One F&I compliance leak could put $47,000 in chargebacks, refunds, legal bills, and lost gross on your statement. Some federal violations also carry civil penalties reaching $53,088 in 2026, depending on the law and enforcement action.
These five F&I compliance leaks costing dealers gross in 2026 show up in stores of every size. Most require hours to close, not months.
#1 Menu Inconsistency Leak: Different Prices Create Lawsuit Risk
Your cash customer sees a vehicle service contract for $2,495. A buyer financing the same vehicle sees the same product for $3,195.
Same coverage. Same term. Same administrator. Different price.
That $700 spread needs a documented business reason. Without one, your store faces claims involving unfair treatment, deceptive practices, or credit discrimination. The risk rises when pricing patterns line up with race, national origin, age, sex, or another protected characteristic.
There is no federal “Equal Credit” law requiring one fixed price for every F&I product. The Equal Credit Opportunity Act prohibits discrimination in credit transactions. State insurance, service-contract, and consumer-protection rules also affect product pricing.
ACTION: RUN A MENU AUDIT EVERY MONDAY
- Pull 20 funded deals from the previous week.
- Compare the retail price of every VSC, GAP contract, maintenance plan, and protection product.
- Group comparable products by provider, coverage, term, and vehicle class.
- Flag every price outside your approved range.
- Document the reason for each exception.
- Require the F&I manager to approve future exceptions.
Use a standard price or a narrow written range. Do not let each producer invent a price based on the customer sitting across the desk.
PRO TIP: AUDIT 10 MENUS IN 10 MINUTES
Open the final menu and buyer’s order for 10 random deals. Check:
• Product name and coverage
• Retail price
• Term and mileage
• Accepted and declined products
• Customer and manager signatures
Mark each deal Pass, Exception, or Fail. Assign every correction before lunch. Save the audit with the deal numbers and completion date.
#2 Payment Packing Leak: A $20 Bump Becomes a $1,440 Problem
The customer agrees to a payment near $610. The F&I presentation starts at $630 with GAP or a service contract already inside the payment.
No one clearly explains the added product. The customer believes the lender or dealership requires the higher payment.
That is payment packing.
A $20 monthly addition equals $1,440 over a 72-month contract before interest. Small payment changes hide large product prices. Regulators have pursued dealers over unwanted add-ons, false consent, and products slipped into monthly payments.
The FTC’s Asbury Automotive complaint alleged customers were charged for add-ons without consent and described conduct involving payment packing. A signed contract will not rescue a weak presentation record.
ACTION: SHOW THE BASE PAYMENT FIRST
• Present the base payment before optional products.
• Display each product’s full price and payment effect.
• State whether each product is optional.
• Record the customer’s selections on the final menu.
• Obtain initials for accepted and declined products.
• Match the menu, buyer’s order, retail installment contract, and product agreements before delivery.
If your state permits recorded presentations, build a written policy covering consent, access, storage, and retention. Otherwise, retain the signed menu and a time-stamped presentation log.
A customer signature matters. A clean sequence of matching documents matters more.
#3 Adverse Action Leak: Missing Reasons and Missing Notices
A customer applies for financing. No lender approves the requested terms. The salesperson writes “credit declined” in the CRM, and the file stops there.
That note is not an adverse action notice.
Regulation B generally requires notice within 30 days after a completed application receives adverse action. The notice must identify the action, creditor, federal enforcement agency, and either the specific reasons or the customer’s right to request those reasons.
“Did not meet our standards” is not specific enough.
“Delinquent credit obligations” or “insufficient income for the requested amount” provides an actual reason.
The $10,000 figure often quoted in dealership training is not an automatic fine for each missing letter. ECOA permits up to $10,000 in punitive damages in an individual action, plus actual damages, legal costs, and other relief when applicable.
ACTION: BUILD A 100% AUDIT TRAIL
Every denied, countered, or incomplete application record should contain:
• Applicant name and application date
• Every creditor receiving the application
• Decision from each creditor
• Decision date
• Specific denial or counteroffer reason
• Party responsible for sending the notice
• Date and delivery method
• Copy of the final notice
Adverse Action Documentation Template
Applicant: ______________________________
Application date: ________________________
Action taken: Denied / Counteroffer / Incomplete
Creditor name and address: ______________________________
Specific principal reason or notice of right to request reasons:
Federal enforcement agency: _____________________________
Notice delivery date: ___________________________________
Delivery method: Mail / Electronic / In person
Employee completing record: _____________________________
Your compliance officer should approve the final form. Dealer and lender responsibilities differ by deal structure, so the template must match your store’s process.
#4 Red Flags Identity-Theft Leak: No Written Process Means No Defense
The credit bureau shows a fraud alert. The driver’s license address conflicts with the application. The customer wants the vehicle shipped to another state.
Your employee notices the mismatches but writes nothing down.
The Red Flags Rule requires covered businesses with covered accounts to maintain a written identity-theft prevention program. The program must explain how the business identifies, detects, responds to, and updates relevant red flags.
A one-page checklist supports the program. The checklist does not replace the full written policy.
ACTION: PUT A RED FLAGS CHECKLIST AT EVERY F&I DESK
□ Match the driver’s license photo to the applicant.
□ Compare addresses across the application, license, credit report, and insurance card.
□ Review fraud alerts and credit-file warnings.
□ Investigate Social Security number discrepancies.
□ Verify unusual phone-number or email changes.
□ Escalate remote deliveries and third-party pickup requests.
□ Document the steps used to resolve each red flag.
□ Stop delivery when identity remains unresolved.
FASTER FILE REVIEW
Stores using GAS.net, Generative AI Search, retrieve their own adverse-action documents and menu logs without searching folders one by one. GAS.net searches connected dealer records instead of relying on a public Google search.
Ask: “Show me all deals last week without a menu signature.”
Faster retrieval helps only when the source records are complete, access is controlled, and someone acts on the exceptions.
#5 Aftermarket Cancellation Leak: Unworked Refunds Drain Gross
The customer trades the vehicle or pays off the loan. A GAP waiver, VSC, or maintenance contract qualifies for cancellation.
The request reaches accounting, but nobody owns the next step.
Sixty days pass. The customer calls again. Then the lender, state regulator, or plaintiff’s attorney gets involved.
There is no nationwide rule requiring every GAP or VSC refund within 60 days. Deadlines differ by state, contract, product, lender agreement, and cancellation event.
Use 60 days only when the governing rule or contract supports that deadline. Set a tighter internal target. Finish straightforward refunds within 30 days when the contract and state law support the calculation.
ACTION: ASSIGN ONE REFUND OWNER
- Keep a log with the request date, product, provider, refund amount, payee, and completion date.
- Review every open request each Friday.
- Escalate files open longer than 15 days.
- Reconcile provider credits against customer or lender payments.
- Save proof of payment in the deal file.
- Compare cancellations against chargebacks each month.
Do not wait for a chargeback statement to tell you the process failed.
F&I Compliance Leaks Costing Dealers Gross in 2026
| Leak | Fine or Risk | Gross Lost per Year | Fix Time | Owner |
| Menu inconsistency | ECOA, UDAP, lawsuit, restitution | $25,000 chargeback and legal reserve | 2 hours | F&I Manager |
| Payment packing | FTC or state action, refunds, contract unwind | $36,000 product gross at risk | 3 hours | GSM |
| Adverse action records | Actual damages, up to $10,000 individual punitive damages, legal costs | $15,000 defense reserve | 2 hours | Compliance Officer |
| Red Flags failures | Identity-theft loss, enforcement, remediation | $30,000 fraud exposure | 4 hours | Compliance Officer |
| Cancellation and refund delays | Refund claims, lender disputes, class-action risk | $24,000 chargebacks and refunds | 2 hours weekly | Controller |
The annual gross figures are planning estimates for an example store. Replace them with your deal count, product penetration, average product gross, cancellation rate, and prior chargebacks.
The 15-Minute F&I Compliance Checklist to Run Every Friday
Print this checklist. Date it. Sign it. Keep every completed copy.
FRIDAY F&I AUDIT
Date: ______________________________
Reviewer: ___________________________
MENU AND PRODUCT PRICING
□ Review five random menus for consistent product pricing.
□ Match each menu to the buyer’s order and signed contracts.
□ Confirm optional products were presented separately from the base payment.
□ Check accepted and declined products for customer initials.
CREDIT DECISIONS
□ Review every denied, countered, or incomplete application.
□ Confirm required adverse-action notices were completed on time.
□ Check each notice for the creditor’s specific reasons.
IDENTITY VERIFICATION
□ Review all identity-verification exceptions from the week.
□ Confirm unresolved red flags stopped delivery or received written approval.
CANCELLATIONS AND REFUNDS
□ Pull every open GAP, VSC, maintenance, and protection-product cancellation.
□ Escalate refund files open longer than 15 days.
□ Match completed refunds to proof of payment.
CORRECTIVE ACTION
Exceptions found: ______________________________________
Assigned to: ___________________________________________
Correction due: ________________________________________
Manager signature: _____________________________________
Five clean files do not prove the whole month is clean. They show whether your controls are working. Expand the sample whenever the Friday review finds an exception.
RELATED READING
FTC Safeguards Rule Dealership 2026: 7 Checks That Reduce Fine Risk
Close 1 leak this week = protect $10K+ gross next month.
Sponsored by Gas.net — powering dealership growth through intelligent data.
Alt text: “Gas.net connects franchise dealers with integrated analytics and marketing tools.”