Discover's servicing migration broke billing — and violated its 2015 consent order

In July 2015 the Consumer Financial Protection Bureau ordered Discover Bank to pay $16 million in refunds and a $2.5 million penalty because its student loan business misstated the minimum amounts due on billing statements and the tax information borrowers needed. Discover promised to overhaul its billing, interest reporting and collection practices. Three years later it was breaking that promise — for new reasons.

Between 2017 and 2018 Discover migrated its student loan portfolio from two legacy servicing systems onto a new platform. The migration corrupted the data underneath: the bank misrepresented minimum payments to more than 100,000 borrowers and interest paid to more than 8,000, and statements carried wrong interest rates, due dates and rewards information. It also pulled payments from more than 17,000 accounts without valid authorization and cancelled or skipped withdrawals for more than 14,000 borrowers without telling them.

The most damning detail is that Discover knew while the regulator was in the room. CFPB examiners were on site in 2017 to test compliance with the 2015 order, the bank was already aware of the migration problems, and it did not report them. The violations only came out later, and in December 2020 the CFPB issued a new consent order: $25 million civil penalty plus at least $10 million in consumer redress — about $35 million, layered on top of the 2015 settlement.

The lesson generalises beyond one bank. Remediation programmes decay the moment nothing keeps checking them, and any data migration can re-corrupt records that were corrected years earlier. Discover treated the 2015 order as an event to survive rather than a state to maintain, and the regulator treated the repeat violation as exactly that.

$25M CFPB civil penalty plus $10M consumer redress — on top of $18.5M for the 2015 order it was supposed to be complying with

The 2015 order was treated as a one-off remediation project with an end date, not as a permanent operating constraint on the servicing platform.

The 2017-18 migration moved portfolios off two legacy systems without validating that corrected billing fields survived the move — the same minimum-payment errors returned at scale.

When examiners were on site in 2017 to verify compliance, Discover was aware of the migration problems and did not disclose them, converting a systems error into a compliance failure.

Unauthorized debits and unnotified cancelled withdrawals showed the payment-authorization controls required after 2015 had never fully worked.

A consent order books a promise, not a fix. A systems migration can silently corrupt data at scale; compliance must re-verify old undertakings after every platform change.

Discover's compliance problems kept surfacing. In July 2023 it disclosed it had overcharged merchants on interchange for 16 years; weeks later CEO Roger Hochschild resigned. In February 2024 Capital One agreed to acquire Discover for $35 billion in stock; the deal closed in 2025, and Capital One has been cutting Discover roles since. The bank that twice promised regulators better servicing no longer exists.