ΊΪΑΟΚΣΖ΅

Credit Rejection Letter Template for the United States

Generate a bespoke document

What is a Credit Rejection Letter?

The Credit Rejection Letter is a critical document used when a financial institution or creditor needs to formally deny a credit application in the United States. This document must be provided within 30 days of receiving a completed credit application and serves multiple purposes: it informs the applicant of the credit denial decision, provides legally required explanations for the denial, includes mandatory notices about consumer rights, and maintains compliance with federal regulations such as ECOA and FCRA, as well as state-specific requirements. The letter must balance legal compliance with clear communication, providing specific reasons for denial while avoiding discriminatory language. It also needs to include information about credit reports if they were used in the decision-making process, and must inform applicants of their right to obtain free copies of their credit reports. The document is essential for maintaining regulatory compliance and managing potential legal risks associated with credit denial decisions.

Frequently Asked Questions

Is a credit rejection letter legally binding in the United States?

Yes, credit rejection letters are legally required documents under federal law. The Equal Credit Opportunity Act (ECOA) and Fair Credit Reporting Act (FCRA) mandate that creditors must send these letters within 30 days of denying credit applications. Failure to provide proper rejection letters can result in federal penalties and regulatory violations.

Can I be sued if my credit rejection letter is missing required information?

Yes, incomplete or missing credit rejection letters can expose lenders to federal lawsuits and regulatory penalties. Under ECOA, applicants can sue for actual damages, punitive damages up to $10,000, and attorney fees. The Consumer Financial Protection Bureau (CFPB) can also impose significant fines for non-compliance.

How specific must the reasons be in a US credit rejection letter?

Federal law requires credit rejection letters to provide specific, factual reasons for denial rather than vague statements. Examples include 'insufficient income relative to debt obligations' or 'too many recent credit inquiries,' not general phrases like 'poor credit history.' The reasons must be the actual factors used in the credit decision.

How does a credit rejection letter differ from an adverse action notice?

A credit rejection letter is actually a type of adverse action notice required under ECOA and FCRA. However, adverse action notices also cover other credit decisions like unfavorable loan terms, credit limit reductions, or account closures. All adverse actions require specific disclosure requirements and timelines under federal law.

How quickly must I send a credit rejection letter after denying an application?

Federal law requires credit rejection letters to be sent within 30 days of receiving a complete credit application or within 30 days of taking adverse action. For incomplete applications, you have 30 days from the date you notify the applicant that additional information is needed. Electronic delivery is acceptable if the applicant consents.

Can using generic rejection reasons get my company in legal trouble?

Yes, using vague or generic rejection reasons violates ECOA requirements and can lead to discrimination lawsuits. Common illegal practices include stating 'credit application denied' without specifics or using coded language that could mask discriminatory practices. Each reason must correspond to actual factors considered in your credit decision process.

Which federal agencies enforce credit rejection letter requirements?

The Consumer Financial Protection Bureau (CFPB) is the primary federal agency enforcing ECOA and FCRA compliance for most lenders. Additionally, the Federal Trade Commission (FTC), Federal Reserve, FDIC, and other banking regulators have enforcement authority depending on the type of financial institution. State attorneys general can also investigate violations.

Reviewed by

Legal Engineer, GenieAI

A lawyer, legal researcher and legal tech founder, Swetha has built AI products deployed inside Tier 1 firms and enterprises. She ensures GenieAI's alignment with the latest regulation and executes testing on the legal robustness of Genie output.

Reviewed by

Legal Engineer, GenieAI

A Skadden-trained M&A lawyer, Imad advised on cross-border transactions and contractual risk before moving into legal AI. He reviews GenieAI's output for compliance and enforceability across our 150+ supported jurisdictions, as well as facilitating external benchmarking.

Jurisdiction

United States

Reviewed by

&

Publisher

GenieAI

Sector

Business

Cost

Free to use

Last updated

About the Credit Rejection Letter

When you need to deny a credit application, you must provide a formal Credit Rejection Letter that complies with strict federal requirements. This document is not just a courtesy notification-it's a legal requirement under the Equal Credit Opportunity Act (ECOA) that must be delivered within 30 days of receiving a completed application. The letter serves as official documentation of your decision while protecting both your institution and the applicant's rights.

When do you need this document?

You need a Credit Rejection Letter whenever you deny any type of consumer credit application, including personal loans, credit cards, mortgages, auto loans, or business credit lines. The requirement applies regardless of whether the denial is based on credit history, income verification, employment status, or other factors. Even partial denials-such as approving a lower credit limit than requested-may require adverse action notices. The letter is also necessary when you make counteroffer terms that the applicant doesn't accept within a reasonable timeframe, or when you terminate existing credit accounts due to adverse information.

Key legal considerations

Your Credit Rejection Letter must include specific elements to comply with ECOA regulations. You must provide at least two but typically no more than four specific reasons for the denial, using clear language that the average consumer can understand. Generic statements like "insufficient credit references" are inadequate-you need concrete reasons such as "length of employment less than one year" or "too many recent credit inquiries." If you used a credit report in your decision, you must identify the credit reporting agency and inform the applicant of their right to obtain a free copy within 60 days. The letter must also include your contact information for questions and cannot contain any language that could be construed as discriminatory based on protected characteristics.

Legal requirements in United States

Federal law mandates strict timing and content requirements for credit denial notifications. Under Regulation B, you have exactly 30 days from receiving a completed application to send the rejection letter, and 90 days if you provided a counteroffer that was not accepted. The FCRA requires additional disclosures if credit reports influenced your decision, including the credit bureau's contact information and a notice about the applicant's right to dispute inaccurate information. State laws may impose additional requirements, particularly regarding disclosure of credit scores or additional waiting periods. Your letter must be in writing and delivered via mail, email, or other methods that provide proof of delivery. Keep detailed records of all rejection letters sent, as they may be subject to regulatory examination and could be crucial evidence in potential discrimination lawsuits.

GOVERNING LAW

Applicable law

This Credit Rejection Letter is drafted to comply with United States law. Key legislation includes:







Genie's Security Promise

Genie is the safest place to draft. Here's how we prioritise your privacy and security.

Your data is private:

We do not train on your data; Genie's AI improves independently

All data stored on Genie is private to your organisation

Your documents are protected:

Your documents are protected by ultra-secure 256-bit encryption

We are ISO27001 certified, so your data is secure

Organizational security:

You retain IP ownership of your documents and their information

You have full control over your data and who gets to see it