Back to Blog

[.green-span]What Is Risk-Based Pricing? A Guide for US Lenders[.green-span]

BY
Lendflow Research Team
•
November 4, 2026
Risk-based pricing is when lenders set rates and terms based on the risk shown in a borrower's credit report or application. This guide explains how it works, the FCRA and Regulation V notice rules (including methods, exceptions and timing), how consumer and business lending differ, and best practices for credit and compliance teams.
Strategy
Technology
Marketing

Risk-based pricing is when a lender sets credit terms, such as the interest rate, based on risk shown in a borrower's credit report or application. Riskier borrowers get less favorable terms, and consumers priced this way should receive a risk-based pricing notice, according to the Consumer Financial Protection Bureau (CFPB).

For banks, fintechs, alternative lenders, and embedded-finance platforms, risk-based pricing shapes both margin and compliance exposure. This guide explains the factors lenders price on, how the practice developed, and how pricing tiers work in practice. It also covers notice rules under FCRA Section 615(h) and Regulation V, the consumer and business lending split, and best practices.

What Is Risk-Based Pricing and Why Lenders Use It

Under risk-based pricing, two applicants for the same product can receive different terms because the lender expects different losses from each. The lender matches price to risk for each loan instead of charging every borrower one rate. The CFPB notes that each lender uses its own process, so one borrower can see different offers from different lenders.

The Factors Lenders Price On

According to the CFPB, lenders largely base pricing decisions on a handful of core inputs:

  • Credit score, which summarizes the borrower's repayment history and credit behavior
  • Employment status, which signals how stable the borrower's income is likely to be
  • Income, which shows the borrower's capacity to take on and repay new debt
  • Outstanding debts, which reflect obligations already competing for the borrower's cash flow

The CFPB also states that lenders cannot use prohibited factors such as race, gender, or age. That boundary matters as much as the inputs themselves, because every pricing variable needs to hold up under fair lending review.

From House Rates to Loan-Level Pricing

Risk-based pricing at today's scale is relatively recent. Wendy Edelberg's research in the Journal of Monetary Economics (2006) found that lenders typically posted one "house rate" per loan type through the early 1990s. In the mid-1990s, cheaper data storage and better underwriting technology made it practical to price each loan individually.

The shift changed how strongly price tracked risk. After the mid-1990s, the rate increase tied to a 0.01 rise in bankruptcy probability tripled for first mortgages and doubled for auto loans. Edelberg also found that very high-risk households gained expanded access to credit as lenders learned to price for their risk.

How Risk-Based Pricing Works in Practice

Most lenders apply risk-based pricing through tiers, where applicants with similar risk profiles receive the same set of terms. The framework below shows how credit and risk teams typically move from raw data to a priced offer and, where required, a compliant notice.

  1. Define the terms you will price. Choose which terms vary by risk, such as APR, fees, or term length.
  2. Collect complete applicant data. Lendflow Connect aggregates credit, banking, and business data into one set of pricing inputs.
  3. Score and segment risk. Place each applicant in a risk band with your scorecard or model, then map each band to a tier.
  4. Generate the offer. Lendflow Intelligence runs configurable decision models that deliver personalized terms to each client, with 85% faster time-to-decision.
  5. Determine notice obligations. For consumer credit, flag applicants who received materially less favorable terms, using one of the methods covered below.
  6. Deliver offers and documents on time. Lendflow Automate triggers actions from workflow events, so offers and documents go out without manual handoffs.
  7. Monitor and recalibrate. Review approvals and losses by tier on a set schedule, then adjust cutoffs and pricing as the portfolio changes.

For a deeper walkthrough of tier design for commercial products, see our guide on how to set up risk-based pricing for business loans.

Risk-Based Pricing Notice Requirements Under FCRA and Regulation V

The risk-based pricing notice (RBPN) is where pricing strategy meets federal compliance for consumer lenders. The requirement comes from FCRA Section 615(h) and Regulation V §1022.72, as summarized by CrossCheck Compliance.

When a Risk-Based Pricing Notice Is Required

A lender owes an RBPN when it uses a consumer report to extend credit on materially less favorable terms. The comparison point is the most favorable terms available to a substantial proportion of consumers, and the material term is generally the APR. Final rules were published in 2010, with Dodd-Frank amendments in 2011, per CrossCheck Compliance.

The rule took effect on January 1, 2011, according to ProMax.

Two Methods for Identifying Who Gets a Notice

Regulation V lets lenders use simplified methods instead of comparing every borrower's terms one by one. CrossCheck Compliance describes the two most common approaches:

  • Credit score proxy method: The cutoff sits where about 40% of consumers score higher and 60% lower, recalculated at least every two years.
  • Tiered pricing method: The lender sends a notice to every consumer who is not placed in its top pricing tier or tiers.

Exceptions and Timing

Under Regulation V §1022.74, lenders do not need to send an RBPN in several situations, as outlined by CrossCheck Compliance:

  • The consumer applies for specific terms and receives those terms.
  • The lender provides an adverse action notice instead.
  • The credit is extended through a prescreened firm offer of credit.
  • The lender provides a credit score disclosure to all consumers.
  • The lender provides a notice to consumers who have no credit score available.

Timing matters as much as content. Closed-end credit notices must arrive before consummation, and open-end plan notices must arrive before the first transaction. Model forms H-1 through H-7 in Appendix H of Regulation V give lenders a starting template for each scenario.

Consumer vs. Business Lending: Where the RBPN Rule Applies

The RBPN rule applies to consumer credit, meaning credit used primarily for personal, family, or household purposes. ProMax makes this point when quoting the FCRA. Commercial and business loans priced on risk fall outside the RBPN rule, which changes the compliance workload for SMB lenders and embedded-finance platforms.

Business lenders still price on risk, so the operational discipline stays the same even without the notice requirement. A term loan, line of credit, or equipment financing offer still depends on complete data, a defensible model, and consistent tier assignment. For commercial portfolios, inputs often extend beyond a bureau score to banking activity, business performance, and industry data.

Teams that serve both segments should classify each application by purpose early in the workflow. Correct classification determines whether the RBPN workflow triggers and keeps consumer files out of a commercial process.

Risk-Based Pricing Best Practices for Credit and Compliance Teams

Strong risk-based pricing programs pair accurate pricing with clear controls. The practices below help teams avoid the most common pitfalls.

  • Start with complete data. Missing income, debt, or banking data pushes applicants into the wrong tier, so verify inputs before scoring.
  • Test every factor for fair lending risk. Confirm no input relies on race, gender, age, or variables that could stand in for them.
  • Monitor model and tier performance. Track approvals, pricing distribution, and losses by tier, and recalculate proxy cutoffs at least every two years.
  • Document your methodology. Record tier definitions, your notice method, and each exception you rely on so examiners can follow your logic.
  • Automate notice delivery. Tie RBPN generation to workflow events so notices arrive before consummation or the first transaction.
  • Classify credit purpose at intake. Flag consumer or business purpose at the start so every file follows the correct compliance path.

Key Takeaways on Risk-Based Pricing

Risk-based pricing matches rates and terms to each borrower's risk, a practice that moved from single house rates to loan-level pricing by the mid-1990s. For consumer credit, FCRA Section 615(h) and Regulation V require a risk-based pricing notice when terms are materially less favorable.

Business lending sits outside the RBPN rule, yet it relies on the same foundation of complete data, configurable decision models, and reliable workflows. Lenders that get those pieces right can price accurately, stay compliant, and deliver offers faster.

Learn More

Frequently Asked Questions About Risk-Based Pricing

What Is a Risk-Based Pricing Notice?

A risk-based pricing notice tells a consumer they received less favorable credit terms because of information in their credit report. The CFPB explains that consumers who receive less favorable terms for this reason should get this notice.

What Must a Risk-Based Pricing Notice Include?

Regulation V sets the required content, and model forms H-1 through H-7 in Appendix H show what each version should contain. Lenders should match their notice to the model form for their method and confirm final language with compliance counsel.

What Are the Exceptions to the Risk-Based Pricing Notice Rule?

Under Regulation V §1022.74, exceptions include a consumer who applies for and receives specific terms, an adverse action notice, and a prescreened firm offer. Lenders are also exempt when they give all consumers a credit score disclosure or send a notice when no score is available.

What Is the Credit Score Proxy Method or Tiered Pricing Method?

Both are simplified ways to decide who receives a notice. The credit score proxy method sets a cutoff where about 40% of consumers score higher and 60% score lower. The tiered pricing method sends notices to everyone outside the top tier or tiers, per CrossCheck Compliance.

Does Risk-Based Pricing Apply to Business Loans?

Business lenders commonly price loans on risk, but the RBPN rule covers only consumer credit for personal, family, or household purposes. For a practical approach to commercial products, read our guide on how to set up risk-based pricing for business loans.