Online payday loans are legal in California — but only if the lender holds a valid DFPI license as a deferred deposit originator under the California Deferred Deposit Transaction Law (CDDTL), Financial Code §§ 23000–23106. A licensed online lender must follow the same rules as a storefront: $300 maximum, 15% fee cap, no rollovers, no criminal threats. An unlicensed online lender is operating illegally in California, is not bound by any of those limits, and may be nearly impossible to hold accountable. Verifying the license before borrowing — or before paying a collector — is the single most important step a California consumer can take.
Scope: What This Article Covers
This article covers online deferred deposit transactions subject to the CDDTL. It does not cover online installment loans above $300 governed by the California Financing Law, tribal loans, or earned wage access products. Those are different legal products with different rules.
The Legal Standard: Same Rules, Different Delivery
An online payday loan is legal in California if — and only if — the lender is licensed by the DFPI as a deferred deposit originator. The CDDTL does not distinguish between storefronts and online lenders. The same rules apply to both:
- Maximum check or transaction amount: $300
- Maximum fee: 15% of the transaction amount
- Maximum term: 31 days
- No rollovers
- No criminal threats for nonpayment
- Written disclosures required before the transaction
- NSF fee capped at $15, one time only
A licensed online lender that violates any of these rules is subject to DFPI enforcement — citations up to $2,500 per violation, license suspension, and license revocation.
How to Verify an Online Lender’s License
Before borrowing from any online payday lender — and before paying any collector claiming to represent one — verify the license:
- Go to the DFPI financial services search tool at dfpi.ca.gov/consumers/find-a-licensed-company
- Search for the lender by name
- Confirm the license type is “Deferred Deposit Originator” and the license is active
- Check whether the DFPI has issued any enforcement actions or orders against the lender
What Unlicensed Online Lenders Do
The DFPI has warned California consumers about unlicensed online lenders for years. Common practices by unlicensed lenders include:
- Offering loans above the $300 California cap
- Charging fees far exceeding the 15% limit
- Failing to disclose the APR and loan terms as required
- Withdrawing funds from your bank account repeatedly without authorization
- Selling or sharing your personal and banking information
- Operating from out of state or overseas to evade California enforcement
- Claiming a federal license — no federal agency licenses payday lenders
The DFPI has taken action against unlicensed internet lenders operating from Costa Rica, Malta, Belize, and the United Kingdom. Geographic distance does not make a lender legal — it makes enforcement harder for you.
Lead Generators: A Specific Risk
Many online payday loan applications are not submitted directly to a lender — they go through a lead generator, a website that collects your application and personal information and sells it to a network of lenders. You may not know which lender actually funds your loan or what jurisdiction they claim until after the transaction.
Licensed lenders using lead generators are still responsible for compliance — but lead generators connecting consumers to unlicensed lenders operate outside the regulatory framework entirely. Before submitting any application online, verify the lender’s identity and license status. If you cannot identify the actual lender from the website, that is a red flag.
If Your Loan Was From an Unlicensed Lender
A loan made by an unlicensed lender may be void and unenforceable under California law. That means the lender has no legal right to collect — but asserting unenforceability is a defense you must raise if sued. It is not automatic.
If you are being collected on by or on behalf of an unlicensed lender:
- Verify license status at dfpi.ca.gov
- Document that the lender is not licensed
- File a complaint with the DFPI at dfpi.ca.gov/file-a-complaint — the DFPI actively pursues unlicensed lenders
- File a complaint with the CFPB at consumerfinance.gov/complaint
- If a lawsuit is filed, raise unenforceability as a defense in your response
Federal Claims Against Unlicensed Lenders
If an unlicensed lender or its collector is using abusive collection tactics, the FDCPA, 15 U.S.C. § 1692 et seq., and the Rosenthal Act, Civil Code § 1788 et seq., still apply to third-party collectors. Even if the underlying loan is from an unlicensed lender, a collector’s conduct during collection is separately regulated. Threats of arrest, misrepresentation of the debt, and repeated harassing calls are violations regardless of the lender’s license status.
If You Are Sued
If a lender or collector sues you over an online payday loan, you have 30 days to respond in limited civil court or must appear at the hearing in small claims. Do not ignore it — especially if you believe the lender is unlicensed. Unenforceability is a complete defense but only if you raise it.
Learn how to respond to a debt collection lawsuit in California →
If you are weighing whether bankruptcy might be the right move, speaking with an attorney is the right first step.
Frequently Asked Questions
Are online payday loans legal in California?
Yes — if the lender holds a valid DFPI license as a deferred deposit originator. Unlicensed online lenders are operating illegally in California. Verify any lender’s license at dfpi.ca.gov before borrowing.
How do I know if an online payday lender is licensed in California?
Use the DFPI financial services search tool at dfpi.ca.gov/consumers/find-a-licensed-company. Search for the lender by name and confirm the license type is “Deferred Deposit Originator” and the license is active.
Can an unlicensed online lender sue me in California?
They can file a lawsuit — but if the lender was unlicensed at the time of the loan, the loan may be void and unenforceable. That is a complete defense but you must raise it by filing a response. If you ignore the lawsuit, a default judgment will be entered against you regardless.
What if the online lender claims a federal license?
No federal agency licenses payday lenders. Any claim of a federal payday lending license is false. The only valid license for a payday lender in California is a DFPI deferred deposit originator license.
Can an unlicensed lender keep withdrawing money from my bank account?
No. Revoke your ACH authorization in writing to both the lender and your bank. Under the CFPB Payday Loan Payments Rule effective March 30, 2025, even licensed lenders are limited to two consecutive failed withdrawal attempts. Unauthorized withdrawals by unlicensed lenders may also violate the Electronic Funds Transfer Act, 15 U.S.C. § 1693.
What if I already paid an unlicensed lender?
File a complaint with the DFPI. The DFPI can investigate and, in some cases, order restitution. There is no guarantee of recovery — especially if the lender is operating overseas — but filing a complaint creates a record and supports enforcement action.
Sources
- California Deferred Deposit Transaction Law, Financial Code §§ 23000–23106
- California Financing Law, Financial Code § 22000 et seq.
- DFPI Illegal Internet Payday Lending Bulletin — dfpi.ca.gov
- DFPI 2024 Annual Report — California Deferred Deposit Transaction Law — DFPI
- DFPI 2024 Annual Report — CCFPL Enforcement Activity — DFPI
- Fair Debt Collection Practices Act, 15 U.S.C. § 1692 et seq.
- Rosenthal Fair Debt Collection Practices Act, Civil Code § 1788 et seq.
- Electronic Funds Transfer Act, 15 U.S.C. § 1693 et seq.
- CFPB Payday Loan Payments Rule, effective March 30, 2025 — CFPB
- DFPI License Lookup — dfpi.ca.gov
- DFPI Complaint Portal — dfpi.ca.gov/file-a-complaint
- CFPB Complaint Portal — consumerfinance.gov/complaint
- Lawyers for the Little Guys — lawyersforthelittleguys.com/request-a-consult