If you added a "Pay in 4" button at checkout sometime in the last two years, you probably didn't think of yourself as touching a regulated lending product. New York disagrees, and the state just published rules that treat Buy Now, Pay Later the same way it treats any other consumer loan.
The New York Department of Financial Services (NYDFS) has proposed a comprehensive licensing and supervision framework for BNPL providers, following a law Governor Kathy Hochul signed as part of the state's FY26 budget. It's the first rule of its kind in the country, and Illinois followed a few months later with its own version. If your business accepts BNPL payments — or is thinking about adding one — this is the moment to understand what's changing, because some of the new obligations land on merchants, not just the lenders behind the "four easy payments" button.
Why BNPL Suddenly Looks Like Regular Lending to Regulators
BNPL grew up in a regulatory gray zone. Because a typical "Pay in 4" plan splits a purchase into four interest-free installments over six weeks, many providers argued it wasn't "credit" in the sense that triggers Truth in Lending Act disclosures or state lending licenses. The Consumer Financial Protection Bureau under the previous administration tried to close that gap with interpretive guidance, then deprioritized BNPL enforcement in 2025, leaving a vacuum that states are now filling on their own.
New York's regulation is the most aggressive answer yet. It requires any business "engaged in BNPL activity" in the state to obtain a NYDFS license and submit to ongoing supervision, similar to how the state treats mortgage lenders and money transmitters. Existing BNPL providers get a 45-day window after the rule takes effect to apply for a license and keep operating provisionally while their application is reviewed.
Illinois enacted its own Buy-Now-Pay-Later Loan Consumer Protection Act in June 2026, becoming the second state with a dedicated BNPL licensing regime. It requires a $5,000 license fee, a $50,000 surety bond, and risk-based underwriting before a loan is extended, though compliance isn't required until January 1, 2028. The pattern is now clear: BNPL is being pulled into the same regulatory perimeter as traditional consumer lending, one state legislature at a time.
What the New York Rule Actually Requires
The proposed regulation bundles licensing with a set of consumer-protection requirements that will shape how BNPL providers — and by extension, the merchants who rely on them — operate in New York.
Licensing and supervision. BNPL lenders doing business in New York must obtain a NYDFS license, subject to limited exemptions, and comply with prescriptive fee, disclosure, and underwriting rules once licensed.
Fee limits. The rule prohibits excessive fees, including convenience charges, and caps late fees and other penalty charges that providers can pass on to consumers.
Credit reporting transparency. Lenders must clearly disclose whether a BNPL loan will be reported to credit bureaus — a detail that's been inconsistent across providers and has confused consumers who didn't expect a missed installment to show up on a credit report.
Dispute resolution timelines. The rule sets concrete deadlines for resolving consumer disputes rather than leaving providers to set their own service-level expectations.
Data use restrictions. New rules govern how consumer data collected through BNPL transactions can be used, aimed at limiting resale or exploitation of shopping and repayment data.
Refund workflow requirements. This is the part merchants should read twice. NYDFS expects the retail seller to transmit a credit statement to the BNPL lender within seven business days after agreeing to a refund, and the lender must then credit the consumer within three business days of receiving it. That's a specific, auditable timeline sitting inside your return process, not just the lender's.
The rule takes effect 180 days after final adoption, with a transitional period for BNPL providers already active in the state. A 60-day public comment period opens once the proposal is published in the New York State Register, so the exact requirements could still shift before they're final.
Why This Matters Even If You're Not the Lender
It's tempting to read "BNPL lenders must obtain a license" and conclude this is someone else's compliance problem. Two things make that assumption risky.
First, the refund timeline requirement reaches directly into merchant operations. If your return policy or point-of-sale integration can't reliably issue a credit statement to the BNPL provider within seven business days, you could be the reason a customer's refund is late — and the reason your BNPL partner flags your account for a compliance review. Retailers should treat this as a trigger to audit their refund workflow with each BNPL provider they use, not assume it's baked into the existing integration.
Second, BNPL fee economics already run hotter than card payments. Merchant fees for BNPL plans typically range from 2% to 8% of the transaction, compared to roughly 2% to 3% for standard credit card processing. If new licensing costs, bonding requirements, or compliance overhead push providers to raise merchant fees to cover them, that cost eventually shows up in your payment processing line, not the lender's.
There's an upside worth weighing against that cost. BNPL has become one of the most commonly accepted payment methods among small businesses, and it consistently increases average order value by 20% to 40% while reducing checkout abandonment. For many merchants, the conversion lift is real money, which is exactly why understanding the new compliance landscape — rather than dropping BNPL altogether — is the more useful response.
What Small Business Owners Should Do Now
You don't need to become a BNPL compliance expert, but a few concrete steps will keep you ahead of the change instead of reacting to it after the fact.
Ask your BNPL provider directly about licensing status. If you're in New York, confirm your provider intends to apply for a license within the required window, and ask what happens to your integration if they don't. A provider that can't operate provisionally is a business continuity risk for your checkout flow.
Review your refund workflow against the seven-business-day requirement. Walk through what actually happens between a customer requesting a refund and your system notifying the BNPL provider. If that process depends on a manual step — someone remembering to log into a merchant portal — it's a candidate for automation or at least a documented checklist.
Watch for fee changes in your provider's next contract renewal. Licensing, bonding, and supervisory costs don't disappear; they tend to show up in merchant discount rates over time. Budget for the possibility even if nothing changes immediately.
Don't assume other states are exempt. New York and Illinois are first, but the emarketer and Federal Reserve research on BNPL growth suggests more states will follow as adoption climbs. If you sell across state lines, a rule written for New York consumers today could be echoed by your home state's legislature next year.
Keep your records straight regardless of what regulators require. Whatever fee structure or refund timeline your BNPL provider settles into, you still need to know exactly how much you're paying in BNPL fees, how refunds net against original sales, and how BNPL revenue compares to card and cash revenue when you're reviewing margins.
Tracking BNPL Transactions Correctly on Your Books
New licensing rules aside, BNPL has always created a bookkeeping wrinkle that many small merchants handle sloppily: a BNPL sale isn't the same as a cash or card sale, and treating it that way distorts your numbers.
When a customer checks out with a BNPL plan, you typically get paid in full (minus the merchant fee) almost immediately, while the BNPL provider carries the installment risk. That means the transaction has three moving parts worth recording separately: the gross sale, the merchant fee the provider deducts, and any later refund that flows back through the provider rather than directly to the customer. If you lump all of that into a single "sales" line, you lose the ability to see your true BNPL fee load — which matters a lot once fees range anywhere from 2% to 8% depending on the provider and plan.
The refund timeline in New York's proposed rule adds a fourth wrinkle: a documented handoff point. If you're now expected to transmit a credit statement within seven business days of agreeing to a refund, your books should be able to show, at a glance, which refunds are pending that handoff and which have cleared. A general ledger where BNPL fees, BNPL refunds, and BNPL net revenue each have their own account makes that a five-minute query instead of a spreadsheet reconciliation project.
This is a case where the compliance question and the bookkeeping question are really the same question: can you show, quickly and accurately, what happened with a given BNPL transaction from sale to refund to fee? If the answer is yes, a new state disclosure requirement is a minor adjustment. If the answer is no, it's a sign your books need more structure before the next state passes its own version of this rule.
Frequently Asked Questions
Does this rule apply if my business is outside New York but I sell to New York customers? The licensing obligation falls on the BNPL lender, not directly on you as a merchant, but the lender's obligations (refund timelines, fee limits, disclosures) apply to transactions involving New York consumers regardless of where your business is based. If you sell online to customers nationwide, some of your BNPL transactions will likely fall under the New York rule once it's final.
Will BNPL become more expensive for merchants because of this? It's plausible but not guaranteed. Licensing fees, bonding requirements, and compliance infrastructure cost BNPL providers money, and that cost has to land somewhere — most likely in merchant discount rates over time rather than all at once. Watch your next contract renewal closely rather than assuming fees are locked in.
Is New York the only state doing this? No. Illinois passed its own BNPL licensing law in June 2026, and the general regulatory direction — treating BNPL as a supervised lending product rather than an unregulated payment feature — is likely to spread to additional states as adoption grows.
Should I stop offering BNPL until the rules are finalized? Not necessarily. The rule is still in a comment period and could change before final adoption, and BNPL continues to deliver real conversion and average-order-value benefits for merchants who offer it. The more useful move is auditing your refund workflow and fee structure now so you're ready regardless of the final details.
Keep Your Finances Organized as Payment Rules Shift
Regulatory change in payment methods is exactly the kind of shift that exposes bookkeeping built on spreadsheets or opaque software dashboards — you need to see BNPL fees, refunds, and net revenue clearly, not buried inside a payment processor's monthly statement. Beancount.io provides plain-text accounting that gives you complete transparency and control over your financial data, so tracking a new fee structure or a new payment method is a matter of adding an account, not re-learning a tool. Get started for free and see why developers and finance professionals are switching to plain-text accounting.