Adverse Action Notices: What a Denial Letter Must Say
A creditor that denies credit must send an adverse action notice. Learn what ECOA and FCRA require it to state, and what the notice does not cover.
An adverse action notice is the document a creditor must send when it denies an application for credit, reduces an existing credit line, or offers terms that are worse than the terms the applicant requested. The notice is not a courtesy. It is a disclosure required by two federal statutes, and its contents are specified: the notice must identify the principal reasons for the decision and, when a consumer report contributed, must identify the reporting agency and explain the applicant’s rights to obtain and dispute that report.
The rules apply to creditors and to other entities that make credit decisions, but they do not apply to every denial a person encounters. A declined apartment application, a refused job offer, and a denied insurance policy are governed by different statutes or by none. The account below is limited to credit and the two statutes that govern adverse action notices for credit: the Equal Credit Opportunity Act (ECOA), 15 U.S.C. Sec. 1691(d), and its implementing regulation, Regulation B, 12 CFR 1002.9, together with the Fair Credit Reporting Act (FCRA), 15 U.S.C. Sec. 1681m.
The ECOA notice: timing and reasons
Under Regulation B, 12 CFR 1002.9(a)(1), a creditor must notify an applicant of adverse action within 30 days after receiving a completed application. The 30-day clock runs from the point the application is complete, not from the point it was submitted. If the creditor needs more information, it may treat the application as incomplete and must notify the applicant of that fact within the same period, under 12 CFR 1002.9(c).
A notification of adverse action must include a statement of the action taken, the creditor’s specific reasons for the action, and the applicant’s right to request the reasons if the creditor chooses to provide them only on request. Regulation B, 12 CFR 1002.9(a)(2), permits a creditor to give the reasons either in the notice itself or within 30 days after a request, but the notice must tell the applicant how to make that request and how long the creditor has to respond.
The reasons must be specific. Regulation B, 12 CFR 1002.9(b)(2), states that a creditor may not use vague terms such as “internal standards” or “policy” as the reason for adverse action. A notice that says only that the application did not meet internal criteria does not satisfy the rule. The reasons must relate to the applicant’s actual creditworthiness or the terms requested, such as the applicant’s credit history, income relative to obligations, or the absence of a sufficient credit record.
The FCRA notice: when a consumer report contributed
When a consumer report contributed to the adverse action, the FCRA adds a second layer of required disclosures. Under 15 U.S.C. Sec. 1681m(a), the notice must include:
- The name, address, and telephone number of the consumer reporting agency that furnished the report.
- A statement that the consumer reporting agency did not make the decision and cannot explain the specific reasons for it.
- A statement that the applicant has the right to obtain a free copy of the report from that agency if the applicant requests it within 60 days of receiving the notice.
- A statement that the applicant has the right to dispute the accuracy or completeness of any information in the report with the agency.
The 60-day free-copy window is set by 15 U.S.C. Sec. 1681j(b). The notice must also state that the applicant may dispute the information directly with the agency, not with the creditor. The FCRA does not require the creditor to correct the report; it requires the creditor to tell the applicant where the report came from and how to challenge it.
Where a credit score was used in the decision, 15 U.S.C. Sec. 1681m(a)(2) also requires the notice to disclose that numerical score and the related information described in 15 U.S.C. Sec. 1681g(f), including the key factors that adversely affected it.
What the notice must contain, by trigger
| Trigger | ECOA/Regulation B notice required | FCRA notice required | When the FCRA section does NOT apply |
|---|---|---|---|
| Application denied | Yes, within 30 days of a completed application | Yes, if a consumer report contributed | No consumer report was used, or the report played no part in the decision |
| Counteroffer with worse terms | Yes, unless the applicant accepts or uses the credit offered | Yes, if a consumer report contributed | The applicant accepts the counteroffer and no report was used |
| Existing account reduced or closed | Yes, unless the action relates to inactivity, default or delinquency on that account, which Regulation B excludes from adverse action | Yes, if a report contributed to the change | No report played a part in the change |
| Application approved as requested | No | No | Not applicable |
| Business credit application | ECOA applies to business credit with limited exceptions | FCRA may apply if a consumer report on an owner was used | The report was a business report, not a consumer report |
Reading the reasons against the report
The statement of specific reasons is useful only if it is read against the consumer report the creditor relied on. The notice identifies the reporting agency; the free report obtained within the 60-day window shows what the agency held at the time. A reason such as “delinquent past or present credit obligations” can be checked against the report’s account history. A reason such as “too many recent inquiries” can be checked against the inquiry section. If the report does not support the stated reason, the discrepancy is the point to examine, and it may indicate either an error in the report or a reason that was not the actual basis for the decision.
The FCRA dispute process, 15 U.S.C. Sec. 1681i, requires the agency to investigate a disputed item, generally within 30 days, and to delete information that cannot be verified. The dispute goes to the agency, not to the creditor. A creditor that furnished the information must also conduct its own investigation when the agency forwards the dispute, under 15 U.S.C. Sec. 1681s-2(b).
The mistake most often made: treating the notice as the end of the process
The common error is to read the denial letter as a verdict and stop there, without requesting the free report or comparing the stated reasons to it. The notice is designed to start a review, not to close one. The reasons are required to be specific precisely so that the applicant can check them.
The mistake happens for two reasons. First, the notice often arrives as a short letter that reads as final, and the FCRA disclosures are printed in small type below the decision. Second, many applicants do not know that the 60-day free-copy window exists or that the agency named in the notice is the one to contact. The result is that a report containing an error, or a reason that does not match the report, goes unchallenged. The notice itself supplies the agency name and the deadline; the step that is skipped is using them.
Who the rules do not cover
The ECOA and FCRA adverse action rules apply to creditors and to users of consumer reports in credit decisions. They do not govern every refusal a person experiences.
A landlord who declines a rental application is not making a credit decision under Regulation B, though a tenant screening report may trigger separate FCRA obligations under 15 U.S.C. Sec. 1681m. An employer who declines a job application is governed by the FCRA’s employment provisions, not by Regulation B. An insurer’s underwriting decision is governed by state insurance law and, in some cases, the FCRA, but not by the ECOA credit notice rule. Home solar financing works the same way, and readers comparing loan contracts for home solar systems can find plain-language guidance on reading quotes and terms at esolarenergynews.com.
The FDCPA, 15 U.S.C. Sec. 1692 et seq., governs third-party debt collectors and does not apply to a creditor collecting its own debt. It is not the statute behind an adverse action notice, and citing it in response to a denial letter misidentifies the obligation. The adverse action notice is an ECOA and FCRA document.
State law may add requirements. Some states impose their own notice rules for credit denials, and the content and timing can differ from the federal rule. The federal statutes set a floor; a state statute may require more. A person reviewing a notice should check the law of the state where the creditor is located or where the application was made.
When the stakes justify counsel
A denial that turns on a report error can usually be addressed through the FCRA dispute process. A pattern of denials with reasons that do not match the reports, or a denial that appears to rest on a prohibited basis such as race, sex, age, or receipt of public assistance, raises issues under the ECOA’s prohibition on discrimination, 15 U.S.C. Sec. 1691(a). Those are the circumstances in which the notice and the reports should be reviewed with a lawyer who handles consumer credit matters. The notice is a disclosure document; it is not legal advice, and it does not by itself establish that a violation occurred.
Common questions
How long does a creditor have to send an adverse action notice?
Under Regulation B, 12 CFR 1002.9(a)(1), a creditor must notify the applicant of adverse action within 30 days after receiving a completed application. If the application is incomplete, the creditor must notify the applicant of that fact within the same period under 12 CFR 1002.9(c). The 30 days runs from completion, not submission.
What must an adverse action notice say when a credit report was used?
Under 15 U.S.C. Sec. 1681m(a), the notice must name the consumer reporting agency, state that the agency did not make the decision, and tell the applicant of the right to a free copy of the report if requested within 60 days and the right to dispute the report's accuracy with the agency.
Can a denial letter just say 'internal standards'?
No. Regulation B, 12 CFR 1002.9(b)(2), prohibits vague reasons such as 'internal standards' or 'policy.' The notice must state the specific principal reasons for the decision, or tell the applicant how to request them and within what period the creditor will respond.
Does the FDCPA apply to a credit denial?
No. The FDCPA, 15 U.S.C. Sec. 1692 et seq., governs third-party debt collectors and generally does not apply to a creditor collecting its own debt. A credit denial is governed by the ECOA, 15 U.S.C. Sec. 1691(d), and Regulation B, 12 CFR 1002.9, plus the FCRA where a consumer report was used.
What can be done with the reasons in a denial letter?
The reasons can be checked against the consumer report named in the notice. A free copy is available from that agency if requested within 60 days under 15 U.S.C. Sec. 1681j(b). If the report does not support the stated reason, the discrepancy can be disputed with the agency under 15 U.S.C. Sec. 1681i.
Read next
- Bankruptcy Basics: Chapter 7, Chapter 13, and Limits Liquidation against reorganisation, the means test as the gate between them, and the debts that generally survive either. Exemptions are state law.
- Cease and Desist Debt Collector: What a Stop-Contact Letter Does Learn how a written cease and desist letter stops debt collector calls under 15 U.S.C. 1692c(c), what it doesn't do, and when it's the wrong move.
- Disputing a Credit Card Charge Under the FCBA The Fair Credit Billing Act, 15 U.S.C. Sec. 1666 and Regulation Z, sets the procedure for disputing a credit card charge. What counts, deadlines, and issuer duties.
- 50/30/20 Budget: How the Split Works and Where It Fails Learn the 50/30/20 budget rule: how the split works, what counts in each bucket, and why it fails for high-rent cities or irregular income. See alternatives.
- Being an Authorized User: What Actually Transfers What carries over and what does not, that the primary holder's behaviour now affects you, and that removal usually takes the history with it.