Was Your Loan Denied by an AI? What Regulation B Still Requires the Lender to Tell You

You filled out the application online, hit submit, and a decision came back before you finished your coffee. Denied. The letter that arrived a few days later was polite and almost entirely empty. It said your application did not meet the lender's criteria, and not much else. There was no number you could point to, no habit you could fix. When a machine makes that call in seconds, it can feel like there is no one to ask and nothing to do.

Here is the reassuring part. A lender can absolutely use software, scoring models, and even artificial intelligence to decide your application. What it cannot do is hide behind that software when it tells you why. The law that governs the letter in your hand is older than any algorithm, and it still asks the lender a plain question on your behalf: what, specifically, went wrong?

Think of your credit profile as a nest you are building twig by twig. A vague denial is a storm that knocks a few twigs loose without telling you which ones. This whole article is about getting that information back, calmly and on the terms the rules already give you.

Two ideas sit at the center of it. First, when a lender takes adverse action, the legal term for denying you, approving you for less than you asked, or closing an account, it owes you a notice. Second, that notice has to actually inform you. The point of the law was never to hand you a receipt. It was to make sure you can understand the decision, catch a mistake if there is one, and know what to work on. That second idea is where most of the useful detail lives, and it is the part some lenders get lazy about.

Start with timing, because it is the clearest right you have. Under Regulation B, at 12 CFR 1002.9(a)(1)(i), a creditor must give you notice of the action it took within 30 days of receiving a completed application. That clock is real, and the word completed matters. If the lender asked for a document and you sent it, the 30 days generally run from when your file was whole.

Now the part that matters most when a model made the call. When a creditor does give reasons, Regulation B at 12 CFR 1002.9(b)(2) requires that the statement be specific and indicate the principal reasons for the adverse action. Specific and principal. Those two words carry the whole weight. A reason has to describe an actual factor the lender considered, not a shrug.

The official commentary to the rule goes further and names the excuses that do not count. Telling you the decision was based on the creditor's internal standards or policies, or that you simply failed to achieve a qualifying score on a credit-scoring system, is not enough. The reasons have to relate to and accurately describe the factors the lender actually considered or scored. In plain terms, "the algorithm said no" is not a legal answer, and neither is "you did not score high enough." If a lender scored you with a model, it still has to tell you the real drivers. A high balance relative to your limits, a short history, recent missed payments, too many recent applications, in words you can act on. Complexity on their end does not shrink your right to a straight answer.

You may have read that a CFPB bulletin once said all of this out loud for algorithmic lending. That is true, and it is worth understanding honestly. In 2022 the CFPB issued Circular 2022-03, which stated that the complexity of an algorithm is no excuse for failing to give specific principal reasons, and a related Circular 2023-03 addressed adverse-action notices and the proper use of the sample forms. Both were guidance, the agency's reading of the law, not the law itself.

On May 9, 2025, the CFPB withdrew 67 guidance documents, and those two circulars were among them. The withdrawal took effect a few days later. The agency described the move as not final and said the withdrawn guidance would not be enforced while it reviewed the material. So it would be wrong to point at those circulars today as active guidance. Here is the distinction that actually protects you. The circulars only interpreted Regulation B. The regulation itself, the 30-day notice, the specific and principal reasons standard, and the commentary rejecting a failed qualifying score, was never withdrawn. The interpretation came and went. The underlying duty in 12 CFR 1002.9 is still on the books.

For the question in front of you, the key fact is what that rule did not do. It did not amend the adverse-action notice rules in 12 CFR 1002.9. Your right to a timely notice and to specific, principal reasons is untouched by it. And a word of caution about a common overstatement. This rule changed one theory of liability under Regulation B. It did not erase disparate-impact protections everywhere. The Fair Housing Act and various state fair-lending laws stand on their own footing. If you suspect discrimination, that is a question for a qualified attorney, not an assumption to draw from a single rule change.

So what do you actually send? If your letter offered the right to request reasons, or if the reasons you got were vague, put your request in writing and keep it short and specific. Ask the lender to identify the principal reasons for the decision as Regulation B requires, and to describe them as real factors rather than internal policy. A useful request touches these points:

• The specific principal reasons for the adverse action on your application, in plain language.
• If a credit score or model was used, the key factors that most affected the result, not merely that you did not qualify.
• The name of the consumer reporting agency whose data was used, so you can pull that file and check it.

Come back to that empty letter and the coffee going cold. The feeling it gives you, that a machine decided your future and left no door to knock on, is exactly the feeling Regulation B was built to prevent. A lender can use artificial intelligence, scoring models, and instant decisions all it likes. It still cannot tell you nothing. You are owed a timely notice, and if you ask, you are owed specific, principal reasons you can understand and act on.

1. Can a lender deny my loan using AI and refuse to tell me why?

• No. Regulation B (12 CFR 1002.9) requires a creditor to notify you of its decision within 30 days of a completed application, and if it states reasons for a denial they must be specific and indicate the principal reasons. The official commentary says citing internal standards or policies, or that you failed to achieve a qualifying score, is insufficient, even when an algorithm or AI model made the decision.

2. Are the CFPB circulars on algorithmic denials still in effect?

• The CFPB withdrew 67 guidance documents on May 9, 2025, and Circulars 2022-03 and 2023-03 were among them, so they should not be cited as current guidance. However, the underlying requirements in Regulation B at 12 CFR 1002.9 were not withdrawn and still apply.

3. Did the April 2026 Regulation B rule change my right to a denial reason?

• No. The April 2026 final rule (effective July 2026) removed disparate-impact liability from Regulation B and narrowed the discouragement standard, but it did not amend the adverse-action notice rules in 12 CFR 1002.9. Your right to timely notice and specific principal reasons is unchanged, and the Fair Housing Act and state fair-lending laws are unaffected.

4. How long does a lender have to tell me its decision?

• Under Regulation B, at 12 CFR 1002.9(a)(1)(i), a creditor must give you notice of the action it took within 30 days of receiving a completed application. If the lender asked for a document and you sent it, the 30 days generally run from when your file was whole.

5. Is "you failed to achieve a qualifying score" a legal reason for a denial?

• No. The official commentary says telling you the decision was based on the creditor's internal standards or policies, or that you failed to achieve a qualifying score on a credit-scoring system, is not enough. The reasons have to relate to and accurately describe the real factors the lender considered or scored.

6. What should I include when I request the reasons in writing?

• Ask for the specific principal reasons for the adverse action in plain language. If a credit score or model was used, ask for the key factors that most affected the result rather than that you simply did not qualify. Ask for the name of the consumer reporting agency whose data was used, so you can pull that file and check it. Send it in writing, note the date, and keep a copy.