The leveraged payment mechanism is the defined term that explains the product. Under 1041.3(c), a lender obtains one "if it has the right to initiate a transfer of money, through any means, from a consumer's account to satisfy an obligation on a loan", excluding a single immediate transfer made at the consumer's request. That right, rather than any collateral, is what makes the loan collectible, and it is why the surviving federal protections are about payments rather than about underwriting.
Half the rule was revoked, and the regulation shows it. As issued, part 1041 had two halves: mandatory underwriting, requiring a lender to determine that the borrower could repay while meeting basic living expenses, and a payments chapter. The Bureau revoked the underwriting provisions in 2020 (85 FR 44382), and Subpart B of part 1041 now reads "[Reserved]". So there is no federal ability-to-repay requirement for these loans. Whether a borrower can afford the loan is not a federal question.
What survives is narrow, specific and worth knowing. Section 1041.7 makes it "an unfair and abusive practice for a lender to make attempts to withdraw payment from consumers' accounts in connection with a covered loan after the lender's second consecutive attempts to withdraw payments from the accounts from which the prior attempts were made have failed due to a lack of sufficient funds, unless the lender obtains the consumers' new and specific authorization to make further withdrawals". Two failed attempts, and the lender has to stop and ask. Section 1041.9 then requires notices, including a consumer rights notice after two consecutive failed transfers, due "no later than three business days" after the lender learns the second attempt failed. Its content is prescribed: it must identify the lender, state that its last two attempts were returned for non-sufficient funds, identify the account and the loans, and state, using that phrase, that "Federal law prohibits" the lender from initiating further payment transfers without the consumer's permission.
The current status of those provisions needs stating carefully, because the Bureau's own position has moved. The provisions are codified and in force. On 28 March 2025 the Bureau announced that it "will not prioritize enforcement or supervision actions with regard to any penalties or fines associated with the Payment Withdrawal provisions and the Payment Disclosure provisions once they become operative on March 30, 2025", and that it was "further contemplating issuing a notice of proposed rulemaking to narrow the scope of the rule". An enforcement priority is not a repeal, and the rule text is what it is, but a reader relying on these protections should check their current status rather than assume it.
The one federal rate cap here protects a class of borrower, not a class of loan. 32 CFR 232.4(b), implementing the Military Lending Act at 10 USC 987, provides that "a creditor may not impose an MAPR greater than 36 percent in connection with an extension of consumer credit that is closed-end credit or in any billing cycle for open-end credit". That applies to covered borrowers, meaning service members and their dependents. It is not a general payday-loan rate cap, and reading it as one is the commonest mistake about it. For everyone else, any rate ceiling comes from state law.
What part 1041 leaves out is instructive about the boundaries. Section 1041.3(d) excludes purchase-money loans secured by the good financed, real estate secured credit, credit card accounts, federal and private student loans, non-recourse pawn loans, overdraft services and overdraft lines of credit, and certain employer wage-advance programs. So several products that look economically similar to a payday loan sit outside this rule entirely and are governed by their own regimes.