BNPL Rules Shift, but Pay-in-Four Habit Endures

Buy now, pay later products have evolved from a checkout feature into a form of consumer credit, drawing closer scrutiny of every company involved in delivering them. If payment processors, platforms and merchant-service providers are treated as BNPL service providers, they may inherit licensing, disclosure, dispute-handling and data-governance duties even when they do not set loan terms. That would force payments firms to redesign underwriting controls, merchant oversight and checkout workflows.

The Oregon Division of Financial Regulation proposed a bulletin in June 2026 requiring nonbank BNPL lenders and certain service providers to obtain licenses through the Nationwide Multistate Licensing System, with comments due July 17. Oregon requires a consumer-finance license for consumer loans of $50,000 or less lasting more than 60 days and caps the annual percentage rate at 36%. The Financial Technology Association opposed extending licensing to platforms, marketplaces, processors and merchant-service providers that merely facilitate another company’s BNPL product.

Buy now, pay later products typically split a retail purchase into four installments and often carry no interest, but missed payments can trigger fees and borrowers can stack loans across platforms. The six largest providers originated 277.3 million loans financing $33.8 billion of merchandise in 2022, according to the Consumer Financial Protection Bureau. After the CFPB said in May 2025 it would deprioritize enforcement of a Biden-era BNPL policy, states moved to fill the gap, raising the prospect of costly, fragmented licensing for lenders operating nationwide.

New York’s Department of Financial Services formally published BNPL rules on July 15, 2026, opening a 60-day comment period through September 14. The proposal requires licensing, provides an $8 safe harbor for penalty fees and would take effect 180 days after adoption. Oregon’s Division of Financial Regulation separately proposed requiring nonbank lenders and service providers to obtain licenses. Loans of $50,000 or less due within 60 days would fall under payday-lending rules, while longer-term products would require consumer-finance licenses. Oregon’s comment period closed July 17, as industry critics warned the guidance stretches decades-old statutes beyond their intended scope.

Buy Now Pay Later (BNPL) “Pay in 4” plans typically split a purchase into no more than four installments over six to eight weeks, with an average loan size of $135, according to the Financial Technology Association. The product has gained importance as households contend with cost-of-living pressures and high credit-card interest rates. Supporters say its fixed schedules and lack of revolving balances offer flexibility, while its growth has sharpened the policy debate over access, underwriting and consumer safeguards.

On July 22, the FTA released a HarrisX survey of 1,890 U.S. adults conducted online from June 18 to June 23, 2026. It found 91% of BNPL users and 77% of all adults viewed the plans as a net positive, while 87% of users said they helped reduce reliance on high-interest credit cards. Some 88% of users, versus 75% of Americans overall, said elected officials should protect access. The industry group said it supports appropriate regulation that preserves payment flexibility while maintaining consumer protections.

Buy now, pay later is evolving from a single-provider relationship into a financial toolkit for U.S. consumers. PYMNTS Intelligence said shoppers increasingly compare BNPL services by loan size, repayment period, interest rate, fees and merchant availability. That flexibility gives borrowers more control over cash flow, but fragmented accounts can leave lenders with an incomplete view of customers’ obligations while increasing underwriting, identity-theft and application-fraud risks.

A PYMNTS report published July 20, 2026, drawing on 10 surveys of U.S. adults between April 2025 and May 2026, found that 74% of BNPL users had used at least two providers in the previous three months as of May, up from 68% in April 2025. Some 49% used two or three providers and 25% used four or more. Affirm led with 45% usage, followed by Klarna and PayPal Pay Later at 44% each and Afterpay at 42%. The report disclosed no aggregate transaction or loan amount.

Buy now, pay later services have gained popularity worldwide for their convenience, but limited oversight has raised concerns about mounting consumer debt. The UK Financial Conduct Authority has introduced new rules bringing BNPL formally under financial regulation. Beyond curbing credit risk and protecting consumers, the changes directly affect vulnerable groups’ access to finance, making the balance between preventing abuse and protecting marginal borrowers a central issue.

The UK’s new BNPL regulations formally took effect on July 15, 2026, covering about 11 million users and providing protection for purchases ranging from £100 to £30,000. However, a requirement for providers to conduct rigorous affordability checks has drawn controversy. Financial inclusion organization Fair4All Finance warned that the rules could exclude as many as 20% to 30% of marginal borrowers, pushing vulnerable consumers toward loan sharks and other forms of underground lending.

Buy now, pay later, or BNPL, allows consumers to receive goods upfront and pay in installments, often through a four-payment, interest-free plan. But standards governing disclosures, refund disputes, credit reporting and fees remain inconsistent. On May 6, 2025, the U.S. Consumer Financial Protection Bureau said it would not prioritize enforcement of related Regulation Z requirements. It then withdrew its 2024 interpretive rule on May 12, increasing the importance of state efforts to fill the regulatory vacuum.

The New York State Department of Financial Services on February 23, 2026, unveiled proposed 3 NYCRR Part 423, which would require BNPL providers to obtain licenses, assess borrowers’ ability to repay, disclose credit-reporting practices, and establish dispute-resolution and data-protection mechanisms. The safe-harbor cap for default fees would be $8, with repeat charges prohibited for a single incident. The proposal initially opened for a 10-day comment period, followed by a separate 60-day public-comment period after formal publication. It would take effect 180 days after adoption and publication.