Recognise complaints across the credit journey
A consumer credit complaint can concern an advertised rate, an unexplained rejection, an inaccessible disclosure, incorrect account data, collection conduct or difficulties exercising a contractual right. Its legal classification and time limits depend on the jurisdiction, creditor and activity involved. A message need not use the word complaint to raise a substantive concern. Intake teams should distinguish requests for information, data-protection rights requests, formal complaints and potential fraud reports, while recognising that one message can trigger several processes. Capture the product, event, consumer concern, date and any immediate risk of harm. Do not route a GDPR access request solely through an ordinary complaints queue if that would compromise statutory handling deadlines.
Explain the applicable dispute-resolution framework
Directive (EU) 2023/2225 Article 40 addresses access to adequate, prompt and effective out-of-court dispute resolution for disputes about covered credit agreements, with national implementing measures generally applying from 20 November 2026. This is not a single EU-wide creditor response deadline for every complaint. Member States maintain different competent bodies and procedural arrangements. Directive 2013/11/EU supplies a broader framework for qualifying consumer alternative dispute resolution. A credit provider should map its national rules, regulator requirements and any relevant ombudsman or ADR scheme. Its complaint notices should accurately identify available escalation routes rather than directing all EU customers to one generic institution.
Investigate with the underlying account evidence
A good investigation obtains relevant application records, contract terms, notices, payment ledgers, call notes and system histories, then examines the specific allegation. A complaint that the borrower did not receive a SECCI form requires delivery evidence for that transaction rather than a generic screenshot of the template. Disputed bureau reporting needs reconciliation with actual repayment records. Be careful with automated summaries that omit context or mistakenly merge related accounts. The reviewer should distinguish the consumer's requested outcome from the underlying legal question. If an error is confirmed, determine whether other consumers may have been affected by the same process, even when only one complainant has contacted the firm.
Communicate a reasoned response and rights
The final response should address each material point, identify the result of investigation and describe corrective action where appropriate. Use plain language that the individual can understand and avoid presenting speculation as an established fact. Inform the consumer about available escalation or out-of-court dispute routes where applicable, with accurate local contact information and timing. If a complaint involves personal information, separate the decision on the commercial dispute from the consumer's distinct GDPR rights. Accessibility and language needs should be considered during communications. A firm should not require withdrawal of a legitimate complaint as a condition for investigating a possible regulatory breach.
Manage vulnerable customers and urgent harm
Some complaints signal immediate difficulty paying, threatened collection activity, suspected identity theft or an unauthorised credit agreement. Triage should identify whether an urgent specialist review or protective action is necessary under applicable law and internal policy. For financial difficulty, a servicing team may need to examine forbearance or arrears arrangements rather than relying on an automated standard letter. Avoid assuming that one definition of vulnerability applies across every jurisdiction. Store personal information sensitively and limit access to details unrelated to resolving the issue. Escalations should remain traceable so urgent cases do not disappear between complaint, fraud, privacy and collections teams.
Use complaint themes to improve compliance controls
Monitor themes by product, advertising campaign, distribution partner, decision model, servicing workflow and bureau supplier. Repeated complaints about the same fee or explanation may reveal an underlying control defect even when individual cases were resolved. Analyse causes, remediation outcomes, elapsed time and the adequacy of communication, with suitable quality assurance. Oversight reports should disclose recurring issues and failures to meet relevant national response deadlines. Keep records needed for legitimate complaint handling without imposing indefinite retention. Feed material findings into training, product governance, testing and regulatory change management. The goal is a process that can resolve disputes fairly and detect systemic consumer-credit risk. Complaints about the same digital journey can reveal difficulties that standard automated tests overlook. Examine device type, accessibility barriers, version of the disclosure and point of interruption when reconstructing a complaint. Corrective action should be tested with a consumer-like journey and tracked separately from the decision on an individual case.
Frequently asked questions
Does CCD2 set one complaint deadline for all EU countries?
No. Article 40 concerns access to out-of-court dispute resolution; national processes and requirements must be checked.
Can a complaint trigger a GDPR request?
Yes. A single message may also exercise a personal-data right, requiring separate statutory handling.
Why analyse complaint trends?
Recurring complaints can reveal systematic defects in marketing, lending decisions, servicing or reporting.
Primary sources
Directive (EU) 2023/2225 ↗GDPR Regulation (EU) 2016/679 ↗EBA Guidelines on internal governance ↗Directive 2013/11/EU on consumer ADR ↗Read the source in its current version. National implementing measures and product-specific applicability may require additional research.