Terminated order, preserved historical findings
Status: terminated CFPB . The Bureau issued the U.S. Bank National Association order on July 28, 2022 and says it terminated the order on August 21, 2025, waiving alleged non-compliance with it. Its case page states that the bank paid the $37.5 million penalty, issued required redress and took implementation steps. This is not an assertion that the order remains active. [1]
The underlying historical findings concerned unauthorized deposit and credit accounts and obtaining or using consumer reports without a permissible purpose. The consent order supplies the detailed conduct and remediation framework. Distinguish an administrative settlement and its findings from a criminal judgment or a claim about present conduct. [1, 2]
Consent is more than a checked field
Analysis: identity verification answers who the customer is. Product authorization answers what the customer agreed to open. A legitimate customer record can therefore coexist with an unauthorized account. A control that treats an existing relationship as blanket authorization can fail even if KYC is otherwise accurate.
For credit reports, record the purpose and the transaction supporting access. A later-approved application should not be used to retrospectively justify an earlier pull without the required basis. Sales and credit systems need a common, time-stamped chain of evidence.
Incentives can change the apparent quality of data
A sales program should be evaluated by funded, used and retained relationships as well as openings. Rapid closures, immediate complaints, unusual employee-level clusters and products with no subsequent customer activity are analytical leads, not proof of misconduct by themselves. Investigation must distinguish customer choice, operational error and unauthorized behavior.
Recommended management reporting pairs volume with independently verified consent and correction outcomes. The control owner should have authority to challenge sales results. If the team rewarded for openings also resolves every authorization exception without review, the program has a conflict worth addressing.
A practical consent test
Recommended evidence matrix:
Scroll horizontally to see all columns.
| Question | Record to retrieve | Failure signal |
|---|---|---|
| Which product was requested? | Product-specific application and disclosures | Generic customer consent substituted |
| When was permission obtained? | Time-stamped authorization | Authorization created after account opening |
| Why was a report accessed? | Permissible-purpose record and associated transaction | No support beyond an existing relationship |
| Was harm corrected? | Fees, account closure and reporting validation | Closure without downstream correction |
Worked example: growth that does not persist
Hypothetical: a branch reports 1,000 new accounts. A review finds that 80 close within a week and 20 customers dispute opening them. Do not label all 80 unauthorized or count only the 20 complaints as the affected population. Review the common employees, channels, consent evidence and surrounding accounts to determine the actual scope.
If an unauthorized credit account generated a bureau inquiry, closing the account alone may not address the inquiry or other reporting. Map each downstream effect before declaring the customer made whole. Measure whether the corrected state reaches external systems, rather than only the bank’s case-management status.
What termination means for governance
Termination changes the order’s legal status. It does not repeal underlying consumer laws or automatically validate every later process. A useful historical case review asks which durable controls should remain because they address recurring risk, while removing obsolete claims that the terminated order itself still mandates action.
Watch for a new official action before describing current enforcement exposure. This article neither alleges continued misconduct nor infers confidential supervisory conclusions. The operating takeaway is narrower: authorization, report access and sales compensation should be tested as one customer journey, with independent challenge and measurable remediation.
Sources
- 1. CFPB U.S. Bank case record; July 28, 2022 order and August 21, 2025 terminationOfficial sourceBack to text: ↑1↑2
- 2. CFPB consent order 2022-CFPB-0006; July 28, 2022Official source · PDFBack to text: ↑
- 3. CFPB original announcement; July 28, 2022Official source