Disclaimer: This post is for informational purposes only and does not constitute legal advice. Consult qualified legal counsel for compliance guidance specific to your state and business.
If you've ever had a TPA compliance officer tell you "it's complicated," this is the longer answer to why. Vehicle service contract compliance is one of the genuinely fragmented areas of consumer protection law in the United States — not because the underlying rules are mysterious, but because there is no federal framework that governs VSCs the way there is for insurance. Every state makes its own rules. Some states have detailed statutes and active enforcement. Others barely mention service contracts in statute at all. And a handful treat certain VSCs as insurance products, which opens an entirely different regulatory door.
For a TPA administering contracts in 30+ states, or a dealer group operating across multiple state lines, the compliance surface area is substantial. This guide is a practitioner-level walkthrough of the three main pillars — financial backing requirements, cancellation and cooling-off rules, and registration and disclosure obligations — followed by a state-by-state spotlight on the jurisdictions that bite hardest.
Why VSC Compliance Is Structurally Different from Insurance Compliance
Start with the baseline misconception: many people in F&I assume Magnuson-Moss governs vehicle service contracts. It doesn't — not in the way that matters for compliance. Magnuson-Moss (the 1975 federal warranty act) sets rules about written warranties on consumer products. A service contract, as defined under Magnuson-Moss, is a separate product sold for additional consideration. The Act has some limited applicability to service contract disclosures, but it does not create a federal regulatory regime for VSCs the way state insurance codes govern insurance.
That means VSC compliance is state-by-state consumer protection law, and it varies in at least three dimensions:
- Whether the state regulates VSCs at all (most do, several have thin statutes)
- Which agency has jurisdiction (Department of Insurance vs. AG's consumer protection division vs. Department of Financial Institutions)
- Whether VSCs are treated as insurance or as service contracts (New Mexico is the canonical example of the latter being a trap)
This last distinction matters enormously. If a state regulates VSCs as insurance, the obligor must be a licensed insurance company, the product must be filed and approved as an insurance product, and the dealer selling it is acting as an insurance producer — which requires a license. Most dealers in those states have no idea they're selling a regulated insurance product.
Pillar 1: Financial Backing Requirements
The most consequential compliance question for any VSC program is: what backs the obligation? A service contract is a promise to pay for future repairs. The consumer protection concern is obvious — what happens if the obligor can't pay? States have developed three main models for addressing this risk.
The Reimbursement Insurance Policy Model
The most common model in well-regulated states. The obligor (the entity named on the contract as the party promising to pay) must obtain a reimbursement insurance policy from a licensed insurer. If the obligor fails to pay a covered claim, the insurer steps in. The insurance policy backs the promise.
Florida is the clearest example. Under Florida Statutes Chapter 634, a motor vehicle service agreement company must either maintain a reimbursement insurance policy or meet the net worth alternative (below). The insurer providing the policy must be licensed to do business in Florida. This is not optional, and the Florida Department of Financial Services enforces it.
California's approach is similar in structure, though administered through the Department of Insurance with additional registration requirements layered on top.
The Net Worth / Self-Insurance Model
Some states allow large, well-capitalized obligors to self-insure — essentially posting their own financial strength as the backing mechanism. Net worth requirements vary, but are typically in the range of $100M to $500M in tangible net worth. For most independent TPAs and dealer-owned obligors, this path is not viable. For large OEM-backed or national providers, it sometimes is.
The trap here is an obligor that believes it meets the net worth threshold but hasn't verified the specific state's calculation methodology. "Net worth" is not a universal accounting term for these purposes — some states use tangible net worth, others use a specific balance sheet calculation, and a few require annual audited financials filed with the state.
The Escrow / Reserve Fund Model
A smaller number of states require that a specified percentage of premiums collected be held in escrow — a restricted account that can only be used to pay claims. This is administratively burdensome because the escrow account is contract-specific and must be managed over the life of each contract.
For TPAs running a high volume of short-term contracts, escrow requirements create real cash flow constraints. The escrow isn't available for operating purposes, and the accounting complexity of tracking escrow obligations contract-by-contract is non-trivial. Good service contract administration software automates the escrow tracking and can generate state-required reporting; doing it in spreadsheets at scale is how reserves get miscalculated.
Pillar 2: Cooling-Off Periods and Cancellation Rules
Every compliance officer has a story about a refund calculation dispute. Cancellation refund math is simultaneously one of the most technical and most frequently litigated aspects of VSC compliance — and it's an area where errors are almost always systematic (i.e., you're making the same mistake across thousands of contracts) rather than isolated.
The Federal Baseline (FTC)
The FTC's Used Motor Vehicle Trade Regulation Rule and the broader consumer protection framework under Section 5 of the FTC Act set a baseline expectation that VSC cancellation terms must be disclosed clearly and honored as written. There is no specific federal cooling-off period for VSCs (the FTC's 3-day cooling-off rule applies to door-to-door sales, not dealership F&I transactions). States fill this gap.
State Cooling-Off Periods
Most states with active VSC statutes require a free-look period — a window during which the customer can cancel the contract and receive a full refund. The length varies:
- 30 days is the most common standard (majority of regulated states)
- 20 days appears in a smaller set of states
- 10 days is the minimum in a few states with older statutes
The free-look period is typically defined from the date of purchase or the date the contract documents are delivered to the customer — and these can differ, which creates ambiguity. A contract signed in the F&I office on a Friday afternoon, with documents emailed to the customer Monday, raises a legitimate question about when the clock starts. Most state statutes specify one or the other; a few don't, which gives plaintiff attorneys room to maneuver.
Post-Free-Look Cancellation Refund Calculations
This is where the real complexity lives. After the free-look period, customers retain a right to cancel but receive a prorated refund rather than a full refund. The calculation method matters enormously at scale, and states differ on what's required.
Pro-rata method: Refund = (remaining term / original term) × original price, minus an administrative fee. Simple, clean, favors the customer slightly in early cancellations.
Rule of 78s: An older actuarial shortcut that front-loads earnings, meaning the provider retains more in early periods. This method has been prohibited in most states for credit insurance and is increasingly disfavored for VSCs, but it still appears in some older contracts and platforms.
90% of pro-rata: Some states allow the provider to retain 10% of the unearned premium (on top of the administrative fee), which is essentially a haircut on the refund in favor of the provider. New York specifies this model.
Time vs. mileage pro-rata: Some contracts (and some state statutes) require pro-rata calculated against whichever is greater — time elapsed or mileage consumed. For high-mileage drivers with short time horizons, the mileage-based calculation can produce a dramatically lower refund. Most state statutes are silent on this; contract language controls.
The compliance failure mode is running a single calculation method across all contracts regardless of state law. If your platform doesn't have state-aware refund logic, you are almost certainly under-refunding customers in some states and over-refunding in others.
Lender Notification Requirements
Often overlooked by compliance teams focused on the customer-facing refund: when a VSC is cancelled on a financed vehicle, the refund typically must be applied to the loan balance (not returned directly to the customer) if the contract was financed as part of the deal. And the lender must be notified of the cancellation.
This is explicit in several state statutes and implicit in lender contracts even where statute is silent. Getting this wrong creates liability in two directions: the customer doesn't get the right refund treatment, and the lender may have a contractual claim against the dealer or TPA for failure to notify. This is a workflow automation problem as much as a compliance problem — lender notification at scale requires a process, not a manual step. Well-designed automotive warranty software integrates lender notification into the cancellation workflow automatically.
Pillar 3: Registration, Filing, and Disclosure Requirements
Provider and Administrator Registration
Some states require the service contract provider (the obligor) to register with a state agency before selling contracts in that state. The registering agency is usually the DOI or a similar financial services regulator. Registration typically requires:
- Proof of financial backing (reimbursement insurance certificate or audited financials for net worth qualification)
- Sample form contracts for review
- Filing fees (ranging from a few hundred to several thousand dollars per state)
- Annual renewal obligations
A separate question is whether the administrator (the entity that processes claims and handles administration, which may differ from the obligor) must also register. In some states, yes — TPAs operating as third-party administrators have their own licensing or registration requirements.
The most common compliance gap we see when new programs are expanding into new states: the obligor's legal team files in the target state, but nobody verifies whether the TPA administering the program is separately registered. If they're not, you have a registered product being administered by an unregistered party — a violation in states that require TPA registration, and a potential void-the-contract argument in consumer litigation.
Contract Form Disclosure Requirements
Most states with VSC statutes specify required disclosures on the contract face — the document the customer signs. Common requirements include:
- Clear identification of the obligor (the party legally responsible to pay claims — not just the dealer and not just the administrator)
- Disclosure of the reimbursement insurance policy carrier and policy number (in states requiring that backing model)
- Cancellation rights language, including the free-look period duration and refund calculation method
- Contact information for claims and cancellation
- Language specifying that the contract is not insurance (in states that treat VSCs as non-insurance products)
The trap is using a single national contract form and assuming it covers all states. It doesn't. A contract form valid in Texas may be missing required language for New York, and a contract that doesn't include California-required disclosures isn't compliant in California regardless of the quality of the underlying product.
State-by-State Spotlight: The Hardest Jurisdictions
The table below summarizes the key compliance requirements in the five states that generate the most compliance questions and enforcement activity. This is a practical-level summary — not an exhaustive legal analysis.
| State | Governing Law | Financial Backing | Cooling-Off Period | Refund Method | Registration Required |
|---|---|---|---|---|---|
| California | CA Ins. Code §§ 12800–12866 | Reimbursement insurance policy OR net worth ($100M+ tangible) | 30 days (full refund) | Pro-rata less admin fee | Yes — DOI registration for obligor |
| Florida | FL Stat. Ch. 634, Part II | Reimbursement insurance policy OR net worth ($100M) | 30 days (full refund) | Pro-rata less admin fee (max $50 or 10%) | Yes — DOFS motor vehicle service agreement company license |
| New York | NY Ins. Law § 7902 et seq. | Reimbursement insurance policy required | 10 business days (full refund) | 90% of pro-rata less admin fee | Yes — DFS filing and approval required |
| New Mexico | NM Stat. § 59A-58 et seq. | Many VSCs treated as insurance — insurer license required | 10 days (full refund) | Pro-rata (if non-insurance treatment applies) | Yes — OSI; risk of triggering insurance licensing |
| Texas | TX Occ. Code Ch. 1304 | Reimbursement insurance policy OR net worth ($100M) OR escrow (25% of unearned premium) | 30 days (full refund) | Pro-rata less admin fee (max $75 or 10%) | Yes — TDI registration for service contract provider |
California: The Most Regulated, with the Highest Enforcement Risk
California regulates vehicle service contracts under the Insurance Code, which means the DOI has primary jurisdiction. The obligor on a VSC sold in California must either hold a reimbursement insurance policy from a California-admitted insurer or meet the net worth threshold. California has specific requirements on cancellation language — the contract must state the consumer's right to cancel and the method for calculating the refund — and the DOI periodically reviews contract forms for compliance.
The additional complication in California is that the regulatory boundary between a VSC and a mechanical breakdown insurance (MBI) policy is actively litigated. If a contract looks enough like insurance (insuring against risk of mechanical failure rather than guaranteeing a service), it may be recharacterized as MBI, which requires a full insurance license. Most well-structured VSCs avoid this by careful drafting, but it's a live issue for programs entering California for the first time.
Florida: Chapter 634 Is Specific and Enforced
Florida Statutes Chapter 634 is one of the more detailed VSC statutes in the country. Motor vehicle service agreement companies must obtain a license from the Department of Financial Services before selling contracts in Florida. The license application requires proof of financial backing, a fidelity bond or equivalent, and sample contract forms. Annual renewals are required.
The financial backing requirement in Florida is either a reimbursement insurance policy (most common) or a net worth demonstration with audited financials. Florida sets the administrative fee cap on post-free-look cancellations at $50 or 10% of the unearned premium — whichever is less. This is lower than what many national contract forms contemplate, meaning a program running a national form may be over-charging Florida customers on cancellation.
Florida also has specific requirements about the timing of remittance to the administrator and the maintenance of records — administrative requirements that seem mundane until a DFS audit surfaces a gap.
New York: Strict Disclosures, Specific Refund Math
New York regulates service contracts under the Insurance Law, administered by the Department of Financial Services. Like California, New York requires a reimbursement insurance policy — the self-insured net worth alternative is not available in New York for most VSC programs.
New York's refund calculation is explicit: customers cancelling after the free-look period are entitled to 90% of the pro-rata unearned premium, less a reasonable administrative fee. This is more customer-favorable than the "pro-rata less admin fee" formula in most other states, and programs running a less favorable formula in New York are in violation.
The disclosure requirements in New York are also specific about placement and language. The obligor's identity, the insurer providing reimbursement coverage, and the cancellation rights must all appear on the contract in specified locations. DFS reviews these contract forms on filing and has rejected forms that omit or bury required language.
New Mexico: The Insurance Trap
New Mexico is the state that trips up sophisticated operators more than almost any other. The New Mexico Superintendent of Insurance has taken the position that many motor vehicle service contracts — particularly those that function like mechanical breakdown coverage — constitute insurance under New Mexico law. This means the obligor needs an insurance license, not a service contract provider registration.
Several dealers and TPAs have entered New Mexico selling what they believed were service contracts, only to discover through enforcement activity or consumer complaints that they were selling unregistered insurance. The resolution is expensive: back-licensing, contract reformation, potential consumer remediation, and in some cases, regulatory penalties.
The practical implication: before entering New Mexico, get a New Mexico insurance law opinion specifically on whether your product structure — your specific contract language, term structure, and risk-transfer mechanism — constitutes insurance under NM Stat. § 59A-1-19. Don't rely on a national opinion that wasn't written with New Mexico's specific statutory definition in mind.
Texas: Relatively Dealer-Friendly, but Filing Is Mandatory
Texas regulates VSCs under Chapter 1304 of the Occupations Code, administered by the Texas Department of Insurance. Texas is generally considered one of the more dealer- and provider-friendly states — the regulatory framework is clear, the financial backing options are broad (reimbursement insurance, net worth, or escrow), and TDI is not known for aggressive enforcement of minor technical violations.
That said, registration as a "service contract provider" with TDI is required before selling contracts in Texas, and the registration requires a copy of the service agreement form. Unregistered providers selling in Texas are in violation, and consumer complaints routed through TDI can trigger review of whether registration was current. Texas also requires that the obligor's identity be clearly stated on the contract — a requirement often missed by dealer-branded programs where the dealer's name appears prominently but the actual obligor entity is buried in fine print.
Common Compliance Failure Modes
Across these states and others, the compliance failures that actually generate regulatory action, consumer complaints, and lender disputes fall into a predictable set of categories.
Refund calculation errors on early cancellations. The most frequent source of consumer complaints to state regulators. Usually systematic — a platform running the wrong formula, or a formula that doesn't account for state-specific requirements. At scale, even a $30-per-contract under-refund across 10,000 annual cancellations is a $300,000 exposure before legal fees. A service contract administration guide can help teams understand the calculation methodology they should be using by state.
Missing state registrations when expanding to new markets. Programs expand faster than legal reviews keep pace. The deal team closes a new dealer in a new state; the compliance team doesn't know until the first contract is already sold. By that point, you've sold unregistered contracts, potentially in a state with per-contract penalties. A state expansion checklist — with registration lead times that are typically 60-120 days — is non-optional for any program growing its dealer network.
Lender notification failures on cancellations. When a vehicle is sold or refinanced and the VSC is cancelled, the refund must be sent to the lender if the contract was financed as part of the deal, and the lender must be notified. Skipping this step creates friction with lending partners and, in some states, a statutory violation. Building lender notification into the cancellation workflow — automatically, not manually — is the only way to do this reliably at scale.
Disclosure language that doesn't match state law. Using a single national contract form without state-specific endorsements. The most common specific failure: not including state-required cancellation language verbatim, or including language that contradicts the state's statutory refund formula. The right model is a base contract with state-specific addenda maintained as separate document components — and a platform that serves the right addendum based on state of sale.
Obligor identity ambiguity. In dealer-branded programs, customers often don't know who the actual obligor is. When a claim is denied or a cancellation goes wrong, they complain to the dealer. The dealer says it's the administrator. The administrator says it's the obligor. The obligor may be an entity the customer has never heard of. Several states have explicitly required that the obligor be identified by legal name on the contract face. This is a contract drafting issue with a simple fix — and it's regularly missed.
What Good Compliance Infrastructure Looks Like
A compliance officer at a well-run TPA or dealer group doesn't rely on memory or manual review to manage a multi-state VSC program. The infrastructure does most of the work. Specifically:
State-aware contract assembly. The platform knows where the sale is occurring and serves the correct contract form — base contract plus applicable state addenda — automatically. No F&I manager is manually selecting the right version. How the F&I menu itself is configured — and how menu selections generate the contract records that need to be compliant — is a closely related problem we cover in our F&I menu and VSC administration guide.
Automated refund calculations. Cancellation refund logic is coded by state. The system calculates the correct refund amount based on the contract's origination state, the calculation method required by that state, the elapsed term, and the administrative fee cap. Output is a refund amount, a calculation audit trail, and a lender notification if applicable. Claims management workflows should be similarly automated — adjudication logic built in, not applied manually. For the mechanics and benchmarks of VSC adjudication specifically, see our VSC claims adjudication guide.
Registration tracking dashboard. Every state where the program sells contracts has a registration status, expiration date, and renewal trigger. Compliance team gets a 90-day warning before any registration expires. New state expansions trigger a checklist item to initiate registration before the first sale.
Audit trail on all cancellations. Every cancellation is logged: who requested it, when, what formula was used, what refund was calculated, whether lender notification was sent, and when funds were disbursed. This log is the compliance team's first line of defense in a regulatory inquiry. If you can produce a complete audit trail in 24 hours, most regulatory inquiries end quickly. If you can't, they don't.
Lender notification workflows. Automated notification to the lienholder on cancellation of a financed contract. Should include the contract number, cancellation date, refund amount, and method of disbursement. The lender's receipt should be logged in the same audit trail.
This is the infrastructure difference between a program that views compliance as a cost center and one that treats it as a competitive advantage. TPAs that can demonstrate clean compliance operations to large dealer groups and lender partners win contracts that less-organized competitors can't. Extended service contract programs running on modern platforms have this built in; programs running on legacy admin systems from 2005 are doing most of it manually.
The practical implication for dealers: when you're evaluating a TPA partnership, ask specifically about their compliance infrastructure. Ask how they handle state-specific cancellation calculations. Ask for their registration status in every state you operate in. Ask how lender notifications are handled. The quality of the answers tells you more about the partnership than the product brochure does.
If you want to see how WarrantyHub handles state-aware contract assembly, automated refund calculations, and compliance audit trails — book a demo. Bring a recent cancellation dispute if you have one. It's usually instructive.
Compliance Built Into
the Platform
WarrantyHub gives TPAs and dealer groups state-aware contract assembly, automated refund calculations, lender notification workflows, and a complete cancellation audit trail — so compliance isn't a manual process.
Free demo · White-glove onboarding · No long-term contracts