MCA lender enforcement is shifting fast

The old playbook

For most of the last decade, MCA funders enforced their contracts with a fairly narrow set of tools. The factor-rate structure let them avoid usury laws by characterizing the advance as a purchase of future receivables rather than a loan. Daily ACH debits pulled cash out of the merchant's account before the owner could redirect it. And when a merchant fell behind, a confession of judgment — typically filed in New York — produced a quick judgment that could be domesticated and enforced across state lines.

That playbook worked because it ran faster than the merchant's ability to respond. By the time an owner realized they had a problem, the judgment was already in place and the bank account was frozen.

What changed

Three things have combined to tighten that window. First, New York's 2019 law restricting confessions of judgment against out-of-state defendants closed the easiest lane for rapid enforcement. Second, a wave of state disclosure laws — starting with California SB 1235 and New York S5470-B, joined more recently by Utah, Virginia, Georgia, Florida, Connecticut, Kansas, Missouri, and Texas — now require MCA funders to state APRs, fees, and payment schedules in plain language before funding. Third, state attorneys general and the FTC have stepped up enforcement actions against funders whose collection practices cross into unfair or deceptive territory.

The net effect: funders are still getting paid, but the path to enforcement is longer, more public, and more expensive for them. That shift creates leverage for business owners who know how to use it.

Enforcement tactics we're seeing in 2026

UCC lockboxes and account control

With confessions of judgment harder to come by, more funders are relying on UCC-1 filings against the merchant's receivables and bank-account control agreements negotiated at funding. The goal is the same — capture cash before the owner can redirect it — but the mechanism now involves the merchant's bank rather than a quick court filing. Challenging these arrangements requires moving early, often within days of a notice.

Stacked and cross-defaulted contracts

Funders are writing cross-default clauses into renewals so that a missed payment on Contract B triggers acceleration on Contracts A, C, and D. Merchants who've stacked advances across multiple funders are particularly exposed — one blocked debit can cascade into coordinated enforcement across the stack.

Personal guarantee pursuit

Where the business itself has limited assets, funders are increasingly chasing personal guarantees against the owner. This is where state disclosure laws become especially useful: if the underlying MCA failed to disclose required fields, the guarantee often fails with it.

ACH authorization disputes

Owners are successfully revoking ACH authorizations when the funder has denied a reconciliation request, overcharged fees, or continued debiting after a cure period. Banks increasingly honor these revocations — a change from five years ago, when many simply deferred to the funder's paperwork.

The disclosure-law lever

The biggest shift in 2026 is the weight state disclosure laws carry in enforcement defense. In states with active disclosure regimes, a contract that fails to disclose APR, fees, or payment terms in the required format is not just a compliance problem for the funder — it's an affirmative defense for the merchant. Courts have been receptive to arguments that an MCA missing its required disclosures cannot be enforced as written, even if the underlying transaction is otherwise valid.

Texas HB 700 is the most aggressive example. It combines a strong disclosure requirement with enforcement tools that make it costly for funders to cut corners. Business owners in Texas who received MCAs without HB 700-compliant disclosures have been able to pause daily debits and negotiate significant reductions in payback.

What this means for owners

If you are a business owner currently servicing an MCA, the practical takeaway is that the balance of leverage has shifted in your favor — but only if you move. Enforcement moves quickly, and the defensive tools available to you (disclosure challenges, reconciliation demands, ACH revocations, guarantee defenses) all depend on acting before a judgment, lockbox, or lien forecloses them.

The first step is always the same: audit the contract. Confirm the real APR. Inventory every fee. Check whether the disclosures required in your state actually appear. If they don't, you have leverage. If they do, you still may — reconciliation denials and ACH overreach are enforceable defenses even against a compliant contract.

What this means for advisors

For attorneys, CPAs, and bankruptcy counsel advising small-business clients, MCA enforcement cases in 2026 look materially different than they did in 2021. The defensive toolkit is wider. The window for acting is still narrow, but the outcomes when you act early are meaningfully better.

We work alongside outside counsel on these matters regularly. If you have a client in distress, the fastest way to scope leverage is to run the contract through our audit framework — it surfaces the disclosure issues, APR problems, and enforcement exposures in about an hour.

Looking ahead

We expect the disclosure-law wave to continue. States that have not yet enacted MCA disclosure frameworks are actively drafting them, and the FTC's commercial-lending enforcement docket continues to grow. Funders will adjust — most already have — but the direction of travel is clear: MCAs are moving from a largely unregulated product toward something that looks more like traditional commercial lending, with all the disclosure and fair-dealing obligations that implies.

For business owners, that shift is overdue. For the funders who built their books around aggressive enforcement, the next few years will be a reckoning.