By Steve Levine · Updated July 15, 2026 · 8 min read
Quick Answer
The DFPI (California Department of Financial Protection and Innovation) is the state agency that licenses and polices financial products and services offered to Californians. It was created in 2020 when the California Consumer Financial Protection Law (CCFPL) revamped the old Department of Business Oversight and gave the agency broad new authority to go after unlawful, unfair, deceptive, or abusive practices in consumer finance — powers modeled on the federal CFPB, which is why it's nicknamed California's "mini-CFPB." It takes consumer complaints, investigates companies, and issues consent orders, but its penalties are paid to the state; a private lawsuit over the same conduct is usually brought separately, often as a class action.
On this page
The Department of Financial Protection and Innovation is California's financial regulator — the state agency responsible for licensing and overseeing the companies that offer financial products and services to Californians. That includes state-chartered banks and credit unions, mortgage and consumer lenders, money transmitters, broker-dealers and investment advisers, student loan servicers, debt collectors, and a growing list of fintech and cryptocurrency providers. For readers of this site, the DFPI matters because it is one of the main government agencies whose investigations and enforcement actions run parallel to private class actions over the same financial-services conduct.
The DFPI is not a brand-new agency. It is the successor to the California Department of Business Oversight (DBO), which itself was formed from the earlier Department of Corporations and Department of Financial Institutions. In 2020 the state renamed and significantly expanded the DBO, and the DFPI took its place with a broader consumer-protection mission. Its official site, dfpi.ca.gov, lists the licenses it issues, publishes its enforcement actions, and takes consumer complaints.
The change that created the DFPI was the California Consumer Financial Protection Law (CCFPL), enacted as Assembly Bill 1864 and signed in September 2020. The name change to the DFPI took effect in late September 2020, and the CCFPL's expanded consumer-protection authority phased in as the law took full effect on January 1, 2021.
The CCFPL was modeled in large part on the federal Consumer Financial Protection Bureau (CFPB) and the Dodd-Frank Act that created it — which is why lawyers and reporters often describe the DFPI as California's "mini-CFPB." Its central grant of authority mirrors the federal standard: it makes it unlawful to commit or engage in an unlawful, unfair, deceptive, or abusive act or practice (a "UDAAP") in connection with a consumer financial product or service. A few features are worth knowing:
· Expanded reach over previously unlicensed providers: the CCFPL let the DFPI supervise and take action against many consumer-finance companies that had escaped state licensing before, including certain fintech and debt-related businesses.
· Investigation and enforcement tools: the DFPI can issue subpoenas, investigate, and bring administrative actions, and it can order penalties, restitution, and injunctive relief through consent orders and other proceedings.
· A state backstop to federal retrenchment: the CCFPL was designed in part so that California could keep enforcing consumer-finance standards even during periods when the federal CFPB pulls back.
A concrete example is the DFPI's 2024 consent order with the fintech company Chime, in which the agency found the company had engaged in unfair acts in the way it handled consumer complaints, in violation of the CCFPL, and imposed a $2.5 million penalty plus customer-service reforms. OCA's explainer on the Chime $2.5M DFPI consent order walks through what that order required — and why a regulatory penalty like it is not a consumer payout.
The DFPI's job is split between traditional licensing (making sure financial companies are authorized to operate in California and follow the rules) and the newer CCFPL consumer-protection role. The kinds of companies and products it touches include:
· Banks, credit unions, and trust companies chartered under state law.
· Lenders and financing companies licensed under laws like the California Financing Law, along with mortgage lenders and servicers.
· Money transmitters and payment companies.
· Broker-dealers and investment advisers registered in the state.
· Debt collectors — under the Debt Collection Licensing Act, debt collectors operating in California must now be licensed by the DFPI, a regime that phased in beginning in 2022.
· Student loan servicers, which are separately licensed and supervised.
· Fintech, "buy now, pay later," earned-wage-access, and crypto / digital financial asset businesses, a fast-growing area of DFPI attention — California's Digital Financial Assets Law (DFAL) took effect July 1, 2026, and now requires crypto exchanges, custodians, and similar businesses serving Californians to be licensed by (or to have applied to) the DFPI.
Because the CCFPL reaches "consumer financial products or services" broadly, the DFPI's consumer-protection authority can extend to companies that are not obviously "banks" at all — the Chime action is a good illustration, since Chime is a fintech intermediary whose underlying accounts sit at partner banks.
If you believe a financial company treated you unfairly — a lender, a debt collector, a money-transfer app, a crypto platform, or a fintech account provider serving Californians — you can file a complaint directly with the DFPI. Complaints are submitted through the agency's official website at dfpi.ca.gov, which has a dedicated "Submit a Complaint" section.
A few things worth knowing before you file:
· It's free. The DFPI never charges a fee to take a consumer complaint, and it will not ask you to pay to "release" money. Anyone demanding an upfront payment in the name of the DFPI is running a scam.
· Complaints drive enforcement. Individual complaints help the agency spot patterns — a wave of similar complaints about one company is frequently how an investigation and a later consent order begin.
· A complaint is not a lawsuit. Filing with the DFPI does not start a court case or a class action, and it is not the same as filing a claim in a settlement. It's a report to a regulator. If you also want to pursue money for yourself, that generally happens through separate litigation.
California consumers can also complain to their state attorney general and, for many financial products, to the federal CFPB — the agencies share information and jurisdiction often overlaps.
The single most important thing to understand about a DFPI action is that it is a government enforcement matter, not a consumer class action — and the two work very differently, in ways that matter to anyone hoping to recover money.
· Who brings it: a DFPI action is brought by the state against a company. A class action is a private lawsuit brought by consumers (through class counsel) on behalf of everyone harmed.
· Where the money goes: a DFPI penalty in a consent order is generally paid to the state, not distributed to consumers. A class action settlement, by contrast, creates a fund that class members can claim from. Some DFPI orders do require the company to pay restitution or refunds directly to affected customers — but a headline penalty figure is not, by itself, a consumer payout, and there is no claim form to file for it.
· No private right of action under the CCFPL: consumers cannot sue a company "under the CCFPL" themselves — only the DFPI enforces it. Private plaintiffs bring the same underlying facts under laws that do allow private suits, such as California's Unfair Competition Law (UCL) and the Consumers Legal Remedies Act (CLRA), often as a class action.
· The two tracks feed each other: a DFPI investigation lays out alleged misconduct in detail, and class action lawyers frequently file parallel cases covering the same consumers. For readers, that means a DFPI action about a financial product you used is worth watching twice — once for any restitution the order itself provides, and once for the class action settlement that may follow.
The relationship parallels how the federal FTC and the Department of Justice operate at the national level: a government agency polices the conduct and can force penalties or refunds, while private class actions pursue separate recovery for the people affected. The DFPI is California's counterpart on the consumer-finance side.
What does the DFPI do?
The California Department of Financial Protection and Innovation licenses and regulates financial products and services offered to Californians — banks, credit unions, lenders, money transmitters, debt collectors, broker-dealers, student loan servicers, and many fintech and crypto providers. Under the California Consumer Financial Protection Law (CCFPL), it can investigate companies, take consumer complaints, and bring enforcement actions against unlawful, unfair, deceptive, or abusive acts or practices in consumer finance.
Is the DFPI the same as the old Department of Business Oversight?
It is the successor agency. In 2020, California enacted the California Consumer Financial Protection Law (AB 1864), which renamed and expanded the Department of Business Oversight (DBO) into the Department of Financial Protection and Innovation, effective in late September 2020, with the new consumer-protection authority phasing in as the CCFPL took full effect on January 1, 2021.
Can I sue a company under the CCFPL myself?
No. The CCFPL is enforced by the DFPI, not by private lawsuits. Californians harmed by the same conduct usually sue under other state laws that do allow private suits — California's Unfair Competition Law, the Consumers Legal Remedies Act, or specific finance statutes — frequently as a class action. A DFPI investigation or consent order can supply the facts that a later class action relies on.
Do I get money if the DFPI penalizes a company?
Usually not directly. A DFPI penalty in a consent order is paid to the state, not distributed to consumers the way a class action settlement fund is. Some DFPI orders do require a company to provide refunds or restitution to affected customers, but a monetary penalty by itself is not a consumer payout and there is no claim form to file for it.
How do I file a complaint with the DFPI?
California consumers can submit a complaint about a financial product or service through the DFPI's official website at dfpi.ca.gov. Complaints help the agency spot patterns of misconduct, which is often how enforcement actions begin. Filing a DFPI complaint is free — the agency never charges a fee to take a complaint.
What is the difference between the DFPI and the CFPB?
The CFPB is the federal Consumer Financial Protection Bureau, which enforces federal consumer-finance law nationwide; the DFPI is California's state counterpart, which licenses financial companies operating in California and enforces state law like the CCFPL. The CCFPL was modeled on the CFPB's authority, so the DFPI is often called California's "mini-CFPB." The two agencies share information and their jurisdiction frequently overlaps, and the CCFPL was designed partly so California could keep enforcing consumer-finance standards even if the federal CFPB scaled back.
Does the DFPI regulate cryptocurrency?
Increasingly, yes. The DFPI supervises many fintech and digital-asset businesses under the CCFPL and takes consumer complaints about crypto platforms. Separately, California's Digital Financial Assets Law (DFAL) took effect July 1, 2026, and requires crypto exchanges, custodians, stablecoin issuers, and similar businesses serving Californians to be licensed by — or to have applied to — the DFPI. Consumers can report crypto-related problems to the DFPI at dfpi.ca.gov.
