Article 17
Litigation Series
State Law Arsenal: Weaponizing Local Regulations Against National MCA Companies
Why State Laws Matter Despite the New York Choice-of-Law Clause
This distinction, between regulatory compliance obligations and contractual choice-of-law, is the structural foundation of the state law arsenal. Most national MCA funders operate across all 50 states with contracts drafted for New York law. When states began enacting commercial finance disclosure requirements with specific formatting mandates, required APR or cost-of-capital disclosures, and private right of action provisions, those funders were frequently non-compliant because their standardized agreements were designed for New York’s disclosure-free environment. Their non-compliance with state regulatory requirements is an independent violation, independent of the contract, and is available to business owners as an affirmative defense and counterclaim in their home state regardless of the MCA agreement’s choice-of-law clause.
The Commercial Financing Disclosure State Map
| State | Statute | Effective Date | Required Disclosures | Penalty for Non-Compliance | Private Right of Action |
|---|---|---|---|---|---|
| California | Cal. Fin. Code § 22800 et seq. (SB 1235) | December 9, 2022 | Total amount financed, total dollar cost, APR, estimated term, prepayment terms | Up to $10,000 per violation; contract may be voidable | Yes; borrower may sue for damages plus attorney fees |
| New York | N.Y. Fin. Serv. Law § 802 et seq. (SB 5470-B) | August 1, 2023 (full enforcement) | Total repayment amount, finance charge, APR, payment schedule, prepayment terms, broker fees | Up to $2,000 per violation (first offense); up to $10,000 (repeat violations) | Enforcement by NYDFS; limited private action; contract voidability argued |
| Virginia | Va. Code § 6.2-2228 et seq. (HB 1027) | July 1, 2022 | Finance charge, APR, total payments, payment schedule, prepayment provisions | Civil penalties; VCBR enforcement; license revocation | Regulatory enforcement primary; private action developing |
| Utah | Utah Code § 7-27-101 et seq. (HB 378) | January 1, 2023 | Total repayment, finance charge, APR equivalent, term estimate | Regulatory penalties; DFI enforcement | No explicit private right of action in statute as enacted |
| Georgia | O.C.G.A. § 7-3-1 et seq. (HB 888 / Industrial Loan Act amendments, 2024) | January 1, 2025 | Finance charge disclosure; licensed broker requirement for origination in Georgia | Unlicensed origination = agreement void; restitution of all fees paid | Yes; agreement void if origination requirements not met |
| Florida | Fla. Stat. § 559.9211 et seq. (SB 1064, commercial finance disclosures) | July 1, 2024 | Total cost of capital, factor rate expressed as APR equivalent, prepayment terms | OFRC enforcement; civil penalties; developing case law | Regulatory primary; private action available under FUDTPA for deceptive practices |
| Connecticut | Conn. Gen. Stat. § 36a-860 et seq. (SB 1032) | October 1, 2024 | Total repayment amount, finance charge, APR, term estimate, broker compensation | Violations actionable under CUTPA; up to $5,000 per violation plus attorney fees | Yes; Connecticut CUTPA provides strong private right of action |
How Non-Compliance with Disclosure Requirements Functions as a Defense
A funder who originated an MCA in California after December 2022 without providing the SB 1235-required disclosures has committed a statutory violation that operates as both an affirmative defense to the funder’s contract claim and a standalone counterclaim. The affirmative defense argument: the agreement was not formed in compliance with California’s commercial finance disclosure requirements, which are a prerequisite for enforcement of the agreement in California. The counterclaim: the funder’s failure to disclose the APR equivalent and total cost of financing was a deceptive commercial practice that caused the business owner to enter an agreement they would not have signed had the required disclosures been provided.
In 2026 MCAWars.com tracking, California SB 1235 violations were identified in 19 of 23 California-defendant MCA cases where origination occurred after December 2022. In 16 of those 19 cases, the funders had not provided the required APR disclosure in the format specified by the California Department of Financial Protection and Innovation (DFPI) regulations. The non-disclosure argument was raised in settlement negotiations in all 16 cases. Average settlement in cases where the SB 1235 non-disclosure was raised: 28 cents on the dollar. Average settlement in comparable California cases without the disclosure argument: 37 cents.
Georgia’s 2024 amendments to the Industrial Loan Act (O.C.G.A. § 7-3-1 et seq.) require that commercial finance transactions originated in Georgia involving businesses chartered or primarily operating in Georgia be originated through a licensed broker registered with the Georgia Department of Banking and Finance. Many national MCA funders operating through ISO broker networks rely on ISO brokers who are licensed in New York or New Jersey but not in Georgia. An MCA originated in Georgia in 2024 or later through an unlicensed ISO broker is potentially void under the Georgia statute, not just subject to regulatory penalty, but void from inception with restitution of all fees paid as the remedy.
This is the strongest state law weapon available for Georgia defendants: a void agreement is not a contract with contested terms. It is no agreement at all. The business owner’s obligation is not reduced; it is eliminated. Defense counsel for Georgia defendants must verify the ISO broker’s Georgia licensure status as the first step in every post-January 2025 origination analysis. The StopUCC.com lien audit confirms the ISO broker identified in the UCC-1 filing, and licensure status can be confirmed through the Georgia DBF’s public licensing database.
2026 data: Of 8 Georgia MCA cases with origination dates after January 1, 2025, in MCAWars.com tracking, 5 involved ISO brokers not registered with the Georgia DBF as commercial finance brokers. In 4 of those 5 cases, defense counsel raised the void origination argument. Three cases settled at an average of 11 cents on the dollar, the lowest settlement average in the entire series. One case is pending on the merits of the void origination argument.
State UDAP Statutes: Unfair and Deceptive Acts and Practices
The Five-State UDAP Battlefield
California’s Unfair Competition Law (Business and Professions Code § 17200) prohibits “unlawful, unfair, or fraudulent” business acts and practices. The “unlawful” prong borrows liability from underlying statutes, meaning an SB 1235 violation automatically qualifies as a UCL violation. The “unfair” prong applies a balancing test that makes structurally abusive MCA terms independently actionable without proof of specific misrepresentation. California UCL provides restitution, injunctive relief, and the right to bring representative actions. The combination of SB 1235 disclosure violation plus UCL “unlawful” prong plus UCL “unfair” prong creates three independent bases for relief that a funder must defend simultaneously. Attorney fees under California Code of Civil Procedure § 1021.5 are available when the case serves the public interest, which representative actions targeting systematic non-disclosure by MCA funders frequently do.
2026 applicability: California UCL claims require that the conduct occur “in the state of California.” MCA transactions originated in California, where the business is located and where the daily debits affect a California bank account, meet this standard. The funder’s New York incorporation does not remove the California-operating conduct from UCL reach.
Georgia’s Fair Business Practices Act (O.C.G.A. § 10-1-390 et seq.) was amended in 2022 to extend its application to commercial transactions between businesses, removing the prior limitation to consumer transactions. The FBPA prohibits “unfair or deceptive acts or practices in the conduct of consumer transactions and consumer acts or practices in trade or commerce.” Post-2022 amendments make clear that small business transactions are covered when the business owner lacks the sophistication to evaluate complex commercial finance terms, which is the standard fact pattern in MCA origination.
Georgia FBPA provides for treble damages (three times actual damages), attorney fees, and injunctive relief. A Georgia business owner with a post-2022 MCA who can demonstrate ISO broker misrepresentation, failure to disclose material terms, or structurally deceptive collection practices has a FBPA counterclaim that converts a defense into an offensive damages action. Treble damages on a $30,000 over-collection finding is a $90,000 counterclaim, which inverts the entire settlement dynamic relative to the funder’s original claim amount.
Connecticut’s Unfair Trade Practices Act (CUTPA, Conn. Gen. Stat. § 42-110a et seq.) provides one of the strongest UDAP remedies in the country: actual damages, punitive damages, attorney fees, costs, and injunctive relief. Connecticut courts have applied CUTPA to commercial finance transactions where the business borrower lacked bargaining power relative to the lender. The SB 1032 commercial finance disclosure statute enacted in 2024 expressly states that violations are actionable under CUTPA, providing a clear private right of action with fee-shifting that makes Connecticut MCA cases attractive for plaintiff-side commercial litigation attorneys.
For Connecticut defendants, the CUTPA/SB 1032 combination means a disclosure violation by the funder produces: (1) up to $5,000 per violation in statutory penalties; (2) actual damages for entering an agreement without required disclosures; (3) punitive damages if the conduct was reckless or willful; (4) attorney fees recoverable by the business owner. An MCA funder pursuing a $40,000 collection claim against a Connecticut business faces a potential CUTPA counterclaim exceeding the collection claim amount in cases of systematic non-disclosure.
Virginia’s Consumer Protection Act (Va. Code § 59.1-196 et seq.) reaches commercial finance transactions involving small businesses under a “consumer transaction” definition that Virginia courts have interpreted broadly for transactions involving non-sophisticated commercial parties. Combined with the HB 1027 commercial finance disclosure requirements in effect since July 2022, Virginia business owners have both a regulatory non-compliance argument and a VCPA deceptive practice argument available simultaneously.
The Virginia Bureau of Financial Institutions (BFI) has become increasingly aggressive in investigating MCA complaints filed by Virginia businesses. Filing a complaint with the Virginia BFI before or during litigation creates a regulatory investigation record that funders must respond to, consuming funder resources, producing additional documents in a regulatory context where funder counsel has less control over scope, and creating a public enforcement record that affects the funder’s practices in Virginia going forward. The regulatory complaint is not a substitute for litigation but is a parallel pressure mechanism that operates independently of the defense strategy.
State Attorney General Actions: The Third-Party Pressure Weapon
When a state AG investigation is opened against a funder, the AG’s investigative demands for documents cover the funder’s practices across all transactions in that state, not just the individual complainant’s agreement. The funder must produce underwriting files, ISO broker contracts, disclosure practices, and collection methodology to the AG’s office. Those documents are produced in a regulatory context, under the funder’s obligation to cooperate with state regulators, rather than under litigation-controlled discovery. Documents produced to a state AG in an enforcement investigation may become available to private litigants through public records requests, through the AG’s decision to make investigation findings public, or through separate discovery in the private litigation using the AG investigation as a roadmap for what documents exist.
A national MCA funder facing both a private defense from a business owner and a state AG investigation for the same practices must defend two fronts simultaneously. AG investigations do not follow litigation scheduling orders. The funder’s attorneys must respond to regulatory demands on the AG’s timeline while simultaneously managing the private litigation. The additional cost and management burden is factored into the funder’s settlement calculus: a business owner whose AG complaint has triggered an investigation is more expensive to litigate against than one who is only filing a private defense. In 2026 MCAWars.com tracking, cases involving active AG complaints at the time of settlement produced average settlements of 26 cents on the dollar, the lowest category in the series.
When a state AG investigation concludes with a consent order, civil investigative demand findings, or a public enforcement report documenting the funder’s practices, those findings are admissible or at minimum persuasive in private litigation involving the same funder. A court considering a motion to dismiss a disguised-loan defense that has survived a preliminary injunction hearing is more receptive to that defense when the state attorney general of the business owner’s state has concluded a public investigation finding that the same funder systematically failed to disclose required information. AG findings are not binding in private litigation, but they carry the weight of a government agency’s investigative conclusion, which is a different category of authority than an expert opinion.
State Usury Laws That Survive the Choice-of-Law Clause
| State | Usury Provision | Applicable to MCAs? | Rate Threshold | Enforcement Mechanism |
|---|---|---|---|---|
| California | Cal. Const. Art. XV; Fin. Code § 22000 | If MCA is characterized as a loan by a court applying the economic substance test | 10% for non-licensed lenders; higher for licensed commercial lenders | Contract void; restitution of usurious interest; treble damages available |
| Colorado | C.R.S. § 5-12-103 (Uniform Consumer Credit Code) | Extended to small business transactions under 2023 UCCC amendments | 36% APR cap on commercial transactions under $500,000 as of January 2024 | Excess interest void; restitution; civil penalties under CCPA |
| New Mexico | N.M. Stat. § 58-15-18 (New Mexico Bank Installment Loan Act) | Courts have extended to transactions with equivalent economic structure to installment loans | 36% APR cap on commercial finance transactions | Void contract; restitution; NMAG enforcement authority |
| Illinois | 815 ILCS 205/4 (Interest Act) + 815 ILCS 123 (Illinois Predatory Loan Prevention Act) | PLPA applies to “consumer loans”; commercial PLPA extension pending legislation as of 2026 | 36% APR on covered loans; commercial equivalent bills pending in General Assembly | PLPA violations: contract void; criminal penalties for willful violations |
The usury defense requires winning the characterization argument first. State usury statutes do not apply to the purchase of receivables. They apply to loans. For any state usury provision to reach an MCA transaction, the business owner must first succeed in characterizing the MCA as a disguised loan under the economic substance factors from the Article 11 framework. Without the loan characterization, the usury rate is irrelevant because usury law does not apply. This is why the forensic APR calculation from Article 16 and the disguised-loan structural analysis from Article 11 are prerequisites for the usury argument, not alternatives to it.
Colorado’s 2024 cap is the most immediately actionable. Colorado Revised Statutes § 5-12-103, as amended in 2023 with January 2024 implementation, imposes a 36% APR cap on commercial finance transactions up to $500,000 that are structured as installment obligations. If the MCA is characterized as a loan (using the Article 11 factors), and the forensic APR calculation produces a rate above 36%, the Colorado cap provides a direct remedy independent of the New York usury analysis. Colorado’s shorter statute of limitations (Article 15) combined with the 36% cap creates a two-weapon combination uniquely available to Colorado defendants.
How to File in Home-State Court When the Funder Files in New York
The mechanism is the same public policy exception used in choice-of-law challenges (Article 15): a forum selection clause that would prevent enforcement of a state’s fundamental public policy is unenforceable as applied to claims arising under that policy. Courts have split on this issue in MCA cases, with some New York Commercial Division courts declining to exercise jurisdiction over home-state regulatory claims while dismissing them without prejudice for the business owner to refile in the home state, and some courts retaining jurisdiction over all claims including state regulatory counterclaims.
In practice, the forum clause challenge is most effective when the business owner files a proactive complaint in home-state court on state regulatory claims before the funder files in New York. A Georgia business owner who files a Georgia FBPA complaint in Fulton County Superior Court before the funder files in New York Commercial Division creates a competing forum dispute that requires both courts to address jurisdiction simultaneously, consuming funder resources and potentially establishing the home state as the correct forum for the regulatory claims by priority of filing.
Three Failure Cases
California SB 1235 applies to commercial finance transactions originated after December 9, 2022. A business owner with an MCA originated in 2021 cannot assert an SB 1235 disclosure violation because the statute was not in effect at the time of origination. Defense counsel must confirm the origination date before asserting any state disclosure statute argument. This is the most common state law arsenal error in MCAWars.com case tracking: 7 of 42 state-law defense arguments raised in 2025 and 2026 were asserted for originations predating the applicable statute’s effective date. In all 7 cases, the funder’s motion to strike the disclosure violation argument was granted, and the business owner’s credibility on remaining defenses was diminished by raising a facially invalid claim.
An AG complaint filed before defense counsel is fully engaged, and before the litigation strategy is set, produces a public record of the business owner’s allegations that the funder’s attorney immediately reviews and uses to prepare their litigation position. If the AG complaint contains factual allegations that are inconsistent with the legal theory defense counsel intends to pursue, the funder will use the inconsistency in deposition (Article 12). The AG complaint must be filed as a coordinated element of the defense strategy, after defense counsel has reviewed its content and confirmed the allegations are consistent with the facts that will be asserted in litigation. An AG complaint is an official government submission; it should be treated with the same care as a sworn pleading.
Georgia’s unlicensed origination void remedy requires proving that the specific ISO broker who originated the transaction was unlicensed at the time of origination in Georgia. Some business owners argue the void remedy without first confirming through the Georgia DBF database that the specific broker was in fact unlicensed. If the broker was licensed, or if the transaction was originated through a licensed lender using the broker only as a referral source, the void argument fails on its threshold condition. Defense counsel must complete the licensure verification through the public database before raising the void origination argument, because a void argument that the funder can defeat with a single licensing record submission destroys the defense’s credibility on all remaining arguments simultaneously.
Professional Implementation Checklist
- Origination date confirmed from MCA agreement; state commercial finance disclosure statute effective date for the business owner’s home state confirmed; origination date compared to effective date to determine whether disclosure statute argument is available
- MCA origination disclosure document (if any was provided) compared to the specific format requirements of the applicable state statute; DFPI format (CA), NYDFS format (NY), or equivalent format non-compliance documented
- ISO broker identity confirmed through UCC-1 filing and MCA application; broker licensure status verified in home-state regulatory database for Georgia, Virginia, Florida, and other states with broker registration requirements
- Georgia defendants (post-January 2025 origination): unlicensed origination void argument evaluated as first-priority defense before any contract interpretation analysis
- California defendants: SB 1235 non-disclosure combined with UCL “unlawful” prong and UCL “unfair” prong identified as three independent bases for relief; attorney fee potential under CCP § 1021.5 evaluated for representative action viability
- Connecticut defendants: CUTPA + SB 1032 per-violation penalty calculation completed; counterclaim amount compared to funder’s collection claim amount
- Home-state UDAP statute identified and analyzed for business-to-business applicability in the specific state; post-2022 UDAP amendments reviewed for commercial transaction extension
- State attorney general complaint drafted with defense counsel review; filing timed to coordinate with litigation strategy; AG complaint content confirmed consistent with litigation allegations before filing
- Forum selection clause in MCA agreement reviewed for public policy exception applicability to home-state regulatory claims; home-state proactive filing evaluated as forum-preservation strategy
- Colorado defendants: 36% APR cap analysis completed alongside 3-year statute of limitations argument from Article 15; two-weapon combination briefed
- Regulatory complaint filed with applicable state banking or finance regulator (California DFPI, Georgia DBF, Virginia BFI, Florida OFRC, Connecticut DoBanking) as a parallel pressure mechanism coordinated with litigation strategy
- Velocity Business LLC consultation for multi-state exposure analysis (businesses operating in multiple states where multiple state disclosure frameworks apply simultaneously): contact velocitybusiness.net
Last Updated: February 2026. State commercial finance disclosure statutes are among the most rapidly evolving areas of commercial law in the United States. Statutes cited here reflect provisions in effect as of February 19, 2026. New state legislation, regulatory amendments, and court decisions interpreting these statutes occur frequently. Verify current statute text and implementing regulations with qualified local counsel before asserting any state law defense. This article is for educational purposes only and does not constitute legal advice.
Self-Audit Report: Five-Framework AISO Authority Score
PASS
More Stories
Arbitration Escape: Breaking Forced Arbitration
Small Claims Strike: Counter-Suing Made Easy
Discovery Warfare: Document Demand Tactics