Summary: The Military Lending Act, implemented at 32 CFR Part 232, caps the Military Annual Percentage Rate on consumer credit to active-duty service members and their dependents at 36 percent and bars certain loan terms outright. A lender gets a safe harbor on the covered-borrower question by checking the Defense Department database or a nationwide consumer report at application and keeping the record. Testing a loan book means lining up the check result, the check date and the MAPR for every loan.
Who is covered and which products count
Part 232 applies to “consumer credit extended by a creditor to a covered borrower” (32 CFR 232.2(a)(1)).
A covered borrower is a consumer who, “at the time the consumer becomes obligated on a consumer credit transaction or establishes an account for consumer credit”, is a covered member or a dependent of one. A covered member is a member of the armed forces serving on “Active duty pursuant to title 10, title 14, or title 32, United States Code, under a call or order that does not specify a period of 30 days or fewer” or on “Active Guard and Reserve duty”. Dependents are the people described in 10 U.S.C. 1072(2)(A), (D), (E) and (I), which include the spouse and dependent children.
Status is fixed at origination. Section 232.2 says “Nothing in this part applies to a credit transaction or account relating to a consumer who is not a covered borrower at the time he or she becomes obligated on a credit transaction or establishes an account for credit.”
Consumer credit means credit “primarily for personal, family, or household purposes” that is either “Subject to a finance charge” or “Payable by a written agreement in more than four installments”. The main exceptions are a residential mortgage, a loan “expressly intended to finance the purchase of a motor vehicle when the credit is secured by the vehicle being purchased”, and a loan to buy personal property secured by that property. Payday loans, installment loans, lines of credit and credit cards are in scope.
The MAPR and what it includes
Section 232.4(b) sets the cap: “A creditor may not impose an MAPR greater than 36 percent in connection with an extension of consumer credit that is closed-end credit or in any billing cycle for open-end credit.”
Section 232.4(c)(1) lists what goes in:
- “Any credit insurance premium or fee, any charge for single premium credit insurance, any fee for a debt cancellation contract, or any fee for a debt suspension agreement”
- “Any fee for a credit-related ancillary product sold in connection with the credit transaction”
- Finance charges associated with the credit
- Any application fee, with a narrow exception for a federal credit union or insured depository institution making a short-term, small amount loan
- Any fee for participation in a credit plan or arrangement
Paragraph (c)(1)(iv) adds: “Any charge set forth in paragraphs (c)(1)(i) through (iii) of this section shall be included in the calculation of the MAPR even if that charge would be excluded from the finance charge under Regulation Z.” A product priced at a 35 percent APR with an add-on credit insurance premium or membership fee can carry an MAPR above 36 percent.
For closed-end credit, the MAPR is computed under the Regulation Z rules for calculating the APR, applied to the wider set of charges. For open-end credit it is computed per billing cycle.
Covered-borrower identification and the safe harbor
Section 232.5(a) says a creditor “is permitted to apply its own method to assess whether a consumer is a covered borrower.” The safe harbor in 232.5(b) is the only way to make the determination conclusive. The first is the Department of Defense database, which “requires the entry of the consumer’s last name, date of birth, and Social Security number.” The second is “a statement, code, or similar indicator describing that status” in a consumer report from a nationwide consumer reporting agency or a reseller.
The Defense Manpower Data Center site describes the program as one “that provides certain protections in lending for servicemembers who are called to Active Duty.” A Single Record Request returns “a report certifying Title 10 active duty status for provisions under MLA.” A Multiple Record Request returns certificates for a file of consumers; both require an account.
A determination is conclusive only “so long as that creditor timely creates and thereafter maintains a record of the information so obtained”, and only if it is made when “A consumer initiates the transaction or 30 days prior to that time”, when the consumer applies to establish an account or 30 days prior, or when the creditor builds a firm offer of credit that the consumer accepts within 60 days. Section 232.5(b)(2)(i)(B) goes further: after a transaction is entered, a creditor or assignee “may not, directly or indirectly, obtain any information from any database maintained by the Department to ascertain whether a consumer had been a covered borrower as of the date of that transaction”.
What a lender may not do, even under the cap
Section 232.8 lists terms that are unlawful on consumer credit to a covered borrower regardless of rate. Among them: requiring the borrower to waive legal recourse; requiring arbitration; demanding “unreasonable notice from the covered borrower as a condition for legal action”; and charging “a penalty fee for prepaying all or part of the consumer credit.”
A non-bank payday creditor may not roll over, renew, refinance or consolidate the borrower’s credit with proceeds of new credit from the same creditor. A non-bank creditor may not take a vehicle title as security. No creditor may require a military allotment as a condition of the loan. Using “a check or other method of access to a deposit, savings, or other financial account” is barred too, though a loan with an MAPR at or under the cap may require repayment by electronic fund transfer or direct deposit of salary.
Testing loan files: the check result against the rate
A book-level test needs three fields per loan.
Check result and date. Was a database or consumer report check performed, what did it return, and was it dated at application or within the 30 days before?
MAPR as booked. Rebuild the MAPR from the contract: the Regulation Z finance charges plus every charge in 232.4(c)(1), including credit insurance, ancillary products and application or participation fees that the lender’s system may classify outside the finance charge. Compare it with 36 percent for every loan, not only those flagged as military; the point is to find loans where the flag was wrong or missing.
Contract terms. For each loan where the borrower was covered, read the agreement for an arbitration clause, a waiver of legal recourse, a prepayment penalty, an allotment requirement or a title lien.
Escalate loans where the check returned covered status and the MAPR exceeds 36 percent, loans with a prohibited term, and loans with no timely check on a product that normally prices above the cap. A cluster by product or month usually traces to a system setting, such as a fee coded outside the finance charge.
How the automated version works
MightyBot is an AI agent platform for lending and finance. For this test, agents read the application record, the covered-borrower check, the note and the fee schedule for every loan, rebuild the MAPR with the full 232.4(c)(1) charge set, and apply rules written in plain English, such as “a loan to a covered borrower may not carry an MAPR above 36 percent.” Every finding cites the document page or system record behind it, and exceptions go to a person for approval.
See compliance monitoring and policy evaluation for how the rules are written and run.
