Buy Now, Pay Later moved from a checkout novelty to a mainstream payment rail in less than five years, and regulators across the United States, the European Union, the United Kingdom and Australia are catching up. For US merchants, the rules are no longer a future problem. The Consumer Financial Protection Bureau has already classified pay-in-four products as credit cards under Regulation Z, the EU’s revised Consumer Credit Directive (CCD2) now covers BNPL explicitly, and the UK Financial Conduct Authority is set to bring interest-free agreements under its regulated regime in 2026. If your checkout offers Affirm, Klarna, Afterpay, PayPal Pay in 4, Zip or Sezzle, the operational, contractual and disclosure burden on your team is rising in real time.
This guide explains, in plain language, what bnpl regulation merchants actually need to do this year. It draws on the most recent rulemaking, vendor guidance and the operational patterns we see across US retailers integrated with the major BNPL networks. For the wider picture of how payments are shifting, see our cluster pillar on how retail payments are changing across cards, BNPL and crypto.
In short
- BNPL is now treated like credit in most major markets. The US CFPB applies Regulation Z protections; the EU and UK are bringing BNPL under formal consumer credit rules in 2026.
- Merchants share the compliance load. Even when the BNPL provider is the lender, you control disclosures at checkout, marketing claims, refund handling and partner due diligence.
- Chargebacks and disputes get more formal. Pay-in-four shoppers now have card-like dispute rights, which changes how your customer service team must handle returns and “goods not as described” complaints.
- Cross-border sellers face the highest exposure. A US retailer shipping to the EU and UK must comply with three different regimes at once.
- Plan a 90-day readiness sprint. Audit disclosures, refresh contracts with BNPL providers, train support, update reporting and set new KPIs for BNPL-driven disputes.
Why BNPL regulation matters for merchants in 2026
BNPL volumes in US e-commerce crossed the 100 billion dollar mark in 2024 and continued to climb through 2025, with the Federal Reserve and the CFPB both flagging the segment as systemically meaningful. The product is no longer a marginal feature for late-stage shoppers. It now drives a measurable share of basket size lift, particularly in apparel, home, electronics and travel. That growth is exactly why regulators have moved.
Two patterns made enforcement inevitable. First, BNPL providers offered consumers a credit-like product without the disclosure regime that credit cards face. Second, dispute outcomes for BNPL shoppers were inconsistent compared to card payments, with some users discovering that returning an item did not always end the payment obligation. Once those two gaps became visible in CFPB complaint data, formal rules followed.
For merchants, the practical consequence is that BNPL is converging with traditional payments. The cost advantage of BNPL versus interchange remains, but the operational simplicity (drop the widget at checkout and let the provider handle the rest) is gone. Your team now owns part of the compliance perimeter, and getting that wrong has both regulatory and brand risk.
The CFPB interpretive rule and what it actually requires
In May 2024, the CFPB issued an interpretive rule under its authority confirming that pay-in-four products qualify as credit cards under Regulation Z. The rule did not invent new obligations. It clarified that existing protections already apply, including periodic statements, dispute rights and refund handling. Providers are required to issue billing statements, investigate disputes and refund amounts in the event of a successful claim. The full text and supporting commentary are available from the Consumer Financial Protection Bureau.
For merchants, four things changed materially:
- Dispute mechanics align with cards. A shopper who returns an item or claims it was not as described can now invoke Regulation Z protections against the BNPL provider, who will pass the dispute back to you in a structure similar to a card chargeback.
- Refund timing must be tight. Refunds need to flow back to the BNPL provider promptly, and the provider must credit the shopper. Late or partial refunds become a source of disputes.
- Marketing claims face stricter scrutiny. Statements like “0 percent interest, no fees, no hidden charges” must be accurate, with the full terms easy to find at checkout.
- Reporting obligations sit with providers, but merchants are pulled in. Providers will lean on merchants for cleaner refund data and clearer order status events.
Underlying all of this is the assumption that the BNPL provider is the lender. Merchants are not extending credit. But because you control the checkout surface and the merchandising journey, regulators view you as a co-owner of the disclosure environment.
How EU CCD2 and UK rules reshape BNPL for cross-border merchants
The EU’s revised Consumer Credit Directive, often called CCD2, was adopted in 2023 with a transposition deadline of November 2025 and an application date of November 2026. It explicitly captures interest-free credit, including BNPL, removing the earlier carve-out for short-term, interest-free credit under 200 euros. National regulators in Germany, France, Spain, Italy and the Netherlands are now finalizing rules that apply directly to BNPL providers operating into those markets.
The UK is moving on a parallel track. The Financial Conduct Authority has been preparing a regulatory regime for interest-free BNPL since the Woolard Review, and the framework is expected to take effect during 2026. Once it does, BNPL providers operating in the UK will need FCA authorization, and they will need to apply affordability checks and offer clearer pre-contract information.
If you sell into both the EU and the UK from a US base, the compliance footprint is three-fold:
- US: Regulation Z disclosure, dispute handling, refund timing.
- EU: CCD2 pre-contract information, advertising rules, creditworthiness obligations on the provider.
- UK: FCA financial promotions, affordability checks, complaints handling via the Financial Ombudsman Service.
The good news is that BNPL providers absorb most of the legal heavy lifting. The catch is that they will require you to make checkout, marketing and refund changes to keep them compliant. Read the merchant agreement carefully. The newer versions from Klarna and Affirm now include clauses that allow the provider to suspend the integration if your team is out of step with disclosure or refund requirements. This is the kind of operational detail the BNPL playbook for retail in 2026 covers in more depth, and it sits at the heart of our cluster pillar on retail payments architecture.
Comparison table of major BNPL regulatory regimes
The table below summarizes the state of bnpl regulation merchants need to track across the four largest English-speaking and EU markets. Treat it as a directional snapshot, not legal advice; rules are evolving quarter by quarter.
| Market | Lead regulator | Key trigger date | Core merchant impact |
|---|---|---|---|
| United States | CFPB (Regulation Z) | May 2024 (in force) | Dispute rights mirror credit cards; refund timing and marketing claims tightened |
| European Union | National regulators under CCD2 | November 2026 application | Pre-contract information, creditworthiness assessment, advertising standards |
| United Kingdom | Financial Conduct Authority | Expected 2026 | FCA-authorized providers, affordability checks, formal complaints regime |
| Australia | ASIC under National Credit Code | Mid-2025 (in force) | Modified responsible lending obligations, mandatory licensing for BNPL providers |
What changes operationally for merchants
The legal text is one thing; the operational reality is another. Across the US retailers we work with, six things consistently change once a brand takes BNPL compliance seriously.
1. Checkout disclosures get clearer
The widget at checkout used to say “4 payments of $25”. The new pattern adds a clearly visible line about total amount, late fee policy (where applicable) and a link to the BNPL provider’s pre-contract information. The CFPB rule does not prescribe an exact format, but it expects the information to be conspicuous, not buried.
2. Marketing copy gets cleaned up
Phrases like “no fees, no interest, no catch” are out unless they are unambiguously true for the specific product the user is buying. The catch phrase that aged worst is “interest-free”, because some BNPL products do charge interest if the shopper extends the term. Audit your homepage, category pages, product detail pages and email marketing for blanket claims that no longer hold.
3. Refunds become a workflow, not an afterthought
Under the new dispute regime, late refunds trigger disputes. We have seen merchants reduce BNPL disputes by 40 percent simply by moving refund posting from a nightly batch to an event-driven flow that fires the moment the return is accepted at the warehouse.
4. Customer service training expands
Your agents need to understand the difference between a billing dispute, a dispute over goods, and a request for a payment plan extension. Each goes to a different place: card network style dispute for the first, BNPL provider for the second, and provider self-service or hardship channel for the third.
5. Reporting and reconciliation get tighter
BNPL providers will request cleaner order status webhooks (paid, shipped, delivered, returned, refunded). If you can deliver these reliably, integration health improves and disputes drop. If you cannot, you will see more friction, including providers occasionally throttling your fraud thresholds.
6. Partner due diligence becomes a board-level topic
Some smaller BNPL providers may not survive the new regime. CFOs and heads of payments are now asking who their backup BNPL is, how integration switching would work, and how customer balances would be transferred. This is healthy hygiene. Plan it before you need it.
7. Risk and fraud teams get pulled in
BNPL fraud patterns are not identical to card fraud. Synthetic identity, account takeover and “bust-out” attacks (where a user runs up multiple BNPL accounts and walks away) now sit alongside more traditional first-party return abuse. Your fraud team should have a separate BNPL view rather than burying it under card fraud, and your risk policies should reflect the fact that BNPL chargebacks can hit different ledgers than card chargebacks. Several US retailers we work with have created a single weekly “payments risk” review covering both card and BNPL signals.
Common mistakes merchants make with BNPL compliance
The errors we see most often are not about the law itself; they are about treating BNPL like a marketing widget rather than a payments product. The pattern below is consistent across mid-market US retailers from 50 million to 500 million in online revenue.
- Treating BNPL as “the provider’s problem”. Disclosures, marketing claims, refund timing and customer service all sit on the merchant side. The provider cannot fix any of them without your engineering team.
- Letting legal and marketing run independent reviews. The most common audit miss is a product page claim that contradicts the merchant agreement. Joint reviews close that gap.
- Ignoring international rules because “we are a US merchant”. If you ship internationally, EU and UK rules apply. Your tax and shipping rules already know which jurisdiction the order falls into; your compliance review should mirror that logic.
- Manual refund flows. Any merchant still posting refunds via a finance team queue will see dispute counts rise. Move to event-driven refunds.
- Single-provider dependence. If 80 percent of your BNPL volume sits with one provider and that provider hits a regulatory issue, you have a revenue continuity problem. Diversify deliberately.
- Treating disclosures as a one-off project. Marketing copy drifts. Build a quarterly review into the calendar so claims stay accurate as products and terms change.
Examples from US retail and e-commerce
Three patterns are emerging in 2025 and 2026 across publicly observable retailer behavior.
Apparel brands using Affirm and Klarna have moved fastest, partly because the BNPL share of basket is highest in that category and partly because returns are highest as well. The combination forces a tight feedback loop between dispute volume and refund timing, which in turn forces operational change. Several mid-market apparel brands have publicly stated they reduced BNPL-related customer service tickets by double-digit percentages after introducing event-driven refunds and clearer pre-purchase disclosures.
Home and furniture retailers face a different challenge: large basket sizes mean BNPL terms can extend to 12 or 24 months with interest, which puts them squarely inside traditional consumer lending rules even before CCD2 and CFPB action. The compliance work here looks more like a small bank build-out than a payments tweak. Internal stakeholders include legal, finance, customer service, IT and product. The big win is operational maturity; the cost is the cycle time of getting it done.
Electronics and travel retailers are watching cross-border rules closely because they often process orders into Europe and the UK from US-based stacks. Their compliance program tends to be platform-led, with the BNPL provider effectively running the disclosure layer through configuration of the merchant integration. The merchant’s job is to keep the integration current and to keep marketing claims consistent with the provider’s terms.
The pattern that ties all three categories together is the move from a single owner (marketing or payments) to a cross-functional steering group. The merchants getting this right pull together a small group of named owners from legal, payments, customer service, marketing and engineering, meeting monthly, with a shared dashboard tracking dispute volume, refund timing and integration health. That dashboard becomes the early warning system. When a metric drifts, the group decides whether the cause is a marketing change, a product change, an integration change or a regulatory change, and assigns the fix.
A useful tell that a retailer has crossed the maturity line is the existence of a “BNPL exception” log: a record of the times a customer service escalation, a regulatory complaint or a provider notice forced a deviation from the standard workflow. Mature merchants treat each exception as a root cause investigation, not a one-off. After 6 months, the exception log usually exposes two or three structural issues, which then become the next quarter of engineering and policy work.
Tools, partners or vendors worth knowing
Selecting the right partner stack matters as much as choosing a BNPL provider. The compliance perimeter widens, but so does the tooling that helps you manage it. See our dedicated piece on tools and vendors for BNPL in 2026 for a longer breakdown. The categories worth knowing today:
- BNPL networks: Affirm, Klarna, Afterpay (Block), PayPal Pay in 4, Zip, Sezzle. Each has slightly different merchant terms; review yearly.
- Disclosure and consent platforms: Vendors that surface payment terms dynamically at checkout, with logged consent that meets CFPB and CCD2 expectations.
- Dispute management: Tools that aggregate BNPL disputes with card chargebacks so customer service sees one queue.
- Reconciliation and accounting: Solutions that map BNPL settlement files into your general ledger and ERP. The new dispute regime makes accurate reconciliation more important than ever.
- Marketing compliance review: Either an in-house workflow with legal sign-off or a third-party service that scans live site copy against current BNPL terms.
For founders building tools in this space, capital markets are still active. Our analysis of seed versus Series A for retail tech founders in 2026 covers what investors are funding in adjacent retail payments categories.
A 90-day merchant playbook for BNPL regulatory readiness
Most US retailers we see can complete a credible BNPL readiness sprint in 12 weeks. The plan below is what we recommend, and it maps cleanly to the milestones in the retail payments cluster pillar on this site.
- Week 1 to 2: Inventory. List every BNPL provider live on your site, every checkout surface they appear on, every marketing channel that promotes them and every customer service workflow that touches them.
- Week 3 to 4: Audit disclosures and marketing claims. Catalog every claim about BNPL on your storefront, emails and ads. Score each as compliant, ambiguous or non-compliant.
- Week 5 to 6: Contracts and partner due diligence. Review merchant agreements with each provider. Confirm dispute, refund and reporting obligations are clear and operationally feasible.
- Week 7 to 8: Refund automation. Move from batch refunds to event-driven refunds. Wire your returns acceptance event directly to the refund API on each BNPL integration.
- Week 9 to 10: Customer service playbooks. Update agent scripts and decision trees for disputes, returns and payment plan extensions. Train and test.
- Week 11: Reporting. Stand up a weekly BNPL dispute and refund report. Identify the top three failure modes and prioritize fixes.
- Week 12: Board readout. Present the compliance posture, exposure by provider and the next quarter of priorities. Treat it as a recurring agenda item.
If the 90-day timeline looks aggressive, it is. Run two parallel workstreams (legal/marketing on one side, engineering/customer service on the other) and you will hit it. Try to do it sequentially and it slips to 6 months. Build in a buffer for the inevitable surprises: a provider may update its merchant agreement mid-sprint, a state attorney general may issue new guidance, or your customer service vendor may need extra training cycles. None of these are showstoppers, but each can add a week if you have no buffer planned.
FAQ
Are merchants liable under BNPL regulations or only the providers?
The lender obligations sit with the BNPL provider. But merchants control disclosures at checkout, marketing claims, refund timing and customer service. Regulators and providers will hold you accountable for those areas through the merchant agreement.
Does the CFPB interpretive rule apply to all BNPL products?
It explicitly applies to pay-in-four products that meet the definition of a credit card under Regulation Z. Longer-term BNPL with interest is already covered by traditional consumer credit law. Check with counsel for borderline product structures.
What happens to BNPL disputes if my store does not process a return on time?
The BNPL provider may still credit the shopper and pass the loss back to you, similar to a card chargeback. Late refunds are now one of the top drivers of BNPL disputes. Event-driven refunds remove this risk.
Do EU CCD2 rules apply to US merchants selling into Europe?
The provider obligations apply to the BNPL provider operating in the EU. Merchant-facing obligations flow through the merchant agreement and through national consumer protection rules in the country of sale. If you ship to the EU, plan for compliance.
How is the UK regime different from the US and EU?
The UK FCA is bringing interest-free BNPL into formal regulation, which means provider authorization, affordability checks and access to the Financial Ombudsman Service. The merchant impact is mainly on marketing claims and integration changes that providers will require to stay compliant.
Should we drop BNPL because of the new rules?
Almost never. BNPL still lifts basket size and conversion in most retail categories. The right move is to industrialize the compliance work and keep the revenue benefit, not to remove the option.
How often should we review our BNPL compliance posture?
At least quarterly for marketing claims and contracts, monthly for dispute metrics, and at every major BNPL product change. Build a recurring review into your finance and legal calendar, not just an annual project.
BNPL regulation is converging globally, and the merchant burden is rising even though the formal lender obligations sit with providers. The merchants that get this right in 2026 will treat BNPL as a payments product, not a marketing widget, with the same operational discipline they bring to card payments. For the wider context on how BNPL fits inside the broader payments stack, return to our pillar on retail payments in 2026, which ties together cards, digital wallets, BNPL and emerging rails.