AI Denied Your Loan? The Law Still Owes You the Real Reason

The short version

An algorithm can deny a credit application in a fraction of a second, and the rejection letter may say something vague like 'insufficient projected income.' Federal law does not let that vague line be the final word. Under the Equal Credit Opportunity Act (ECOA) and its Regulation B, a lender that takes adverse action on your application still has to tell you the specific, principal reasons it did — and 'a computer decided' or a generic checklist phrase is not enough on its own.

The Consumer Financial Protection Bureau (CFPB) has said this plainly, even when the decision came out of a complex algorithm or an AI model. This is a rights-education piece. Knowing the right does not guarantee approval, a reversal, or any change to your score. What it does is get you an accurate reason — and once you have the real reason, you can check whether the data behind it was correct and dispute any factual errors that fed it.

What legal reason must a lender give for denying my loan?

ECOA, implemented by Regulation B, requires a creditor to notify you of the action taken on your application — generally within 30 days of receiving a completed application. If the action is adverse, meaning a denial or an offer on materially worse terms than you applied for, the notice has to include either a statement of the specific reasons for that action or a disclosure of your right to request those reasons.

The reasons have to be specific and indicate the principal reason(s) for the decision. Regulation B is explicit that vague stand-ins do not satisfy the law:

• 'Based on our internal standards or policies' is not a specific reason.
• 'You failed to achieve a qualifying score on our credit scoring system,' with no indication of why, is not enough on its own.
• A creditor generally discloses its principal reasons — typically up to four — not a single vague summary line.

Can a lender deny my loan for 'insufficient projected income' without explaining why?

Here is where AI changes the picture. In September 2023 the CFPB issued guidance — Consumer Financial Protection Circular 2023-03 — making clear that creditors using complex algorithms and AI models do not get a pass on this requirement. A 'black box' the lender cannot fully explain is not a legal excuse for a vague notice.

The CFPB's own example is pointed: if a complex algorithm denies an application because of the applicant's profession, a notice that simply says 'insufficient projected income' would likely fail the lender's legal obligations — even if the lender believed that profession was broadly related to future earnings. The reason given has to reflect the actual, specific reason the model relied on.

The Bureau also flagged reasons drawn from non-intuitive data — information pulled from consumer surveillance or outside sources that may not obviously relate to your finances. If that kind of data drove the decision, the lender still has to disclose the specific reason behind it, not hide it behind a tidy checklist phrase that obscures what really happened.

Can I access the credit report a lender used to deny my loan?

A second federal law works alongside ECOA. If the denial was based even in part on information in a consumer report — your credit report — the Fair Credit Reporting Act (FCRA) gives you another set of rights:

• The lender must tell you the name, address, and phone number of the consumer reporting agency (the credit bureau) that supplied the report it relied on.
• You are entitled to a free copy of that specific report from that bureau if you request it, generally within 60 days of the notice — separate from your regular free reports.
• If anything in that report is inaccurate or incomplete, you have the right to dispute it with the bureau, which generally must investigate.

What to do if an AI denied you

Put the two rights together and there is a clear sequence — get the specific reason from the lender (ECOA), then pull the report behind the decision (FCRA) and check whether the facts that fed the model were actually correct:

• Read the adverse-action notice carefully and note its date — your timelines run from it.
• If the reason is vague ('insufficient projected income,' 'internal standards,' 'did not meet our criteria'), you can ask for the specific principal reasons in writing.
• Identify which credit bureau was named in the notice and request your free copy of that report.
• Read the report line by line and flag anything inaccurate — a wrong balance, an account that is not yours, a debt listed twice, outdated negative information.
• Dispute any factual error with the bureau reporting it, and keep a dated record of each dispute.

Does getting the specific reason guarantee my loan will be approved or reversed?

Getting the accurate reason and correcting genuine errors is the goal here. None of this is a guarantee that the lender will approve you or reverse the decision — but you cannot fix a factual error you were never allowed to see, and the law is designed so the reason cannot stay hidden inside a black box.

We built Athena Access as an auditor, not a lender or a law firm. When a decision feels like it came out of nowhere, the useful move is to get the report behind it and read it carefully — which is exactly the work the software helps with. Athena Access helps you read a consumer report, spot line items that look inaccurate, prepare FCRA dispute draft materials for your review, and track the dates and deadlines so the sequence above is easy to follow. It does not contact lenders for you, file disputes for you, give legal advice, or promise any outcome. The rights described here come from the CFPB and the FCRA — not from us. Our job is to make them easier to act on.