing the loan and look them up independently; do not rely solely on the merchant’s description.
- Watch for pressure tactics: Be wary of contractors or salespeople who downplay the seriousness of taking on a loan or who rush you to apply without time to review terms.
- Monitor bills and credit: Regularly review your bank statements, loan statements, and credit reports so you can quickly spot and address unexpected accounts.
Frequently Asked Questions (FAQs)
Q1: Why did the CFPB take action against GreenSky?
The CFPB acted because it determined that GreenSky enabled merchants to obtain loans in consumers’ names without proper authorization and failed to implement adequate controls, merchant oversight, and complaint management to prevent and address these unauthorized loans.
Q2: How were consumers affected by the unauthorized loans?
Consumers reported receiving billing statements, collection calls, and negative credit impacts for loans they did not know about. In many cases, they never applied for financing or even heard of GreenSky until they were contacted for payment.
Q3: What kind of relief can impacted GreenSky customers receive?
Under the consent order, GreenSky must provide up to $9 million in relief through refunds and loan cancellations for consumers tied to unauthorized loans. The company also paid a $2.5 million civil penalty to the CFPB’s Civil Penalty Fund.
Q4: Does this case mean that all point-of-sale loans are risky or unlawful?
No. Point-of-sale financing can be lawful and beneficial when lenders and merchants obtain clear consumer consent, disclose terms, and maintain strong compliance controls. The GreenSky case shows what can go wrong when those safeguards are weak or missing.
Q5: How can I check whether a loan with GreenSky (or another lender) is legitimate?
Contact the lender directly using contact information from its official website, ask for copies of the loan documents and the original application, and verify that the personal information and signatures are genuinely yours. If you do not recognize the loan, dispute it in writing and consider notifying regulators.
References
- CFPB Takes Action Against Fintech Company GreenSky for Enabling Merchants to Secure Loans for Consumers Without Their Authorization — Consumer Financial Protection Bureau. 2021-07-12. https://www.consumerfinance.gov/about-us/newsroom/cfpb-takes-action-against-fintech-company-greensky-for-enabling-merchants-to-secure-loans-for-consumers-without-their-authorization/
- Consent Order: In the Matter of GreenSky, LLC — Consumer Financial Protection Bureau. 2021-07-12. https://files.consumerfinance.gov/f/documents/cfpb_greensky-llc_consent-order_2021-07.pdf
- CFPB announces consent order against fintech company engaged in origination and servicing of point-of-sale financing — Consumer Finance Monitor (Ballard Spahr). 2021-07-15. https://www.consumerfinancemonitor.com/2021/07/15/cfpb-announces-consent-order-against-fintech-company-engaged-in-origination-and-servicing-of-point-of-sale-financing/
- GreenSky Program Settlement — GreenSky, LLC. 2021. https://www.greensky.com/greenskyprogramsettlement
- Risk, Compliance & Vendor Management Mistakes that Cost in Fines — Ncontracts. 2021-08-04. https://www.ncontracts.com/nsight-blog/3-risk-compliance-vendor-management-mistakes
- GreenSky Illegal Lending Practices Lawsuit — Gibbs Law Group. 2022. https://www.classlawgroup.com/greensky-illegal-lending-practices-lawsuit
Similar Articles
Read full bio of Sneha Tete
