The Fake Safety Net
CFPB Administrative Proceeding No. 2013-CFPB-0011 · Consent Order Filed December 24, 2013
The Non-Financial Ledger
Picture this: You just lost your job. You’ve got an American Express card with a balance, and a few months ago a smooth-talking telemarketer called and offered you a product called Account Protector. They told you it would cover your minimum payment if something like this happened. You signed up. You paid the monthly fee. Now the worst-case scenario has arrived and you call to activate the benefit.
What you were not told, and what the CFPB consent order confirms was deliberately omitted, is that the benefit is capped at 2.5% of your balance or $500, whichever is smaller. If you owe $5,000, your benefit is $125. Your minimum payment due might be $150, $200, or more. The gap comes out of your pocket. You are now managing a financial emergency with a product that was sold to you as a buffer and turns out to be tissue paper.
And the clock on that protection? Also misrepresented. Telemarketers implied benefits could last up to 24 months. That benefit period only applied to two of the thirteen qualifying life events: involuntary unemployment and disability. If your qualifying event was hospitalization, marriage, having a child, buying a home, or relocating, you were covered for one to three months, total. Nobody said that on the call.
For the thousands of people enrolled in ID Protect, the betrayal is quieter but the mechanism is identical: a company taking your money for a service it knew it was not delivering. You enrolled in identity theft monitoring. AECB billed your card the same day. You may have received a welcome packet in the mail weeks later, buried in which was a notice that a second step was required to actually activate credit monitoring. That notice appeared nowhere during the sales call. Eight and a half out of every ten people who signed up never completed that second step. They paid every month for monitoring they were never receiving. The CFPB found this injury “was not reasonably avoidable by consumers,” meaning there was nothing a careful, reasonable person could have done to protect themselves because the structure of the deception made it invisible until it was too late.
The Puerto Rico cardholders enrolled in Lost Wallet PR carry a particular indignity. They were called in Spanish by representatives who were improvising translations from English scripts, with no standardized Spanish materials and no approved Spanish scripts provided by AECB. Everything sent to them afterward was in English. Whether they understood the product terms at all was treated as a secondary concern. The result: only 40% of enrollees ever registered anything beyond the single card they had at enrollment, which was automatically registered for them, meaning the core promise of the product, protecting all your cards and documents, was never fulfilled for the majority of people who bought it, because they were never clearly told how to do it.
These were ordinary people sold protection at a moment of vulnerability. The products were named to sound like security: Account Protector. ID Protect. Lost Wallet Protector. Each name does specific emotional work. Each was designed to be purchased during a stressful moment on a phone call, priced as a small percentage of a balance so it felt minor, and structured in a way that made the gap between the promise and the reality invisible until the moment of need. That is not an accident. That is a product design.
Legal Receipts
Every item below is drawn verbatim or directly from the CFPB Consent Order, File No. 2013-CFPB-0011. These are the documented deceptive practices, in the government’s own language.
“Representing that the benefit payment amount would cover the Card Member’s minimum payment due when, in fact, the benefit payment would be 2.5% of a Card Member’s outstanding balance on the date of the qualifying event, up to $500 which frequently did not equal the minimum payment due.”
What this proves:
- Telemarketers made an affirmative, false statement that the product would cover the minimum payment. The actual math, capped at 2.5% or $500, made that statement untrue for a “significant percentage” of cardholders who received benefits, per the order’s own language.
- The CFPB found this misrepresentation material, meaning it directly influenced consumers’ decisions to purchase. Calling a promise material in a federal enforcement order is as close as regulatory language gets to saying: this lie worked.
“Implying that benefits would last up to 24 months when, in fact, only two of the thirteen qualifying events with a benefit period covered by Account Protector included benefit periods of 24 months, and the other eleven qualifying events had benefit periods of only one, two, or three months.”
What this proves:
- Telemarketers used the maximum possible benefit period as the implied standard, when it applied to roughly 15% of qualifying events. The vast majority of scenarios that would trigger the product came with a benefit window of 90 days or less.
- This is not a technicality. A cardholder sold on “up to 24 months” of protection and then laid off, only to discover their actual benefit window is 24 months, would accurately feel protected. A cardholder hospitalized, having a child, or buying a home would discover their window is one to two months, information they were not given before purchase.
“Representing that Account Protector would improve or maintain a Card Member’s credit score.”
What this proves:
- This claim had no factual basis in the product’s design. Account Protector was a debt cancellation add-on with no mechanism to influence credit scoring. Making this claim during a sales call was a fabrication used to close the sale.
- The CFPB’s order required AECB to affirmatively prohibit this representation in future marketing, confirming it was never an accurate product feature.
“Failing to disclose near the outset of the call that Account Protector was optional and not required for the Card Member to activate or use the Card Member’s account.”
What this proves:
- Cardholders receiving outbound calls from their credit card company may reasonably assume they are being asked to complete a required account step. Not disclosing the optional nature of the product early in the call exploits that assumption.
- The CFPB considered this omission material enough to list it as a standalone violation and mandate its correction specifically.
“AECB did not inform Card Members during the telemarketing or enrollment processes that enrollment was a two-step process. AECB billed Card Members the full amount for ID Protection Products whether or not the Card Member completed the second step. Approximately 85 percent of Card Members who enrolled in the ID Protection Products did not complete the second step of the two-step process and paid the full product fee without receiving all of the advertised benefits.”
What this proves:
- This is a structural fraud: a billing system that charged for a complete product while knowingly providing an incomplete one. The 85% non-completion rate was not a customer service failure. It was the predictable outcome of a system designed to collect fees regardless of benefit delivery.
- The CFPB found this constituted an “unfair” act or practice, the specific legal standard that requires showing injury that consumers “could not reasonably avoid.” The Bureau applied that standard here because AECB controlled the information flow entirely.
“Ninety-seven percent of Card Members enrolled in Lost Wallet PR enrolled via telemarketing calls conducted in Spanish. Customer service representatives used English telemarketing scripts and translated the scripts into Spanish for the enrollment calls. AECB did not provide uniform approved Spanish language scripts for these enrollment calls. In addition, all written materials provided to Card Members by AECB related to Lost Wallet PR were provided in English.”
What this proves:
- AECB knew the overwhelming majority of its Puerto Rico enrollees spoke Spanish as their primary language and built a sales process that relied on improvised, unapproved, unverified translations. There was no quality control on what was actually communicated.
- Delivering a product’s terms in an unreliable translation while sending all follow-up documentation in a language the customer may not read is a process that structurally guarantees a portion of buyers will not understand what they purchased. The CFPB found this deceptive.
The Scale, By the Numbers
The three products and their documented harm, charted from the consent order’s own figures.
Source: CFPB Consent Order 2013-CFPB-0011, Paragraphs 16, 24, and 36. Fees include over-limit charges and associated interest.
Societal Impact Mapping
Public Health
Financial fraud targeting people in crisis moments has documented downstream effects on physical and mental health, even when the harm is economic on its face.
- The Account Protector product was specifically sold to people facing unemployment, disability, hospitalization, and family emergencies. These are high-stress, often medically adjacent life events. Discovering at the moment of greatest need that the financial safety net you paid for does not work as described compounds the acute stress of an already destabilizing situation.
- Cardholders who received insufficient benefit payments under Account Protector were charged late fees, over-limit fees, and penalty interest rates (APR) on the gap, per Paragraph 61(b) of the consent order. The CFPB’s restitution plan explicitly required removing penalty APRs triggered by benefit shortfalls, confirming these penalty rates were activated on cardholders who believed themselves protected. Debt accumulation under penalty rates accelerates financial deterioration, a documented driver of mental health crisis.
- Consumers enrolled in ID Protection Products were paying monthly fees for identity theft monitoring that was never activated, leaving them with a false sense of security against a real risk. Anyone who experienced identity theft during that period while believing they were protected would face compounded harm.
Economic Inequality
The CFPB’s findings map cleanly onto the populations least equipped to absorb this kind of loss.
- The consent order confirms that over 239,000 cardholders were charged for products that did not perform as described, with at least $38.8 million in fees extracted across Account Protector ($15.1M), ID Protection ($11.3M), and Lost Wallet PR ($12.4M), per Paragraphs 16, 24, and 36.
- Account Protector was structured so the monthly fee (0.85% of the balance per statement cycle) was paid indefinitely during enrollment, while the benefit was capped at 2.5% of the balance or $500. Cardholders carrying large balances paid larger monthly premiums while the benefit ceiling remained fixed, meaning higher-debt cardholders received proportionally worse value per dollar paid.
- The Puerto Rico cardholder population targeted by Lost Wallet PR represents a specific geographic and linguistic community. Conducting sales in improvised Spanish, providing no approved Spanish scripts, and supplying all written materials in English created a structural information gap that disadvantaged Spanish-dominant speakers’ ability to understand, evaluate, or contest what they were buying.
- Cardholders whose Account Protector benefit claims were denied because their qualifying life event (unemployment, disability) predated their enrollment received zero benefits while continuing to pay fees, per Paragraph 13(g) and the Denied Account Protector Eligible Consumer category in Paragraph 59(a). The consent order required separate restitution for this group, confirming the practice affected a distinct and identifiable subset of cardholders.
- The restitution plan required refunds for cardholders with closed accounts, charged-off accounts, and deceased account holders, per Paragraph 64. The charged-off category is significant: cardholders whose accounts had already been sent to collections were among those harmed, indicating the misconduct reached people already in severe financial distress.
CFPB Consent Order, Paragraph 24, regarding ID Protection Products
The “Cost of a Life” Metric
Civil monetary penalty paid by American Express Centurion Bank to the CFPB’s Civil Penalty Fund. This is the government’s price tag for seven years of documented deceptive and unfair practices across three products affecting over 239,000 cardholders.
$15.06 per harmed cardholderDividing the $3.6 million penalty across 239,000+ affected cardholders yields approximately $15 per person. This is the fine American Express Centurion Bank paid per consumer it deceived. A single month’s fee for Account Protector on a $2,000 balance was $17.
$40,900,000Minimum restitution ordered. This is the floor, the lowest amount AECB was required to pay back, per Paragraph 54. Any restitution shortfall below $40.9 million had to be paid directly to the Bureau as disgorgement to the U.S. Treasury.
What Now?
This consent order is legally binding on AECB, its officers, agents, employees, and any successors. Here is who is accountable and where to apply pressure.
Leadership Accountability
- The consent order names AECB’s Board of Directors as directly responsible for reviewing the Add-On Review Consultant’s report and signing quarterly compliance certifications, per Paragraphs 49 and 84. The Chairman of the Board and the Bank President must personally sign each compliance certification.
- Specific board member and executive names are [REDACTED – Not in Source] from the consent order document as provided. The CFPB’s public enforcement database and AECB’s regulatory filings would contain current leadership names.
- The order also covers Service Providers, the third-party telemarketers who ran the deceptive scripts. AECB is required to ensure its service providers comply with the order, meaning it cannot outsource accountability by pointing to vendors.
Watchlist: Regulatory Bodies
- CFPB (Consumer Financial Protection Bureau): The primary enforcement authority in this case. File complaints about credit card add-on products at consumerfinance.gov/complaint. The CFPB’s complaint database is public and creates documented regulatory pressure.
- FDIC (Federal Deposit Insurance Corporation): The consent order references a prior October 2012 joint consent order issued by the FDIC and CFPB (Docket Numbers FDIC-12-315b, FDIC-12-216k, and 2012-CFPB-0002). AECB was already under a prior enforcement action when this 2013 order was issued. The FDIC retains concurrent jurisdiction.
- FTC (Federal Trade Commission): Regulation V, which AECB violated by failing to provide mandatory free credit report disclosures, sits under the Fair Credit Reporting Act, a statute the FTC also enforces. Complaints to the FTC at reportfraud.ftc.gov are relevant for credit reporting-related deceptions.
- State Attorneys General: The consent order explicitly states it does not bar any other federal or state agency from taking action against AECB, per Paragraph 88. State-level consumer protection offices can investigate independently.
For Affected Cardholders and Community Action
- If you held an AECB card and enrolled in Account Protector (2004-July 2012), ID Protect or ID Protect Premium (November 2009-June 2012), or Lost Wallet PR in Puerto Rico (until September 2012), you may have been an Eligible Consumer under this order. The restitution plan required AECB to identify and contact all eligible consumers. If you never received a notice or check, file a complaint with the CFPB directly, citing Consent Order 2013-CFPB-0011.
- Document everything. If you paid fees for any of these products, pull your old credit card statements. Dates, amounts, and account numbers are the evidence that matters. Keep records for any future claim or complaint.
- Share this enforcement record with your community. Credit card add-on products continue to be sold by major issuers. The deceptive playbook documented here, benefit caps hidden in fine print, two-step enrollment processes that are never disclosed, improvised translations for non-English speakers, is not unique to AECB or to 2013.
- Support mutual aid networks focused on debt relief and financial literacy in your area. Organizations that help people understand credit card terms, dispute charges, and navigate collections are doing the front-line work that regulatory orders cannot.
- Connect with local credit unions as an alternative to large bank-issued credit products. Credit unions are member-owned, do not have the same profit incentive to sell add-on products, and are subject to NCUA oversight with a different accountability structure.
The source document for this investigation is attached below.
The CFPB’s source on this controversy involving American Express can be found here: https://www.consumerfinance.gov/about-us/newsroom/cfpb-and-american-express-reach-resolution-address-discriminatory-card-terms-puerto-rico-and-us-territories/
Explore by category
Product Safety Violations
When companies sell dangerous goods, consumers pay the price.
View Cases →Financial Fraud & Corruption
Lies, scams, and executive impunity that distort markets.
View Cases →


