Your issuer can raise the interest rate on the balance you already owe, shorten your payment window without warning, and stack penalty fees that would be illegal on your personal card. Nothing in your cardholder agreement stops any of it, because the law that banned those practices for consumers never covered business cards in the first place. If you carry a business card the way you carry a personal one, you are borrowing under a much thinner safety net than you assume.
This guide walks through exactly which CARD Act protections stop at the word "business," why issuers get to keep the old playbook, and the practical habits that keep a business card cheap and safe anyway.
Why Business Cards Sit Outside the CARD Act
The Credit Card Accountability Responsibility and Disclosure Act of 2009 — the CARD Act — rewrote the rules for US credit cards: advance notice before rate increases, no retroactive rate hikes, minimum payment windows, and penalty fees tied to the actual violation. It was the most significant overhaul of card regulation in decades.
But every one of those provisions applies only to what the statute calls a "credit card account under an open end consumer credit plan." A Federal Reserve report to Congress confirmed the boundary explicitly: the Act's substantive protections and disclosure requirements do not apply to business credit cards. The label on the card decides, not the size of the business behind it. A solo freelancer's business card and a Fortune 500 corporate card sit on the same unprotected side of the line.
That gap matters because small businesses lean on cards heavily. Roughly 30 percent of small business owners use credit cards for financing, which means nearly a third of owners are borrowing without knowing how much the debt can cost them if the issuer reprices it. The Pew Charitable Trusts reviewed the market and found that practices the Federal Reserve had deemed unfair or deceptive for consumers — hair-trigger penalty rates, unpredictable repricing — remained common on business cards marketed to millions of households.
Congress has never closed the gap. Pew recommended extending CARD Act protections to any card product that requires an individual to accept personal liability, and requiring issuers to warn applicants when a card lacks CARD Act coverage. Neither became law. So the protections below are ones you do not have — check your own agreement, because whatever your issuer offers is voluntary policy, not a legal right.
No Ban on Retroactive Rate Hikes
On a personal card, your issuer cannot raise the rate on your existing balance unless you fall more than 60 days behind. Rate increases on future purchases require 45 days' advance notice, and you can reject the change, close the account, and pay off the balance at the old rate.
On a business card, none of that is guaranteed. Your issuer can raise the APR on debt you have already incurred, with whatever notice the cardholder agreement specifies — which may be little or none. Pew's review found that four out of five business cards reserved the right to change rates and fees at any time. "Hair-trigger" repricing — a penalty rate that kicks in after a single late payment, applied to the whole outstanding balance — is precisely the practice the CARD Act outlawed for consumers and left untouched for businesses.
What to do about it:
- Read the rate-change clause in your agreement before you carry a balance, not after. Look for phrases like "we may change your APR at any time for any reason."
- Treat a business card as a pay-in-full instrument. The moment you revolve a balance, you hand the issuer a standing option to reprice your debt.
- If you must finance a purchase, compare the card's penalty APR against a term loan. A loan's fixed rate is often cheaper than a card's penalty rate anyway.
No Guaranteed 21-Day Payment Window
Consumer cards must give you at least 21 days from the statement date to pay, and your due date must fall on the same calendar day each month. Those two rules together make late fees largely a matter of your own organization.
Business cards have no such floor. An issuer can mail or post statements on shifting dates, set due dates that wander month to month, and allow fewer than three weeks to receive and pay the bill. Every one of those practices was banned on the consumer side. On the business side, they are contract terms you accepted when you opened the account.
What to do about it:
- Set up autopay for at least the minimum payment on every business card. Autopay converts a wandering due date from a late-fee trap into a non-event.
- Put statement-closing alerts on, not just due-date alerts. Knowing when the cycle closes lets you time large purchases and spot an unusually short window.
- If you hold cards from several issuers, align their due dates. Most issuers let you pick a due date on request — one less moving part to track.
No Cap on Penalty Fees
The CARD Act requires consumer penalty fees to be "reasonable and proportional" to the violation, and over-limit fees need your opt-in before the issuer can charge them. A $39 late fee on a $25 minimum payment still stings, but the law at least ties the punishment to the offense.
Business cards face no proportionality rule. Late fees, over-limit fees, returned-payment fees, and annual fees are whatever the agreement says. Limits can be lower relative to your spending, over-limit transactions can post without an opt-in, and the resulting fees compound on the next statement.
What to do about it:
- Learn the full fee schedule for each card you carry — late, over-limit, returned payment, cash advance, foreign transaction — and write the numbers down where you will see them when spending decisions happen.
- Set balance alerts well below your credit limit, not at it. A single large inventory order can push you over the line mid-cycle.
- Review the fee line on every statement during your monthly close. Fee creep is gradual by design; a side-by-side look across quarters makes it visible.
No Payment-Allocation Rule
Here is a protection most consumers have never heard of but benefit from constantly: any payment above the minimum must be applied to the highest-interest balance first. If your personal card carries purchases at 21 percent and a cash advance at 29 percent, your extra payment attacks the 29 percent balance automatically.
Business cards have no such rule. Your issuer can apply payments to the lowest-rate balance first, leaving the expensive balance to compound. Mix purchases, a balance transfer, and a cash advance on one business card, and the issuer's allocation order — buried in the agreement — decides how much interest you pay, not your payment size.
What to do about it:
- Never mix balance types on a business card. Keep purchases on the card and take cash advances or balance transfers elsewhere — or better, nowhere.
- If you already hold a mixed balance, call the issuer and ask how payments are allocated, then pay with that order in mind. Some issuers will take allocation instructions by phone even when the agreement defaults against you.
- Dedicate one card to recurring subscriptions and another to variable spending. Separation makes allocation questions moot and reconciliation far simpler.
Weaker Fraud-Liability Backing
Federal law caps a consumer's liability for unauthorized card use at $50, and every major issuer goes further with a $0 liability promise. Business cards are technically outside that statute. In practice, the major issuers voluntarily extend $0 fraud liability to their small-business cards — but voluntary is the load-bearing word. It is a policy the issuer can narrow or withdraw, not a right you can enforce, and the exact terms vary by issuer and by how quickly you report.
Business debit cards and bank transfers sit on even thinner ice: the consumer protections of Regulation E do not cover business accounts either, and business wire fraud is governed by a different body of law that is far less forgiving to the account holder.
What to do about it:
- Find your issuer's fraud-liability terms in writing and confirm they cover employee cards, not just the primary account. Liability terms that stop at the owner's card leave every employee card exposed.
- Reconcile business cards weekly, not monthly. Fraud caught within days is a phone call; fraud caught at quarter-end is a fight.
- Give each employee their own card with an individual limit instead of sharing one number. Per-card limits cap the damage from a compromised or misused card, and they make the monthly review a five-minute job.
The Personal Guarantee Erases the Corporate Shield
Most small-business cards require a personal guarantee: you promise, in writing, to repay the debt yourself if the business cannot. That single signature does three things owners routinely underestimate.
First, it pierces your entity structure by contract. Your LLC or corporation shields you from most business liabilities, but not from a debt you personally guaranteed. If the company fails, the issuer pursues you — your income, your bank accounts, potentially your assets — for the remaining balance.
Second, it follows you past a business bankruptcy. Winding up the company does not extinguish a personal guarantee. The obligation survives unless it is separately discharged.
Third, it can reach your personal credit. Many issuers report business-card activity — especially late payments and defaults — to the consumer credit bureaus. A missed payment on a card with your company's name on it can still lower your personal score and raise the cost of your next mortgage or auto loan.
What to do about it:
- Assume you signed a personal guarantee, because on a small-business card you almost certainly did. Corporate cards for large, established companies sometimes waive it; cards marketed to small businesses effectively never do.
- Factor the guarantee into every limit increase you accept. A higher limit is a larger personal exposure, not free working capital.
- Keep business and personal spending strictly separated across cards. Commingling does not just complicate your taxes — it muddies exactly which debts you guaranteed and weakens the liability story your entity structure is supposed to tell.
What Issuers Do Voluntarily Is Not Enough
To be fair, the picture is not uniformly bleak. After the Pew report and pressure from Congress, some large issuers voluntarily extended selected CARD Act-style practices — clearer disclosures, limits on certain repricing — to their small-business portfolios. Two senators publicly credited Bank of America and Capital One for taking voluntary steps while warning that other issuers were marketing bare-bones business cards to ordinary households.
But the Federal Reserve found that few issuers voluntarily complied with the full set of substantive restrictions, and issuers argued the distinction was justified by different underwriting and risk. Voluntary coverage has three structural weaknesses no cardholder agreement can fix: it varies by issuer, so comparison shopping requires reading fine print line by line; it can be revoked, because nothing in statute holds it in place; and it is marketed, not disclosed, so the protections you assume often exceed the ones you have.
Treat voluntary protections as a tiebreaker between otherwise similar cards, never as a reason to relax the habits below.
A Business-Card Playbook That Assumes Zero Protection
Since the law will not protect your business card, your process has to. Seven habits cover nearly all of the gap:
- Pay in full every month. A card you never revolve on cannot reprice your debt, trap you with allocation games, or compound penalty fees. Treat the business card as a charge card with rewards.
- Never mix balance types. Purchases only. No cash advances, no balance transfers on the same account.
- Automate the minimum and alert on everything else. Autopay the minimum as a backstop, pay the full balance yourself, and set alerts for due dates, statement closes, large transactions, and balances approaching the limit.
- One card per purpose, one card per spender. Separate subscriptions from variable spend, and give each employee an individual card with a limit. Reviews take minutes when every charge already has an owner and a category.
- Read change-in-terms notices the day they arrive. Issuers still send them; you just have fewer rights when you object. The notice is your early warning to move spending to a better card before the new terms bite.
- Reconcile weekly and dispute immediately. Fraud protection on a business card is a race against the issuer's policy clock. A weekly ten-minute review beats a monthly forensic session every time.
- Review the whole portfolio annually. Rates, fees, rewards, and voluntary protections all drift. One hour a year comparing your cards against two alternatives keeps the issuer honest in the only language that works: your willingness to leave.
Keep Your Card Spending Auditable
There is a bookkeeping moral in all of this. Interest charges, penalty fees, and allocation-driven interest creep all land in your ledger months before most owners notice them in an agreement. Recording card interest and fees in their own expense accounts — separate from the purchases they ride along with — turns your monthly close into an early-warning system: when the fee line doubles quarter over quarter, something in your issuer's terms or your payment habits changed, and your books will show it first.
Clean separation helps here too. When every business charge lives on business cards and every personal charge lives elsewhere, reconciling takes minutes, your accountant bills fewer hours, and the liability story your entity structure tells stays airtight. If you want the mechanics, the flexibility of plain-text accounting makes per-card, per-employee tracking straightforward — see the docs for import and reconciliation workflows.
Simplify Your Financial Management
As you tighten up how your business borrows and spends, maintaining clear financial records is what turns good habits into visible savings. Beancount.io provides plain-text accounting that gives you complete transparency and control over your financial data — no black boxes, no vendor lock-in. Get started for free and see why developers and finance professionals are switching to plain-text accounting.
