What a cash flow lender's decline actually means

A cash flow lender's decline is a decision about your bank account and your credit file measured against that lender's own template — not a finding that the loan would not be repaid. Because business lending sits outside the NCCP Act, no law requires a reason to be given: a bank subscribing to the 2025 Banking Code of Practice commits to tell a small business the general reason why, while the AFIA Finance Industry Code that covers non-bank lenders from 1 October 2026 carries no equivalent commitment. What the application does leave behind is a credit enquiry, and that stays for five years.

What the decline was a decision about

A cash flow lender has no property to fall back on. Everything it decides, it decides from the two things it can see: the bank feed and the credit file, measured against a template built inside that lender rather than published anywhere. Much of that measuring happens before a person reads the file at all.

The lenders people name when they ring us are the online small business lenders — Prospa, OnDeck, Bizcap, Moula, Lumi, Shift and the rest. None of them takes security over real property, which is why a decline from one is so often followed by a decline from the next: they are all reading the same two things, and a template that one business fails, another built on the same inputs tends to fail as well.

Which means the decline carries far less information than it feels like it does at ten o'clock at night. A business can be profitable, solvent and sitting on real equity and still fail a template, because none of those three things is what the template measures. The sentence that comes back — "unfortunately we are unable to proceed at this time" — is accurate and almost empty, and the reason it is almost empty is the subject of the next section.

You are not the first one this week

Nearly everybody in this position tries their bank next, and the bank says no as well. Not because the loan would not be repaid, but because the last financials look wrong, or a lodgement is late, or the statements now show somebody else's debits leaving every morning. Those are the things a bank exists to care about. None of them says anything about whether there is equity in the building.

That gap is where HomeSec has been since 2004. We are not here to judge how the year went — it is one of the situations we see most, which is also why we write about business loans for borrowers with bad credit. What we look at is whether there is enough unused equity in real property and whether the purpose is a genuine business one: not financials, not a credit score, not whether everything is up to date, and no interrogation about the last two years. From a clean, complete scenario funds can be available in as little as 24 hours, and interest can be capitalised for up to six months, so nothing is payable while the business gets its feet back under it.

Back to the decline, because knowing who owes you an explanation is the part that changes what you do on Monday.

Whether anyone has to tell you why

The short answer is that no law requires it. A loan predominantly for business or commercial purposes is not regulated under the NCCP Act — the AFIA Finance Industry Code says so in terms — so the responsible lending machinery that applies to consumer credit, including anything resembling a right to reasons, does not reach a business facility. What is left is whatever the lender has promised voluntarily, in a code of practice.

And there, the two codes say markedly different things.

A bank that subscribes to the 2025 Banking Code of Practice makes a specific commitment. Under the heading "Where we decide not to approve your Loan", paragraph 81 says that if the bank decides not to approve a loan it will tell the applicant the general reason why, unless it is reasonable for it not to do so. The surrounding paragraphs are worth knowing for the same reason: paragraph 76 commits the bank to explain how to apply, what information it needs and how long a decision is likely to take once it has that information; paragraph 77 sets the standard of a diligent and prudent banker; and paragraph 78, on assessing whether the borrower can repay, says the bank considers the circumstances reasonably known to it — the financial position or the conduct of the account, and it may consider projected cash flows — and that it "will not ask a third party (such as your accountant) to certify that you can repay the Loan". Those apply where the borrower is a small business as the Code defines it, which is set out in what a bank's demand and a 30-day notice mean.

The AFIA Finance Industry Code of Practice is the one that covers most non-bank lenders, and it took effect on 1 October 2026. Its small business part commits a lender to make its lending decisions "based on information that has been provided to us or that we have collected", and to provide its products only where it believes the applicant meets its product and lending requirements. Read the part through and what is not in it becomes the point: there is no commitment to give reasons when an application is declined. The Code's disclosure obligations attach to a product — the terms and conditions given before an offer is accepted — and a declined application never becomes one, because the Code applies to a product for which you enter into an agreement on or after its effective date.

Two further details decide which code, if any, is behind the lender you applied to. AFIA members that are signatories to the Banking Code of Practice or the Customer Owned Banking Code of Practice sit outside the AFIA Code, so a bank-owned lender is answering to the paragraph above rather than to this one. And the older Online Small Business Lenders Code of Practice, whose current version is effective from 12 September 2024, binds only those members AFIA has approved as Code Compliant Members. AFIA publishes who they are on its own site, and that list is worth reading there rather than assumed — on the day this page was checked, two AFIA pages for the same code named different sets of lenders, and it is shorter either way than the number of lenders advertising to small business. Which code applies to a facility already running, and when, is covered in getting out of a merchant cash advance.

None of which means a lender that says nothing has done anything wrong. The practical consequence is narrower and more useful: stop trying to extract a reason that nobody is obliged to give you, and go and read the data the decision was made on instead.

What the application left behind, and what it did not

Applying leaves a credit enquiry. The Office of the Australian Information Commissioner's own table of what stays on a credit report gives a credit enquiry five years, alongside court judgments and defaults at five years, repayment history at two, financial hardship information at one and a serious credit infringement at seven.

Worth noticing what that table does not have. Nine kinds of information are listed on it, and the outcome of an application is not among them. The next lender reads that you applied; the answer you were given is not part of the record. A string of enquiries in a short window is therefore the damage a run of applications does, rather than the declines themselves — the separate question of what several applications at once look like is answered in whether it is bad to apply for multiple loans at once.

One thing to establish before you go looking: whose file was searched. A company's commercial credit record and a director's own credit report are different records governed differently, and the credit reporting rules in the Privacy Act are framed around individuals — how a judgment against a company differs from one against a director sets out why that distinction matters. Ask the lender which it searched, because it decides where to look next.

Before you apply anywhere else

1. 1
   Stop applying.Each new application can leave another enquiry on the file, and an enquiry stays five years. Nothing you do this week damages your position faster than a run of applications made while you are angry about the last one.
2. 2
   Ask the lender for the general reason anyway.A non-bank lender is not obliged to give it, but plenty will when asked plainly and in writing. If the lender is a bank and you are a small business as the Banking Code defines it, paragraph 81 is the thing to quote.
3. 3
   Get your credit report, free, from each of the credit reporting bodies.It is the file most of these decisions lean on, and you are entitled to a copy at no charge. Read it for anything that is wrong, out of date, settled but still showing, or not yours at all.
4. 4
   Ask for a correction where something is wrong.Go to the credit provider first; you can also ask any credit reporting body directly. There is no charge. Where the information is wrong it must be corrected within 30 days or a longer period you agree to, you must be told in writing, and so must anyone it was disclosed to. A refusal has to be explained in writing, with reasons, and the letter must tell you about an external dispute resolution scheme.
5. 5
   Write down the property, the amount and the way out.Address, rough value, what is owing and to whom; how much you need and what for; and how the loan gets repaid — a sale, a refinance, or money that is already coming. A lender assessing equity can answer from those three things in one call.

What a secured loan changes, and what it does not

The reason a decline from a cash flow lender says so little about a secured loan is that the two assess different objects. A cash flow facility is sized from what passes through the account, so a quiet quarter, a seasonal trough or one large job that has not paid yet pushes the number down and no amount of explaining moves it, because the number comes from the formula. How cash flow loans are sized and repaid and how the cash flow lenders compare cover that ground. A loan secured against real property is sized from the equity instead, which is why the answer can be different without anything about the business having changed.

What it does not change is the arithmetic underneath. A secured loan does not make an unaffordable facility affordable; it moves where the risk sits, and it moves it onto a property. Where there are already two or three cash flow facilities running, the question is a different one again and is answered in two or three cash flow loans at once, and how to unwind them. Where the problem is that the offer was too small rather than refused, what HomeSec looks at after a cash flow lender says no is the shorter answer.

When the decline was the right answer

Said plainly, because a decline is the moment at which another loan is most tempting and least examined.

Sometimes three systems reaching the same conclusion are telling you something true. If each decline turned on whether the business can carry more repayments — rather than on a credit mark, a short trading history or the shape of the takings — then the product was not the problem and a fourth application will not fix it. ASIC's instruction to a director of an insolvent company is four words long: do not incur further debt. Borrowing against the family's property to keep a loss running is how somebody loses the house as well as the company, and we would rather say so on the first call than after a valuation.

Three narrower cases where the answer is also no. Where the money is needed for a gap that has no end date — wages every week with no contract behind them — more capital postpones the decision rather than making it. Where the amount needed is below $20,000 we do not lend to it at all, because registering a security over a property for a figure that size is the wrong tool for the job. And where there is no equity in real property, a secured loan is not our answer either, and the useful calls are to an accountant, to a registered liquidator about small business restructuring, or to the Small Business Debt Helpline on 1800 413 828, which is free, independent and confidential.

This page explains what a credit decline is, what the codes of practice commit a lender to and what the credit reporting rules allow you to see and correct. It is general information, not legal, credit or insolvency advice: what to do in your circumstances is a question for your accountant, a commercial solicitor or a registered liquidator. The Australian Banking Association's 2025 Banking Code of Practice, the AFIA Finance Industry Code of Practice, the Online Small Business Lenders Code of Practice and the Office of the Australian Information Commissioner's credit reporting guidance are the primary sources behind everything above. Read your own application and the lender's own terms alongside them.

Reviewed by Paul Stone, Joint Chief Executive