Joe Sanders Says States are Moving to Center Stage in Consumer Protection Enforcement

With the Consumer Financial Protection Bureau facing the prospect of running out of operating funds amid administration efforts to eliminate its funding, a coalition of Democratic state attorneys general has sued to block those actions, and states are increasingly stepping into consumer-protection enforcement. Hinshaw partner Joe Sanders warns enforcement is shifting to the state level and that the central risk for consumer-finance firms in 2026 is the potential loss of the CFPB's existence rather than routine changes in guidance, raising multistate enforcement and regulatory-uncertainty exposure for affected companies.

Analysis

Market structure: A defanged CFPB plus aggressive state AG enforcement shifts enforcement risk from a centralized federal standard to a fragmented 50-state regime, raising compliance and litigation costs for nonbank consumer lenders (SOFI, UPST, RKT, PRAA, ECPG) while advantaging large diversified banks (JPM, BAC) that have scale legal teams and capital buffers. Pricing power: smaller fintechs will see funding spreads widen 50–200bp as state-level enforcement increases perceived legal risk; securitization buyers will demand higher credit enhancement on consumer ABS within 3–6 months.

Risk assessment: Tail risks include a court decision that permanently defunds the CFPB (6–18 months) causing regulatory arbitrage and a surge in state enforcement actions leading to multi-billion dollar settlements across lenders; immediate risk (days–weeks) is litigation-driven stock jolt, while short-term (3–12 months) is higher funding costs for nonbanks. Hidden dependencies: many ABS trusts and warehouse lines have covenants triggered by regulatory actions—watch covenant breach thresholds (e.g., DSCR falls <1.2 or equity cures missed).

Trade implications: Favor long positions in large-cap banks (JPM, BAC) and compliance/software vendors (rev: NICE, ticker NICE; consider LEXX/RELX if exposed) and short/hedge nonbank consumer lenders (SOFI, UPST, RKT) via options—target 2–4% portfolio allocation and review in 3 months. Use pair trades: long JPM (+3%) / short SOFI (-2%) to capture spread widening; buy 3–6 month puts on UPST (10–15% OTM) as cheap tail protection and sell covered calls on JPM to finance premium.

Contrarian angles: Consensus assumes big banks are safe — but states may prioritize large targets for headlines, creating episodic downside for JPM/BAC; monitor NY/CA AG filings as leading indicators. Reaction may be underdone in ABS spreads: buy protection via 1–2% allocation to CDS on prime credit card ABS if spreads cross +75bp vs pre-crisis levels, and be ready to reverse within 6–12 months if federal funding is restored by litigation.

Key Decisions for Investors

• Establish a 3% long position in JPM (ticker JPM) and 2% long in BAC (BAC) as defensive plays with large legal/ capital buffers; fund by reducing 4% exposure to nonbank consumer finance names.
• Initiate a 2% short exposure to SOFI (SOFI) and 1% short to UPST (UPST) via buying 3–6 month 10–15% OTM puts (allocate max loss = premium paid); target exit on 20–30% option premium decay or regulatory resolution within 3 months.
• Enter a pair trade: long 3% JPM / short 2% RKT (Rocket Companies) to capture relative safety; rebalance if state AG actions name JPM/major banks explicitly (trigger: public filing by NY/CA AG).
• Allocate 1–2% to buy protection on consumer ABS (CDS or tranches) if average ABS spreads widen >75bp from current levels; close position if spreads compress by >40bp or CFPB funding is restored by court decision within 6–12 months.
• Increase exposure by 1–2% to compliance/reg-tech vendors (e.g., NICE, ticker NICE) and consider selling 3-month covered calls on large-bank longs to finance option hedges; reassess after 90 days or after key court rulings on CFPB funding.