Auto Dealership Compliance: Rules, Regulators & Best Practices

Last reviewed: July 2026.

Auto finance compliance is not one rule. It is several federal statutes, two federal agencies with different reach, fifty sets of state law, and a long list of practices that will get a store in trouble regardless of which of those you are thinking about.

This is the working version: who regulates you, which rules actually apply, the practices to stay away from, and the process that keeps it consistent when the store gets busy.

Who regulates dealership F&I

Two federal agencies matter, and they do not have the same reach.

The FTC has broad jurisdiction over dealers, whether or not you arrange financing. It enforces the FTC Act’s prohibition on unfair and deceptive practices along with specific rules like the Used Car Rule. Historically its dealer actions have centred on advertised pricing, undisclosed fees, misrepresenting vehicle condition, and failing to honour warranty commitments.

The CFPB’s jurisdiction over dealers is narrower. Created under the Dodd-Frank Act, it reaches dealers who offer or arrange financing, and it has focused on discriminatory pricing in indirect auto lending and on how add-on products — service contracts, GAP and similar — are priced, disclosed and financed.

The practical consequence: a store with no financing operation is still fully exposed to the FTC. And if you do arrange financing, you are answerable to both, on overlapping conduct, plus your state attorney general under state consumer-protection law. That is why a single deal can attract more than one action.

The core federal rules

Truth in Lending Act (TILA)

Requires disclosure of credit terms and costs. Borrowers get a written disclosure covering the APR, the finance charge and the total amount financed. Practically: your disclosures need to be accurate, complete, and consistent with what the customer was told verbally.

Fair Credit Reporting Act (FCRA)

Governs how credit information is collected, used and shared. The obligation dealers most often trip over is permissible purpose and consent — you need authorisation before pulling a credit report, and you need a defensible reason for pulling it.

Equal Credit Opportunity Act (ECOA)

Prohibits discrimination on race, colour, religion, national origin, sex, marital status, age, and other protected characteristics. Credit decisions must rest on creditworthiness, not on any prohibited factor. This is where disparate-impact exposure lives — a practice can be neutral on its face and still create a problem in the numbers.

And the ones with their own guides

Two more carry enough detail to be worth reading separately: the FTC Used Car Rule and Buyers Guide requirements, and the overlapping UDAP and UDAAP standards that sit underneath most enforcement actions. The FTC Safeguards Rule covers your obligation to protect customer data.

21 practices to stay away from

These are the ones that come up repeatedly. Some are unethical, some breach your lender agreements, and several are crimes. Grouped by where they happen:

Documents and signatures

• Blank signed documents. Never obtain a signature with terms to be filled in later.
• Completing documents after the fact. Every document must be complete before the customer signs it.
• Forgery. Signing a customer’s name is a crime, without qualification.
• “Signature on file.” Not acceptable. Applicable documents need the customer’s actual signature.
• Missing enrollment forms. Every purchased product needs a signed enrollment form — it is the evidence of consent.
• Photocopying military ID. A direct violation of federal statute.

Pricing and payment

• Payment packing. Quoting a payment above what the purchase actually requires.
• Menu manipulation. Adjusting fees or trade allowances to inflate the base payment so products look cheaper by comparison.
• Front-end improvement. Raising an agreed vehicle price after the fact.
• Inconsistent product pricing. The price on the menu and the price on the contract must match. Uniformity across forms is what creates a defensible paper trail.
• Scooping rebates. Not disclosing a consumer rebate as a reduction to the amount financed and absorbing it as profit.

Product practices

• Product stuffing. Including a product in the amount financed without the customer’s knowledge or consent.
• Undisclosed voluntary protection products in a quote. Salespeople should not fold ancillary products into a price quote; that belongs with the F&I manager, presented as optional.
• Trading rate for product. Once the APR is agreed, it cannot be reduced to facilitate a product sale.

Funding and lender integrity

• Power booking. Reporting options the vehicle does not have to inflate its value to a finance source.
• Straw purchases. Falsifying who is actually buying and driving the vehicle.
• Shotgunning. Signing or cosigning multiple vehicles without the finance source’s knowledge.
• Cash back to the customer. Commonly breaches dealer-lender agreements and can constitute bank fraud.
• Credit card down payments. May violate your lender agreements — check the terms before accepting one.

Delivery

• Yo-yo transactions. Spot-delivering deals a lender is unlikely to buy, then recontracting the customer on worse terms.
• Kicking the trade. Asking a customer to return a trade after funding by blaming a high prior loan balance.

A useful test for any of these: would you be comfortable if the customer watched you do it, or if a regulator read the deal jacket cold? If not, it does not belong in your process.

Building a process that holds up

Compliance fails at the busy times, not the quiet ones, which means it has to be structural rather than dependent on somebody remembering.

• Audit deal jackets monthly — random sample, not just the ones that got flagged. Check completeness, signatures, and menu-to-contract price consistency.
• Review advertising against the FTC’s standard. Advertised price should equal what a customer can actually buy at, excluding only government charges.
• Run a fair-lending look at your own numbers. Compare APR markup and product penetration across demographics. If there is a pattern, you want to find it before someone else does.
• Train continuously, with real examples. A once-a-year session does not change behaviour on a busy Saturday.
• Keep documentation policy strict. Retain deal jackets, and never destroy or alter documents — the appearance of concealment is its own problem.
• Standardise disclosure language so every manager presents the same way, every time.

Compliance and profitability are the same conversation

The framing that gets this wrong is treating compliance as the cost of avoiding fines. The stores that do it well find the opposite: a transparent, consistent, well-documented process produces higher product penetration, not lower. Customers agree to things they understand, and they keep them.

Sloppy process costs twice — once in regulatory exposure, and again in the cancellations, chargebacks and CSI damage that follow a customer feeling they were handled badly. Clean process is the cheaper way to run a finance office, and it is also the more profitable one.

If you want your team trained on this properly, or an outside read on your current process, get in touch.

This article is general information for dealers, not legal advice. Federal rules change and state law varies significantly — confirm your obligations with counsel licensed in your state.

Related guides

• Menu presentation — consistent full disclosure is where compliance and performance are the same thing
• The F&I product menu — what you are disclosing in the first place
• F&I performance — why clean process outperforms sloppy process on penetration, not just on risk