[.green-span]What Is Cash Flow Underwriting? A Guide for Modern Lenders[.green-span]

Cash flow underwriting is a credit assessment method that measures a borrower's ability to repay using bank account data on income, expenses, balances, and transactions. Experian describes it as using consumer-permissioned transaction and balance data to add a current view of financial activity alongside traditional credit. For business borrowers, the same approach reads deposits, revenue trends, and existing debt payments to show how a company actually manages its money.

For lenders, credit and risk leaders, and embedded finance product teams, cash flow underwriting fills gaps that bureau files leave open. This guide explains how it works, which consumer and business signals matter, and how it compares with traditional underwriting. It also covers benefits, use cases, compliance considerations, and a practical framework for implementation.

Close the Gaps That Bureau-Only Underwriting Leaves Open

Roughly 32 million U.S. adults are unscoreable, according to Federal Reserve estimates. For these applicants, a bureau-only model has little or nothing to evaluate, even when their bank accounts show steady income.

Timing is a second problem, because credit files describe past borrowing behavior rather than current finances. Plaid says traditional credit data lags by 30 days or more, a vendor claim from its February 2025 guide. If so, a recent income drop or a run of NSF fees may not appear before a loan is funded.

Bureau-only underwriting tends to miss these borrower groups:

• Thin-file and new-to-credit consumers who manage money well but have little borrowing history.
• Self-employed and gig workers whose irregular income a credit score does not capture.
• Young businesses with limited business credit history and owners with modest personal files.
• Borrowers whose finances changed, for better or worse, after their last bureau update.

How Cash Flow Underwriting Works, Step by Step

Most cash flow underwriting programs follow the same sequence for consumers and small businesses, turning raw bank activity into attributes a credit policy can use.

1. Get borrower consent. The borrower permissions access to bank accounts through an open banking connection or uploads recent bank statements.
2. Aggregate account data. Transactions and balances are collected from each relevant account, along with accounting or payment data for business applicants.
3. Clean and categorize transactions. Raw descriptors are normalized and tagged as income, payroll, rent, debt payments, transfers, fees, or discretionary spending.
4. Calculate attributes. Categorized data becomes underwriting-ready attributes, such as average balance, income stability, and NSF counts over set time windows.
5. Combine with traditional data. Cash flow attributes sit beside bureau scores, identity checks, and business data inside the decision model or policy rules.
6. Decide and monitor. The lender approves, declines, or adjusts terms, and refreshed account data can flag financial stress after funding.

Experian's Cashflow Attributes, for example, include 970+ attributes across 133 categories, according to Experian.

Consumer and Business Cash Flow Signals That Drive Decisions

The signals that matter depend on who is borrowing. Consumer underwriting focuses on household income and obligations, while business underwriting focuses on revenue quality and debt capacity.

Consumer Cash Flow Signals

• Income consistency shows whether paychecks or other deposits arrive on a regular schedule and in stable amounts.
• Recurring obligations such as rent, utilities, and subscriptions reveal how much income is already committed each month.
• Average and minimum balances indicate how much cushion the borrower keeps between pay periods.
• NSF fees and overdrafts point to months when spending outpaced available funds.
• Expense changes can signal duress, as Plaid notes, when costs rise faster than income.

Business Cash Flow Signals

A 2024 FinRegLab working paper on mission-based lenders found that lenders commonly use the following bank-data signals, though practices vary by lender:

• Average daily balance measures the cash a business typically holds to absorb a slow week or a large expense.
• Deposit consistency tracks the volume and frequency of deposits, which separates steady revenue from sporadic, lumpy inflows.
• Revenue trend and seasonality compare deposits month over month and against the same period in prior years.
• NSF and overdraft counts show how often the business ran short of funds in the review window.
• Low or negative balance days count how often the account sat near or below zero, which often reveals more than a single month-end balance.
• Existing debt service captures recurring loan payments and evidence of merchant cash advance payments, which some lenders treat as a negative signal.
• Debt service coverage compares available cash flow with current and proposed payments to size a safe offer.
• Transfers between accounts, loan proceeds, and other non-revenue deposits should be separated from sales receipts when calculating revenue.

Context changes how these signals read. A landscaping company with low winter deposits may be healthy if its spring deposits match prior years. The same dip in a year-round business deserves a closer look.

Cash Flow and Traditional Underwriting Work Best Together

Experian frames cash flow underwriting as an approach used alongside traditional credit, because each data type answers a different question about the borrower. FinRegLab research describes the difference in the following terms:

• Traditional credit scores primarily reflect past borrowing behavior, according to a June 2025 FinRegLab study funded in part by MBDA, Visa, and Plaid.
• Cash flow variables give a more direct measure of liquidity, revenue stability, and payment capacity, according to the same study.
• Bank account history shows payments made but not amounts owed or past due, so lenders still use credit reports for debt loads (FinRegLab, 2024).
• Electronic account feeds can provide near-real-time data, but FinRegLab notes that categorizing and structuring transactions greatly increases their usefulness.

In practice, lenders layer cash flow attributes onto existing models to approve thin-file applicants, give bureau declines a second look, and refine pricing. The same attributes also catch risk that a strong score can hide.

Benefits and Use Cases for Lenders and Platforms

According to Experian, pairing cash flow insights with credit data can improve predictive performance and expand approvals without adjusting risk tolerance. Experian notes that results vary, so each lender should validate gains against its own portfolio.

Key Benefits

• Broader access to credit lets lenders evaluate unscoreable and thin-file applicants instead of declining them outright.
• Sharper risk separation helps lenders distinguish borrowers who look similar on a bureau report.
• Earlier warning signs, such as rising NSF fees, help servicing teams act before a missed payment.
• Faster decisions follow when bank data arrives through an API instead of manual statement review.
• Better-sized offers match loan amounts and payments to a borrower's actual repayment capacity.

Common Use Cases

• Consumer personal loans and cards for thin-file or new-to-credit applicants with steady income.
• Small business term loans and lines of credit, where revenue and operating cash flow drive capacity.
• Merchant cash advances and revenue-based products that depend on deposit volume and consistency.
• Embedded financing inside SaaS platforms and marketplaces, where consent can be captured within the product experience.
• Second-look programs that re-evaluate bureau declines with cash flow data before the applicant leaves.
• Portfolio monitoring that flags falling balances or rising overdrafts after funding.

Challenges, Limitations, and Compliance Considerations

New data brings new operational and regulatory work, so teams should plan for three areas before launch.

History Length and Data Quality

Short account histories limit what lenders can learn, especially for seasonal businesses, and some lenders require a minimum business account history before lending (FinRegLab, 2024). FinRegLab's 2025 study, funded in part by MBDA, Visa, and Plaid, covered two fintech lenders. One required one year in business, and they reviewed three and six months of statements.

Data quality is a related concern for every program. Borrowers may connect only some of their accounts, transaction descriptors can be vague or mislabeled, and uncategorized transfers can inflate apparent income or revenue.

FCRA, Reg B, and Adverse Action Obligations

Cash flow report providers such as Experian's Cashflow Data Bureau operate as consumer reporting agencies under the Fair Credit Reporting Act (FCRA), according to Experian. Under 15 U.S.C. 1681m, a lender that takes adverse action based in whole or in part on a consumer report must notify the consumer. This applies to consumer reports, including an owner's personal report used in a business decision.

The FCRA notice includes the reporting agency's contact details and a statement that the agency did not make the decision. It also explains the consumer's rights to a free report and to dispute.

Regulation B, which implements the Equal Credit Opportunity Act, applies to both consumer and business credit under 12 CFR 1002.9. It requires adverse action notices to state specific principal reasons, and stating only that a credit report was used does not meet that requirement.

For business applicants, notice rules depend on whether gross revenues were $1 million or less in the preceding fiscal year. Above that level, a written statement of reasons is due if the applicant requests it in writing within 60 days.

Because reasons must accurately reflect the factors actually used, each cash flow attribute should map to a clear reason that can appear in a notice. This section is not legal advice, so confirm requirements with counsel.

Current Status of CFPB Section 1033

The CFPB finalized its Section 1033 open banking rule in October 2024. A federal court has since enjoined the CFPB from enforcing it, as Cozen O'Connor reports.

The CFPB is reconsidering the rule and may revise or withdraw it, according to the same Cozen O'Connor analysis.

In the meantime, lenders generally access bank data through aggregators and bilateral agreements, according to Consumer Finance Monitor. Lenders should build consent flows that can adapt as the final framework takes shape.

A Framework for Implementing Cash Flow Underwriting

A phased rollout lets direct lenders and embedded finance platforms prove value on one segment before extending cash flow data across the full credit box.

Step 1: Define Where Cash Flow Data Changes Decisions

Start with the segments where bureau data falls short, such as thin-file consumers, young businesses, or bureau declines. Set measurable goals for each segment, such as approval rate, loss rate, or time to decision.

Step 2: Connect Every Data Source in One Layer

Bank data is most useful when it sits next to credit, accounting, and business data. Lendflow Intelligence combines traditional and alternative data in one API response. Lendflow's credit decisioning page lists bank and open banking, accounting, credit, and business data among its sources.

When borrowers upload PDF statements instead, the Doc Analyzer agent extracts structured data from bank files.

Step 3: Turn Transactions Into Underwriting-Ready Attributes

Raw transactions need categorization before a policy can use them. Lendflow's credit decisioning solution uses cash flow metrics within configurable decisioning.

Step 4: Test Policy Rules Against Historical Outcomes

Back-test cash flow rules on past applications and funded loans before they touch live decisions. Then run the new rules in parallel with current policy to confirm that approvals rise without an unexpected shift in losses.

Step 5: Automate Routine Decisions and Route Edge Cases

Clear-cut files should move without manual work, while borderline files go to an underwriter. Lendflow's credit decisioning solution applies decision rules and routes uncertain files to manual review. Lendflow Automate offers a Workflow Builder and a Trust Score that shows how each factor is weighted.

The Trust Score agent adds business verification signals that complement existing KYB checks. For platforms that embed financing, Lendflow Connect is an embedded lending marketplace that connects businesses to lending offers.

Best Practices for Cash Flow Underwriting

These habits keep attributes accurate, explainable, and tied to real portfolio outcomes in consumer and business lending alike.

• Exclude transfers between the borrower's own accounts before calculating income or revenue.
• Review revenue across a full seasonal cycle whenever the available history allows it.
• Identify existing merchant cash advance payments before adding another payment obligation.
• Set minimum history thresholds by product and send shorter histories to manual review.
• Keep every attribute explainable so adverse action notices give borrowers specific reasons.
• Request consent at the moment of need and explain plainly what data is used and why.
• Validate vendor benchmarks against your own approvals and losses before relying on them.
• Refresh account data before funding and during servicing instead of relying on one snapshot.

Common Pitfalls to Avoid

• Treating cash flow data as a replacement for bureau data instead of a second lens.
• Reading a single month-end balance without reviewing negative-balance days across the full period.
• Launching across every product at once, which makes it harder to measure what actually changed.

Make Credit Decisions With Current Data

Cash flow underwriting gives lenders a current view of how borrowers earn, spend, and repay, which bureau files alone cannot provide. Consumer programs focus on income stability and obligations, while business programs focus on deposits, revenue trends, and debt service. Paired with traditional credit data, these signals help lenders approve more qualified borrowers and spot risk earlier.

The strongest programs start with a defined segment, connect clean data, and test rules against real outcomes before scaling. They also plan for FCRA adverse action requirements and for a Section 1033 framework that is still being reconsidered.

Frequently Asked Questions About Cash Flow Underwriting

What Are the 3 C's or 5 C's of Underwriting, and Where Does Cash Flow Fit?

The 5 C's of credit are character, capacity, capital, collateral, and conditions, according to Capital One. FinRegLab describes the same five as the 5 C's of underwriting, while shorter 3 C's lists vary by source.

Cash flow data fits most directly into capacity. FinRegLab notes that bank account data can show capacity through income, recurring obligations, and balances or reserves, along with payment history and financial stability. Balances may also inform capital, though that mapping is our own reading rather than a sourced definition.

What Is the Difference Between Asset-Based and Cash Flow Lending?

The OCC's 2014 edition of its Comptroller's Handbook booklet on asset-based lending, which was later updated, describes asset-based lending as fully collateralized credit. Repayment relies mainly on converting pledged working capital assets to cash, with operating cash flow as a secondary source.

In plain terms, cash flow lending sizes credit against the cash a business generates from operations. Cash flow underwriting is the analysis method behind it, and asset-based lenders also check that operating cash flow can service term loans.

How Much Bank Data Do Lenders Need for Cash Flow Underwriting?

The right amount depends on the product, the borrower type, and the lender's policy. Longer histories make trends and seasonality easier to read. In FinRegLab's 2025 study the two fintech lenders reviewed three and six months of bank statements.

Is Cash Flow Underwriting Affected by the CFPB's Section 1033 Rule?

Section 1033 governs consumer access to financial data, which shapes how lenders obtain bank data. A court has enjoined CFPB enforcement of the final rule, and the CFPB is reconsidering it. Separately, when lenders use cash flow consumer reports from a consumer reporting agency, FCRA adverse action obligations apply.

Ready to connect capital and grow? Learn More