If you make, broker, or service loans in California, you generally need a CFLL license in California — short for a license under the California Financing Law — issued by the Department of Financial Protection and Innovation (DFPI). Applications go through the Nationwide Multistate Licensing System (NMLS), take roughly 90 days, and carry modest government fees. The real cost sits in the ongoing compliance: net worth minimums, a surety bond, interest rate caps, annual reporting, and the risk that any willful violation voids the loan contract entirely and strips you of the right to collect principal or interest.
Who Needs a CFL License
California Financial Code Section 22100 prohibits any person from engaging in the business of a finance lender or broker without a license from the DFPI commissioner.1Justia. California Financial Code Section 22100-22112 “Person” covers individuals, corporations, LLCs, partnerships, and other entities. Three activities trigger the requirement:
- Making loans, including unsecured personal loans, installment loans, and small business financing.
- Brokering loans — connecting borrowers with lenders for a fee, even if you never fund.
- Servicing loans, meaning collecting payments, managing escrow, or handling modifications on loans someone else originated.
Fintech companies sometimes assume a partnership with a licensed lender removes the need to license themselves. If you control loan terms, underwriting, or funding decisions, the DFPI may treat you as the actual lender. Peer-to-peer platforms that do more than passively match users face the same analysis.
Mortgage lenders and brokers who are not licensed through the California Department of Real Estate must hold a CFL. Companies whose primary business is originating and servicing consumer mortgages typically also need a license under the California Residential Mortgage Lending Act, which the DFPI administers separately.2Cornell Law School. Cal. Code Regs. Tit. 10, 1422 – Application for License Under the California Financing Law Businesses that do both unsecured consumer lending and real estate-secured lending may need more than one license.
Who Is Exempt
Financial Code Section 22050 exempts entities already covered by their own regulatory frameworks, including federally regulated banks, credit unions, and savings institutions; broker-dealers operating under a DFPI certificate; colleges and universities lending to their own students; government agencies and public corporations; and licensed pawnbrokers acting under their pawnbroker authority.3California Legislative Information. California Financial Code 22050
Two commercial-lending exemptions matter for businesses that occasionally lend to other businesses. Anyone who makes no more than one commercial loan in a 12-month period is exempt entirely.4California Legislative Information. California Financial Code 22050.5 Anyone who makes five or fewer commercial loans in 12 months is exempt as long as those loans are incidental to the primary business.3California Legislative Information. California Financial Code 22050 A commercial loan here means at least $5,000 in principal (or any open-end credit line) where the borrower intends the funds primarily for business use. The “incidental” test is strict: if lending is a regular revenue stream, five loans a year is unlikely to qualify even though the count is low.
Qualifying 501(c)(3) nonprofits that facilitate zero-interest or low-cost loans can apply for an exemption, but it requires a filed application, an administrative fee, an annual report every March 15, no broker’s fee on facilitated loans, and no private benefit from net earnings.5California Legislative Information. California Financial Code 22066
How to Apply
Every CFL application runs through NMLS. You file an NMLS Company Form (MU1) and upload supporting documents electronically. The DFPI typically processes complete applications in about 90 days. If the DFPI issues a deficiency notice and you fail to respond within 90 days, the application is deemed withdrawn.6Conference of State Bank Supervisors. California Statutes – California Finance Law
Government Fees
The DFPI charges a $200 nonrefundable application fee plus a $100 nonrefundable investigation fee, along with fingerprint processing and criminal history check costs.7Department of Financial Protection and Innovation. DFPI Index of Fees, Fines and Penalties NMLS charges its own processing fees. Total government fees typically run well under $1,000, but a realistic budget includes financial statement preparation, surety bond premium, and compliance counsel.
Net Worth
Most applicants must maintain a minimum net worth of $25,000 at all times. If you employ mortgage loan originators, the floor rises to $250,000.8California Code of Regulations. Cal. Code Regs. Tit. 10, 1422.5 These are continuing requirements, not application-day thresholds. Financial statements must be prepared under GAAP and acceptable to the commissioner.
Surety Bond
Every licensee must post a surety bond of at least $25,000. Licensees that originate residential mortgage loans post higher amounts based on prior-year origination volume:9Department of Financial Protection and Innovation. Requirements After a Finance Lenders License Has Been Issued
- Up to $1 million originated: $25,000 bond
- $1 million to $50 million: $50,000 bond
- $50 million to $500 million: $100,000 bond
- Over $500 million: $200,000 bond
If your lending does not involve residential mortgages, the bond stays at $25,000 regardless of volume. Annual bond premiums typically range from a few hundred to a couple of thousand dollars depending on the bond amount and the applicant’s credit.
Background Checks
Fingerprints and criminal history disclosures are mandatory for all control persons, defined to include officers, directors, general partners, and anyone owning or controlling 10% or more of the company.8California Code of Regulations. Cal. Code Regs. Tit. 10, 1422.5 Each physical office must have a designated person in charge who also undergoes a background check, and that same person cannot run multiple locations. Your main office needs a responsible officer or compliance person as the DFPI’s primary contact.
Grounds for Denial
After notice and an opportunity to be heard, the DFPI can deny an application for several reasons:6Conference of State Bank Supervisors. California Statutes – California Finance Law
- A material false statement on the application, including undisclosed prior infractions or criminal history.
- A conviction, nolo contendere plea, or act of dishonesty, fraud, or deceit within the past 10 years, where the conduct is substantially related to the lending business.
- Prior violations of the CFL or any similar regulatory scheme, in California or elsewhere, with no lookback limit.
- Employing a mortgage loan originator who is not licensed and has not initiated a license application.
Note the asymmetry: criminal conduct and dishonest acts have a 10-year window, but regulatory violations do not. A license revocation in another state 20 years ago can still be held against you.
Rules You Live Under Once Licensed
Interest Rate Caps
For consumer loans with a principal of at least $2,500 but less than $10,000, the maximum rate is 36% annual simple interest plus the prevailing Federal Funds Rate.10Department of Financial Protection and Innovation. New Requirements for Licensees Making Consumer Loans of $2,500 to $10,000 California Financing Law The relevant rate is the one in the Federal Reserve’s H.15 Statistical Release as of the first day of the month before the loan closes. Commercial loans between $2,500 and $5,000 are subject to the same cap. Loans under $2,500 have separate rate schedules under the CFL. Consumer loans of $10,000 or more are subject to general usury rules rather than this specific cap.
Records
Licensees must maintain books, accounts, and records sufficient for the commissioner to verify compliance.11California Legislative Information. California Financial Code 22156 In practice, that means loan agreements, payment histories, correspondence, account statements, interest calculations, and any modifications. Loans secured by real property with proceeds through an independent escrow holder require additional records specified by DFPI rules. Digital records are acceptable if stored securely and accessible on request. The commissioner can request access at any time, and incomplete or inaccessible records are a fast route to enforcement.
Annual Renewal
Renewals run through NMLS from November 1 through December 31 each year. A reinstatement window runs from January 1 through the end of February for licensees who miss the renewal deadline.12NMLS Licensing Guides. Renewing Individual Licenses or Registrations Miss both and you must apply again from scratch, with the gap in authority that implies.
Annual Report
Every licensee files an annual report with the DFPI by March 15, covering the prior calendar year. The report is filed through the DFPI’s self-service portal with no filing fee, but you must scan and upload a signed verification page. Without that page, the DFPI treats the report as unfiled.13Department of Financial Protection and Innovation. Instructions for Completing CFL Annual Report Licensees that did no business during the year still must file. The DFPI does not grant extensions.
Branch Offices and Assessments
The DFPI assesses an annual fee on each licensed location, with a $250 minimum per location. Each branch needs its own license, added by filing an NMLS Branch Form (MU3) after the main license is active, and the branch manager must pass a separate background check.14Department of Financial Protection and Innovation. California Finance Lenders License – Frequently Asked Questions The same person cannot manage more than one location.
Federal Obligations That Ride Along
A CFL license is a state license; federal law adds its own layers that are easy to overlook when planning compliance around state requirements alone.
The Gramm-Leach-Bliley Act requires financial institutions to give customers a written privacy notice at the start of the relationship and annually thereafter, plus an opt-out notice before sharing nonpublic personal information with nonaffiliated third parties.15Federal Trade Commission. How To Comply with the Privacy of Consumer Financial Information Rule of the Gramm-Leach-Bliley Act FTC safeguarding rules separately require a written information security program.
Under the Bank Secrecy Act, every loan or finance company must have a written anti-money laundering program approved by senior management, with a designated compliance officer, risk-based policies, employee training, and independent testing at a frequency matched to the risk level.16eCFR. Anti-Money Laundering Programs for Loan or Finance Companies FinCEN can examine compliance at any time, and failure to maintain an adequate program is itself a BSA violation.
If your business employs mortgage loan originators, each MLO must register through NMLS, obtain a unique identifier, and renew annually from November 1 through December 31. Registration requires fingerprints for federal and state background checks unless prints already on file are less than three years old, and any change in name, employment, or registered information must be updated within 30 days.17eCFR. PART 1007 – S.A.F.E. Mortgage Licensing Act – Federal Registration of Residential Mortgage Loan Originators
Penalties
Unlicensed lending triggers a $2,500 penalty per violation under Financial Code Section 22713.18California Legislative Information. California Financial Code 22713 Common fine-generating violations by licensees include charging rates above the statutory caps, failing to deliver required disclosures, and failing to maintain adequate records. The DFPI conducts examinations without advance scheduling, and refusing to cooperate makes things worse.
Willful violations of any CFL provision carry a criminal fine of up to $10,000, imprisonment of up to one year in county jail or state prison, or both. You cannot be imprisoned for violating a DFPI rule or order unless you had actual knowledge of it. A criminal conviction does not block administrative penalties under Section 22713.19Justia. California Financial Code Sections 22750-22754
The most financially dangerous penalty is contract voidness. If any CFL provision is willfully violated in making or collecting a loan, the entire loan contract is void and the lender loses the right to collect principal, interest, or any other charge.19Justia. California Financial Code Sections 22750-22754 This applies to licensed lenders who break the rules and to unlicensed operators who never obtained a license at all. Borrowers have used this provision to challenge entire loan portfolios, and courts have enforced it. For a business of any size, that exposure can dwarf any administrative fine the DFPI might impose.