A CFLL license in California, more precisely the California Financing Law license, is the authorization the Department of Financial Protection and Innovation (DFPI) issues to anyone who makes, brokers, or services loans in the state. You apply through the Nationwide Multistate Licensing System (NMLS), pay a few hundred dollars in government fees, post a surety bond, meet a minimum net worth, and clear background checks on your control persons. Processing usually takes about 90 days. Skipping the license is expensive: willful violations of the California Financing Law can void the loan contract outright, wiping out the lender’s right to collect principal or interest.
Who Needs a CFLL
California Financial Code Section 22100 is blunt: no person may engage in the business of a finance lender or broker without a license from the DFPI commissioner.1Justia. California Financial Code Section 22100-22112 “Person” covers individuals, corporations, LLCs, partnerships, and any other entity. The law reaches three activities:
- Making loans, including unsecured personal loans, installment loans, and small business financing.
- Brokering loans, meaning connecting borrowers with lenders for a fee even if you never fund the loan.
- Servicing loans, such as collecting payments, managing escrow, or handling modifications on loans someone else originated.
Fintech companies sometimes assume a partnership with a licensed bank removes the need for a license. If you control loan terms, underwriting criteria, or funding decisions, the DFPI may treat you as the actual lender. Peer-to-peer platforms that go beyond passive matchmaking face the same scrutiny.
A boundary worth flagging: the CFLL is not the only lending license California issues. Mortgage bankers whose primary business is originating and servicing consumer mortgages typically need a separate California Residential Mortgage Lending Act license through the DFPI, and mortgage brokers may instead be licensed through the Department of Real Estate.2Cornell Law School. Cal. Code Regs. Tit. 10, 1422 – Application for License Under the California Financing Law Some businesses need more than one.
Who Is Exempt
Financial Code Section 22050 exempts several categories of organizations already regulated elsewhere:3California Legislative Information. California Financial Code 22050
- Federally regulated depository institutions, including banks, credit unions, and savings and loan associations.
- Broker-dealers operating under a certificate issued by the DFPI under the Corporate Securities Law.
- Colleges and universities making loans to help students pursue degree or certificate programs.
- Public entities, provided they comply with applicable federal and state law.
- Licensed pawnbrokers acting under the authority of their pawnbroker license.
Two commercial-lending carve-outs matter for businesses that occasionally extend credit to other businesses. Anyone who makes no more than one commercial loan in a 12-month period is exempt entirely.4California Legislative Information. California Financial Code 22050.5 A person who makes five or fewer commercial loans in a 12-month period is also exempt if those loans are incidental to their primary business.3California Legislative Information. California Financial Code 22050 A commercial loan means at least $5,000 in principal (or any open-end credit line) where the borrower intends the proceeds primarily for business use.
The word “incidental” is where people go wrong. If lending is a regular revenue stream, five loans a year likely does not qualify as incidental, even if the count stays under six. These exemptions are for companies whose core business is something else and who occasionally extend credit to a vendor or partner.
A 501(c)(3) nonprofit that facilitates zero-interest or low-cost loans can apply for an exemption, but the process is not automatic. The organization files an exemption application with the DFPI, pays an administrative fee, and submits an annual report by March 15 detailing the loans it facilitated.5California Legislative Information. California Financial Code 22066 No broker’s fee can be paid in connection with any loan the organization facilitates, and none of the organization’s net earnings can benefit a private individual.
How to Apply for a CFLL
Every application runs through NMLS. You file an NMLS Company Form (MU1) and upload supporting documents electronically. The DFPI generally processes complete filings in about 90 days. If the DFPI sends you a deficiency notice and you fail to respond within 90 days, the application is treated as withdrawn.6Conference of State Bank Supervisors. California Statutes – California Finance Law
Application Fees
The government fees are modest. The DFPI charges a $200 nonrefundable application fee and a $100 nonrefundable investigation fee, plus fingerprint and criminal history costs.7Department of Financial Protection and Innovation. DFPI Index of Fees, Fines and Penalties NMLS charges its own processing fees on top of that. The total government outlay is typically well under $1,000, but plan for the cost of preparing financial statements, the surety bond premium, and legal counsel for your compliance program.
Net Worth
Most applicants must maintain a minimum net worth of $25,000 at all times. Companies that employ mortgage loan originators must maintain at least $250,000.8California Code of Regulations. Cal. Code Regs. Tit. 10, 1422.5 These are ongoing thresholds, not application-day snapshots, and the financial statements you submit must be prepared under generally accepted accounting principles.
Surety Bond
Every licensee posts a surety bond of at least $25,000. If you originate residential mortgage loans, the bond scales with your prior-year origination volume, up to $200,000 for lenders originating more than $500 million.9Department of Financial Protection and Innovation. Requirements After a Finance Lenders License Has Been Issued If you do not touch residential mortgages, the bond stays at $25,000 regardless of how much you lend.
Background Checks
Fingerprints and criminal history disclosures are mandatory for every control person, meaning officers, directors, general partners, and anyone owning or controlling 10% or more of the company.8California Code of Regulations. Cal. Code Regs. Tit. 10, 1422.5 Each physical office must have a designated person in charge who also undergoes a background check, and one person cannot manage multiple locations. Your main office must have a responsible officer or compliance person who acts as the DFPI’s primary contact.
What Can Get an Application Denied
The DFPI can deny an application after notice and an opportunity to be heard. The recurring grounds involve honesty on the application, criminal history, and prior regulatory trouble:6Conference of State Bank Supervisors. California Statutes – California Finance Law
- False statements or material misrepresentations, including omitting prior infractions or criminal history.
- A conviction, nolo contendere plea, or act involving dishonesty, fraud, or deceit within the past 10 years, if substantially related to the lending business.
- Prior violations of the CFL or any similar regulatory scheme in California or elsewhere, with no lookback limit.
- Employing a mortgage loan originator who is not licensed or has not initiated a license application.
The 10-year window applies to criminal and dishonest conduct. Regulatory violations carry no time limit, so a license revocation from decades ago in another state can still surface as a reason to deny.
Rate Limits on Consumer Loans
A CFLL license does not let you charge whatever the market will bear. For consumer loans with a principal of at least $2,500 but less than $10,000, the maximum rate is 36% annual simple interest plus the prevailing Federal Funds Rate.10Department of Financial Protection and Innovation. New Requirements for Licensees Making Consumer Loans of $2,500 to $10,000 California Financing Law The Federal Funds Rate used is the one in the Federal Reserve’s H.15 Statistical Release as of the first day of the month before the loan closes. Commercial loans between $2,500 and $5,000 fall under the same cap. Loans under $2,500 use separate schedules within the CFL, and consumer loans of $10,000 or more sit under the general usury framework rather than this specific cap.
Keeping the License Active
Getting the license is the start. Ongoing compliance drives most of the work.
Annual Renewal
Renewals run through NMLS between November 1 and December 31 each year. Miss that window, and a reinstatement period runs from January 1 through the end of February.11NMLS Licensing Guides. Renewing Individual Licenses or Registrations Miss both, and you start over with a new application while your lending authority sits in limbo.
Annual Report
Every CFL licensee files an annual report with the DFPI by March 15 covering the prior calendar year. Filing is online through the DFPI’s self-service portal, with no filing fee, but you must scan and upload a signed verification page. Without it, the report is treated as unfiled.12Department of Financial Protection and Innovation. Instructions for Completing CFL Annual Report Licensees that conducted no business during the year still have to file, and the DFPI does not grant extensions.
Assessments and Branches
The DFPI assesses an annual fee per licensed location, with a minimum of $250 per location. Each office needs its own license, which you add by filing an NMLS Branch Form (MU3) once your main license is active. The branch manager undergoes a separate criminal background check, and no one can manage more than one location.13Department of Financial Protection and Innovation. California Finance Lenders License – Frequently Asked Questions
Records
Licensees maintain books, accounts, and records sufficient for the DFPI commissioner to verify compliance.14California Legislative Information. California Financial Code 22156 That means loan agreements, payment histories, borrower correspondence, account statements, interest calculations, and any modifications. Digital records are acceptable but must remain accessible when the DFPI examines you. Incomplete or missing records are one of the fastest ways to draw an enforcement action.
Federal Rules That Also Apply
The CFLL addresses California law. Federal regimes sit on top of it. The Gramm-Leach-Bliley Act requires financial institutions to give customers a written privacy notice at the start of the relationship and annually thereafter, with opt-out notices before sharing information with nonaffiliated third parties.15Federal Trade Commission. How To Comply with the Privacy of Consumer Financial Information Rule of the Gramm-Leach-Bliley Act The Bank Secrecy Act requires every loan or finance company to maintain a written anti-money laundering program with a designated compliance officer, risk-based policies, employee training, and independent testing.16eCFR. Anti-Money Laundering Programs for Loan or Finance Companies Mortgage loan originators you employ must register through NMLS, obtain a unique identifier, submit fingerprints, and renew annually between November 1 and December 31.17eCFR. PART 1007 – S.A.F.E. Mortgage Licensing Act – Federal Registration of Residential Mortgage Loan Originators Building a compliance program around state rules alone is a common and expensive mistake.
Penalties for Operating Without a License or Violating the Law
The DFPI has broad authority. The commissioner can suspend a license for up to 30 days on three days’ notice while an investigation is pending. Formal actions include administrative fines, license revocation, cease-and-desist orders, and criminal referrals.
Unlicensed lending triggers a $2,500 penalty per violation under Financial Code Section 22713.18California Legislative Information. California Financial Code 22713 Common fine-generating conduct includes charging interest above the statutory caps, failing to provide required disclosures, and not maintaining adequate records. The DFPI conducts examinations without advance scheduling, and refusing to cooperate compounds the problem.
Willful violations of any CFL provision carry a fine of up to $10,000, imprisonment of up to one year in county jail or state prison, or both. You cannot be imprisoned for violating a DFPI rule or order unless you had actual knowledge of that rule or order, and a criminal conviction does not stop the commissioner from also pursuing administrative penalties.19Justia. California Financial Code Sections 22750-22754
The financial penalty that hits hardest is the void-contract rule. If any CFL provision is willfully violated in making or collecting a loan, the entire loan contract is void, and the lender loses any right to collect principal, interest, or other charges.19Justia. California Financial Code Sections 22750-22754 It applies both to licensed lenders who break the rules and to operators who never got a license in the first place. Borrowers have used the provision to challenge entire loan portfolios, and courts have enforced it. For an unlicensed lender with a real book of business, that exposure will dwarf any fine the DFPI could impose.