The California Finance Lender License (CFL) is the license every nonbank consumer or commercial lender, and every loan broker, must hold before making or arranging loans in California, and it is issued by the Department of Financial Protection and Innovation (DFPI) through the Nationwide Multistate Licensing System (NMLS). Lending or brokering one dollar in California without it can trigger civil penalties up to $10,000 per violation under California Financial Code § 22713 and voids the loan.
The DFPI reported more than 8,800 active CFL licensees at year-end 2024, and roughly 38% of new applications are returned as deficient on first review, most often for missing surety bond riders, incomplete MU2 disclosures, or weak business plans (per the DFPI 2024 CFL Annual Report). This guide walks you through every field, every fee, and every upload so your file clears review the first time.
- 📝 How to complete the NMLS Company Form (MU1) and the California Company-Specific Disclosure Questions line by line
- 💰 Exact fees, the $25,000 minimum net worth, and the $25,000 surety bond rules
- 👤 How to file MU2 forms for every control person and pass the Live Scan / FBI fingerprint check
- 📎 Every required upload, from business plan to organizational chart to Statement of Identity and Questionnaire
- ❓ Twelve field-level FAQs that answer the questions DFPI examiners hear most
What the CFL Application Is and Who Must File It
The CFL application is the formal request to the DFPI for authority to make or broker loans under the California Financing Law (Fin. Code §§ 22000–22381) and its companion regulations in 10 CCR §§ 1404 et seq. The application is filed electronically through NMLS as the Company Form (MU1) and is paired with California-specific questions, called the CA-DFPI Company-Specific Requirements Checklist, which is published on the NMLS CFL state page.
A single CFL license covers both lenders (entities making loans with their own funds) and brokers (entities arranging loans for CFL-licensed lenders). The same form covers consumer loans, commercial loans, residential bridge loans, PACE administrators, auto title lenders, and participants in the Program for Responsible Small Dollar Loans (Pilot Program) add-on. Depository institutions, true non-recourse merchant cash advances structured as sales, and certain sale-leaseback transactions fall outside CFL and do not file this form.
You must file before you make a single California loan, before you broker a California loan, and before you advertise that you will. Online-only lenders with no California office still file the same MU1 and must designate a California agent for service of process. The DFPI publishes the current checklist revision date on the NMLS state page; always confirm you are working from the latest revision before you upload anything.
Before You Start: Documents and Information You Need
Open NMLS only after you have every item below in a single folder. Missing one almost always triggers a deficiency letter that adds 30 to 60 days to your review.
- Formation documents (Articles of Incorporation, Certificate of Formation, or Partnership Agreement) — DFPI cross-checks them with the California Secretary of State to confirm good standing; without it, the file cannot move past intake.
- Federal EIN letter (IRS CP-575) — used to confirm tax identity; mismatches trigger a hold while DFPI emails the IRS.
- $25,000 surety bond on DFPI Form 260.105.4 — must be issued by a Treasury-listed surety; an unlisted surety draws an automatic rejection.
- Audited or unaudited financial statement showing $25,000 net worth under Fin. Code § 22104; a balance sheet older than 90 days is rejected.
- Business plan describing products, target customers, funding sources, marketing, and compliance program — vague plans are the #1 cause of deficiency.
- Organizational chart and management chart — required even for single-member LLCs; missing these stalls the file at intake.
- Statement of Identity and Questionnaire (Form DBO-CFL 859) for every officer, director, manager, and 10%+ owner — a single missing form pauses everything.
- Live Scan results (BCIA 8016) for California residents or FBI fingerprint cards (FD-258) plus FBI-channeled results for out-of-state control persons — fingerprints expire 60 days after rolling, so time the order carefully.
- Trade name (DBA) registration if the company will use any name other than its legal name.
- Sample loan documents (note, security agreement, disclosures) so DFPI can confirm compliance with Fin. Code § 22337 disclosure rules.
Where to Get the Form and How to Access It
There is no paper MU1; the application lives only inside NMLS. Create a Company Account through the NMLS Account Request page before you do anything else, because the entity-creation step itself takes two to five business days for ID confirmation.
After your company account is approved, log in, click Filing → Company → Create New, choose California – Department of Financial Protection and Innovation, and select California Finance Lenders Law License – Company. NMLS will load the MU1 Form with the California state-specific section attached. The system saves drafts indefinitely, so you can stop and resume as you collect documents.
DFPI does not accept email or mailed paper filings for new CFL companies. Live Scan and FBI fingerprint results, however, route outside NMLS — Live Scan goes electronically from the rolling site to DFPI, and FBI cards mail to DFPI’s licensing unit at 2101 Arena Boulevard, Sacramento, CA 95834. Confirm the current revision date of the Company-Specific Requirements Checklist on the NMLS California CFL page before you start; checklists update twice a year on average.
Step-by-Step: How to Fill Out the California CFL Application Line by Line
The walkthrough below follows the live order of the MU1 Company Form and then the California Company-Specific Disclosure Questions. Use the exact field names that appear on screen — they are quoted verbatim throughout this section.
Identifying Information — Legal Name
The field labeled “Full Legal Name of Applicant” asks for the entity’s name exactly as filed with the state of formation.
Type it in all capital letters with the entity suffix spelled out (LLC, INC., LP), and copy it character-for-character from your Articles of Incorporation or Certificate of Formation.
For example, Maria Lopez’s fintech entity should appear as LENDWELL CAPITAL, LLC, never Lendwell Capital LLC or LendWell, LLC.
If your entity uses an accent or special character, NMLS will reject it; substitute the closest plain-ASCII letter and explain in the supporting documents.
The most common mistake is dropping a comma or the entity suffix; DFPI then cannot match the record at the California Secretary of State, and the file is held until you upload an amended MU1.
A frequent misconception is that the legal name and the brand name are interchangeable; they are not, and the brand goes only in the Other Trade Name field.
Identifying Information — Main Office Address
The “Main Office Address” asks for the physical headquarters where books and records are kept.
Enter a street address — no P.O. boxes — including suite number, city, state, ZIP+4, and country.
For example, Carlos Nguyen’s California office would read 1500 K STREET, SUITE 700, SACRAMENTO, CA 95814-4015, USA.
If your only office is outside California, list it here and use the Branch section later for any California address; if you have no physical office anywhere, list the address where original loan files are stored under 10 CCR § 1409.
The classic mistake is using a virtual mailbox; DFPI examiners check Google Street View, and a UPS Store address triggers a deficiency citing “no bona fide office of business.”
The misconception to drop is that online-only lenders are exempt from the office rule; they are not, but the “office” can be an out-of-state address as long as records are physically kept there.
Other Trade Names (DBAs)
The “Other Trade Names” grid lets you list every name under which you will lend or broker in California.
Add each DBA on its own row, attach the county-stamped DBA filing, and confirm each name is registered with the California Secretary of State or the relevant county clerk.
For example, Aisha Khan’s lender legally named AK FINANCE INC. who markets as QuickBridge Loans enters QUICKBRIDGE LOANS on row one.
If you plan to use a name on your website but not on the loan note, you must still list it; California treats marketing names as DBAs.
The mistake here is listing a DBA that is not registered, which causes DFPI to issue an order to cease using the name even after licensure.
A common misconception is that DBAs from another state automatically transfer; they do not, and each must be registered in California.
Resident/Registered Agent
The “Registered Agent for Service of Process in California” field asks for the natural person or commercial agent who will accept legal papers on the company’s behalf.
Provide the full legal name, California street address, and phone number; commercial agents like CT Corporation or Cogency Global are acceptable.
For example, LENDWELL CAPITAL, LLC lists CT CORPORATION SYSTEM, 330 N BRAND BLVD, SUITE 700, GLENDALE, CA 91203.
If you are an out-of-state company, you must also be foreign-qualified through the California Secretary of State before NMLS will let you certify the form.
The mistake is naming an officer who lives outside California; California law requires the agent’s address to be in-state, and DFPI will reject the form.
The misconception is that the registered agent and the contact employee are the same; they are different fields, and DFPI uses each for different notices.
Federal Employer Identification Number (FEIN)
The “Federal Employer Identification Number” field asks for the nine-digit IRS EIN.
Enter it as nine digits with a hyphen after the second digit (e.g., 87-1234567) exactly as it appears on the IRS CP-575 letter.
For example, AK FINANCE INC. enters 84-2229987.
If you are a single-member LLC that has only an SSN, you must apply for an EIN through the IRS EIN portal before filing; DFPI does not accept SSNs in this field.
The mistake is reusing the EIN of a parent company; this triggers an immediate deficiency because DFPI cross-checks the EIN against the legal name on the CP-575.
A widespread misconception is that the EIN can be requested after filing; it cannot, because NMLS validates the field at submission.
Organizational Structure and State of Formation
The “Organization Type” dropdown asks how the entity is organized — Corporation, LLC, LP, LLP, Sole Proprietor, or General Partnership.
Pick the structure listed on your formation document, then complete the “State of Formation” and “Date of Formation” fields with MM/DD/YYYY format.
For example, LENDWELL CAPITAL, LLC selects Limited Liability Company, State: DELAWARE, Date: 03/14/2024.
If you converted from one form to another (e.g., LLC to C-corp), use the most recent formation date and upload the conversion certificate as a supporting document.
The mistake is choosing Sole Proprietor when the entity actually operates as an LLC; DFPI cross-checks with the IRS and the Secretary of State and rejects mismatches.
The misconception that Delaware-formed entities don’t need California qualification is wrong; foreign LLCs and corporations must register with the California Secretary of State before NMLS will accept the form.
Direct Owners and Executive Officers (DOEO)
The “Direct Owners and Executive Officers” section asks for every person and entity that owns 10% or more of the applicant or holds an executive title.
For each, enter legal name, title, ownership percentage, start date, and indicate whether they have submitted an MU2 Individual Form.
For example, Marcus Patel, the 60% owner and CEO of AK FINANCE INC., appears with Title: CEO, Ownership: 60%, Start Date: 02/01/2024, MU2 Filed: Yes.
If a parent company is the direct owner, list it here, and then list the parent’s owners in the Indirect Owners section until you reach a natural person.
The mistake is rounding ownership; DFPI requires the exact percentage to two decimals, and 60.00% is not the same as 60% in the system.
The misconception that passive investors don’t need MU2s is wrong; any 10%+ owner files an MU2 regardless of management role.
Indirect Owners
The “Indirect Owners” section captures the chain above the direct owners until the ownership trail reaches natural persons or a public company.
Drill up the corporate ladder, listing each layer with its percentage, until every natural person owning 10%+ indirectly has been disclosed.
For example, if LENDWELL CAPITAL, LLC is owned by LENDWELL HOLDINGS, INC. (90%), and Janet Park owns 55% of the holding company, Janet Park is listed as an indirect owner at 49.5%.
If a trust is in the chain, list the trust, the trustees, and the beneficial owners — DFPI treats trusts as transparent.
The mistake is stopping at the first corporate layer; this draws a deficiency citing “incomplete control persons disclosure.”
The misconception that foreign owners are exempt is wrong; non-U.S. residents file the MU2 and submit FBI fingerprint cards.
Qualifying Individual
The “Qualifying Individual” (sometimes called Designated Manager) is the person responsible for the company’s California lending operations.
This person must have at least three years of relevant lending experience, be listed on an MU2, and sign the management certification.
For example, Lendwell designates Maria Lopez, who spent eight years as an underwriter at a CFL-licensed lender, and she certifies under penalty of perjury.
If your qualifying individual leaves, you have 10 days to designate a replacement under 10 CCR § 1422; failure means DFPI may suspend the license.
The mistake is listing a CEO who has no lending experience just because they sign every other document; DFPI tests the experience claim.
The misconception that the qualifying individual must be a California resident is wrong — they can live anywhere, but they must be reachable during California business hours.
Books and Records Location
The “Books and Records Location” asks where original loan files and accounting records will be kept.
Provide a street address, name of custodian, and phone; cloud storage alone is not acceptable under 10 CCR § 1409.
For example, AK FINANCE INC. lists 1500 K STREET, SUITE 700, SACRAMENTO, CA 95814, Custodian: Aisha Khan, Phone: 916-555-2020.
If you keep records out of state, you must agree in writing to deliver them to DFPI in California within five business days of any examination request.
The mistake is naming a third-party data center as the custodian; DFPI requires a natural person who can produce records on demand.
The misconception that paperless lenders skip this field is wrong; you still designate the server location and the custodian.
Disclosure Questions (DRPs)
The “Disclosure Questions” section asks about the company’s regulatory, criminal, civil, and financial history.
Answer Yes or No to each of the 11 questions, and for every Yes, attach a Disclosure Reporting Page (DRP) describing the matter.
For example, if LENDWELL CAPITAL, LLC once had a state-issued cease-and-desist quashed on appeal, it answers Yes to question 6 and uploads a DRP with the petition, the order, and the appellate decision.
If a matter is sealed or expunged, you still disclose it under California law; failure to disclose draws a denial under Fin. Code § 22109.
The mistake is attaching a one-line DRP; DFPI expects a full narrative, attachments, and a statement of current status.
The misconception that Yes answers automatically deny licensure is wrong; it is the failure to disclose, not the underlying matter, that most often triggers denial.
California-Specific Question 1 — Net Worth Certification
The CA-specific “Net Worth Certification” requires applicants to certify a minimum tangible net worth of $25,000 at all times.
Upload a balance sheet (audited if you hold a license elsewhere) dated within 90 days, signed by an officer.
For example, AK FINANCE INC. attaches a balance sheet showing Total Assets $180,000, Total Liabilities $122,000, Net Worth $58,000.
If you fall below $25,000 mid-year, you must restore net worth within 30 days and notify DFPI in writing.
The mistake is including intangible assets (goodwill, software dev costs) in the calculation; DFPI strips them out under Fin. Code § 22104.
The misconception that startups can deposit $25,000 in cash to qualify is wrong without a balance sheet; the cash must appear on a properly prepared statement.
California-Specific Question 2 — Surety Bond
The “Surety Bond” question requires upload of a $25,000 surety bond on DFPI Form 260.105.4.
The bond must name “The People of the State of California” as obligee, list the applicant by exact legal name, and be signed and sealed by a U.S. Treasury-listed surety.
For example, LENDWELL CAPITAL, LLC uploads a bond from Hartford Fire Insurance Company effective 06/01/2026 with no expiration.
If you operate at multiple California branches, the bond amount can rise to $50,000 or $100,000 based on aggregate California originations under 10 CCR § 1422.5.
The mistake is using a generic surety form; DFPI rejects anything that is not the exact 260.105.4 PDF.
The misconception that the bond starts after licensure is wrong; it must be effective on the date you submit the application.
California-Specific Question 3 — Business Plan
The “Business Plan” upload describes the products, customers, funding sources, marketing, and compliance program.
Aim for 8 to 15 pages covering loan products with rates and terms, target geography, capital sources, underwriting criteria, AML and BSA program, fair lending, and complaint handling.
For example, Maria Lopez uploads a 12-page plan describing closed-end consumer installment loans of $2,500 to $10,000, 24- to 60-month terms, 36% APR cap, funded by a $5M warehouse line, with all underwriting under FCRA and ECOA.
If you intend to participate in the Pilot Program, include a separate addendum describing how you will meet the program’s underwriting and reporting rules.
The mistake is recycling a generic SBA-style plan; DFPI examiners flag it instantly because it lacks compliance content.
The misconception that the plan is not really read is wrong — it is the single most cited deficiency document in DFPI’s annual report.
California-Specific Question 4 — Organizational and Management Charts
The “Organizational Chart” shows ownership from the applicant up to natural persons; the “Management Chart” shows reporting lines from CEO down to compliance officer.
Use any format that clearly shows percentages and titles; PDF is preferred.
For example, AK FINANCE INC. uploads a one-page org chart showing Marcus Patel 60%, Aisha Khan 40% and a management chart showing CEO → COO → Head of Lending → Compliance Officer.
If you have any contractual control persons (e.g., an investor with a board seat by side letter), disclose them on the chart.
The mistake is uploading only one chart; DFPI requires both, and missing one stalls the file.
The misconception that single-member entities don’t need charts is wrong — even a one-person LLC submits both, however simple.
California-Specific Question 5 — Statement of Identity and Questionnaire (Form 859)
Form DBO-CFL 859, the Statement of Identity and Questionnaire, is required from every officer, director, manager, and 10%+ owner.
Each person fills it out, signs it, and uploads it under their MU2 attachments; it asks about residence history, employment history, and prior licensing.
For example, Janet Park uploads a four-page Form 859 covering ten years of address and job history.
If a control person has lived outside the U.S. in the last ten years, attach an English translation of any foreign address documentation.
The mistake is leaving gaps in the address timeline; DFPI requires unbroken month-to-month coverage.
The misconception that a LinkedIn profile substitutes for the employment history is wrong; the form must be completed in full even if the data repeats elsewhere.
Fingerprints — Live Scan and FBI Cards
The fingerprint requirement applies to every person who files an MU2.
California residents complete Live Scan Form BCIA 8016 at any DOJ-certified site, listing DFPI as the requesting agency, ATI code A0808, and the applicant entity.
For example, Marcus Patel visits a UPS Store offering Live Scan, pays the rolling fee plus a $32 DOJ fee and $17 FBI fee, and DFPI receives results electronically within 72 hours.
Out-of-state control persons cannot use Live Scan; they roll FD-258 FBI cards and mail them to DFPI, where DFPI channels them to the FBI.
The mistake is rolling cards more than 60 days before the file is submitted; results expire and must be redone.
The misconception that one fingerprint check covers all states is wrong; California requires its own DOJ + FBI channeling specific to DFPI.
Credit Report Authorization
NMLS automatically pulls a credit report on every MU2 filer; the authorization is captured during MU2 attestation.
A $15 credit report fee is charged per individual at the time the MU2 is submitted.
For example, Aisha Khan attests in NMLS and a soft pull is run within 24 hours.
If a control person has frozen credit, they must lift the freeze for 7 days; otherwise the report fails and the file pauses.
The mistake is assuming credit problems disqualify; they do not, but undisclosed bankruptcies, charge-offs, or judgments do.
The misconception that the credit pull is a hard inquiry is wrong — NMLS uses a soft pull that does not affect the score.
Application Fees and Submission
The “Fees” page totals the fees and routes them through NMLS payment processing.
For California CFL, expect a $300 application fee, a $100 NMLS processing fee, a $20 investigation fee, a $15 credit report fee per MU2, and a $36.25 FBI/DOJ fingerprint fee per individual.
For example, LENDWELL CAPITAL, LLC with three control persons pays $300 + $100 + $20 + ($15 × 3) + ($36.25 × 3) = $573.75.
If you withdraw your application after submission, the fees are non-refundable under 10 CCR § 1431.
The mistake is paying with a personal credit card without authorization; NMLS only accepts ACH or company cards on the company account.
The misconception that the bond cost is part of the fee is wrong; the bond premium ($250–$500 per year typically) is paid separately to the surety.
Attestation and Submit
The final “Attestation” page asks the qualifying individual or executive officer to certify all answers under penalty of perjury.
Read the certification carefully, click I Attest, and click Submit; NMLS locks the form for editing and assigns a confirmation number.
For example, Maria Lopez attests at 3:42 PM PT on 06/05/2026, and NMLS shows the file in Pending – California.
If you spot an error after submitting, you reopen the filing through Filing → Amendments and pay no additional fee for corrections requested by DFPI.
The mistake is letting a non-control employee click attest; the certification is only valid if signed by a person who is on file in Direct Owners and Executive Officers.
The misconception that submission equals approval is wrong — DFPI’s review averages 90 to 180 days depending on completeness.
Three Filled-Out Examples Using Real Scenarios
Scenario 1 — Maria Lopez, California LLC consumer installment lender
| Form Section | What Maria Enters |
|---|---|
| Full Legal Name | LENDWELL CAPITAL, LLC |
| Other Trade Names | LENDWELL |
| Main Office Address | 1500 K STREET, SUITE 700, SACRAMENTO, CA 95814-4015 |
| Organization Type | Limited Liability Company, California, 03/14/2024 |
| FEIN | 87-1234567 |
| Direct Owners | Maria Lopez, Manager/CEO, 100%, MU2 filed |
| Qualifying Individual | Maria Lopez, 8 years lending experience |
| Surety Bond | $25,000, Hartford Fire Insurance Company, eff. 06/01/2026 |
| Net Worth | $58,000 per 04/30/2026 balance sheet |
| Total Fees Paid | $471.25 |
Scenario 2 — Marcus Patel, Delaware C-corp foreign-qualifying online lender
| Form Section | What Marcus Enters |
|---|---|
| Full Legal Name | PATEL CREDIT, INC. |
| Other Trade Names | PATELPAY |
| Main Office Address | 900 N MARKET ST, SUITE 200, WILMINGTON, DE 19801 |
| Registered Agent (CA) | CT CORPORATION SYSTEM, 330 N BRAND BLVD, GLENDALE, CA 91203 |
| Organization Type | Corporation, Delaware, 11/22/2023 |
| Direct Owners | Marcus Patel 60%, Janet Park 40% |
| Indirect Owners | None — both owners are natural persons |
| Books and Records | Wilmington office, custodian Marcus Patel |
| Surety Bond | $25,000 Form 260.105.4, Travelers Casualty |
| Total Fees Paid | $573.75 |
Scenario 3 — Aisha Khan, broker-only applicant for commercial bridge loans
| Form Section | What Aisha Enters |
|---|---|
| Full Legal Name | AK FINANCE INC. |
| Activity Type | Broker only — no lending with own funds |
| Main Office Address | 355 S GRAND AVE, SUITE 1500, LOS ANGELES, CA 90071 |
| Organization Type | Corporation, California, 02/01/2024 |
| Direct Owners | Aisha Khan 100%, MU2 filed |
| Qualifying Individual | Aisha Khan, 5 years brokering experience |
| Business Plan | Commercial bridge loans $250K–$5M, 6–18 month terms |
| Surety Bond | $25,000 Form 260.105.4, Liberty Mutual |
| Net Worth | $31,500 per 03/31/2026 balance sheet |
| Total Fees Paid | $471.25 |
How to File the Completed Form
The CFL application is filed through one channel — the NMLS Resource Center — and supporting items use a small set of side channels for fingerprints and bonds.
- NMLS submission — log in, click Submit, pay through ACH or company credit card; processing time 90–180 days, proof of filing is the NMLS confirmation number plus the Filing Receipt PDF.
- Live Scan — California residents only, paid at the rolling site (typically $50–$80), routed to DFPI electronically; proof of filing is the Applicant Receipt portion of BCIA 8016.
- FBI fingerprint cards — out-of-state control persons mail FD-258 cards plus a check for $36.25 per person to DFPI Licensing, 2101 Arena Boulevard, Sacramento, CA 95834; processing time 4–8 weeks; proof is USPS certified mail receipt.
- Surety bond original — most sureties e-deliver the bond directly to DFPI; if mailed, send the original to the same Sacramento address with a transmittal letter.
DFPI does not accept walk-in filings, fax filings, or email submissions for a new CFL application. Save every confirmation number, every receipt, and every emailed deficiency letter in a single file; you will need them when you respond to deficiency notices.
What Happens After You File
DFPI’s licensing unit performs an intake review within 10 business days, then routes the file to a senior examiner. The examiner pulls the credit reports, reviews fingerprint results, reads the business plan, and verifies the surety bond, the net worth, and every DRP.
You will receive a Deficiency Letter through NMLS for any item that is missing or unclear; you have 30 days to respond, although extensions are routinely granted. After deficiencies are cleared, the examiner recommends approval to a manager who issues the license through NMLS, and the company moves to Approved status with a license number in the format 60DBO-XXXXXX.
Once licensed, ongoing duties begin — annual report due March 15 under Fin. Code § 22159, bond renewal, MU1 amendments within 10 days of any material change, and audited financials if the company holds a residential mortgage license elsewhere. Examinations are routine and unannounced; first examination usually arrives 12–18 months after licensure.
Mistakes to Avoid When Filling Out the Form
- Wrong surety bond form — using anything other than Form 260.105.4 draws an automatic rejection and you must re-buy the bond.
- Stale balance sheet — anything older than 90 days fails the net-worth test, and you wait while a new statement is prepared.
- PO Box as main office — DFPI requires a physical office or records location, and a mail-drop draws a denial recommendation.
- Missing organizational chart — even single-member LLCs must submit one, and intake stops without it.
- Incomplete DRPs — one-line answers trigger 30-day deficiency letters that compound.
- Skipped Form 859 — every officer, director, manager, and 10%+ owner must submit one; missing one freezes the file.
- Expired fingerprints — Live Scan or FBI results older than 60 days are tossed and must be redone.
- Vague business plan — generic plans without rates, products, and compliance content are the #1 cited deficiency.
- Wrong qualifying individual — naming a CEO with no lending experience triggers a rejection under 10 CCR § 1422.
- Failure to foreign-qualify — out-of-state entities that skip Secretary of State qualification cannot get past the registered-agent step.
- Undisclosed prior denials — failing to mention a denial in another state is a stand-alone ground for denial under Fin. Code § 22109.
- Wrong fee amount — short payment of even one dollar holds the file until corrected.
Do’s and Don’ts
- ✅ Do confirm the NMLS California CFL checklist revision date before you start, because checklists update twice a year.
- ✅ Do order Live Scan or FBI cards after the rest of the file is ready, because results expire in 60 days.
- ✅ Do use a Treasury-listed surety; the U.S. Treasury Listing of Approved Sureties (Circular 570) is the governing list.
- ✅ Do name a registered agent inside California with a real street address, because DFPI verifies it.
- ✅ Do include compliance program detail in your business plan, because it is the most-read upload.
- ✅ Do save every confirmation number and receipt in a single deficiency-response folder.
- ❌ Don’t use a virtual mailbox as your office; DFPI examiners check Google Street View.
- ❌ Don’t reuse a parent company’s EIN; NMLS validates it against the IRS.
- ❌ Don’t skip indirect owners; the chain must reach natural persons.
- ❌ Don’t wait to register DBAs; every California marketing name must be filed.
- ❌ Don’t click Submit before every MU2 is also submitted; NMLS will hold the company filing.
- ❌ Don’t assume sealed or expunged matters can be omitted; California requires disclosure regardless.
Pros and Cons of Filing on Your Own vs. With Help
- ✅ Pro of pro se filing — total cost can be under $1,000 for a small lender; outside counsel typically charges $5,000–$15,000.
- ✅ Pro of pro se filing — you learn DFPI’s rules, which helps you pass exams later.
- ✅ Pro of pro se filing — direct contact with the DFPI examiner builds a useful relationship.
- ✅ Pro of pro se filing — you control the timeline and can respond to deficiencies same-day.
- ✅ Pro of pro se filing — every revision is free in NMLS, so iteration is cheap.
- ❌ Con of pro se filing — first-time filers average 2–3 deficiency rounds, adding 60–90 days to approval.
- ❌ Con of pro se filing — drafting a compliance-grade business plan from scratch is hard without a template.
- ❌ Con of pro se filing — out-of-state founders may miss California-specific quirks like the 859 form.
- ❌ Con of pro se filing — bond rejections force you to re-pay premiums to the surety.
- ❌ Con of pro se filing — a denial is publicly listed in DFPI’s enforcement actions and follows the company forever.
Pro Se vs. Counsel-Assisted Filing
| Filing Path | What to Expect |
|---|---|
| Pro se | $573–$1,000 in DFPI/NMLS fees, 4–6 hours per week of founder time, 120–240 days to approval |
| With CFL counsel | $5,000–$15,000 retainer, 90–150 days to approval, fewer deficiency rounds, drafted business plan |
FAQs
Do I need a CFL license to make a single business loan in California?
Yes. California treats one loan as enough to require licensure under Fin. Code § 22100 unless an exemption like the de minimis commercial exemption clearly applies.
Can I file the CFL application on paper?
No. Since 2017 California has required all new CFL applications to be filed electronically through NMLS; paper filings are not accepted.
Do I write my legal name or my brand name in “Full Legal Name of Applicant”?
Yes — only your legal name as filed with the state of formation belongs there; brand and marketing names go in the Other Trade Names grid.
Does the “Main Office Address” field accept a P.O. Box?
No. A physical street address is required, and a P.O. Box draws an automatic deficiency citing “no bona fide office of business.”
Do I need to list 5% owners in the Direct Owners section?
No. California uses a 10% threshold, but you must list any officer or director regardless of ownership.
Is the surety bond amount really only $25,000 even for large lenders?
Yes — base bond is $25,000, but it scales to $50,000 or $100,000 based on California originations under 10 CCR § 1422.5.
Can a felony conviction disqualify a control person?
No automatic disqualification, but undisclosed convictions almost always cause denial; full disclosure with a DRP is the safer path.
Do online-only lenders need a California office?
No physical California office is required if records are kept out of state with a written commitment to deliver them in 5 business days to DFPI.
Do I need both an organizational chart and a management chart?
Yes. Both are mandatory uploads, even for single-member LLCs, and missing either one stalls intake.
Are the application fees refundable if I withdraw?
No. All DFPI and NMLS fees are non-refundable under 10 CCR § 1431 once the filing is submitted.
Does my qualifying individual need to live in California?
No California residency is required, but the person must hold three years of relevant experience and be reachable during California business hours.
Do I need to disclose a sealed or expunged criminal matter on the MU2?
Yes. California requires disclosure of sealed and expunged matters on licensing forms; failure to disclose is itself a basis for denial under Fin. Code § 22109.
How long does DFPI take to approve a clean CFL application?
Yes, clean files can clear in 90–120 days, while files with deficiencies typically run 150–240 days based on DFPI’s published averages.
Do I file separate MU1s for lender and broker activity?
No. A single CFL application covers both lender and broker activity; you simply check the activity boxes that apply.
Related reading
- How to Fill Out California DFPI Escrow Agent License Application + FAQs
- How to Fill Out California DFPI Money Transmitter License Application + FAQs
- How to Fill Out California DFPI Mortgage Loan Originator License + FAQs
- How to Fill Out California DFPI Premium Finance Company License + FAQs
- How to Fill Out Michigan DIFS Consumer Finance Company License + FAQs
- How to Fill Out the Washington DFI Mortgage Broker License (with Examples) + FAQs
- How to Fill Out the Washington OIC Surplus Line Broker License + FAQs