In 2022, Wells Fargo agreed to a $3.7 billion settlement with the Consumer Financial Protection Bureau (CFPB), the US federal agency that polices consumer financial products, over mismanaged auto loans, mortgages, and deposit accounts. Much of the harm traced back to how products were sold and communicated, not just how they were priced.
Marketing sits at the front of that risk. A single campaign that targets the wrong segment, hides a fee, or pressures someone who cannot afford the product can trigger enforcement, refunds, and reputational damage. This lesson turns three big legal duties into concrete campaign rules you can apply before you hit "launch."
Fair lending law prohibits discrimination in credit. In the US, the core statutes are the Equal Credit Opportunity Act (ECOA) and the Fair Housing Act (FHA). They ban treating people differently based on protected characteristics: race, color, religion, national origin, sex, marital status, age, and more.
For marketing, this matters in two ways:
Digital targeting made redlining easier to commit by accident. In 2019 the US Department of Housing and Urban Development charged Facebook over ad tools that let advertisers exclude users by proxies for protected classes. The lesson: your audience-selection logic is a fair-lending decision.
UDAAP stands for Unfair, Deceptive, or Abusive Acts or Practices, enforced by the CFPB and the Federal Trade Commission (FTC). Break down the three words, because each is a separate test:
The CFPB keeps a plain-language explainer here: CFPB on UDAAP.
In the UK and Europe, this is more explicit. The Financial Conduct Authority (FCA) introduced the Consumer Duty (in force since July 2023), which requires firms to deliver "good outcomes" and pay special attention to customers in vulnerable circumstances: poor health, low financial resilience, recent life shocks (bereavement, job loss), or low capability.
The FCA defines a vulnerable customer as someone especially susceptible to harm, particularly when a firm is not acting with appropriate care. See the FCA Consumer Duty overview.
The US has no single "Consumer Duty," but the abusive prong of UDAAP covers similar ground. Either way, the marketing rule is the same: do not design campaigns that exploit distress or confusion.
Abstract law is useless at 4pm before a launch. Here are the concrete rules.
A "proxy" is a data point that stands in for a protected characteristic. ZIP code proxies for race. Certain first names or app-usage patterns proxy for age or national origin.
Concrete check: for every credit campaign, list your targeting variables and ask, "Could this variable correlate with a protected class?" If yes, document a legitimate business reason or drop it.
Example: targeting a personal loan by "estimated household income" is defensible. Targeting by "interested in Spanish-language content" for a worse product is not.
Never promote a product to a segment that predictably cannot afford it.
Example: marketing a high-limit revolving credit line to a list filtered for "recently declined for other credit" or "high existing debt-to-income" is a pressure-selling red flag under both UDAAP and Consumer Duty.
Countdown timers, "only 2 left," and artificial urgency are common in retail. In banking they are dangerous. Urgency that pushes a customer past careful consideration of a credit decision can be read as abusive.
Concrete check: for credit and high-cost products, remove urgency mechanics unless they reflect a genuine, factual deadline.
The "0% APR" cannot be in 48-point font while "for 6 months, then 24.9% variable" hides in grey 8-point text. APR (Annual Percentage Rate) is the yearly cost of borrowing including certain fees. US disclosure rules for it come from the Truth in Lending Act (TILA) and its Regulation Z.
Concrete check: the key limiting terms (rate after promo, fees, eligibility conditions) must be clear and proximate to the headline claim.
The deception test uses the net impressionimpressionThe total number of times an ad or piece of content is displayed, regardless of clicks. Each display counts as one impression, even to the same person.View full definition → on an ordinary reader, not the technically-true fine print. "You are pre-approved" when approval still depends on a credit check is a classic net-impressionimpressionThe total number of times an ad or piece of content is displayed, regardless of clicks. Each display counts as one impression, even to the same person.View full definition → failure.
Suppose your campaign promotes a credit card with a $10,000 limit. You want a rough pre-launch filter to avoid targeting people who clearly cannot service it.
A common lending guardrail is the debt-to-income (DTI) ratio: monthly debt payments divided by gross monthly income. Note: this is an illustrative marketing suppression rule, not a lending decision or advice.
Assume minimum monthly payment ~ 3% of a used balance.
If a marketed customer already has DTI = 45% (estimate, illustrative),
adding a plausible $200/month payment on this card
pushes them toward or past the ~50% zone many lenders treat as high risk.
Rule: suppress prospects whose modeled post-offer DTI exceeds an agreed
threshold (e.g. 50%), documented and reviewed with compliance.The point is not the exact number. It is that your marketing list has an affordability suppression layer, and you can show the regulator the logic.
Every campaign should pass a documented gate before launch. A workable checklist:
1. Targeting review: variables listed, proxy risk assessed, exclusions justified.
2. Product-segment fit: does this offer suit this audience's likely circumstances?
3. Vulnerability screen: are we excluding or handling with care lists tied to distress (recent bereavement data, gambling-block flags, debt-collection status)?
4. Claims and disclosures: headline claim tested for net impressionimpressionThe total number of times an ad or piece of content is displayed, regardless of clicks. Each display counts as one impression, even to the same person.View full definition →; material terms clear and proximate; APR and fees compliant with Reg Z.
5. Pressure audit: no artificial urgency on credit products.
6. Record keeping: approvals, rationale, and the creative saved. The FCA Consumer Duty and CFPB both expect firms to evidence good outcomes, not just intent.
Assign a named marketing-compliance approver. "Everyone checked it" means no one did.
Knowledge check
1. A marketing team builds a mortgage campaign audience map that, while not explicitly referencing race, ends up excluding neighborhoods that are predominantly composed of minority residents. What fair-lending concept does this most directly illustrate?
2. Why does the lesson emphasize that 'your audience-selection logic is a fair-lending decision'?
3. The lesson notes that much of the harm in the Wells Fargo settlement traced back to how products were 'sold and communicated, not just how they were priced.' What broader principle does this illustrate for marketers?
4. A bank shows a high-cost credit-builder card to one ZIP code cluster and a premium rewards card to another, where the split correlates with race. Which practice does this best exemplify?
5. Select ALL correct answers about how fair-lending law (ECOA and FHA) applies to marketing campaigns.
Select all the correct answers.
6. Select ALL correct answers about the consumer-protection duties that shape banking campaigns.
Select all the correct answers.
Three recurring failure patterns:
The lookalike trap. Marketing builds a "lookalike" audience (people similar to existing good customers) on a social platform. If your existing base skews toward one demographic, the algorithm can amplify that skew and effectively redline. Fix: constrain and audit lookalikes for credit products, and prefer broad reachreachThe number of unique people exposed to your message in a given period. Unlike impressions, reach counts each person once, no matter how often they see it.View full definition → with affordability suppression over narrow amplification.
The reactivation of dormant distress. A "we miss you" campaign re-targets lapsed customers, some of whom lapsed because they got into financial trouble. Re-pushing credit to them can be abusive. Fix: cross-reference reactivation lists against hardship and collections flags.
The affiliate blind spot. You pay affiliates or lead generators who write their own ad copy. Their "guaranteed approval" claim is still your legal exposure. The CFPB has repeatedly held sponsoring firms responsible for partner marketing. Fix: contractually control affiliate creative and monitor it.