Free Word download • Edit online • Save & share with Drive • Export to PDF
A Denial of Credit Letter is a formal written notice a creditor sends to an applicant to communicate that a credit application has been refused, a requested credit limit has been reduced, or credit has been offered on terms less favorable than those applied for. Beyond simply delivering a credit decision, the letter serves as a legally required adverse action disclosure — it must identify the specific reasons for the refusal, name any consumer reporting agency whose data influenced the decision, and inform the applicant of their statutory rights to obtain a free copy of their credit report and to dispute any inaccurate information it contains. In the United States, these obligations are governed by the Equal Credit Opportunity Act and the Fair Credit Reporting Act; similar requirements apply under consumer credit statutes in Canada, the United Kingdom, and the European Union.
Failing to issue a timely, compliant denial of credit letter is not merely a paperwork gap — it is a regulatory violation that carries concrete consequences. In the US, creditors that miss the 30-day adverse action notice deadline or omit required disclosures face CFPB enforcement action, civil liability of up to $10,000 per violation in individual suits, and class-action exposure of up to $500,000 or 1% of net worth in class suits. Beyond regulatory risk, a poorly drafted or missing letter leaves applicants with no documented explanation of the decision, creating fertile ground for discrimination claims under ECOA. A clear, specific denial letter also protects the creditor operationally — it aligns the stated reasons with the underwriting file, forecloses ambiguity if the decision is ever challenged, and gives the applicant a fair and actionable account of their credit standing. This template gives you every required element in the correct structure so you can issue compliant adverse action notices in minutes rather than building them from scratch each time.
| If your situation is… | Use this template |
|---|---|
| Denying a consumer credit or loan application | Denial of Credit (Consumer) |
| Denying a business or commercial credit application | Denial of Business Credit |
| Offering credit on less favorable terms than applied for | Counteroffer to Credit Application |
| Revoking or reducing an existing credit line after account review | Notice of Credit Line Reduction |
| Denying a rental application based on a consumer report | Rental Application Denial Letter |
| Denying employment based partly on a background or credit report | Pre-Adverse Action Employment Notice |
| Requesting additional information before making a final credit decision | Incomplete Credit Application Notice |
Why it matters: ECOA requires adverse action notices within 30 days of a completed application. Late notices expose the creditor to regulatory penalties, consumer complaints, and civil liability.
Fix: Set a workflow trigger the moment a credit decision is made so the letter is generated, signed, and mailed within 5 business days of the decision — well inside the 30-day window.
Why it matters: Reasons such as 'did not meet our credit standards' or 'credit score' without elaboration fail the specificity requirement and give the applicant no actionable information to improve their creditworthiness.
Fix: Select reasons from the FFIEC adverse action code list or your regulator's approved list, and confirm each reason was actually documented in the underwriting file before including it.
Why it matters: The FCRA requires disclosure of up to four key factors that adversely affected the score when that score was used in the decision. Missing this is one of the most cited deficiencies in CFPB examinations.
Fix: Pull the key factor codes directly from the bureau report and include all four in the credit score disclosure block, even if they seem redundant to the denial reasons.
Why it matters: Disputes about credit report accuracy must be filed with the CRA, not the creditor. Misdirecting applicants delays their rights and may constitute a misleading disclosure.
Fix: Always direct applicants to the specific CRA — name, address, and website — for disputes, and include the clarification that the creditor cannot investigate or correct CRA data on the applicant's behalf.
Why it matters: If the letter is ever challenged, the creditor must prove the disclosing entity had the legal obligation. A trade name without the underlying legal entity creates ambiguity and complicates enforcement.
Fix: Use the full registered corporate or LLC name exactly as it appears in your state's business registry, with the trade name included parenthetically if needed for applicant recognition.
Why it matters: Regulators and courts require evidence that the notice was sent in the required form and within the required timeframe. No retained copy means no defense.
Fix: Save a dated copy of every adverse action notice in the applicant's credit file and record the send date and method in your compliance log. Retain for at least 25 months under Regulation B.
In plain language: Identifies the company issuing the denial, including its legal name, address, and the name or title of the credit officer responsible for the decision.
This notice is issued by [CREDITOR LEGAL NAME], located at [ADDRESS], by [CREDIT OFFICER NAME / TITLE] on [DATE].
Common mistake: Using a trade name or department name instead of the registered legal entity — creating ambiguity about which party is bound by the disclosure obligations and whom the applicant can contact for recourse.
In plain language: Names the applicant and references the specific application by date and account or reference number so the letter is unambiguously tied to a single credit request.
This letter concerns the credit application submitted by [APPLICANT FULL NAME] on [APPLICATION DATE], Reference No. [APPLICATION NUMBER], for [CREDIT PRODUCT / AMOUNT REQUESTED].
Common mistake: Omitting the application reference number or date. Without this anchor, the applicant cannot match the letter to their application, and the creditor cannot demonstrate compliance if the denial is challenged.
In plain language: Clearly states the specific decision — denial, reduction, or unfavorable modification — so there is no ambiguity about the outcome of the application.
After careful review of your application, [CREDITOR NAME] has [denied your application for credit / reduced the requested credit limit from $[X] to $[Y] / changed the terms of your credit as follows: [DESCRIPTION]].
Common mistake: Softening the language to the point of vagueness — phrases like 'we are unable to proceed at this time' do not constitute a clear adverse action statement and can leave the creditor out of compliance with disclosure timing rules.
In plain language: Lists the specific, principal reasons the creditor used to make the adverse decision — typically two to four reasons drawn from the applicable regulatory list of adverse action codes.
The principal reason(s) for this decision are: [1. Insufficient income to support the requested credit amount. 2. Delinquent past or present credit obligations with others. 3. Length of employment or time at current address.]
Common mistake: Listing a generic reason like 'credit score' without specifying the underlying factors — in many jurisdictions, vague or circular reasons fail to meet the specificity requirement and expose the creditor to regulatory penalties.
In plain language: If a credit score was a factor in the decision, discloses the score used, the range, the date it was obtained, the key factors that affected it, and the name of the CRA that provided it.
Your credit score used in this decision was [SCORE], obtained on [DATE] from [CRA NAME]. Scores range from [MIN] to [MAX]. Key factors that adversely affected your score: [FACTOR 1], [FACTOR 2], [FACTOR 3], [FACTOR 4].
Common mistake: Disclosing only the score number without the key factors. The FCRA requires disclosure of up to four key factors that affected the score — omitting them is one of the most commonly cited compliance deficiencies in regulatory examinations.
In plain language: Identifies the consumer reporting agency whose report was used in the decision, including its name, address, and telephone number, and states that the CRA did not make the decision.
The consumer reporting agency that provided information used in this decision is [CRA NAME], located at [CRA ADDRESS], telephone [CRA PHONE]. [CRA NAME] did not make this credit decision and cannot explain the specific reasons for it.
Common mistake: Identifying the CRA without the clarifying statement that the CRA did not make the decision. Applicants frequently contact the CRA expecting an explanation; without the clarification, they have a misleading picture of who to approach and why.
In plain language: Notifies the applicant that they have the right to obtain a free copy of their consumer report from the identified CRA within 60 days of receiving the denial notice.
You have the right to obtain a free copy of your consumer report from [CRA NAME] if you request it within 60 days of receiving this notice. You may contact [CRA NAME] at [CRA CONTACT DETAILS] to make this request.
Common mistake: Failing to state the 60-day window. This is a specific statutory right under the FCRA; omitting the timeframe means the applicant cannot exercise it properly and the creditor has not met the full disclosure requirement.
In plain language: Informs the applicant of their right to dispute any information in the consumer report that they believe is inaccurate or incomplete, and explains how to initiate a dispute with the CRA.
If you believe any information in your consumer report is inaccurate or incomplete, you have the right to dispute it directly with [CRA NAME] at [CRA ADDRESS / WEBSITE]. The CRA is required to investigate your dispute at no charge to you.
Common mistake: Describing the right to dispute without directing the applicant to the CRA. Sending them to the creditor instead of the CRA delays resolution and may constitute a misleading disclosure under the FCRA.
In plain language: States that the credit decision was made without regard to race, color, religion, national origin, sex, marital status, age, or other protected class, in compliance with the Equal Credit Opportunity Act.
The Federal Equal Credit Opportunity Act prohibits creditors from discriminating against credit applicants on the basis of race, color, religion, national origin, sex, marital status, age, or because an applicant receives public assistance. If you believe you have been discriminated against, you may contact [REGULATORY AGENCY NAME AND ADDRESS].
Common mistake: Omitting the name and address of the specific regulatory agency that handles ECOA complaints for your type of institution. Different regulators oversee banks, credit unions, auto dealers, and other creditors — a generic statement may not satisfy the specific disclosure requirement.
In plain language: Closes the letter with the signature of the authorized credit officer and contact information for the applicant to ask questions or reapply in the future.
Sincerely, [CREDIT OFFICER NAME] | [TITLE] | [CREDITOR NAME] | [PHONE] | [EMAIL] | If you have questions, please contact us at [CONTACT DETAILS]. You are welcome to reapply at any time.
Common mistake: Sending the letter without a named signatory or contact point. An unsigned or anonymously issued adverse action notice cannot be authenticated if challenged and gives the applicant no clear path to follow up.
Use the full registered legal name of the lending entity — not a brand name or department — along with the mailing address and the name and title of the authorized credit officer.
💡 The legal entity name on the denial letter must match the name on the credit application the applicant submitted. A mismatch triggers compliance questions.
Enter the applicant's full legal name and the application date and reference number. If the application was joint, identify both applicants by name.
💡 Store the reference number in your credit file system so you can retrieve the full application instantly if the applicant disputes the decision.
Choose the precise action taken — denial, credit limit reduction, or change in terms — and state it in plain, unambiguous language. Avoid hedging phrases that obscure the decision.
💡 If you issued a counteroffer rather than an outright denial, treat it as an adverse action for disclosure purposes if it differs materially from what the applicant requested.
Choose two to four principal reasons from a recognized adverse action code list. Each reason should be a direct, identifiable factor that influenced the decision — not a restatement of the outcome.
💡 Keep your internal underwriting notes aligned with the reasons stated in the letter. Contradictions between the file and the letter are a primary target in regulatory examinations and litigation.
If a credit score was used, enter the score, the scoring range, the date obtained, the CRA name, and up to four key factors that negatively affected the score. Pull these directly from the credit bureau report.
💡 Many CRAs include a pre-formatted score disclosure block in their reports — copy the factors verbatim rather than paraphrasing to avoid inadvertent inaccuracy.
Enter the full name, mailing address, and telephone number of the CRA whose report was used. If multiple CRAs were used, disclose each one. Add the clarifying statement that the CRA did not make the credit decision.
💡 If you used an automated decisioning tool that aggregates data from multiple bureaus, list every bureau whose data contributed to the score or decision.
Confirm the letter includes the applicant's right to a free credit report within 60 days, the right to dispute inaccurate information, and the ECOA non-discrimination statement with the appropriate regulatory agency name and address.
💡 Use a compliance checklist cross-referenced to the specific disclosure requirements of your regulator (OCC, CFPB, FRB, NCUA, or FTC) to confirm every required element is present before sending.
Have the authorized credit officer sign and date the letter. Send it within 30 days of the completed application in the US under ECOA, or within the applicable local timeframe. Retain a copy in the applicant's credit file.
💡 Send by first-class mail at minimum; for high-value decisions or where the applicant may dispute delivery, consider certified mail with return receipt.
A denial of credit letter is a formal written notice a creditor sends to an applicant whose credit request has been refused, reduced, or offered on unfavorable terms. It states the specific reasons for the adverse decision, identifies any consumer reporting agency whose data was used, and informs the applicant of their legal rights — including the right to obtain a free credit report and to dispute inaccurate information. In the US, sending this notice is a legal requirement under the Equal Credit Opportunity Act and the Fair Credit Reporting Act.
In the United States, yes. The Equal Credit Opportunity Act requires creditors to provide a written adverse action notice within 30 days of a completed application. The Fair Credit Reporting Act imposes additional disclosure requirements when a consumer report was used. Similar obligations exist in Canada under the Consumer Protection Act, and in the UK under the Consumer Credit Act 1974. Failure to send a compliant notice can result in regulatory penalties, CFPB enforcement action, and civil liability.
Creditors must state the specific principal reasons that influenced the decision, drawn from a recognized list of adverse action codes. Common reasons include insufficient income, excessive debt obligations relative to income, delinquent past credit obligations, insufficient credit history, inability to verify income or employment, bankruptcy within the past seven years, and value or type of collateral offered. Reasons must reflect the actual factors documented in the underwriting file — fabricating or generalizing reasons creates legal exposure.
Under ECOA and Regulation B in the United States, a creditor must notify the applicant of its decision — and, if adverse, send the required disclosures — within 30 days of receiving a completed application. If the application is incomplete, the creditor has 30 days to request the missing information and then another 30 days after receiving it. In Canada and the UK, timelines vary by province, territory, and applicable statute, but prompt written notice is required in all major jurisdictions.
The applicant should first review the stated reasons carefully and obtain a free copy of their credit report from the identified consumer reporting agency within the 60-day window. If the report contains inaccurate or incomplete information, the applicant can file a dispute directly with the CRA at no charge. If the applicant believes the denial was based on discrimination, they can file a complaint with the CFPB, the relevant state banking regulator, or the Department of Justice. After addressing the underlying issues, the applicant may reapply.
The letter itself does not affect the credit score. However, the credit inquiry that triggered the review may have already caused a small, temporary reduction in the applicant's score — typically fewer than five points — when the creditor pulled the report. The denial decision is not reported to credit bureaus; only the hard inquiry is. Multiple hard inquiries within a short period for the same type of credit (mortgage, auto loan) are generally treated as a single inquiry by most scoring models.
The terms are used interchangeably in most contexts. An adverse action notice is the formal regulatory term for the written disclosure required by ECOA and the FCRA when a creditor takes an unfavorable action on a credit application. A denial of credit letter is the practical document that delivers that notice. Any letter that refuses, reduces, or modifies credit unfavorably must meet the adverse action notice content requirements to be legally compliant.
No. Under ECOA and Regulation B, a creditor must provide specific, written reasons for any adverse action taken on a credit application — or inform the applicant of their right to request the reasons within 60 days. Providing reasons only on request satisfies the letter of the law, but most compliance best practices and state consumer protection laws effectively require proactive disclosure. Refusing to state reasons or providing only vague explanations exposes the creditor to enforcement action.
ECOA adverse action requirements apply to all credit applicants, including businesses, though the disclosure obligations differ slightly. Businesses with gross revenues over $1 million are exempt from some of the notification requirements. However, most trade creditors and commercial lenders issue written denial notices for business applications regardless, both as a best practice and to satisfy any applicable state law requirements. The FCRA consumer report disclosures apply specifically when a consumer (personal) credit report was used, even for a business application.
A counteroffer letter proposes different credit terms — a lower limit, higher rate, or shorter term — rather than an outright refusal. Both trigger adverse action disclosure obligations when the terms differ materially from what was applied for. Use a counteroffer when you are willing to extend some credit; use a denial letter when no credit will be offered.
A credit application form collects the information needed to make a lending decision; a denial of credit letter communicates the outcome of that decision. The two documents work as a pair in any credit workflow — the application opens the process, the denial letter closes it when the decision is adverse. Both should be retained in the applicant's file.
A demand letter is sent by a creditor to an existing debtor requesting payment of an overdue balance. A denial of credit letter is sent to a prospective applicant before any credit is extended. They address opposite ends of the credit lifecycle — entry and collection — and have entirely different regulatory frameworks.
A credit reference letter confirms a business or individual's positive payment history to a third party. A denial of credit letter is an adverse action notice that refuses or limits a credit request. A credit reference letter supports an applicant's ability to obtain credit elsewhere; a denial letter formally closes a specific application.
Banks and credit unions are subject to direct CFPB and OCC examination of adverse action notice compliance, making exact adherence to FCRA and ECOA disclosure content and timing a routine audit target.
Dealers acting as indirect creditors must issue adverse action notices when arranging financing through a third-party lender, including when the applicant's terms are changed at the point of sale.
Trade creditors offering net-30 or net-60 accounts to business buyers must send denial notices under ECOA when refusing a commercial credit application, even when the applicant is a sole proprietor.
Landlords who use consumer reports to screen tenants must provide adverse action notices when denying or conditionally approving an application, identifying the CRA used and the applicant's dispute rights.
Automated decisioning platforms must generate compliant adverse action notices at scale, including individualized reason codes and accurate credit score disclosures, for every declined application processed.
Medical finance companies and patient financing programs that extend credit for procedures or equipment must comply with ECOA and FCRA adverse action requirements just as traditional consumer lenders do.
Adverse action notices are governed by ECOA (Regulation B) and the FCRA. Creditors must notify applicants within 30 days of a completed application. The notice must state specific reasons (or inform applicants of their right to request them) and include full FCRA credit report and score disclosures when a consumer report was used. The CFPB, OCC, FRB, FDIC, and NCUA each examine institutions under their supervision for adverse action compliance. Several states — including California and New York — impose additional disclosure requirements beyond the federal floor.
Canada does not have a single federal equivalent of ECOA, but the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and provincial consumer protection statutes govern the use of credit information in lending decisions. Creditors using credit bureau reports are generally expected to provide written notice of adverse decisions on request, and some provincial statutes — notably in Ontario and British Columbia — require proactive disclosure. Quebec's Act Respecting the Protection of Personal Information in the Private Sector imposes specific rules on how credit information is collected and used.
The Consumer Credit Act 1974 and the Financial Conduct Authority's Consumer Credit sourcebook (CONC) require lenders to inform applicants of credit refusals. When a credit reference agency report was used, lenders must tell the applicant which CRA was used so they can obtain a copy of their file. The UK GDPR also requires creditors to explain the logic of any automated credit decision if it produces a legally significant outcome. The FCA's Consumer Duty, in force since July 2023, adds a further obligation to ensure refusal communications are clear and fair.
The Consumer Credit Directive (CCD, 2008/48/EC) and its replacement, the 2023 Consumer Credit Directive II, require creditors to inform consumers when a credit application is rejected and to identify the credit database consulted if that information led to or influenced the refusal, so the applicant can check and correct the data. Article 22 of the GDPR gives applicants the right to a human review of automated credit decisions and an explanation of the decision logic. Individual member states — notably France and Germany — have additional disclosure requirements under their domestic consumer credit legislation.
| Path | Best for | Cost | Time |
|---|---|---|---|
| Use the template | Small business owners, trade creditors, and property managers issuing straightforward consumer or commercial credit denials with standard adverse action reasons | Free | 10–15 minutes per letter |
| Template + legal review | Lenders issuing high volumes of adverse action notices, fintech platforms building automated workflows, or creditors in regulated industries subject to CFPB or OCC examination | $300–$800 for a compliance attorney review of your template and process | 2–5 days |
| Custom drafted | Banks, credit unions, and consumer finance companies with complex product lines, multi-state operations, or recent adverse examination findings requiring remediation | $1,500–$5,000+ for a full compliance review and customized template set | 1–3 weeks |
This document is one of 3,000+ business & legal templates included in Business in a Box.
Access over 3,000+ business and legal templates for any business task, project or initiative.
Customize your ready-made business document template and save it in the cloud.
Share your files and folders with your team. Create a space of seamless collaboration.
"Fantastic value! I'm not sure how I'd do without it. It's worth its weight in gold and paid back for itself many times."
"I have been using Business in a Box for years. It has been the most useful source of templates I have encountered. I recommend it to anyone."
"It has been a life saver so many times I have lost count. Business in a Box has saved me so much time and as you know, time is money."
Stop downloading documents. Start operating with clarity. Business in a Box gives you the Business Operating System used by over 250,000 companies worldwide to structure, run, and grow their business.
Start free · No credit card required
