It is 7:40 on a Thursday night and Priya Nair is the last light on in the F&I office. The showroom is dark. The Rivera family agreed to a used SUV two hours ago — a clean deal, good people, a dad and a mom and a nine-year-old asleep on a chair in...
In This Chapter
- The Hook: The Address That Didn't Match
- 25.1 The Deal Jacket: Everything in One Folder
- 25.2 The Documents That Set Up the Deal
- 25.3 The Documents That Are the Financing and the Car
- 25.4 The Six Laws, in Plain English (the Heart of the Chapter)
- 25.5 State-Specific Requirements (and Why "It Depends" Is the Honest Answer)
- 25.6 Spot Delivery: "Delivered but Not Funded" — and the Yo-Yo Abuse
- 25.7 Fraud Detection: The F&I Manager's Duty
- Spaced Review
- Project Checkpoint: Your Compliance Checklist + Deal-Jacket Map
- Chapter Summary
- What's Next
Chapter 25 — The F&I Process: Paperwork, Compliance, and the Legal Framework
The Hook: The Address That Didn't Match
It is 7:40 on a Thursday night and Priya Nair is the last light on in the F&I office. The showroom is dark. The Rivera family agreed to a used SUV two hours ago — a clean deal, good people, a dad and a mom and a nine-year-old asleep on a chair in the lobby. Jordan, our green pea, sold it and is hovering in the doorway, exhausted and happy, waiting to walk the family out.
Priya is doing the thing she does on every single deal, the thing that looks like nothing: she is reading the documents. Not skimming. Reading.
The credit application says the customer's current address is on Maple Court. The driver's license says Birchwood Lane. The proof of insurance the customer texted over says a third street entirely. People move, addresses lag, none of this is automatically a problem. But Priya's identity-verification step — the one her dealership runs on every buyer — flags it. And when she looks at the income line, the customer has written a number that, when she does the quick math against the pay stub stapled behind it, doesn't quite add up. The stub shows one figure; the application states a noticeably higher one. The Social Security number passes the basic format check, but the address history attached to it in the credit file doesn't include any of the three streets in front of her.
Here's what a bad F&I manager — or a tired one, or a greedy one — does at 7:40 on a Thursday: nothing. The customer is sitting right there. The lender's portal is open. A few keystrokes and the deal funds, the commission books, everyone goes home. The little voice that says something is off here gets shushed because the deal is good and the night is long.
Priya doesn't shush it. She steps out, sits down with the Riveras, and asks — warmly, no accusation — to verify a couple of things. It turns out the income line was an honest mistake: the dad listed his gross annual including his spouse's part-time income, which the application format wanted listed separately. The addresses sort out too — a recent move, a license he hadn't updated, an insurance binder still showing the old place. Ten minutes of patient questions and the picture is clean, consistent, and documented. She makes the corrections, notes them, and funds a deal she can defend.
But play it the other way. Suppose the mismatched address and inflated income had been the early fingerprints of something else — a straw purchase (someone with good credit buying for someone who can't qualify, hiding the real buyer), or a synthetic identity (a fake person stitched together from a real Social Security number and invented details), or simple income falsification to squeeze into a payment the customer can't actually carry. Priya's ten minutes would have caught a fraud that could cost the dealership the entire deal in a forced repurchase, trigger a federal compliance failure, and — if it ever became a pattern — put the store's lending relationships and the F&I manager's license at risk.
That ten minutes is the chapter. The F&I office is not the place where you sneak in extra profit. It is the place where the deal becomes legal — where six federal laws, a stack of disclosures, and one signed contract turn a handshake into something that holds up. Get it right and the deal funds, the customer is protected, and you sleep. Get it wrong and you've created a problem that no commission was worth.
🏃 Fast Track: If you already know the deal jacket and the documents, jump to §25.4 (the six federal laws, plainly) and §25.6 (spot delivery and the yo-yo abuse). Those two sections are the spine. Veterans: §25.7 (fraud detection — straw, synthetic, income falsification) is worth a careful read; the patterns evolve.
🔬 Deep Dive: Work through every document in §25.2 and §25.3, then map each one to the law in §25.4 that governs it (e.g., the box on the RISC ↔ TILA; the privacy notice ↔ GLBA; the adverse-action notice ↔ ECOA/FCRA). The Project Checkpoint asks you to build exactly that map.
This chapter is about the machinery behind the F&I products you learned in Chapter 24 and the financing math from Chapter 22. It's the least glamorous chapter in the book and, for anyone who wants F&I as a career, the most important — because compliance isn't a constraint on the F&I job. Compliance IS the F&I job. Everything else is product knowledge and people skills. The thing that makes someone a professional in that office is that they know the law, they run the process the same way every time, and they can hand a regulator the file and say: here it is, all of it, done right.
25.1 The Deal Jacket: Everything in One Folder
Let's start with the object at the center of the whole process. In most dealerships it's a physical folder (often literally a printed cardboard jacket) or its digital equivalent in the dealer management system. It's called the deal jacket, and it holds every document for one transaction, start to finish.
Why does it matter? Because a car deal is not one signature. It's a couple of dozen documents, and every one of them either protects the customer, protects the dealer, satisfies a law, or all three. If even one is missing, wrong, or unsigned, the deal can fail to fund, fail an audit, or become unenforceable. The deal jacket is the proof that the process happened correctly. Years later, if there's a dispute, a lawsuit, a regulator's exam, or a lender's repurchase demand, the deal jacket is the answer. A clean jacket is a defensible deal. A sloppy jacket is a liability with a customer's name on it.
📊 Diagram (described). Picture the flow of a deal from sale to funding as a relay:
SALES FLOOR F&I OFFICE AFTER
----------- ---------- -----
Vehicle agreed → Application + verification → Lender approval
Price agreed → Disclosures presented → Contract signed
Trade appraised → Products presented (menu) → DEAL JACKET assembled
Credit pulled → RISC prepared & signed → Funding ("the deal funds")
→ Title/registration processed
Each station hands the deal forward. Nothing skips a station. The deal jacket is what travels the whole relay and what's left holding the proof at the end.
Here's the practical truth, and it's a theme #6 truth (this is a real career): the difference between an F&I manager who lasts and one who washes out is rarely charisma. It's organization and rigor. The pro builds the jacket the same way every time, checks it the same way every time, and is never the reason a deal doesn't fund.
🛒 For the buyer. When you sit down in the F&I office, you are about to sign more documents than you've signed since you bought (or rented) your home. You have the right to read every one of them. A good F&I manager will offer to explain each. Slow down. Ask what each document does. If anyone makes you feel rushed or foolish for reading, that is itself information about who you're dealing with. You're allowed to take your time on the second-biggest purchase of your life.
25.2 The Documents That Set Up the Deal
Let's walk the jacket front to back. We'll split it into two groups: the documents that set up the deal (this section) and the documents that are the financing and the transfer of the car (§25.3). For each, the question to keep asking is: what does this protect, and which law requires it?
The purchase agreement / buyer's order
The buyer's order (also called the purchase agreement or bill of sale) is the master summary of the transaction. It lists the vehicle (year, make, model, VIN), the selling price, the trade-in and its allowance, the payoff on the trade, fees (documentation fee, title and registration), taxes, the down payment, and the resulting balance. It is, in effect, the four-square from Chapter 12 turned into a binding document.
Everything that was agreed on the floor has to match here. If the floor said the trade allowance was $18,000, the buyer's order says $18,000. If the doc fee was disclosed as $599, it's $599 here. A buyer's order that contradicts what the customer was told is how trust dies and how complaints start.
The credit application
The credit application is the document the customer fills out so the dealer can request financing on their behalf. Remember the threshold concept from Chapter 22: the dealer is a broker, not the lender. The credit app is what the dealer submits to lenders to get the customer approved. It collects identity (name, address, date of birth, Social Security number), employment and income, housing (rent or own, monthly payment), and the customer's signature authorizing the credit pull.
That signature matters enormously, and we'll come back to it under FCRA in §25.4: the customer's signed authorization is part of what gives the dealer a permissible purpose to pull their credit. No legitimate reason, no credit pull. And the accuracy of what's on this application is exactly where fraud either gets caught or slips through (§25.7).
The privacy notice
Because the dealer is collecting a pile of sensitive financial information, federal law requires that the customer be given a privacy notice explaining what information is collected, how it's used, whether and with whom it's shared, and the customer's rights. This is required by the Gramm-Leach-Bliley Act (GLBA) — more in §25.4. The customer gets it; the dealer keeps proof they got it.
The risk-based pricing notice
When a lender offers a customer credit on less favorable terms than its best customers get — a higher rate, in plain terms — because of information in the customer's credit report, the customer is generally entitled to a risk-based pricing notice (or, very commonly, a credit score disclosure that satisfies the same rule). This comes from the Fair Credit Reporting Act (FCRA). The idea is simple and fair: if your credit report is the reason you're paying more, you should be told, and told what's in (and driving) that report, so you can check it and improve it.
The arbitration agreement
Many (not all) dealers include an arbitration agreement in the paperwork. It says that disputes will be resolved through private arbitration rather than in court, often waiving the right to a jury trial and sometimes to class actions. This is not a federal requirement — it's a business choice by the dealer, and its enforceability and rules vary by state and change over time.
We'll keep this honest, per the book's citation rules: arbitration clauses are legal in many places but contested, regulated differently across states, and the subject of ongoing legal and policy debate. The ethical position for an F&I professional is the same as for everything else — disclose it, don't bury it, and answer questions about it straight. Don't pretend a customer "has to" sign an optional arbitration clause. (Whether a given clause must be optional or can be a condition of the deal is itself a state-law question — verify locally.)
🛒 For the buyer. If there's an arbitration clause in your stack, that's a meaningful term, not boilerplate. Ask whether it's required or optional. Ask whether it waives a jury trial or class actions. You don't have to be a lawyer to ask "what does this one do, and do I have to sign it?"
⚠️ What NOT to do. Sliding the arbitration agreement (or any consequential document) into the middle of a stack with a "just sign here, here, and here" and never naming what it is. The tempting logic: "they won't read it anyway, and explaining it just invites questions." The reason it's wrong: a signature obtained without understanding is the seed of a future complaint and, in some states, an unenforceable or challengeable term — and it's a betrayal of theme #5 (the customer is not the enemy). The cost: a one-star review, a regulator's attention, a deal that unwinds, and a reputation you can't rebuild with the next ten clean deals. Name every document. Always.
25.3 The Documents That Are the Financing and the Car
Now the documents that carry the most legal weight: the contract that creates the loan and the papers that move the car's ownership.
The Retail Installment Sale Contract (RISC)
This is the big one. The Retail Installment Sale Contract (RISC) is the actual loan contract — the legally binding agreement in which the customer promises to pay the financed amount over time, and the dealer (then the lender it assigns the contract to) holds the right to be paid and, if the customer defaults, to repossess the vehicle.
The RISC is where the financing from Chapter 22 becomes real and where the products from Chapter 24 get financed in. It contains a federally mandated disclosure box — usually boxed off and clearly labeled — that the Truth in Lending Act (TILA) requires. We'll cover what TILA requires in §25.4, but here's the box itself, using the canonical Okafor financing build from Chapter 22 so the numbers tie out across the whole Part:
+--------------------------------------------------------------+
| TRUTH IN LENDING DISCLOSURES (the "TILA box" on the RISC) |
+----------------+----------------+--------------+-------------+
| ANNUAL | FINANCE | AMOUNT | TOTAL OF |
| PERCENTAGE | CHARGE | FINANCED | PAYMENTS |
| RATE (APR) | (the $ the | (the $ given | (the $ you |
| (the cost of | credit costs | to you or on | will have |
| credit as a | you, in $) | your behalf) | paid after |
| yearly rate) | | | all pmts) |
+----------------+----------------+--------------+-------------+
| 7.90% | ~$10,622 | $41,030 | ~$51,652 |
+----------------+----------------+--------------+-------------+
(Okafor build: amount financed $41,030 at the 7.9% SELL
rate, 72 months; sell-rate payment $717.39/mo from Ch 22.
72 × $717.39 = $51,652 total of payments; minus $41,030
financed = ~$10,622 finance charge. Numbers illustrative
and rounded; exact figures depend on rounding and timing.)
Read across that box and you can see the entire economic reality of the loan: the rate, the dollar cost of borrowing, the amount actually financed, and the grand total you'll have paid by the end. TILA's whole purpose is to put those four numbers in front of the customer in a standard format so they can compare one loan to another. (Recall the buy rate / sell rate / dealer reserve vocabulary from Chapter 22: the customer is signing at the 7.9% sell rate; the ~1% spread over the 6.9% buy rate is the dealer's reserve. TILA discloses the APR the customer pays — it does not, by itself, reveal the buy/sell spread, which is one reason ethical disclosure goes beyond the legal minimum.)
🔍 Why this works. TILA exists because, before it, a customer literally could not compare two car loans. One dealer quoted "add-on interest," another quoted a monthly payment, a third quoted "money factor"-style numbers, and a buyer had no apples-to-apples way to know which was cheaper. By forcing every consumer loan into the same four-box format — APR, finance charge, amount financed, total of payments — TILA turned an unshoppable product into a shoppable one. The disclosure doesn't cap what a lender can charge; it just makes the price visible and comparable. That's the mechanism: sunlight, standardized.
Title and registration documents
The title is the legal document of ownership. Selling a car means transferring title from the seller (the dealer, or the previous owner on a used unit) to the buyer, and — because the car is financed — recording the lender's lien on the title. The registration documents put the car on the road legally with the state (plates, registration card). These are state-administered, so the exact forms, fees, and steps vary by state — but every state requires the title to be transferred and the lienholder recorded.
The lien / security interest
Because the customer is financing, the lender takes a security interest (a lien) in the vehicle. In plain English: the car is the collateral. If the customer doesn't pay, the lender can repossess it. The lien is recorded on the title and released only when the loan is paid off. This is why a financed car's title shows the lender as lienholder until the final payment clears.
The odometer disclosure
Federal law requires a written odometer disclosure at the transfer of a vehicle — the seller certifies the mileage. This protects buyers from odometer fraud (rolling back the miles to inflate value). Falsifying it is a federal crime. On most modern deals this is captured electronically as part of the title transfer, but it is a required, certified statement, not a formality.
🛒 For the buyer. Three of these documents protect you specifically and are worth understanding: the TILA box tells you the true, comparable cost of the loan (read all four numbers, not just the payment); the odometer disclosure is your protection against a rolled-back used car; and the title is your eventual proof you own the car free and clear once the lien is released. When your loan is paid off, make sure you receive a lien release and a clean title. People forget this step and discover years later they can't sell the car easily.
🔄 Check your understanding. A customer asks you, "Which single document is the actual loan — the thing that says I owe the money?" What is it, and what federally required box lives inside it?
Answer
The **Retail Installment Sale Contract (RISC)** is the actual loan contract. Inside it lives the **TILA disclosure box** (the "Truth in Lending" box), required by the **Truth in Lending Act**, showing the **APR, finance charge, amount financed, and total of payments**. The buyer's order summarizes the *deal*; the RISC creates the *debt*.25.4 The Six Laws, in Plain English (the Heart of the Chapter)
This is the section to learn cold. Six federal laws govern what happens in the F&I office. You don't need to be a lawyer, and you should never act like one with a customer (when in doubt, you say "let me get our compliance officer / let me confirm that" — that's the professional move). But you must know what each law requires of you, because violating any of them is how an F&I career ends and how a dealership gets fined or sued.
A caution up front, per this book's citation rules: these are real statutes, described accurately and plainly. I am deliberately not quoting section numbers or precise dollar penalties, because those change and vary, and because fake precision is worse than honest generality. Treat what follows as the working knowledge a floor professional needs — and verify current specifics with your dealership's compliance officer and counsel, because the rules evolve and the details vary by state.
Here's the whole set at a glance, then one at a time:
| Law | One-line job | What it requires of F&I |
|---|---|---|
| TILA (Truth in Lending) | Make loan cost comparable | The TILA box: APR, finance charge, amount financed, total of payments |
| ECOA (Equal Credit Opportunity) | No discrimination in credit | Treat everyone equally; give adverse-action notices when credit is denied |
| FCRA (Fair Credit Reporting) | Fair use of credit reports | Permissible purpose to pull credit; risk-based pricing/adverse-action notices |
| GLBA (Gramm-Leach-Bliley) | Protect customer financial data | Privacy notice + a safeguards program to secure the data |
| Red Flags Rule | Prevent identity theft | A written identity-theft prevention program; detect & respond to red flags |
| OFAC screening | Don't transact with sanctioned parties | Screen customers against the government's prohibited-parties list |
Now each one.
TILA — Truth in Lending Act
What it does: TILA makes the cost of credit transparent and comparable. What it requires of you: the loan's terms must be disclosed accurately in the standard TILA box on the RISC — APR, finance charge, amount financed, total of payments (the box we built in §25.3). The APR must be calculated and stated correctly; the finance charge must capture the true cost of credit. If the disclosed numbers are wrong, the contract has a problem.
The practical F&I duty: the numbers on the RISC must be accurate and must match what the customer agreed to. No "we'll fix the APR later." No quoting a payment that doesn't correspond to the disclosed APR and amount financed. The box is a promise in a federally standardized format.
ECOA — Equal Credit Opportunity Act
What it does: ECOA prohibits discrimination in any credit transaction on the basis of protected characteristics — including race, color, religion, national origin, sex, marital status, age (with narrow exceptions), and because someone receives public assistance. What it requires of you: treat every applicant the same. The rate, the terms, the products offered, the level of effort to get someone approved — none of it may turn on a protected characteristic. It must turn on creditworthiness and the deal, period.
ECOA also requires an adverse-action notice: when credit is denied (or, in some cases, offered on materially different terms than requested), the applicant is generally entitled to a notice telling them they were declined and the principal reasons (or how to get them). This isn't a courtesy; it's a right, and it forces lenders and dealers to have a real, non-discriminatory reason.
There's a historical reason ECOA matters in this industry specifically. For years, regulators raised concerns that dealer rate markup (the buy/sell spread from Chapter 22) could produce disparate impact — minority borrowers paying higher markups on average even without any individual intending to discriminate. That concern reshaped how many lenders handle markup (caps, flat fees, monitoring). You don't need the regulatory history memorized; you need the principle burned in: the spread, the products, the effort — same standard for everyone, every time.
⚠️ What NOT to do. Treating customers differently — quoting a fatter markup, pushing more products, or putting in less effort to get an approval — based on how someone looks, speaks, or where they're from. The temptation is ugly and sometimes unconscious: a manager "reads" a customer and adjusts. It is illegal under ECOA, it is a profound betrayal of theme #5, and beyond the law it is simply wrong. The cost: federal enforcement, lawsuits, and the kind of harm that doesn't have a dollar figure. The defense is a process applied identically to everyone — which, not coincidentally, is also how you build the referral base that makes you money (theme #3).
FCRA — Fair Credit Reporting Act
What it does: FCRA governs how consumer credit reports are obtained and used. What it requires of you: two big things.
First, permissible purpose. You may only pull a customer's credit when you have a legitimate reason and, in the retail context, the customer's authorization. A signed credit application in connection with a real attempt to finance a purchase is the classic permissible purpose. Pulling credit "just to see" on someone who is only browsing, or pulling it without authorization, is an FCRA violation.
Second, the risk-based pricing / adverse-action notices we met in §25.2 and §25.3. If the customer's credit report leads to less favorable terms, they get the risk-based pricing notice (or credit score disclosure). If credit is denied based on a report, they get an adverse-action notice that includes information about the credit reporting agency used and their right to a free copy of the report and to dispute errors. The whole architecture is: if your credit file affected the outcome, you get told, and you get the tools to check and fix your file.
⚠️ What NOT to do. Running a credit report on a customer who hasn't authorized it or isn't actually trying to buy — for instance, pulling a "spouse's" credit who isn't a co-applicant, or pulling a tire-kicker's bureau "to qualify them" before they've agreed to anything. It feels efficient. It is an FCRA violation with real penalties, and it exposes the customer's data needlessly. No permissible purpose, no pull.
GLBA — Gramm-Leach-Bliley Act
What it does: GLBA protects consumers' nonpublic personal financial information — exactly the pile of sensitive data the credit application collects. What it requires of you: two pieces, the Privacy Rule and the Safeguards Rule.
The Privacy Rule is the privacy notice from §25.2: tell customers what you collect, how you use it, whether you share it, and their rights.
The Safeguards Rule is the part many salespeople never think about but that has real teeth: the dealership must have a written information security program to actually protect that data — access controls, encryption where appropriate, employee training, vendor oversight, an incident response plan, and a designated person responsible for it. In plain floor terms: you don't leave credit apps face-up on a desk, you don't email Social Security numbers in the clear, you don't text a customer's full bureau to a coworker, you lock the file cabinet, you log out of the DMS. Protecting the customer's data is part of your job description, not the IT department's alone.
🛒 For the buyer. The dealership is legally obligated to protect the financial information you hand over and to tell you how they use and share it. If you're ever asked to send a Social Security number or pay stub by an insecure method (a plain text message, an unsecured email), it's reasonable to ask for a secure channel. Your data is yours.
The Red Flags Rule
What it does: the Red Flags Rule requires certain businesses — including auto dealers that arrange financing — to have a written Identity Theft Prevention Program that detects, prevents, and responds to the warning signs ("red flags") of identity theft. What it requires of you: you are the front line of that program. You watch for the patterns and you act when one appears.
Remember Priya in the hook? The mismatched addresses, the income that didn't match the pay stub, the Social Security number whose address history didn't include any of the customer's stated streets — those are textbook red flags. The Red Flags Rule is why she had a defined step to flag them and a defined response (verify before funding). Other classic red flags: an ID that looks altered, a photo that doesn't match the person, a Social Security number that's invalid or belongs to someone of a very different age, an application where the information is internally inconsistent, or an address that's a known mail-drop.
The duty isn't to play detective or accuse anyone. It's to notice the flag, follow the program, and resolve it before the deal funds — usually with calm, factual verification, exactly as Priya did. Most red flags resolve into innocent explanations. The point is that you checked.
OFAC screening
What it does: the Office of Foreign Assets Control (OFAC), part of the U.S. Treasury, maintains lists of individuals and entities (e.g., the Specially Designated Nationals list) that U.S. businesses are prohibited from transacting with — terrorists, traffickers, sanctioned parties. What it requires of you: the dealership must screen customers against these lists before completing a sale, and must not knowingly do business with a prohibited party. In practice this is usually an automated check built into the deal process. It almost never flags anyone — but it is mandatory, and a hit must be handled per the dealership's procedure (which generally means stop and escalate, not improvise).
💡 Aha moment. Look back at the six. Five of them (TILA, ECOA, FCRA, GLBA, Red Flags) exist to protect the customer — their right to comparable prices, equal treatment, fair use of their credit file, their data, and their identity. One (OFAC) protects the country. Not one of them is designed to limit the dealer's legitimate profit. They limit the dealer's ability to be opaque, discriminatory, careless, or complicit. Which is exactly theme #3 again: ethics and compliance aren't a tax on the business — they ARE the professional version of the business.
🔄 Check your understanding. Match each scenario to the law it most directly implicates: (a) a customer is told their rate is higher because of their credit report; (b) a salesperson pulls a browser's credit without their signed authorization; (c) an F&I manager spots an ID photo that doesn't match the customer; (d) credit apps are left in an unlocked drawer overnight.
Answer
(a) **FCRA** (risk-based pricing notice / credit score disclosure) — also touches **TILA** since the APR is disclosed on the RISC. (b) **FCRA** (no permissible purpose to pull credit without authorization). (c) **Red Flags Rule** (a classic identity-theft red flag; verify before proceeding). (d) **GLBA** (the **Safeguards Rule** — failing to secure nonpublic personal financial information). Bonus: if (a)'s higher rate were driven by a protected characteristic rather than the credit report, that would implicate **ECOA**.25.5 State-Specific Requirements (and Why "It Depends" Is the Honest Answer)
Everything in §25.4 is federal — it applies everywhere in the United States. But a huge amount of F&I law is state law, and here the only honest teaching is: it varies, and you must verify your state's current rules.
States differ on things like:
- Documentation ("doc") fees — whether they're capped, and at what amount. Some states cap the doc fee tightly; others let it float, sometimes to several hundred dollars or more. (Recall the Okafor build used a $599 doc fee — legal in some states, above the cap in others.)
- Maximum finance charges / usury limits — the highest rate that may legally be charged, which especially matters in subprime (preview of Chapter 26).
- Cooling-off / cancellation rights — contrary to a stubborn myth, there is generally no automatic three-day right to cancel a car purchase in most states. Some states have specific, limited rights; most do not. Don't promise one that doesn't exist.
- Title and registration mechanics, timelines, and fees — entirely state-administered.
- Spot-delivery rules — how long a dealer may hold a "delivered but not funded" deal, and what must be disclosed (next section).
- Required state-specific forms and disclosures, plus any state-licensing requirements for F&I personnel.
There is also a federal layer of FTC rules that interacts with state practice — notably the FTC Used Car Rule (the Buyers Guide window sticker on used cars) and the FTC CARS Rule (the Combating Auto Retail Scams rule, aimed at undisclosed and worthless add-ons and bait-and-switch pricing, met in Chapter 24). The CARS Rule's status and effective dates have been the subject of legal challenge; treat its specifics as something to confirm currently rather than assume. We cover the consumer-protection statutes in depth in Chapter 31.
🔍 Why this works (the "verify locally" reflex). Here's why a pro defaults to "let me confirm that" instead of guessing: the cost of being confidently wrong about a state rule is asymmetric. If you under-promise and check, you lose nothing. If you over-promise — "sure, you've got three days to bring it back," "our doc fee is standard everywhere," "that arbitration clause is required by law" — and you're wrong, you've created a representation the customer relied on, which is the raw material of a deceptive-practices complaint. The professional move isn't to memorize fifty states; it's to know which questions are state questions and to route them to the person (compliance officer, F&I director, counsel) who knows the current answer.
🪞 Learning check-in. Pause and be honest with yourself. Of the six federal laws in §25.4, how many could you explain to a brand-new salesperson in one plain sentence each, right now, without looking? If the answer is "fewer than four," that's not a failure — it's a signal of where to spend your study time before you ever sit in the F&I chair. Compliance knowledge is the part of this job you can simply learn cold, and it's the part that most separates professionals from amateurs (theme #6). Mark the laws you're shaky on and come back to them.
25.6 Spot Delivery: "Delivered but Not Funded" — and the Yo-Yo Abuse
Now one of the most misunderstood and most abused practices in the business. You'll hear it called spot delivery, delivering on the spot, or being "delivered but not funded."
What spot delivery is (the legitimate version)
Sometimes a customer is approved-pending or the lender's final funding hasn't completed, but the dealer lets the customer drive the car home immediately — on the spot — before the financing is fully, finally funded. There are legitimate reasons: it's Friday night, the lenders' final desks are closed until Monday, the deal looks solid, and the customer needs the car. Done correctly, this is a normal convenience.
The key phrase is done correctly. A legitimate spot delivery has a clear, written contingency: a document (often called a conditional delivery agreement or bailment agreement) that says, in language the customer actually understands, the deal is not final until financing is approved and funded, and here is exactly what happens if it isn't. The customer should know, in writing and in conversation:
- The financing is not yet final.
- Exactly what happens if the deal doesn't get funded at the agreed terms (the car is returned; the trade and down payment are returned; the customer is restored to where they started).
- Roughly how long the contingency lasts before everyone knows.
Recall the contrast from Chapter 15: a clean delivery is the full, joyful handoff of a funded deal — pairing the phone, setting the nav, the photo, the thank-you note, the start of a referral relationship like the Nguyen family's. A spot delivery can still include all of that warmth, but it carries one honest asterisk that a clean delivery doesn't: this isn't final yet, and here's the written plan if it falls through. The warmth and the honesty are not in tension. The best F&I people deliver the joy and the asterisk.
The yo-yo abuse (condemn it)
Here's where it goes wrong, and it goes wrong often enough to have a nickname: the yo-yo (or "yo-yo financing"). The customer is spot-delivered, drives the car home, tells everyone they bought it, gets attached, sells or surrenders their old car. Days or weeks later the dealer calls: "The financing fell through. You need to come back in." And then — the abuse — the customer is pressured into a worse deal: a higher rate, a bigger down payment, a longer term, more products, or all of the above. The implicit threat is that they'll lose the car (and maybe their trade) if they don't agree. They're "yo-yoed" back in and squeezed.
The yo-yo works as an abuse precisely because the customer's situation has changed: they've bonded with the car, told their family, maybe disposed of their old vehicle. Their leverage has evaporated and the dealer knows it. Sometimes the "financing fell through" is genuine; sometimes it's manufactured — the deal could have been funded as written, but the dealer realized it could extract more on the rewrite. Either way, using a spot delivery to strong-arm a customer into worse terms is a predatory, deceptive practice. It is exactly the kind of conduct examined in Chapter 30 (ethics) and Chapter 31 (consumer law), and it draws regulators' attention.
⚠️ What NOT to do. The yo-yo, in all its forms: spot-delivering without a clear written contingency; telling a customer the deal is "done" when funding is still pending; calling them back to "redo the paperwork" at a higher rate or payment when the original terms could have funded; or holding their trade hostage to force the rewrite. The temptation is real money — a rewrite can add hundreds to the back end. It is wrong because it weaponizes the customer's attachment and removes their real choice, and it is precisely the betrayal of theme #5 that this whole book argues against. The cost: it's a leading source of consumer complaints and lawsuits in auto retail, it can violate state spot-delivery and deception laws, and it torches the referral business that actually pays the bills. There is no version of the yo-yo that survives the gut-check from Chapter 3: would I be comfortable if this customer could hear my thoughts?
The honest unwind (how the right version handles a real fall-through)
So what does a pro do when a spot-delivered deal genuinely can't fund at the agreed terms? An honest unwind:
- Call the customer promptly — don't let it drag. The longer it sits, the more attached they get and the worse the conversation.
- Tell the truth about what happened: the lender declined or changed terms, here's why, here's where we stand.
- Honor the written contingency. If no acceptable deal can be made, return the trade and the down payment and unwind the sale, putting the customer back where they started — because that's what the conditional delivery agreement promised and what's right.
- If a different deal is available (a different lender at a different rate), present it as a genuine new choice — fully disclosed, fully optional, with the unwind still on the table — not as a trap. The customer is free to say no and take their car and trade back.
Priya runs spot deliveries this way: every one has the written contingency, the customer hears the asterisk out loud, and on the rare fall-through she calls within a day, tells the truth, and unwinds clean if there's no fair deal. She does fewer spot deliveries than Rick used to, and zero of hers turn into complaints. (Composite, like all our cast.)
🛒 For the buyer. If you're "spot delivered" — driving the car home before the financing is finalized — slow down and get the contingency in writing. Ask explicitly: Is my financing final and funded, or is this conditional? If it doesn't fund at these exact terms, do I get my trade and down payment back, no strings? Keep that written agreement. And be cautious about disposing of your old car until you know the new deal is truly funded. If, days later, you get a call to "come back and redo the paperwork" at a higher rate or payment, you are not obligated to accept worse terms — you can ask to unwind the deal and get your trade and money back. That call is the yo-yo, and you don't have to ride it.
🔄 Check your understanding. What single document turns a risky spot delivery into a legitimate one, and what two protections must it spell out for the customer?
Answer
A **written conditional delivery / bailment agreement.** At minimum it must spell out (1) that the financing is **not yet final** (the deal is conditional on funding at the agreed terms), and (2) **what happens if it doesn't fund** — namely that the sale unwinds and the customer's **trade and down payment are returned**, restoring them to their starting position. Without that, you've created the conditions for a yo-yo.25.7 Fraud Detection: The F&I Manager's Duty
The F&I office is also the dealership's last line of defense against fraud — both fraud against the dealer (which can cost the store the whole deal) and fraud the dealer must never participate in. The Red Flags Rule (§25.4) is the legal backbone; this section is the practical pattern-recognition. Four kinds come up most.
Straw purchases
A straw purchase is when someone with good credit applies for and signs the loan, but the real buyer — who can't qualify — is the one who'll actually have and pay for the car. The "straw" is a front. Maybe a parent's name on paper but the adult child is the true buyer; maybe a friend with a 720 score "helping out" someone with a 540.
Why it's a problem: the loan is approved based on the wrong person's creditworthiness and intent. It's a misrepresentation to the lender, it can be loan fraud, and it frequently ends badly for everyone — including the well-meaning person whose credit is now on the hook for a car they don't drive. Tells: the person signing seems disengaged or defers every question to someone else; the "buyer" and the person picking the car and negotiating are clearly different people; the applicant doesn't know basic facts about their own stated situation.
The F&I duty isn't to refuse to let family co-sign or buy for relatives — that's legitimate and common when done honestly (the real arrangement is disclosed and the lender's rules allow it). The duty is to not facilitate a deal structured to deceive the lender about who the borrower really is.
Synthetic identity
A synthetic identity is a fabricated person stitched together from a mix of real and fake information — often a real (sometimes stolen, sometimes randomly valid) Social Security number combined with an invented name, date of birth, and address history. Synthetic identity fraud is one of the fastest-evolving threats in lending precisely because the "person" can look real to a quick check.
Tells: the kind of inconsistencies Priya caught in the hook — a Social Security number whose attached history doesn't match the person in front of you, an applicant with a strangely thin or mismatched credit file, addresses that don't tie together, identity details that pass a format check but fall apart under verification. This is exactly what the Red Flags identity-theft program is built to catch, which is why the program's verification steps aren't bureaucratic busywork — they're the thing standing between the dealership and a fraudulent contract.
Income and employment falsification
This is the most common and the most tempting to wave through, because it can be the customer themselves doing it (not an outside fraudster) and because it's the difference between a deal and no deal. The customer overstates income or fabricates employment to qualify for a payment they can't actually carry — a fake pay stub, an inflated salary, a "job" at a company that won't verify.
Sometimes a salesperson or even an F&I manager is tempted to help it along: "round up" the income, look the other way at a stub that smells off, coach the customer on what number to write. That is fraud, full stop — and it sets the customer up to default on a payment they can't make, which is the opposite of helping (theme #5 inverted).
The F&I duty is to verify income and employment per the lender's requirements and the dealership's process — check the pay stub math (as Priya did), confirm employment when required, and resolve discrepancies before funding. If the numbers don't support the deal, the honest answer is a different (smaller) deal or a different car — which is precisely the ethical-subprime path we'll walk with Devon Wallace in Chapter 26: the right vehicle at a payment the customer can truly afford beats a fraudulent approval that blows up in three months.
⚠️ What NOT to do. "Power-booking" or "income-padding" — quietly inflating a customer's income on the application, swapping in a more favorable employment line, or accepting a pay stub you have real reason to doubt, to get a marginal deal approved. The temptation is direct: this number is the only thing between you and the commission. It is loan fraud — a misrepresentation to the lender — it exposes you and the dealership to criminal and civil liability and lender repurchase demands, and it traps the customer in a payment they'll default on. The professional move is the hard one: tell the truth on the application, restructure to what the customer can actually afford, or let the deal go. A clean "no deal" is infinitely cheaper than a fraudulent "yes."
🧩 Productive struggle. Before you read the resolution: A returning customer you genuinely like is $40,000 short on income to qualify for the truck he wants. He says, "Just put down that I make a little more — I've got side cash, I'm good for it, my buddy at another store would do it." Walk through, in your own head for two minutes, exactly what you say and do. What's the deal you can actually do?
The pro's move
You don't argue ethics at him or lecture. You say something like: "I hear you, and I want to get you into something — but I can only put your verifiable income on the application, because that's the law and it's what protects both of us if anything ever goes sideways. Putting a number we can't back up is loan fraud, and it'd set you up for a payment that could bury you. So let's do this the way that actually works: let me show you what you *do* qualify for, and let's find the right truck at a payment you'll be glad about in year three." Then you **restructure** — a less expensive unit, a larger down payment, a different term, or a co-applicant who's *genuinely* a co-borrower (not a straw). If nothing fits today, you keep the relationship and the referral by being the one who told him the truth. The "buddy at another store" line is a tell to take *more* seriously, not less — and it's not your problem to solve by matching it. The deal you can do is the honest one.🔍 Why this works. Notice the through-line in all four frauds: every one of them is a lie to the lender about the real risk — wrong borrower (straw), fake borrower (synthetic), or overstated capacity to pay (income/employment). That's why the single most powerful fraud defense isn't a fancy tool; it's a consistent verification process applied to every deal, plus an F&I manager who treats "this doesn't add up" as a reason to slow down rather than speed up. The fraudster's whole game depends on the tired, the trusting, or the complicit waving them through. The pro's defense is to be none of those, every time.
Spaced Review
Let's actively pull forward a few things before we lock this chapter in. Try to answer each before peeking.
From Chapter 24 (F&I products & the menu): The menu shows every product at its price with "buy nothing" always visible. Now connect it to this chapter — which law is most directly served by the menu's transparency about each product, and which document do those purchased products get financed into?
Recall
The menu's transparency is the ethical first cousin of the **FTC CARS Rule** spirit (no undisclosed/worthless add-ons) and it operationalizes honest disclosure generally — and purchased products get financed **into the RISC** (raising the amount financed, and therefore the finance charge and total of payments in the **TILA** box). A clean menu in §24.7 produces a clean, defensible RISC here.From Chapter 22 (financing & reserve): The dealer is a broker; the dealer reserve is the spread between the buy rate and the sell rate. Which document discloses the rate the customer pays — and does that disclosure, by itself, reveal the reserve?
Recall
The **RISC's TILA box** discloses the **APR the customer pays** (the **7.9% sell rate** in the Okafor build). It does **not**, by itself, reveal the **buy rate (6.9%)** or the **~1% reserve** — which is exactly why ethical disclosure (telling the customer the dealer marked up the rate, inviting a credit-union comparison, as Priya does) goes *beyond* the legal minimum. Compliance is the floor; ethics is the building.From Chapter 15 (delivery): A clean delivery (the Nguyen family) is the full handoff of a funded deal. How does a spot delivery differ in one crucial respect, and what document carries that difference?
Recall
A spot delivery is the handoff of a deal that is **not yet funded** — it carries the honest asterisk that the financing isn't final, spelled out in a **written conditional delivery / bailment agreement** with the unwind terms (trade and down payment returned). Same warmth as a clean delivery; one added, written, honest contingency.Project Checkpoint: Your Compliance Checklist + Deal-Jacket Map
This chapter's portfolio component is the one a hiring manager in an F&I office will actually want to see — because it shows you understand that compliance is the job (theme #6). You're building two linked artifacts.
Part 1 — Your Deal-Jacket Map. Make a one-page list of every document that belongs in a complete deal jacket, in the order it's created, with a one-line note on what each protects. Start from this chapter: buyer's order / purchase agreement, credit application, privacy notice, risk-based pricing notice (or credit score disclosure), arbitration agreement (if used), the RISC, title and registration documents, the lien/security interest, the odometer disclosure — plus the F&I menu and product contracts from Chapter 24, and (for used cars) the FTC Buyers Guide referenced in Chapter 31. For each, write: what it does and what's missing/wrong looks like.
Part 2 — Your Compliance Checklist. Turn §25.4 into a checklist you could literally run on every deal. Phrase each as a yes/no you can verify:
- ☐ TILA: Do the APR, finance charge, amount financed, and total of payments on the RISC match what the customer agreed to?
- ☐ ECOA: Was this customer treated by the same standard (rate, products, effort) as everyone else — driven only by the deal and creditworthiness?
- ☐ FCRA: Do I have a permissible purpose (signed authorization + genuine financing attempt) for every credit pull? Did the customer get the risk-based pricing / adverse-action notice if owed one?
- ☐ GLBA: Is the customer's data secured (no SSNs in the clear, files locked, DMS logged out) and did they get the privacy notice?
- ☐ Red Flags: Did I check ID and the application for inconsistencies, and resolve any red flag before funding?
- ☐ OFAC: Did the OFAC screen run clean (and if not, did I stop and escalate)?
- ☐ Spot delivery: If delivered-but-not-funded, is there a written contingency with unwind terms, and does the customer understand it's not final?
- ☐ State: Did I route every state-specific question (doc fee cap, cancellation rights, usury, forms) to compliance rather than guess?
Reference what you built in Chapter 24 (your honest menu) — the menu feeds this jacket. And preview where you're headed: Chapter 26 takes this compliance discipline into subprime/special finance, where the stakes (and the temptation to bend) are highest, built around Devon Wallace; Chapter 31 deepens the consumer-protection law underneath all of it. Keep both artifacts in your portfolio — they're proof you can run a clean office.
Chapter Summary
A reference card for the F&I process. Return to this.
The deal jacket holds every document for one deal and is the proof the process happened right. A clean jacket is a defensible deal.
The documents, by job:
| Document | What it is | What it protects |
|---|---|---|
| Buyer's order / purchase agreement | Master summary of the deal | Everything matches what was agreed |
| Credit application | Submitted to lenders (dealer = broker) | Accurate identity/income; authorizes credit pull |
| Privacy notice | What data is collected/shared | Customer's data rights (GLBA) |
| Risk-based pricing notice | "Your credit affected your rate" | Customer's right to know/check their file (FCRA) |
| Arbitration agreement | Dispute-resolution terms (optional) | Disclose, don't bury; varies by state |
| RISC | The actual loan contract | The TILA box: APR, finance charge, amount financed, total of payments |
| Title & registration | Ownership + legal road use | State-administered; records the lien |
| Odometer disclosure | Certified mileage | Against odometer fraud (federal) |
The six laws (learn cold): TILA (disclose loan cost comparably) · ECOA (no discrimination; adverse-action notices) · FCRA (permissible purpose; risk-based pricing/adverse-action) · GLBA (privacy notice + safeguards) · Red Flags Rule (identity-theft program) · OFAC (screen against prohibited parties). Five protect the customer; one protects the country; none limit legitimate profit.
State law varies — doc-fee caps, usury limits, cancellation rights (usually no 3-day right to cancel a car), spot-delivery rules, forms. Default to "let me confirm that" and route state questions to compliance/counsel.
Spot delivery (delivered but not funded) is legitimate only with a written contingency spelling out that financing isn't final and that the trade + down payment are returned if it doesn't fund. The yo-yo — calling the customer back to force worse terms — is predatory and prohibited; the right response to a real fall-through is an honest unwind.
Fraud the F&I manager must catch/refuse: straw purchase (front borrower), synthetic identity (fabricated person), income/employment falsification (overstated capacity). The defense is a consistent verification process on every deal; the through-line of all fraud is a lie to the lender about the real risk.
The one-sentence chapter: In the F&I office, compliance is the job — the deal jacket and the six laws are how a handshake becomes a deal that funds, protects the customer, and holds up.
What's Next
You now know how a deal becomes legal. Next we take that same discipline into the hardest, highest-stakes corner of F&I: Chapter 26 — Subprime and Special Finance, where customers with thin or damaged credit need the most help and where the temptation to cut corners is greatest. We'll meet Devon Wallace for real and structure the ethical subprime deal — the right car, the right term, an honest payment that can rebuild credit — under everything you just learned. Later, Chapter 31 deepens the consumer-protection law, and Chapter 30 makes the case underneath this whole chapter: that the compliant way and the right way and the profitable way are, in the long run, the same way.