In this lesson
- Opening
- 1. The two questions that unlock the whole ladder
- 2. Rung one — take it back to the company first
- 3. The credit bureaus — teeth for a report error (recap of Lesson 36)
- 4. The CFPB — how to file a complaint
- 5. What a CFPB complaint actually does — and the honest 2026 caveat
- 6. Document Walkthrough — a CFPB complaint, field by field
- 7. The FTC — the pattern database for scams and fraud
- 8. Your state Attorney General — a consumer-protection litigator, now front-line
- 9. Your state financial regulator — where the license is the leverage
- 10. The prudential regulators — who supervises your bank or credit union
- 11. The sharpest teeth — statutory damages and a consumer attorney
- 12. Legal aid and small-claims court — for a concrete sum
- 13. Which rung for which wrong — the master map
- 14. The anatomy of a complaint that gets action
- 15. Document Walkthrough — an effective demand letter, field by field
- 16. What actually works — and what's theater
- 17. Predator Watch — fake-recourse and recovery scams
- 18. If this already happened to you
- 19. The recourse stack — the master ladder
- 20. Most common questions
- 21. Check yourself — the "where do I complain?" router
- Glossary — the terms this lesson introduced
Disputes & Complaints
You've been wronged by a lender, a servicer, a collector, or a bureau — and you don't know whether complaining does anything, who actually helps, or where the real teeth are. This is the map: the recourse ladder as a skill. You'll learn to start where the wrong happened, then climb to the venue that can actually force a fix — the credit bureaus for a report error, the CFPB (with its honest 2026 caveat), the FTC for scams, your state Attorney General and financial regulator now on the front line, the prudential regulator that supervises your bank or credit union, and — the sharpest teeth of all — a consumer attorney the law pays and small-claims court for a concrete sum. You'll file a CFPB complaint field by field, write a demand letter that gets action, learn which rung has teeth for which wrong, and tell the real free channels from the recovery scams that prey on people who've already been burned.
What you'll learn
- Replace the fear ("does complaining even do anything?") with a system: there is a recourse ladder, each rung fits a specific wrong, and the whole skill is matching the wrong to the venue that can actually force a fix — asking, at every step, two questions: where did this happen, and who has teeth over it?
- Start where the wrong happened — take it back to the lender, servicer, or creditor first, in writing, escalating to the "office of the president" when the front line stalls — because that documented first step both often fixes the problem and builds the paper trail every higher rung will ask for.
- Route a report error to the venue with teeth over it — the credit bureaus under the Fair Credit Reporting Act (recap of Lesson 36) — and know that as of June 2026 the CFPB itself asks you to finish that bureau dispute before escalating a credit-reporting complaint to the Bureau.
- File a CFPB complaint the right way — the product, the company, the dated facts, the documents, and a specific desired resolution — understand the ~15-day company response and the closure categories it produces, and hold an honest, even-handed read of what the complaint achieves in 2026 given the Bureau's cut funding and contested staffing, so you file it to build a record and pair it with your state.
- Send scams and fraud to the FTC (ReportFraud.ftc.gov and IdentityTheft.gov) understanding what it is — a pattern database that feeds enforcement, not a caseworker who resolves your individual report — and lean on your state Attorney General (a consumer-protection litigator now front-line) and your state financial regulator (which licenses and can discipline the lender), and know which federal prudential regulator — NCUA, OCC, the Federal Reserve, or the FDIC — supervises your particular bank or credit union.
- Reach for the sharpest teeth when you need them: a consumer attorney the law pays through the FDCPA and FCRA fee-shift (often on contingency), free legal aid if you qualify, and small-claims court for a specific provable dollar sum — knowing statutory damages, the deadlines to sue, and that winning a judgment is separate from collecting it.
- Write a complaint that actually gets action (facts → harm → documents → a specific ask → a deadline), tell what genuinely has teeth from what is theater, and spot fake-recourse and recovery scams by one rule: every real complaint channel is free and filed by you — no legitimate agency charges a fee to hear your complaint or guarantees to recover your money for an upfront payment.
Opening
The lesson header for Loans Lesson 42, Disputes and Complaints — the recourse capstone that closes Level 300 — listing what you will be able to do by the end: turn the question of who to complain to into two questions, where the wrong happened and which venue has teeth over it, and read a channel as either building a record or having teeth; climb the ladder in order, starting with the company or source in writing up to the office of the president, then the specialist venue with teeth such as the credit bureaus for a report error; file a CFPB complaint field by field and weigh it honestly for 2026, then reach the teeth of the ladder — your state attorney general and financial regulator, the FTC for scams, a consumer attorney the law pays, and small-claims court; and write a complaint that gets action while refusing the fake-recourse and recovery scams by one rule, that every real channel is free and filed by you — followed by the people the capstone follows, Fatima Osman routing a loan scam, Maya Okafor routing a billing and credit-report error, and the ensemble of Darnell, Gloria, and the Sullivans.
Something went wrong, and it wasn't your fault. Maybe a bank mis-posted your on-time payment and dinged your credit for a late you never made. Maybe a "lender" took a fee for a loan that never showed up. Maybe a servicer lost your paperwork, a collector kept calling after you disputed the debt, or a bureau put someone else's account on your report. Whatever it was, you're left holding the same three questions, and they're the ones this whole lesson exists to answer: does complaining even do anything — or is it shouting into a void? Who actually helps? And if there are real teeth somewhere in this system, where are they?
Here is the reassurance, stated plainly at the top: there is a system, it is knowable, and complaining done right is not shouting into a void — it is pulling specific levers, each attached to a specific kind of force. The mistake almost everyone makes is treating "complaining" as one undifferentiated act, firing off an angry message to whoever is nearest and hoping. It doesn't work that way. There is a ladder of places to turn, and the single skill this capstone teaches is matching the wrong you suffered to the rung that has power over it — the venue that can actually make someone fix it. A credit-report error, a lying collector, a servicing failure, a predatory loan, and an outright scam each have a different rung with teeth. Send the right wrong to the right rung, in the right order, and the system that felt like a void turns into a set of tools.
That means learning a distinction we'll return to at every step: the difference between a place that gives you a record and a place that has teeth. Some channels create a durable, official account of what happened — valuable, because records are what later enforcement and later leverage are built on — but they don't, by themselves, force anyone to do anything. Other channels have actual force: a regulator that can pull a lender's license, a court that can order a refund, a law that pays your attorney to sue. Both matter, but confusing one for the other is how people end up disappointed — filing a report that was only ever going to build a record, and expecting it to hand them a check. Know which is which, and you'll aim your effort where it pays.
Two people carry this lesson, because the ladder fits every kind of wrong. Fatima Osman — 33, a Somali refugee six years in Minneapolis, a certified nursing assistant earning about $41,000, still building a thin credit file — was targeted by a loan scam: a slick outfit that promised her a $5,000 faith-based loan and took a $500 upfront "fee" that vanished along with the loan. Her arc runs the ladder for a scam and for fraud, where the first rung is a dead end and the teeth are elsewhere. Maya Okafor — 24, a dental hygienist in Columbus, Ohio, near-prime, carrying a $3,000-limit card — has the more ordinary wrong: her bank mis-posted a payment, charged her about $59 she didn't owe, and reported a false late to all three bureaus. Her arc runs the ladder for a billing-and-credit-report error, from the company itself all the way to small-claims court. And around them, briefly, the borrowers this whole trouble arc has followed — Darnell with a collector, Gloria with medical debt, the Sullivans with a servicer — each finding their own rung, because there is one for every problem.
One honest note that runs under everything, because 2026 is a strange year for this. The federal agency most people picture when they think "consumer complaint" — the Consumer Financial Protection Bureau — has been sharply cut back this year: its funding was reduced by law, most of its staff and nearly all of its enforcement and supervision are gutted or tied up in court, and we will be honest about that every single time it comes up, never dismissing it and never overselling it. But — and this is the part that matters — your recourse does not live or die with any one agency. The rungs with the most reliable teeth in 2026 are the ones closest to you and the ones you work yourself: your own state, and the laws that let you (or an attorney the law pays) act directly. This lesson is the map to all of it. It's also the closer of Level 300, so where the specific fights live in their own lessons — the credit-report dispute in Lesson 36, the collector fight in Lesson 38, being sued in Lesson 35 — we'll recap and route rather than re-teach. Let's start with the two questions that unlock the whole ladder. That's §1.
1. The two questions that unlock the whole ladder
Before any phone number or web form, install the mental model, because it's what turns a scattered pile of agencies into an ordered ladder you can climb. When something goes wrong, you ask two questions, in this order, and the answers point you to the right rung every time.
A card showing the two questions that unlock the recourse ladder. Question one: where did the wrong happen? Start at the source — the ladder almost always starts where the problem lives, because that often fixes it and always builds the record higher rungs require. Question two: which venue has teeth for this specific wrong? Climb toward force that fits, because teeth are wrong-specific — the credit bureaus for a report error, a state regulator for a licensed company, small-claims court for a concrete sum, an attorney the statute pays for a broken law. Below, the key distinction: a record channel creates a durable official account but does not by itself force a fix (an FTC report, a CFPB complaint in 2026), while a teeth channel can actually compel one (the bureaus under the FCRA, a court, a regulator that can pull a license).
The first question is where did the wrong happen? — because the ladder almost always starts at the source. If a servicer misapplied your payment, the servicer is where the fix lives; if a bureau is reporting bad data, the bureau is the one that can change it. Starting at the source does two things at once. It often just works — a surprising share of problems are resolved by a clear, documented complaint to the company itself, because the front line was a mistake and someone with authority can reverse it. And even when it doesn't work, it builds the record every higher rung will ask for: "I contacted them on this date, here's what I asked for, here's what they said." Skipping the source and jumping straight to a regulator usually just gets you routed back down to do it anyway. So: start where it happened.
The second question is which venue has teeth for this specific wrong? — because when the source won't fix it, you don't climb randomly; you climb toward force that fits the problem. And the crucial insight is that teeth are wrong-specific. For an error on your credit report, the venue with real teeth is the credit bureaus, because the Fair Credit Reporting Act legally requires them to investigate and correct — a court or a federal complaint is slower and weaker for that exact problem. For an abusive collector or a botched servicing job, a state regulator that licenses the company (and can threaten that license) often has sharper teeth than a distant federal agency. For a concrete overcharge, small-claims court can order the money back. For a law broken — a lying collector, a bureau that won't fix an error — a consumer attorney the statute pays can extract damages no complaint form ever will. Matching the wrong to the teeth is the entire skill; the rest of this lesson is just learning what each rung is good for.
Hold those two questions together and the ladder writes itself, bottom to top: the company/source first, then the specialist venue with teeth for that wrong (the bureaus for report errors), then the CFPB and the FTC (strong on record, uneven on teeth in 2026), then your state Attorney General and state financial regulator (increasingly the front line for real force), then the federal prudential regulator that supervises your specific bank or credit union, and finally the teeth of last resort — a consumer attorney, legal aid, and small-claims court. You rarely climb all of it; you climb until the problem is fixed and stop. We'll take the rungs in order, and the first is the one people are most tempted to skip. That's §2.
2. Rung one — take it back to the company first
The first rung feels too obvious to matter, which is exactly why people skip it and then wonder why the higher rungs bounce them back: go to the company that wronged you — the lender, the servicer, the creditor — and give it a documented chance to fix it. "Documented" is the whole point. A frustrated phone call that leaves no trace is not this step; a clear, dated, written complaint that states the problem and the specific fix you want — and that you keep a copy of — is. This is the step that most often actually resolves things, and the step that makes every later rung take you seriously.
A card on the first rung of the recourse ladder: take the wrong back to the company itself, in writing, and escalate up the chain. The escalation ladder runs from front-line customer service, to a supervisor or manager, to the office of the president — the senior executive customer relations team large banks and lenders keep to resolve complaints that reach an executive or a regulator, where a calm specific written note routinely reaches someone who can reverse a fee or fix a report — and finally to the rungs above with your documented record in hand if the company still will not move. Two habits make it work: document relentlessly (every date, rep name, reference number, and copy), and name the specific resolution you want as a number or concrete action rather than a vague make-it-right.
Do it in writing, and do it up the chain. Start with normal customer service, but if the front line can't or won't help — the script runs out, the rep has no authority, you're told "nothing we can do" — you escalate, and there is a real, named tactic for this that most people never learn: the office of the president. Large banks, lenders, and servicers keep a small, senior "executive customer relations" or "office of the president" team whose job is resolving complaints that reach a certain heat — the ones that show up at an executive's inbox, a regulator, or the CFPB. A calm, specific letter or email addressed to that team, or to the CEO's office, routinely gets a call back from someone who can actually reverse a fee, fix a report, or override the script. It isn't a magic word; it's simply climbing to the level of the company that has the authority the front line lacked.
Two habits make this rung work and quietly power everything above it. First, document relentlessly: every date, the name of every rep, every call reference or case number, and copies of every letter and reply. When Maya's bank mis-posts her payment, the first thing she does isn't panic — it's write down that she paid $250 on March 15, that the payment was recorded four days late, and that she was charged a $40 late fee she'll want reversed. That log is the spine of her whole case. Second, name the specific resolution you want. "Fix it" is not a request; "reverse the $40 late fee, refund the roughly $19 in interest I lost my grace period on, and correct the 30-day late you reported to all three bureaus" is. A specific ask is answerable, it's what an executive team can act on, and it becomes the exact language you'll reuse at every higher rung. And when the company still won't move, you don't argue in circles — you climb to the venue with teeth over that particular wrong. If the wrong is a credit-report error, that venue has a name and a law behind it. That's §3.
3. The credit bureaus — teeth for a report error (recap of Lesson 36)
Here's the first place the "which venue has teeth?" question changes the answer completely. If your wrong is an error on your credit report — an account that isn't yours, a paid debt shown as unpaid, a late payment you never made — the rung with real, legal teeth is not a court and not a federal complaint. It's the credit bureaus themselves, because a federal law forces them to act. We taught the mechanics in full in Lesson 36; here we only recap and route, because the capstone point is which venue, not how the dispute works line by line.
A routing card for a credit-report error: the venue with real teeth is the credit bureaus, because the Fair Credit Reporting Act legally requires them to investigate a dispute, usually within 30 days, and correct or delete anything they cannot verify. So a report error routes first to the bureaus (Equifax, Experian, TransUnion), then, only after that dispute, to the CFPB with its honest 2026 caveat, and — if the error caused real harm and the law was broken — to an FCRA attorney for statutory damages under sections 616 and 617. A live note: as of June 24, 2026 the CFPB added a portal notice that for a credit-reporting problem you must first exhaust your dispute directly with the credit bureaus before escalating to the Bureau, prompted by a roughly 3,700% surge in credit-reporting complaints. This is a recap of Lesson 36.
The teeth come from the Fair Credit Reporting Act (the FCRA). When you dispute an item with a bureau — Equifax, Experian, or TransUnion — the law generally requires it to investigate, usually within 30 days, to check with the company that furnished the information, and to correct or delete anything it can't verify. That is genuine force: not a request the bureau may ignore, but a duty it can be sued for breaching. So for Maya, whose bank reported a false 30-day late to all three bureaus, the report error itself routes here — she disputes the false late with each bureau, in writing, with her proof that the payment was on time, and the FCRA clock starts. (Dispute with the furnishing bank too, but the bureau route is the one that triggers the legal investigation.) This is why matching the wrong to the venue matters: sending a report error to the FTC would only build a database entry; sending it to the bureaus invokes a law that can force the fix.
As of June 24, 2026, the CFPB added a notice to its own complaint portal emphasizing that for a credit-reporting problem you must first exhaust your dispute directly with the credit bureaus before escalating to the Bureau. (It's operationalizing a rule that was already in the FCRA, prompted by a roughly 3,700% surge in credit-reporting complaints — from about 150,000 in 2019 to over 5 million in 2025 — much of it driven by mass-filing credit-repair outfits and AI tools.) The practical takeaway is exactly the ladder's logic: do the bureau dispute first, get their response, and only then escalate. Skipping the bureau step now literally sends you back down to take it.
So the routing rule for this rung is crisp: a credit-report error is a bureau problem first, and only after the bureau's investigation comes back wrong do you climb higher — to the CFPB, and if the error caused real harm and the law was broken, to an FCRA attorney (§11). Keep this template in mind as we go, because every rung above works the same way: it's the right rung for some wrongs and the wrong rung for others. Next up is the one everyone reaches for by name — the CFPB — and the first thing to understand is how filing actually works. That's §4.
4. The CFPB — how to file a complaint
The Consumer Financial Protection Bureau is the agency built specifically for complaints about consumer financial products — credit cards, credit reports, debt collection, mortgages, student loans, bank accounts, auto loans, money transfers. It is not a court and not your lawyer, but it runs something genuinely useful that no other channel does: a structured process that takes your complaint, sends it directly to the company, and requires the company to respond. Before we weigh what that's worth in 2026 (§5), let's see exactly how you file, because the mechanics are simple and the details matter.
A five-step flow of how a CFPB complaint works. Step one, you file — online at consumerfinance.gov/complaint in under ten minutes or by phone at 855-411-2372 — giving the product, the company, dated facts and dollar amounts, up to 50 pages of documents, and the resolution you want. Step two, the CFPB routes it directly to the company, more than 100,000 a week. Step three, the company responds, generally within 15 calendar days and up to 60 in unusual cases, closing it in a category: with monetary relief, non-monetary relief, explanation, or closed. Step four, you review the response and have a 60-day window to give feedback — recorded, though not a court appeal. Step five, the complaint is logged in the public Consumer Complaint Database, anonymized, with your identifying details never published and your narrative published only with your consent.
You file at consumerfinance.gov/complaint — the online form takes most people under ten minutes — or by phone at (855) 411-2372 (TTY (855) 729-2372), 9 a.m. to 6 p.m. Eastern, weekdays. The form asks for a handful of things, and each one is worth getting right: the product and the specific issue; the company (you pick it from a list, or give its details); a plain description of what happened, with the important dates and dollar amounts; up to 50 pages of supporting documents you can attach (statements, letters, screenshots); the resolution you want — the form literally asks what you think would be fair; and your contact information. Notice how much of that you already have if you did §2 properly — the dated log, the specific ask, the copies. A good company complaint and a good CFPB complaint are nearly the same document.
Then the machine runs. The CFPB forwards your complaint to the company — it routes more than 100,000 of these to companies every week — and the company is expected to review and respond, generally within 15 calendar days; in unusual cases it can mark the complaint "in progress" and give a final response within 60 days. You get updates by email and can log in to track it. When the company responds, you get to review that response and have 60 days to give feedback on it — whether it resolved the problem or not. That feedback is not a court appeal and won't re-adjudicate your case (even the CFPB's Ombudsman isn't an appeals court), but it's recorded, and it's part of what makes the mechanism more than a suggestion box: the company knows its answer is being read and rated. What the response is actually likely to be — and what the whole thing is worth in a gutted-agency year — is the honest heart of the matter. That's §5.
5. What a CFPB complaint actually does — and the honest 2026 caveat
This is the section where we're most careful, because the CFPB is where over-promising and dismissing are both easy, and both wrong. Let's separate what the complaint reliably does from what it does not, and then state the 2026 posture straight.
What it does: it forces a direct company response, usually within about 15 days — and for a lot of people that alone is the win, because a complaint that reaches a company through a regulator's channel lands on a different desk than a call to the front line. The company closes the complaint in one of a few categories, and the labels tell you what you got. "Closed with monetary relief" means real, measurable money came back to you. "Closed with non-monetary relief" means they fixed something without a payment — corrected the credit-bureau entry, changed a term, stopped a practice (the three big credit bureaus alone closed more than 2.1 million complaints this way in 2025). "Closed with explanation" means they explained their position or why they won't do more. "Closed" means closed with neither. It also creates a durable official record — complaints are retained for years and, in anonymized form, published in a public database that researchers, journalists, and later enforcers mine for patterns. Your single complaint about a mis-posted payment is a data point; ten thousand like it is how a bad practice gets caught.
What it does not do: it does not give you legal advice, does not represent you, and does not adjudicate your case like a judge. A company can respond "we reviewed this and believe we acted correctly," close it "with explanation," and that's a permitted outcome — the CFPB didn't rule against you, it ran the process. So a CFPB complaint is a powerful lever and a record-builder; it is not a verdict. Which is exactly why you never rest your whole case on it.
The honest, even-handed 2026 caveat on the CFPB, showing two things that are true at once. What still works: the complaint portal is open and the company-response mechanism still runs, with companies generally answering within 15 days; the Bureau overhauled the complaint system on June 24, 2026, a sign intake is operating; and the official record it creates has real value. What has been cut: a July 4, 2025 law cut the funding cap from 12 percent to 6.5 percent of the Federal Reserve's operating expenses, roughly halving the budget to about $466.8 million for 2026; enforcement was targeted for about an 80 percent cut and supervision 85 to 90 percent, with about 22 enforcement actions dismissed and supervision paused for most of a year; and a mass layoff of nearly 1,500 staff was ordered then blocked by a court, with the case NTEU v. Vought unresolved in mid-2026. The rule: file the complaint to build a record, but do not rely on it as a sole remedy — pair it with your state.
Now the 2026 caveat, stated honestly and evenhandedly, because this course always does. Two things are true at once. First, the complaint machine still runs: the portal is open, and the company-response mechanism still works — you file, the company still generally answers in about 15 days. In fact, on June 24, 2026 the Bureau overhauled the complaint system (adding identity verification, standardizing how companies label closures, and the credit-bureau-dispute-first notice from §3), which is a sign the intake side is operating, not shutting down. Second, and this is the sober part: the Bureau's muscle behind those complaints has been largely cut away. A July 4, 2025 law (the One Big Beautiful Bill Act) slashed its funding cap from 12% to 6.5% of the Federal Reserve's operating expenses — roughly halving its budget, to about $466.8 million for 2026. Its enforcement division was targeted for roughly an 80% cut and supervision for around 85–90%; it dismissed about 22 enforcement actions; supervision was paused for most of a year before a scaled-back resumption in late 2025. A mass layoff of nearly 1,500 staff was ordered and then blocked by a court; that fight (a case called NTEU v. Vought) is still unresolved in mid-2026, with the layoffs on hold but the agency's future genuinely contested.
So here is the even-handed rule, and it's the same one this whole lesson teaches: file the CFPB complaint — it's free, it still gets a company response, and it builds the official record that later enforcement (whenever the pendulum swings back) is built on — but do not treat it as your sole or fastest remedy, and do not expect the aggressive federal enforcement of a few years ago to come rescue your individual case this year. Pair it, always, with a rung that has its own teeth in 2026: your state Attorney General and state financial regulator (§8–§9), and — if a law was broken — an attorney (§11). The CFPB is a real, useful channel whose reach is genuinely reduced right now. That's not a reason to skip it; it's a reason not to lean your whole weight on it. Next, let's watch a complaint get filed well, field by field. That's §6.
6. Document Walkthrough — a CFPB complaint, field by field
Abstract advice about "filing a good complaint" only becomes usable when you see one. So here is Maya's actual CFPB complaint about her mis-posted payment, walked field by field the way you'd fill it in — and then the company response that comes back, read honestly for what it does and doesn't settle. This is the centerpiece document of the lesson because it's the artifact most people will actually create, and small choices in it change whether it works.
A full sample of Maya Okafor's CFPB complaint, walked field by field. Product: credit card, also filed under credit reporting, because her wrong has two faces — money and a report error. Issue: a billing dispute and incorrect information on her report. Company: First Ohio National Bank, N.A., selected by name so it routes correctly. What happened, written dated and specific: on March 15, 2026 she paid $250 through the bank's app; it posted March 19; the bank recorded it late, charged a $40 late fee and about $19 in interest, and reported a 30-day late to all three bureaus, and she has the app confirmation showing March 15. Supporting documents: the timestamped app screenshot, the statement showing the fee, and a dated log. The highlighted taught field is the desired resolution, where she writes exactly what she wants: reverse the $40 fee and the roughly $19 in interest — about $59 total — and send a correction to all three credit bureaus removing the 30-day late. Her contact information stays private. Fourteen days later the company response comes back Closed with monetary relief: the bank reverses the $59 and submits a bureau correction. The teaching point is that a specific, dated, evidenced complaint with a concrete ask is what gets acted on — and if it had instead been Closed with explanation, that refusal would simply be the signal to climb to the next rung, with the record in hand.
Read the form top to bottom the way the Bureau routes it. Product and issue: Maya picks "Credit card" and the issue "Problem with a purchase or transfer / billing dispute," plus a second complaint for "Credit reporting" because her wrong has two faces — money and a report error. That dual filing matters: it tells the Bureau (and the company) she wants both the fee reversed and the false late corrected. Company: she selects First Ohio National Bank, N.A. by name from the list — precision here is what makes the complaint routable, and the "N.A." in the name is a clue we'll use in §10. What happened: she writes it the way §2 taught — dated and specific — "On March 15, 2026 I paid $250 through the bank's own app. The payment posted on March 19. The bank recorded it as late, charged a $40 late fee and about $19 in interest I lost my grace period on, and reported a 30-day late to all three bureaus. I have the app confirmation showing March 15." No adjectives, no fury; just facts a stranger can verify.
The next fields are where good complaints separate from venting. Supporting documents: she attaches the app screenshot timestamped March 15, the statement showing the $40 fee, and her one-page dated log. Desired resolution — the field the form frames as "what you think would be fair" — is the highlighted heart of the whole document, because a vague answer here wastes the complaint. Maya writes exactly what she wants: "Reverse the $40 late fee and the ~$19 in interest (about $59 total), and send a correction to all three credit bureaus removing the 30-day late, since the payment was made on time." That is a resolution a company can simply do — and if it refuses, that specific number becomes the exact demand she carries to small-claims court in §12. Finally, her contact information, which stays private (the public database publishes the complaint, but never your identifying details, and your narrative appears only if you consent).
Now the response, and this is where reading honestly pays off. Fourteen days later the complaint comes back "Closed with monetary relief": the bank reverses the $59 and says it has submitted a correction to the bureaus. For Maya, that's a clean win — the two lower rungs (the company, then the CFPB) resolved it, and she never had to climb higher. But watch the alternate ending, because it's common: suppose the bank had instead closed it "with explanation" — "our records show the payment posted late; no adjustment warranted." That is not the end of Maya's road; it's the signal to climb. The credit-report error still routes to the bureaus under the FCRA (§3), the $59 is now a documented, refused demand ready for small-claims court (§12), and the whole paper trail — company complaint, CFPB complaint, company's refusal — is exactly the record her state regulator or an attorney would want. A complaint that gets refused isn't a failure; it's a rung climbed, with the receipts to prove it. Sometimes, though, the wrong isn't a company that will respond at all — it's a scam. For that, the right rung is the FTC. That's §7.
7. The FTC — the pattern database for scams and fraud
Fatima's wrong is a different animal, and it needs a different rung. She responded to an ad for a $5,000 faith-based, no-credit-check loan; the "lender" approved her instantly but required a $500 refundable "insurance fee" paid by gift card before releasing the money. She paid. No loan came, the number stopped working, and the company evaporated. Notice what that does to the ladder: rung one — go back to the company — is a dead end, and the dead end is itself the diagnosis. A real lender you can find and escalate to; a phantom you can't. When the company can't be reached because it never really existed, you're not dealing with a dispute, you're dealing with a scam, and the rung for scams and fraud is the Federal Trade Commission.
A card explaining the FTC as the rung for scams and fraud, and as a pattern database rather than a caseworker. To report a scam or fraud you go to ReportFraud.ftc.gov or call 1-877-382-4357, which is 1-877-FTC-HELP; to report identity theft specifically you go to IdentityTheft.gov or call 1-877-438-4338, which is 1-877-ID-THEFT, and which also builds an official FTC Identity Theft Report and recovery plan. Your report feeds the Consumer Sentinel Network, a secure database shared with more than 2,000 law-enforcement agencies that use it to spot patterns and build cases — consumers reported $12.5 billion in fraud losses in 2024. But the critical framing is that the FTC does not resolve your individual complaint and is not your caseworker: it will not open a file on your money, call the scammer, or get your money back. It is a record rung, valuable for stopping predators. To try to recover money you paid, contact your payment provider directly, and for teeth over a lender in your state, go to your state attorney general.
You report a scam to the FTC at ReportFraud.ftc.gov, or by phone at 1-877-382-4357 (1-877-FTC-HELP); if the scam involved your identity — someone using your Social Security number or opening accounts in your name — the dedicated site is IdentityTheft.gov (phone 1-877-438-4338, 1-877-ID-THEFT), which also builds you an official FTC Identity Theft Report and a step-by-step recovery plan (that's the Lesson 36 machinery). But here is the single most important thing to understand about this rung, because misunderstanding it is how people feel let down: the FTC does not resolve your individual complaint and is not your caseworker. It says so plainly. It will not open a file on your $500, call the scammer, or get your money back for you. What it does is feed your report into the Consumer Sentinel Network — a secure database shared with more than 2,000 law-enforcement agencies — where it becomes one of millions of signals used to spot patterns and build cases against the operations behind them. (Consumers reported $12.5 billion in fraud losses in 2024; the database is how the biggest predators get found.)
So this is the purest example of the record-versus-teeth distinction from §1. Reporting to the FTC is a record rung: high value for the system, essentially none of it directed at your individual refund. That's not a criticism — it's what a national fraud database is for, and it's genuinely worth doing, because the report you file about the outfit that took Fatima's $500 is what helps shut it down before it takes someone else's. But if Fatima wants a shot at her actual money back, the FTC won't be the venue; her real levers are elsewhere. The legitimate way to try to claw back a payment is to go to whoever moved the money — the gift-card company, the wire service, the bank or card issuer — immediately, report the fraudulent transaction, and ask them to reverse it (gift cards are the hardest to recover, which is exactly why scammers demand them). And the rung with teeth over a lender operating in her state — real or fraudulent — is her state's own consumer-protection apparatus, which in 2026 is doing more of this front-line work than the federal agencies. That's §8.
8. Your state Attorney General — a consumer-protection litigator, now front-line
If there is one shift this whole lesson wants you to absorb about 2026, it's this: as the federal watchdog pulled back, state Attorneys General stepped forward, and for a great many consumer-finance wrongs your state AG is now the most consequential rung with teeth. An Attorney General is your state's top lawyer and law-enforcement officer, and every state's AG runs a consumer-protection division that takes complaints, mediates them, investigates patterns, and — this is the teeth — sues companies on behalf of the state's residents.
A side-by-side comparison of the two distinct state powers for consumer-finance recourse. The state Attorney General is the litigator: it sues companies on behalf of the state's residents, enforcing state unfair, deceptive, or abusive practices law to win injunctions, restitution, and penalties, and can even enforce the federal consumer-finance law directly under Dodd-Frank section 1042; use it for deceptive or unfair conduct you want investigated, stopped, and the victims made whole; find it through your state AG's consumer-protection office via naag.org, though NAAG itself only routes you home; and in 2026 it is increasingly the front line as the CFPB pulled back, filing multistate actions. The state financial regulator is the licensor: it licenses and supervises the banks, lenders, servicers, money transmitters, and debt collectors operating in your state, and its leverage is the license — it can examine, discipline, or revoke it; use it for a licensed company you want examined and disciplined; find it as your state's Department of Financial Institutions or Financial Services, such as New York DFS or California's DFPI. Many people file with both.
The teeth are real and worth naming precisely, because they explain why the AG matters more this year. State AGs enforce their state's "unfair, deceptive, or abusive acts and practices" laws — the UDAP or "mini-FTC" statutes every state has — which let them win injunctions (stop doing this), restitution (pay the victims back), and civil penalties. And there's a second, less-known lever: under Section 1042 of the Dodd-Frank Act, state AGs can directly enforce the federal consumer-financial law and CFPB rules themselves — meaning that even with the federal Bureau shrunken, the federal protections it used to enforce can still be enforced, by your state. Through 2025 and into 2026, AGs have used exactly these powers, filing multistate actions on lending, collection, and junk-fee abuses, and several states passed "mini-CFPB" laws to strengthen their own hand. When people say the enforcement action moved to the states, this is what they mean concretely.
How you actually reach yours: search for your state's Attorney General consumer-protection office directly, or use the National Association of Attorneys General finder at naag.org to get to it. (One thing to know so you don't waste a step: NAAG itself is just the AGs' membership organization — it does not take your individual complaint and will only route you to your own state's office.) For Fatima, this is a live rung: the outfit that took her $500 was doing business with Minnesota residents, so a complaint to the Minnesota AG's consumer division puts her fraud in front of a litigator with subpoena power and the ability to sue — far more force than the FTC's database, aimed much closer to home. For Maya, if First Ohio had refused her, the Ohio AG's consumer division is a rung with teeth over a deceptive billing practice. The AG is the litigator. But there's a second state power, aimed at a different kind of leverage — not suing the company, but controlling its license. That's §9.
9. Your state financial regulator — where the license is the leverage
Alongside the Attorney General sits a different state office with a different kind of teeth, and knowing the difference lets you aim better. Your state financial (or banking) regulator — variously a Department of Financial Institutions, a Department of Financial Services, or, in California, the Department of Financial Protection and Innovation — is the office that licenses and supervises the financial companies operating in your state: state-chartered banks and credit unions, mortgage lenders and servicers, money transmitters, and, crucially for this trouble arc, debt collectors and consumer lenders. Where the AG is a litigator who sues, the regulator is a licensor who supervises — and its leverage is the license itself.
That distinction is practical, not academic, because it tells you which office to write for which purpose. Complain to the Attorney General when the wrong is deceptive or unfair conduct and you want it investigated, stopped, and the victims made whole — the AG can sue and win restitution. Complain to the state financial regulator when the company is one it licenses and you want the entity itself examined and disciplined — because a regulator can put a company's license, and therefore its ability to do business in your state at all, at risk. For a licensed lender, servicer, or collector, that threat concentrates the mind far more than another letter. Many people, sensibly, file with both: the AG for the deceptive practice, the regulator to flag the licensee. A collector who is untouchable to a distant federal agency is very touchable to the state office that granted its license to collect in the first place.
For our cases, the routing is concrete. Fatima's fraudulent "lender" was operating without the license a real Minnesota lender must hold — so the Minnesota state financial regulator both wants to know (it warns the public about unlicensed operators) and, if any real entity is behind it, can act on the licensing side while the AG pursues the fraud. For the Sullivans, whose story runs through mortgage servicing, a servicer that mishandles their escrow or loses their loss-mitigation paperwork is squarely a licensed entity a state regulator supervises — a rung with direct teeth over the exact company failing them. The lesson of §8 and §9 together: your state gives you two distinct powers — a litigator and a licensor — and in 2026 they are, for most consumers, the most reliable teeth on the ladder. But some institutions aren't supervised by your state at all; they answer to a federal prudential regulator, and knowing which one is its own small skill. That's §10.
10. The prudential regulators — who supervises your bank or credit union
Banks and credit unions have a federal supervisor — a "prudential" regulator, meaning one that oversees the institution's safety, soundness, and treatment of customers — and every one of them takes consumer complaints. The catch that trips people up is that there are four of them, and which one covers your institution depends on what kind of charter it has. Send your complaint to the wrong one and it gets forwarded (or dropped); send it to the right one and you've reached a federal supervisor with real authority over that specific company. So this rung is really one skill: figuring out who supervises your bank.
A map of which federal prudential regulator supervises which bank or credit union, with the tell and consumer contact for each. The NCUA covers credit unions — the tell is credit union in the name, member-owned — at 1-800-755-1030 or MyCreditUnion.gov. The OCC covers national banks and federal savings associations — the tell is National or N.A. in the name — at 1-800-613-6743 or HelpWithMyBank.gov. The Federal Reserve covers state-chartered banks that are members of the Federal Reserve System, at 1-888-851-1920 or federalreserveconsumerhelp.gov. The FDIC covers state-chartered banks that are not Fed members, at 1-877-275-3342, which is 1-877-ASK-FDIC, or ask.fdic.gov. A common trap: the FDIC insures nearly every bank's deposits, but FDIC-insured is not the same as FDIC-regulated — plenty of insured banks are actually supervised by the OCC or the Fed. To find your bank's regulator, use the FDIC BankFind tool or the OCC's Who Regulates My Bank page. The CFPB is an additional complaint channel for the largest institutions, those over $10 billion in assets.
Here's the map, with the tell for each. If your institution is a credit union — member-owned, with "credit union" in its name — its regulator is the NCUA, the National Credit Union Administration; you reach its Consumer Assistance Center at 1-800-755-1030 or through MyCreditUnion.gov. If it's a national bank or a federal savings association, its regulator is the OCC, the Office of the Comptroller of the Currency — and the tell is in the name: national banks almost always carry "National" or the suffix "N.A." (National Association). You reach the OCC at HelpWithMyBank.gov or its Customer Assistance Group at 1-800-613-6743. (This is why Maya noticed the "N.A." in "First Ohio National Bank, N.A." back in §6 — it tells her the OCC is her bank's federal regulator.) If it's a state-chartered bank that is a member of the Federal Reserve System, the Fed is its regulator, via Federal Reserve Consumer Help at 1-888-851-1920. And if it's a state-chartered bank that is not a Fed member, the FDIC is its regulator; you reach the FDIC's consumer line at 1-877-275-3342 (1-877-ASK-FDIC) or ask.fdic.gov.
Two things keep you from getting lost here. First, a common trap: the FDIC insures the deposits at nearly every bank, but insuring your bank is not the same as being its federal regulator — plenty of FDIC-insured banks are actually supervised by the OCC or the Fed. "Is it FDIC-insured?" and "Who regulates it?" are different questions. Second, you don't have to guess: the FDIC's BankFind tool (banks.data.fdic.gov/bankfind-suite/bankfind) and the OCC's plain-language "Who Regulates My Bank?" page will tell you a given bank's charter and primary federal regulator in seconds, and you can always just ask the bank. One more overlap to hold: the CFPB is an additional complaint channel for the largest banks and credit unions (those over $10 billion in assets) — so for a big institution like Maya's you may have both a prudential regulator and the CFPB as options, with the 2026 caveat attached to the latter. With the regulators mapped, we reach the sharpest teeth on the whole ladder — the ones the law puts directly in your hand. That's §11.
11. The sharpest teeth — statutory damages and a consumer attorney
Everything so far has been complaints — asking a company or an agency to act. This rung is different in kind, and it's the one people underestimate most: when a company broke a specific consumer law, you can make it pay you, in court, and for two of the biggest laws in this course the statute is written so that the company also pays your lawyer. That last part changes everything about who can afford to fight, so let's make it concrete.
A card on the statutory-damages teeth — money the law lets you recover without proving out-of-pocket loss. Under the Fair Debt Collection Practices Act, 15 U.S.C. section 1692k, if a debt collector broke the rules you can recover up to $1,000 in statutory damages per lawsuit, plus actual damages, court costs, and your attorney's fees, with a one-year deadline. Under the Fair Credit Reporting Act, sections 616 and 617, a willful violation allows $100 to $1,000 per violation plus punitive damages plus fees, a negligent violation allows actual damages plus fees, and the deadline is the earlier of two years from discovery or five years from the violation. The fee-shift — the losing company pays your lawyer — is why consumer attorneys take these on contingency at no upfront cost. Find one through the National Association of Consumer Advocates at consumeradvocates.org/findanattorney, or free legal aid at lawhelp.org if your income qualifies. This right is self-executing and independent of whether the CFPB or FTC is enforcing anything.
Start with statutory damages — money the law lets you recover without having to prove a dollar of out-of-pocket loss, precisely because the harm (a lie from a collector, a false mark on your report) is often real but hard to price. Under the Fair Debt Collection Practices Act (15 U.S.C. § 1692k), if a debt collector broke the rules — the abuse Lesson 38 catalogs — you can recover your actual damages plus up to $1,000 in statutory damages per lawsuit, plus court costs and your reasonable attorney's fees; the deadline is short, one year from the violation. Under the Fair Credit Reporting Act, the teeth are arguably sharper: for a willful violation (§ 616 / 15 U.S.C. § 1681n) — a bureau or furnisher that knowingly or recklessly reported wrong, like the false late haunting Maya if her bank refused to fix it — you can recover actual damages or statutory damages of $100 to $1,000 per violation, plus punitive damages, plus attorney's fees; for a merely negligent violation (§ 617 / § 1681o) you still get actual damages and fees. The FCRA clock is the earlier of two years from when you discovered the violation or five years from when it happened.
Now the part that makes those rights usable by ordinary people and not just the wealthy: the fee-shift. Because both statutes make the losing company pay your attorney's fees, a consumer lawyer can take your case and get paid by the defendant rather than out of your pocket — which is why consumer-rights attorneys routinely work these cases on contingency, at no upfront cost to you. You are not hiring a lawyer with money you don't have; you're bringing a case the law was designed to make a lawyer want. Two doors to find one: the National Association of Consumer Advocates keeps a directory of about 1,800 consumer attorneys at consumeradvocates.org/findanattorney, and if your income is low, free civil legal aid (federally funded, means-tested at roughly 125% of the poverty line — about $19,950 for one person or $41,250 for a family of four in 2026) is available through your local Legal Services Corporation office, findable at lawhelp.org.
Here's why this rung is the quiet backbone of the whole ladder in 2026: your right to sue under the FDCPA and FCRA is self-executing and completely independent of whether the CFPB or FTC is enforcing anything. It lives in the statute, and you (or an attorney the statute pays) invoke it directly, in court, regardless of which agency is watching. When the federal floor shifted this year, this is the rung that didn't move — because it was never the government's to withdraw. It's the teeth the law put in your own hand. And for a wrong that's really just a specific dollar amount someone owes you, there's a close cousin to this rung that needs no lawyer at all. That's §12.
12. Legal aid and small-claims court — for a concrete sum
Not every wrong needs statutory damages and a consumer attorney. Sometimes the wrong is simply that a company owes you a specific, provable amount of money and won't give it back — an overcharge, a duplicate fee, an unreturned deposit, a refund they promised and ducked. For that, there is a rung designed to be used without a lawyer at all: small-claims court. It's a simplified civil court for lower-dollar disputes, built to be usable by ordinary people — low filing fees (roughly $30 to $100), a faster and informal hearing, and, in many states, attorneys limited or barred entirely (California bars them from the hearing outright), so you're not outgunned by a company's legal department.
A card on small-claims court, the rung for a specific provable dollar sum, built to be used without a lawyer — low filing fees of roughly $30 to $100, a fast informal hearing, and in many states attorneys limited or barred, with California barring them from the hearing entirely. The one number to check first is your state's dollar limit, which as of 2026 ranges from about $2,500 in Kentucky at the low end, through a big cluster of states between $5,000 and $10,000, California at $12,500 for an individual, Texas at $20,000 in justice court, up to $25,000 in Tennessee and Delaware — and can vary within a state. The four steps are: file a short claim form and fee; serve the defendant so the company knows to appear; attend the hearing and present your evidence to a judge; and get a judgment — but winning the judgment is not the same as collecting it, which is a separate step and your responsibility. It is the right rung for a concrete provable sum against a real findable company, such as Maya's roughly $59 overcharge, and less useful against a phantom scammer with no address or assets.
The one number to check first is your state's dollar limit, because small claims only handles disputes up to a cap, and the cap varies a lot. As of 2026 the range runs from about $2,500 at the low end (Kentucky) to $25,000 at the high end (Tennessee and Delaware), with Texas at $20,000, California at $12,500 for an individual, and a big cluster of states between $5,000 and $10,000 — and limits can even vary within a state (New York allows $10,000 in New York City's courts but less in its town and village courts). Look up your own state's current limit before you file; if your claim is under it, small claims is likely your cheapest, fastest venue. This is exactly where Maya's $59 lives if First Ohio dug in: a small, provable overcharge — she has the app screenshot and the statement — is a textbook small-claims case, and the roughly $59 (or her FDCPA/FCRA statutory-damages claim, which comfortably fits under every state's cap) is well within any limit. She wouldn't need a lawyer; she'd need her dated evidence and a filing fee.
Know the four steps, and especially the trap in the last one. You file (a short claim form plus the fee), you serve the defendant (formally deliver notice, so the company knows to appear), you attend the hearing and present your evidence to a judge, and you get a judgment. But here's the part people don't expect: winning a judgment is not the same as getting paid. A judgment is a court's declaration that the company owes you; collecting it — actually extracting the money — is a separate step and your responsibility, though a judgment gives you tools (and most legitimate companies simply pay once they've lost). It's usually worth pursuing for a clear sum against a real, findable company; it's less useful against a phantom scammer with no address and no assets, which is one more reason Fatima's $500 routes to the FTC and her state rather than to a courtroom. We've now climbed the whole ladder. The capstone skill is holding it all at once — knowing, for any wrong, which rung has the teeth. That's §13.
13. Which rung for which wrong — the master map
This is the section the whole lesson has been building toward, because the ladder is only useful if you can, in the moment something goes wrong, name the rung with teeth. So here is the master map: the common wrongs from this entire trouble arc, each pointed at the venue that can actually force a fix, in order. Read it as the answer to "who has teeth over this?"
The master map routing each common wrong to the rung or rungs with teeth over it, in order. A credit-report error, like Maya's false late, goes to the credit bureaus under the FCRA first, then the CFPB, then an FCRA attorney if the law was broken. An abusive debt collector, like Darnell's, goes to an FDCPA attorney — the sharpest teeth, because the law pays them — plus the state attorney general and financial regulator who can discipline the license, with the CFPB and FTC as record rungs. A servicing failure, like the Sullivans could face, goes to the servicer in writing first, then the state regulator that licenses it and the CFPB, and the prudential regulator if it's a bank. A predatory or deceptive loan goes to the state AG and financial regulator, the front line in 2026, with the CFPB as record. A scam or fraud, like Fatima's lost $500, goes to the FTC and the state AG plus your payment provider to try to claw the money back, since the company rung is a dead end by definition. And a specific overcharge, like a refused $59, goes to the company and a demand letter, then to small-claims court for the concrete sum. Two through lines: nearly everything starts at the source and builds a record, and in 2026 the teeth cluster close to you — your state and the laws you can invoke directly.
A credit-report error goes to the credit bureaus first, under the FCRA (the venue the law forces to investigate), then to the CFPB, and — if it caused real harm and the law was broken — to an FCRA attorney for statutory damages. An abusive debt collector goes to a consumer/FDCPA attorney (the sharpest teeth, and the law pays them) and to your state Attorney General and financial regulator (who license and can discipline collectors), with the CFPB and FTC as record rungs. A servicing failure — a lost payment, a botched escrow, mishandled loss-mitigation like the Sullivans could face — goes to the servicer in writing first, then to the state regulator that licenses it and the CFPB, and to the prudential regulator if it's a bank. A predatory or deceptive loan goes to your state AG and financial regulator (the front line for lending abuse in 2026), with the CFPB as a record. An outright scam or fraud goes to the FTC (ReportFraud.ftc.gov / IdentityTheft.gov) and your state AG, plus the payment provider to try to claw the money back — the company rung being a dead end by definition. And a specific overcharge someone won't refund goes, after the company and a demand letter, to small-claims court for a concrete sum.
Two through-lines tie the map together, and they're the takeaways to keep. First, order matters as much as venue: nearly everything starts at the source (the company, or — for a report error — the bureau), both because it often works and because it builds the record the higher rungs require; you climb only when the source won't fix it. Second, teeth cluster close to you and in your own hand: in 2026 the rungs that most reliably force a fix are your state (AG and regulator) and the laws you can invoke directly (an attorney the statute pays, small-claims court) — with the federal complaint channels (CFPB, FTC) doing indispensable record-building work whose enforcement muscle is, this year, reduced. Match the wrong to the rung, start low, climb toward the teeth. That's the skill. Now, whatever rung you land on, your complaint has to be written well enough to act on — and there's a reusable shape for that. That's §14.
14. The anatomy of a complaint that gets action
A rung with teeth still needs something to bite on, and that something is a well-built complaint. The good news is that the same skeleton works everywhere — a company escalation, a CFPB complaint, a state-AG filing, a demand letter — so you learn it once and reuse it at every rung. A complaint that gets action is not the angriest one; it's the one a stranger can read, verify, and act on without asking you a single follow-up question. Five parts do that.
A card showing the five-part skeleton of a complaint that gets action, each with Maya's example. One, the facts: who, what, and exactly when, dated and plain — on March 15 she paid $250 and it posted March 19. Two, the harm: the concrete consequence in dollars — a $40 late fee, about $19 in interest, and a 30-day late reported to all three bureaus. Three, the documents: name and attach the proof — the app confirmation timestamped March 15 and the statement showing the fee. Four, the specific ask, the spine: the exact resolution as a number or concrete action, not a vague make-it-right — reverse the $59 and send a correction to all three bureaus. Five, the deadline: a reasonable date and a calm statement of the next step — within 30 days, or she will file in small-claims court and with her state regulator. The same skeleton works for a company escalation, a CFPB complaint, a state filing, or a demand letter; keep the tone factual and keep copies.
The five parts, in order. One, the facts — who, what, and exactly when, in plain dated sentences, stripped of adjectives ("On March 15 I paid $250; it posted March 19" beats "they carelessly ruined my credit"). Two, the harm — the concrete consequence, in dollars where you can ("a $40 late fee, ~$19 in interest, and a 30-day late reported to all three bureaus"), because harm is what a venue measures. Three, the documents — name and attach the proof ("see the attached app confirmation timestamped March 15 and the statement showing the fee"), because a claim with receipts is a claim someone can act on. Four, the specific ask — the exact resolution you want, as a number or a concrete action ("reverse the $59 and send a correction to all three bureaus"), never a vague "make this right," because an answerable ask is what turns a complaint into a yes-or-no decision. Five, the deadline — a reasonable date by which you expect a response, and a calm statement of your next step if it passes ("within 30 days, or I will file in small-claims court and with my state regulator"), which signals you know the ladder and intend to climb it.
Two craft notes make the difference between a letter that gets filed and one that gets acted on. Keep the tone factual and calm — not because rudeness is impolite but because it's ineffective; the person who can help you is reading for facts they can verify, and heat just buries them. And keep a copy of everything you send and receive, with dates: the complaint isn't only a request, it's a link in the record that every higher rung will read. Master this five-part shape and you can write for any rung on the ladder. To make it real, let's watch the shape carried into the one document everyone should know how to write — a demand letter. That's §15.
15. Document Walkthrough — an effective demand letter, field by field
A demand letter is the most transferable document in this entire course: a short, formal, pre-lawsuit letter that states what happened, what you're owed, and what you'll do if it isn't fixed — the §14 skeleton in its purest form. It's not legally required before you sue, but it's the standard, powerful first move, because it creates a dated record, it often works on its own (a company that ignored a phone call responds differently to a written demand naming the law and a deadline), and it's exactly what a court or regulator wants to see you tried. Here is Maya's, written to First Ohio after it refused her CFPB complaint, walked field by field.
A full sample of Maya Okafor's demand letter to First Ohio National Bank, walked field by field, with the five-part skeleton labeled. The header pins the parties, account, and date, addressed to Executive Customer Relations. The facts, dated and flat: on March 15, 2026 she paid $250 through the app, confirmation attached, and it was recorded as posting March 19. The harm in dollars: a $40 late fee and about $19 in interest, and a 30-day late reported to Equifax, Experian, and TransUnion. The documents: the app confirmation timestamped March 15, the statement showing the fee, and her dated log. The highlighted specific ask: reverse the $40 fee and the roughly $19 interest, about $59 total, and submit a correction to all three bureaus deleting the 30-day late. The deadline and consequence, stated calmly: respond within 30 days, or she will file in small-claims court, complain to her state financial regulator, and pursue her rights under the Fair Credit Reporting Act. She signs, keeps a copy, and sends it with proof of delivery. The teaching point is that a demand letter is the five-part skeleton in its purest form: it creates a dated record, often works on its own, and names the exact next rungs so ignoring it costs more than fixing it.
Read it as the skeleton made concrete. The header and reference line pin down the parties and the account — Maya's name and address, the bank, her account reference, and the date — so there's no ambiguity about who is writing about what, and it's dated for the record. The opening states the facts, dated and flat: "On March 15, 2026, I paid $250 on the above account through your mobile app (confirmation attached). The payment was recorded as posting on March 19." The next lines state the harm in dollars: "As a result I was charged a $40 late fee and approximately $19 in interest, and a 30-day late payment was reported to Equifax, Experian, and TransUnion." Then she names the documents she's attaching — the app confirmation, the statement, her dated log — turning assertion into evidence. Each of these maps onto a part of §14, and you can feel how a stranger at the bank could verify every line without calling her.
The letter's spine is the specific ask, and it's highlighted for a reason: "I request that you (1) reverse the $40 late fee and the ~$19 in interest, totaling about $59, and (2) submit a correction to all three credit bureaus deleting the 30-day late, as the payment was timely." Two concrete, do-able actions — not "make this right." Then the deadline and the consequence, stated calmly, which is what gives a demand letter its teeth: "Please respond within 30 days. If this is not resolved, I intend to file a claim in small-claims court for the amount owed and a complaint with my state's financial regulator, and to pursue my rights under the Fair Credit Reporting Act." That closing does real work — it names the exact next rungs (§12, §9, §11), which tells the bank she isn't bluffing and that ignoring her is more expensive than fixing it. She signs, keeps a copy, and sends it so she can prove delivery. Notice what she built: whether the bank fixes it now or not, she now has an airtight record for every rung above. A letter like this is what "complaining" looks like when it has teeth. Which raises the honest question the next section answers head-on: across this whole ladder, what actually works — and what's just theater? That's §16.
16. What actually works — and what's theater
It would be dishonest to teach a recourse ladder without saying plainly which parts of it deliver and which mostly make you feel like you did something. So here is the candid map, because knowing the difference is what keeps you from pouring effort into a channel that was never going to move your case — and from skipping the humble step that actually would.
An honest ledger of the recourse ladder in three tiers. What genuinely has teeth and forces a fix: a written escalated complaint to the company, a bureau dispute for a report error, a consumer attorney under the FDCPA or FCRA, small-claims court for a concrete sum, and your state attorney general and financial regulator. What builds a record but rarely fixes your individual case alone: a CFPB complaint in 2026, which still gets a company response but should be paired not leaned on; an FTC report, essential for the pattern database but not a refund; and a public review or social post, an occasional last resort. What is close to pure theater: an angry undocumented phone call that leaves no record, a demand with no specific ask, and a threat to take it to the top you never carry out. The synthesis: aim your energy at the teeth — your own actions, your state, an attorney the law pays, a court — and use the record rungs for what they are good at.
What genuinely has teeth — the things that force a fix. A written, escalated complaint to the company itself, because it resolves a large share of problems outright and builds your record. A bureau dispute for a report error, because the FCRA legally compels an investigation. A consumer attorney under the FDCPA or FCRA, because statutory damages and the fee-shift make it a real, funded threat the company must answer. Small-claims court for a concrete sum, because a judge can order the money back. Your state Attorney General and financial regulator, because they can sue, win restitution, and threaten a license. These are the rungs that change outcomes, and it's not a coincidence that most of them are close to you or in your own hand.
What builds a record but rarely fixes your individual case by itself — valuable, but don't mistake it for teeth. A CFPB complaint in 2026: it still gets a company response (real value) and builds the official record, but with enforcement gutted this year, it's not a reliable hammer on its own — pair it, don't lean on it. An FTC report: essential for the pattern database and for stopping the predator down the line, but it will not resolve your report or refund your money. Posting your story on social media or a review site: it can occasionally shake a response loose from a company that cares about optics, but it's a lever of last resort, not a plan. And what's close to pure theater: an angry, undocumented phone call that leaves no record; a demand with no specific ask a company can simply nod at; a threat to "take this to the top" you never actually carry out. Theater feels like recourse and produces none — because it gives no venue anything to act on and builds no record to climb with.
The synthesis is the same as §13's: aim your energy at the teeth (your own actions, your state, an attorney the law pays, a court), use the record rungs (CFPB, FTC) for what they're genuinely good at (a durable account and the pattern data that catches predators), and don't confuse motion for progress. The most reliable recourse in 2026 is the combination of the humblest rung (a documented complaint to the source) and the sharpest one (a right you can invoke directly). Now — because this system is exactly where the desperate get preyed upon — the flip side of recourse is the scam built to look like recourse. That's §17.
17. Predator Watch — fake-recourse and recovery scams
There is a special cruelty in the last predator of this course, and you need to see it coming precisely because you'll meet it at your most vulnerable moment: the scam that impersonates recourse itself. When you've been wronged and you're searching for help, an entire industry is waiting to sell you fake help — and if you've already been scammed once, another wave is waiting to scam you a second time over the first. Here is what to watch for, and the one rule that defeats all of it.
A predator-watch warning card about scams that impersonate recourse itself, in three shapes. One, the paid advocate or complaint filer: an outfit that charges a fee to file a complaint you could file for free with the CFPB, the FTC, your state, or the credit bureaus. Two, the government impersonator: someone posing as the CFPB, FTC, a consumer protection bureau, or a recovery program or refund unit, often with a fake employee ID and a fake agency name, asking for a fee or for your Social Security number and bank details. Three, the recovery scam, which re-targets people already scammed once from sucker lists, promising to recover lost money for an upfront payment — like the text Fatima gets offering to get her $500 back for a $200 fee, which would mean losing the money twice. The one rule that defeats all three: every legitimate complaint channel — the CFPB, the FTC, your state attorney general, the credit bureaus — is free and filed by you, and no real government agency charges a fee to hear a complaint or guarantees to recover your money for an upfront payment, demands a gift card, wire, crypto, or payment app, or asks for your SSN or bank login. Anyone who does is the scam. Report it to the FTC and your state AG, and to recover money already paid, contact your payment provider directly for free.
Three shapes, one family. The first is the paid "advocate" or "complaint filer": an outfit that charges you a fee to file a complaint you could file yourself for free with the CFPB, the FTC, your state, or the bureaus — sometimes the same credit-repair clinics that flooded the complaint system in the first place. The second is the government impersonator: someone claiming to be from the CFPB, the FTC, a "consumer protection bureau," or an official-sounding "recovery program" or "refund unit," often with a fake employee ID and a fake agency name, calling or texting to "help" — for a fee, or for your Social Security number and bank details. The third, and the most predatory, is the recovery scam aimed at people already burned: fraudsters buy or build "sucker lists" of prior victims and come back promising to recover the money you lost — for an upfront payment — which is how Fatima, weeks after losing $500, gets a text from a "government recovery program" offering to get it back for a $200 fee. Paying it would mean losing the money twice.
THE RULE: Every legitimate complaint channel is free and filed by you. The CFPB (consumerfinance.gov/complaint), the FTC (ReportFraud.ftc.gov), your state Attorney General, and the three credit bureaus never charge a fee to hear your complaint, and no real government agency will ever guarantee to recover your money for an upfront payment, demand a gift card, wire, crypto, or payment-app transfer, or ask for your SSN or bank login to "release" a refund. If someone charges to file, promises a guaranteed recovery for a fee, or claims to be an agency asking for money — it's a scam, full stop. WHERE TO REPORT it: the FTC at ReportFraud.ftc.gov (1-877-382-4357), your state Attorney General, and — if you gave up identity details — IdentityTheft.gov. WHAT TO HAVE READY: the outfit's name and contact, any texts/emails/receipts, what you paid and how, and dates. WHY IT'S WORTH IT: your report is how these operations get mapped and stopped — and being targeted while you're already down is not a failing on your part; predators pick people at their most frightened on purpose. If you want to try to recover money you already paid, do it the free way: contact your payment provider (the gift-card company, wire service, bank, or card issuer) directly and ask them to reverse it.
Hold the rule as a single sentence you can say to yourself the moment any "helper" appears: the real channels are free and you file them yourself, so anyone charging a fee or promising a guaranteed recovery is the scam, not the cure. It's the same logic as every predator lesson in this course — legitimate help doesn't demand payment up front to rescue you — pointed now at the recourse system itself. And because so many people meet this after the fact, the next section is written for exactly them: if some of this already happened to you. That's §18.
18. If this already happened to you
If you're reading this having already been through some of it — you complained and nothing happened, you gave up because it felt pointless, you paid a "filing service" or a "recovery" outfit that took your money, or you were wronged months ago and never knew where to turn — the first thing to hear is the gentlest: none of that is a personal failure, and almost none of it is a closed door. This system is genuinely confusing, deliberately so in places, and the rules in this lesson are ones most people are never taught. Not knowing which rung had teeth isn't a flaw in you; it's the exact gap this capstone exists to close.
A calm, reassuring card for someone who has already been through this — a complaint that went nowhere, a company that refused, a fake recovery service that took their money, or a wrong they never acted on. It reframes the experience as an ordinary result of a deliberately confusing system rather than a personal failure, then lists the concrete moves still available: if the first complaint went nowhere, you likely stopped at a record rung and can climb to a teeth rung — your state AG and financial regulator, and an attorney the statute pays; if a company refused you, your documented history is now the record a demand letter, small-claims court, or a regulator wants; if you paid a fake advocate or recovery service, report it to the FTC and your state AG, ask your payment provider to reverse it, and still pursue the original wrong for free; and if you were wronged long ago, check the clocks, since the FDCPA gives one year and the FCRA two to five, and many wrongs are still live. It closes with the free help lines: NFCC nonprofit counseling at 1-800-388-2227, free legal aid at lawhelp.org, and 211 for local aid.
So set the self-blame down, because it's the single thing most likely to keep you stuck, and hear what you can still do — because a stalled complaint is not the end of the ladder; it's a rung you can now climb past. If your first complaint went nowhere: you almost certainly stopped at a record rung (a lone CFPB or FTC filing) — the move now is to climb to a teeth rung: your state Attorney General and financial regulator, and, if a law was broken, a consumer attorney the statute pays. If a company simply refused you: your documented history is now an asset, not a dead end — it's exactly the record a demand letter (§15), small-claims court (§12), or a regulator wants. If you paid a fake "advocate" or "recovery" service: report it to the FTC and your state AG, ask your payment provider to reverse the charge, and know you can still pursue the original wrong for free through the real channels — the scam wasted your money, not your rights. And if you were wronged long ago and never acted: check the clocks (the FDCPA's one year, the FCRA's two-to-five), because many wrongs are still live — but don't wait, because some doors do close on a deadline.
And when you're steadier, report what happened — for the next person. The pattern databases at the CFPB and FTC, and the complaint files at your state AG, are built out of stories exactly like yours; the report you file about the outfit that wronged you is a brick in the case that eventually stops it. Free, real help exists and costs nothing: a nonprofit credit counselor through the NFCC at 1-800-388-2227, free civil legal aid at lawhelp.org if you qualify, and 211 for local assistance. One stalled complaint, one wasted fee, one wrong you didn't know how to fight is a setback, not a verdict — the ladder has more rungs than the one you stopped on, and there is a path forward from every situation in this lesson. It starts with knowing which door to knock on, and in what order. Let's put the whole ladder in one place. That's §19.
19. The recourse stack — the master ladder
This lesson is the recourse-stack lesson — the one the whole trouble arc has been pointing at — so the fixture here isn't a footnote; it's the master ladder itself, gathered in one place as the decision tool you keep. Read it bottom to top, the way you'd actually climb it: start at the closest, cheapest rung and go only as high as you need to.
The master recourse ladder for loans, read from the bottom rung up. Rung one is the company or source itself — the documented, escalated complaint, and for a report error the credit bureaus under the FCRA — free, self-executing, and the resolver of most cases. Rung two is a consumer attorney or small-claims court — FDCPA and FCRA statutory damages and the fee-shift that lets a lawyer work on contingency, and a courtroom for a concrete sum, the teeth the law puts in your hand. Rung three is your state attorney general and state financial regulator — a litigator who sues on your behalf and a licensor who can discipline the company, and in 2026 the most reliable teeth on the ladder. Rung four is the CFPB at consumerfinance.gov/complaint or 855-411-2372, with the honest caveat that its funding was cut and most enforcement and supervision are gutted or in litigation, so you file to build a record but do not lean on it alone. Rung five is the FTC at ReportFraud.ftc.gov or 877-382-4357 for scams and fraud, plus the prudential regulator — NCUA, OCC, the Federal Reserve, or the FDIC — for your specific bank or credit union. And underneath it all is the free floor: NFCC nonprofit counseling at 1-800-388-2227, legal aid at lawhelp.org, and 211 for local aid. The lesson: your rights hold in law regardless of who is enforcing them, so lean on what you can do yourself and on your state.
The full stack, bottom to top. Rung one is the company or source itself — the documented, escalated complaint (and, for a report error, the credit bureaus under the FCRA), free and self-executing and the resolver of most cases. Rung two, uniquely powerful and worth pulling out, is a consumer attorney or small-claims court — the FDCPA/FCRA statutory damages and fee-shift that let you (or a lawyer the law pays) act directly, and a courtroom for a concrete sum. Rung three is your state Attorney General and state financial regulator — a litigator who sues on your behalf and a licensor who can discipline the company, and in 2026 the most reliable teeth on the ladder. Rung four is the CFPB (consumerfinance.gov/complaint, 855-411-2372), with the honest caveat attached. Rung five is the FTC (ReportFraud.ftc.gov, 877-382-4357) for scams and fraud, plus the prudential regulator (NCUA/OCC/Fed/FDIC) for your specific bank or credit union. And underneath it all, the free floor: NFCC nonprofit counseling (1-800-388-2227), legal aid (lawhelp.org), and 211 for local aid.
Read the ladder and the caveat together and you have the whole philosophy of this course in one image: your rights are written into law regardless of who is enforcing them, so the most dependable recourse is the combination of what you can do yourself (a documented complaint, a demand letter, a lawsuit the statute funds, a small-claims filing) and the channels closest to you (your state). The CFPB is a real, useful rung whose federal muscle is reduced this year — file it to build the record, but don't lean your whole weight on it. In a year when the federal floor has shifted, the levers that hold are the ones in your own hand and in your own statehouse. Now, the questions people actually ask when they're standing at the bottom of this ladder. That's §20.
20. Most common questions
"I've been wronged — where do I even start?" Almost always at the source (§2): a written, dated complaint to the company that wronged you, stating exactly what you want fixed, escalated to the "office of the president" if the front line stalls. It resolves a lot of problems outright, and it builds the record every higher rung will ask for. The one exception is a credit-report error, which starts with the credit bureaus (§3), and an outright scam, where the company is a dead end and you go to the FTC and your state (§7, §17).
"Does filing a CFPB complaint actually do anything in 2026?" Yes, but know what kind of anything. The portal works and the company still generally responds within about 15 days (§4–§5), and that response plus the official record it creates has real value. What's diminished this year is the enforcement behind it — the Bureau's funding was cut and most of its enforcement and supervision are gutted or in court. So file it (it's free and it builds the record), but pair it with a rung that has its own teeth in 2026 — your state Attorney General and regulator, and an attorney if a law was broken. Don't make it your only move.
"Is the FTC going to get my money back?" No — and it's important to know that going in (§7). The FTC does not resolve individual complaints or act as your caseworker; it feeds your report into a national database that law enforcement uses to catch patterns and build cases against the predators. It's essential for stopping the scammer down the line and absolutely worth doing, but for your own refund the levers are your payment provider (to try to reverse the charge), your state AG, and — for a concrete sum against a findable company — small-claims court.
"Why do people keep saying to go to my state Attorney General?" Because in 2026 your state is where a lot of the teeth moved (§8). AGs enforce state unfair-and-deceptive-practices laws — they can sue a company, win restitution for residents, and stop the practice — and under Dodd-Frank they can even enforce the federal consumer-financial law directly. As the federal Bureau pulled back, AGs stepped up with multistate actions and stronger state laws. For lending, collection, and deception, your state AG is often the most consequential rung you can reach.
"What's the difference between the state AG and the state financial regulator?" Different powers (§8–§9). The Attorney General is a litigator: it investigates deceptive or unfair conduct and sues to stop it and win victims their money back. The state financial regulator (a Department of Financial Institutions, DFS, or DFPI) is a licensor: it grants and supervises the licenses lenders, servicers, and collectors need to operate in your state, and it can discipline or pull that license. Use the AG for the deceptive practice; use the regulator to put the licensee's ability to do business at risk. Many people file with both.
"How do I know which federal regulator covers my bank?" By its charter, and there's a tell for each (§10). A credit union → the NCUA (1-800-755-1030). A national bank or federal savings association — look for "National" or "N.A." in the name → the OCC (HelpWithMyBank.gov, 1-800-613-6743). A state bank that's a Fed member → the Federal Reserve (1-888-851-1920). A state bank that isn't → the FDIC (1-877-275-3342). When in doubt, the FDIC's BankFind tool or the OCC's "Who Regulates My Bank?" page will tell you in seconds — and remember that FDIC-insured is not the same as FDIC-regulated.
"A collector broke the law / a bureau won't fix a real error — is it worth suing?" Often yes, and it may cost you nothing up front (§11). The FDCPA lets you recover up to $1,000 plus your actual damages plus attorney's fees for a collector's violation (within one year); the FCRA lets you recover $100–$1,000 per willful violation plus punitive damages plus fees. Because both laws make the losing company pay your lawyer, consumer attorneys often take these on contingency. Find one through consumeradvocates.org/findanattorney, or free legal aid at lawhelp.org if your income qualifies. This right is yours to invoke directly — it doesn't depend on any agency enforcing.
"A company owes me a specific amount and won't pay — do I need a lawyer?" No — that's what small-claims court is for (§12). For a concrete, provable sum within your state's limit (which ranges from about $2,500 to $25,000 depending on the state), you file a short form, pay a small fee, serve the company, and present your evidence to a judge — often with attorneys limited or barred, so you're not outgunned. Just remember that winning the judgment and collecting it are two different steps, and it works best against a real, findable company, not a phantom scammer.
"Someone offered to file my complaint or recover my lost money for a fee — is that legit?" No (§17). Every real complaint channel — the CFPB, the FTC, your state AG, the credit bureaus — is free and filed by you, and no real government agency guarantees to recover your money for an upfront fee or demands a gift card, wire, crypto, or your SSN. Anyone charging to file or promising a guaranteed recovery is the scam, especially if you were already scammed once (recovery scammers target prior victims on purpose). To try to get money back, contact your payment provider directly, for free.
"What actually makes a complaint work?" A shape a stranger can act on without calling you (§14): the dated facts, the harm in dollars, the documents attached, one specific ask (a number or a concrete action, not "make this right"), and a deadline with your next step. Keep it calm and keep copies. That same skeleton works for a company escalation, a CFPB complaint, a state filing, and a demand letter — learn it once, reuse it everywhere.
That closes the questions. Step back and see what the ladder gave Fatima, Maya, and you. The wrong that opened this lesson — and the sinking sense that complaining was shouting into a void — has an answer now, and it's a system, not a shrug. Ask where it happened and who has teeth over it. Start at the source and build a record. Route a report error to the bureaus, a scam to the FTC, a licensed company to your state, a broken law to an attorney the law pays, a concrete sum to small-claims court. File the CFPB complaint for the record, honestly weighted for the year. Write it in the five-part shape that gets action. And refuse the scams that impersonate the help. The system that felt like a void was always a ladder; you just needed the map. The last tool puts the map in your hands for your own situation. That's §21.
21. Check yourself — the "where do I complain?" router
The whole point of this capstone is that, the next time something goes wrong, you can name the rung with teeth instead of freezing. The tool below does exactly that: pick the wrong you suffered — a credit-report error, an abusive collector, a servicing failure, a predatory loan, an outright scam, or a specific overcharge — and it gives you the ordered rungs with teeth for that wrong, the right venue and its contact, and a complaint-writing checklist built on the §14 skeleton. It comes pre-filled with Fatima's scam and Maya's billing-and-report error, so you can see both arcs routed correctly before you run your own. Nothing is sent or saved.
An interactive router for the question “where do I complain?” You pick the wrong you suffered — a credit-report error, an abusive debt collector, a servicing failure, a predatory or deceptive loan, an outright scam, or a specific overcharge — and it shows the ordered rungs with teeth for that wrong, the right venue and its contact, the first move, and a complaint-writing checklist built on the five-part skeleton: the facts, the harm, the documents, the specific ask, and the deadline. It is pre-filled with two cases: Fatima's $500 advance-fee loan scam, where the company rung is a dead end and the wrong routes to the payment provider, the FTC, and her state attorney general; and Maya's mis-posted payment, a false 30-day late plus about $59 in wrongful fees, where the report error routes to the credit bureaus under the FCRA first and the $59 also fits a specific overcharge routed to small claims. As you switch wrongs the ladder reorders itself — a scam grays out the company rung, a broken-law collection pushes a consumer attorney to the front, a concrete overcharge lights up small-claims court. Nothing is sent or saved.
Notice what the tool makes visible as you switch wrongs: the ladder reorders itself. The same word — "complain" — routes to completely different first moves depending on the wrong. A report error puts the credit bureaus on the bottom rung; a scam grays out the company rung entirely and sends you to the FTC and your state; a broken-law collection abuse pushes a consumer attorney to the front because the law pays them; a concrete overcharge lights up small-claims court. That reordering is the whole skill of this lesson, made mechanical: you don't memorize a single ladder, you learn to rebuild it for the wrong in front of you.
Step back, finally, to the three questions this lesson opened with — does complaining do anything, who helps, where are the teeth — and see how completely the ladder answers them. Complaining, done right, is not a void; it's pulling a specific lever attached to a specific force. Who helps is a who: the source, the bureaus, your state's litigator and licensor, an attorney the law pays, a judge in small-claims court, with the federal channels building the record. And the teeth are, above all, in your own hand and close to home — a documented complaint, a demand letter, a right you can invoke directly, a state office one call away. You were never powerless; you were just missing the map. Now you have it. The last section gathers the terms this lesson introduced. That's the glossary.
Glossary — the terms this lesson introduced
The ordered set of places to turn when you've been wronged by a lender, servicer, collector, or bureau — climbed from the closest, cheapest rung (the company itself) up toward the rungs with the most force (an attorney, a court, your state). The skill is matching the specific wrong to the rung that has teeth over it, and climbing only as high as needed.
The core distinction of this lesson. A record rung creates a durable, official account of what happened (valuable for later leverage and enforcement) but doesn't by itself force anyone to act — e.g., an FTC report, or a CFPB complaint in 2026. A teeth rung can actually compel a fix — a bureau the FCRA forces to investigate, a court that can order a refund, a regulator that can pull a license, a statute that pays your attorney to sue.
A senior "executive customer relations" team most large banks, lenders, and servicers keep to resolve complaints that reach a certain level. When the front line can't help, a calm, specific written complaint addressed to this team (or the CEO's office) often reaches someone with authority to reverse a fee or fix a report. Not a magic word — just climbing to the level of the company that has real authority.
A complaint about a consumer financial product filed with the Consumer Financial Protection Bureau at consumerfinance.gov/complaint (or 855-411-2372). The Bureau forwards it to the company, which is expected to respond — generally within about 15 days (up to 60 in unusual cases). It creates an official record and, anonymized, feeds a public database; it does not give legal advice, represent you, or adjudicate your case like a court.
How a company closes a CFPB complaint: "Closed with monetary relief" (measurable money returned), "Closed with non-monetary relief" (a fix without a payment — e.g., correcting a credit-bureau entry), "Closed with explanation" (a stated position or reason for no further action), or "Closed" (neither). The label tells you what, if anything, you actually got.
The honest posture stated wherever the CFPB is cited this year: the complaint portal and company-response mechanism still run, but a July 4, 2025 law cut the Bureau's funding cap (roughly halving its budget, to ~$466.8M for 2026), most enforcement (~80%) and supervision (~85–90%) were cut, ~22 actions were dismissed, and a mass layoff is blocked but contested in court (NTEU v. Vought). File to build a record; do not rely on it as a sole remedy — pair it with your state.
How you report scams, fraud, and bad business practices to the Federal Trade Commission (ReportFraud.ftc.gov, 1-877-382-4357), or identity theft specifically (IdentityTheft.gov, 1-877-438-4338, which also builds an official FTC Identity Theft Report). The FTC does NOT resolve your individual case; your report feeds the Consumer Sentinel Network, a database 2,000+ law-enforcement agencies use to catch patterns and build cases.
Your state's top law-enforcement lawyer, whose consumer-protection division takes complaints, mediates, investigates, and sues companies on residents' behalf under state "unfair, deceptive, or abusive practices" (UDAP) laws — winning injunctions, restitution, and penalties. Can also enforce the federal consumer-financial law directly under Dodd-Frank § 1042. In 2026, often the most consequential rung with teeth. Find yours via naag.org or your state's site (NAAG itself doesn't take individual complaints).
The state office (a Department of Financial Institutions, Department of Financial Services, or California's DFPI) that licenses and supervises the financial companies operating in your state — state banks and credit unions, mortgage lenders and servicers, money transmitters, debt collectors, consumer lenders. Its leverage is the license: it can examine and discipline a licensee, up to revoking its ability to do business. Complain here to put a licensed company's license at risk.
The federal supervisor of a bank or credit union, which also takes consumer complaints. Which one depends on the charter: NCUA (credit unions; 1-800-755-1030); OCC (national banks & federal savings associations — look for "National"/"N.A."; HelpWithMyBank.gov, 1-800-613-6743); the Federal Reserve (state banks that are Fed members; 1-888-851-1920); the FDIC (state banks that aren't; 1-877-275-3342). FDIC-insured ≠ FDIC-regulated; use FDIC BankFind to check.
A simplified civil court for lower-dollar disputes, built to be used without a lawyer (many states limit or bar attorneys at the hearing). Low filing fee, faster, informal. Each state sets a dollar limit — roughly $2,500 to $25,000 in 2026 — so check yours. The right rung for a specific, provable sum against a findable company (an overcharge, a wrongful fee, an unreturned deposit; an FDCPA/FCRA claim fits under the caps). Winning a judgment and collecting it are separate steps.
A short, formal, pre-lawsuit letter stating what happened, the harm, the documents, a specific dollar ask, and a deadline with your next step. Not legally required before suing, but the standard powerful first move: it creates a dated record, often works on its own, and is exactly what a court or regulator wants to see you tried. The §14 five-part skeleton in its purest form.
Money a law lets you recover without proving a dollar of actual loss, because the harm is real but hard to price. Under the FDCPA (15 U.S.C. § 1692k): up to $1,000 per lawsuit, plus actual damages, plus attorney's fees; sue within 1 year. Under the FCRA for a willful violation (§ 616 / § 1681n): $100–$1,000 per violation, plus punitive damages, plus fees; a negligent violation (§ 617 / § 1681o) gets actual damages plus fees. FCRA clock: earlier of 2 years from discovery or 5 years from the violation.
A statute provision (in both the FDCPA and FCRA) that makes a losing company pay the winning consumer's attorney's fees. Because the defendant covers the lawyer, consumer-rights attorneys can take these cases on contingency — no upfront cost to you — which is what makes the right to sue usable by ordinary people, not just the wealthy. It's also why this right doesn't depend on any agency enforcing.
A private consumer-rights lawyer (find one via the National Association of Consumer Advocates at consumeradvocates.org/findanattorney) who handles FDCPA/FCRA and predatory-practice cases, often on contingency because of the fee-shift. If your income is low, free civil legal aid — federally funded and means-tested at roughly 125% of the poverty line — is available through your local Legal Services Corporation office, findable at lawhelp.org.
A scam that impersonates the help you're seeking: an outfit that charges to file a free complaint, an impersonator posing as the CFPB/FTC/a "recovery program," or a recovery scammer who targets people already scammed once, promising to get their money back for an upfront fee. The one rule that defeats all of it: every real complaint channel is free and filed by you, and no legitimate agency charges to hear a complaint or guarantees a recovery for a fee.
The two legal pillars behind a state Attorney General's power in consumer finance. UDAP = the state "unfair, deceptive (or abusive) acts and practices" statutes ("mini-FTC Acts") that let an AG sue for injunctions and restitution. Dodd-Frank § 1042 (12 U.S.C. § 5552) independently authorizes state AGs to enforce the FEDERAL consumer-financial law and CFPB rules — so those federal protections can still be enforced by states even when the federal Bureau is shrunken.
The two big pattern databases behind the record rungs. The CFPB's Consumer Complaint Database (data.consumerfinance.gov) publishes complaints (personal details removed; your narrative only with consent) that researchers and enforcers mine for trends. The FTC's Consumer Sentinel Network is a secure database of fraud/scam reports shared with 2,000+ law-enforcement agencies. Neither resolves your individual case; both are how systemic predators get found.
Key takeaways
- Complaining works when it's aimed. Treat "where do I complain?" as two questions — where did the wrong happen (start there), and which venue has teeth over this specific wrong (climb toward that) — and the scattered pile of agencies becomes an ordered ladder. Match the wrong to the rung: a report error to the bureaus, a scam to the FTC, a licensed company to your state, a broken law to an attorney, a concrete sum to small-claims court.
- Start at the source and build a record. The first rung — a written, dated, escalated complaint to the company itself (up to the "office of the president") — resolves a large share of problems outright and creates the paper trail every higher rung will demand. Skipping it usually just gets you routed back down. Document relentlessly (dates, names, reference numbers, copies) and always name the specific resolution you want.
- Know the difference between a record and teeth. Some channels only build a record (an FTC report; a CFPB complaint in 2026) — valuable, but they won't force your individual fix. Others have real teeth (the bureaus under the FCRA, your state AG and regulator, a consumer attorney the law pays, small-claims court). File the record rungs for what they're good at, but aim your real effort at the teeth.
- The CFPB, honestly: file it, don't lean on it. In 2026 the portal still works and the company still generally responds within ~15 days, and the official record has value — but the Bureau's funding was cut and most enforcement and supervision are gutted or in litigation, so it's not a reliable hammer by itself. Pair every CFPB complaint with a rung that has teeth this year: your state Attorney General and financial regulator.
- In 2026 the teeth are close to home and in your own hand. Your state gives you two powers — an Attorney General who sues on your behalf (under state UDAP law and, via Dodd-Frank § 1042, the federal law too) and a financial regulator whose license is its leverage over the company. And the FDCPA and FCRA let you (or an attorney the fee-shift pays, often on contingency) sue directly for statutory damages — a right that doesn't depend on any agency enforcing. Know which federal prudential regulator (NCUA/OCC/Fed/FDIC) covers your specific bank or credit union.
- Write it in the shape that gets action, and use small claims for a sum. A complaint that works is one a stranger can act on: dated facts, the harm in dollars, the documents attached, one specific ask (a number, not "make this right"), and a deadline with your next step — the same skeleton for a company escalation, a CFPB complaint, a state filing, or a demand letter. For a concrete provable amount within your state's limit (~$2,500–$25,000), small-claims court needs no lawyer — just remember winning and collecting are separate.
- Refuse the scams that impersonate recourse. Every real complaint channel — the CFPB, the FTC, your state AG, the credit bureaus — is free and filed by you, and no legitimate agency charges to hear your complaint or guarantees to recover your money for an upfront fee. Anyone who charges to "file" for you, poses as a government "recovery program," or promises a guaranteed refund for a fee is the scam — especially if you were already scammed once. To recover money, contact your payment provider directly, for free.
Knowledge check
6 questions
Maya's bank mis-posted her on-time payment, reported a false 30-day late to all three credit bureaus, and charged her about $59 she didn't owe. Under the recourse ladder, what's the best first move for the credit-report error specifically?