Affirm Compliance / Risk Analyst Interview Questions

1.Walk me through a compliance process or policy you inherited that nobody could really explain. How did you make it understandable?

2.Tell me about a compliance disclosure or consumer-facing policy you helped write. How did you make sure it was both legally accurate and actually understandable to a real customer?

3.Tell me about a compliance or risk issue that turned out to have a root cause in a completely different part of the business than where it first appeared. How did you trace it?

4.Walk me through a time a compliance or risk issue surfaced in one part of the business but you realized the real fix had to happen somewhere else entirely. How did you get the right people involved?

5.Describe a risk you spotted in a compliance program or product feature that wasn't on anyone's radar yet. How did you make the case for addressing it?

6.Tell me about a time you pushed back on a compliance or legal interpretation from someone more senior than you. How did you handle it, and what happened?

7.Estimate how many Affirm Pay-Over-Time loans you'd expect to result in a consumer complaint in a given month, and what share of those would likely touch a disclosure issue versus a payment processing issue.

8.Affirm's Adaptive Checkout lets merchants customize how BNPL offers are presented — including the order in which term options appear. How would you think about the fair lending and UDAAP risk in that design?

9.Affirm processes millions of installment loan repayments monthly. If your team's ACH return rate suddenly jumped from 2% to 5% in a single week, how would you approach the analysis and what would you rule out first?

10.You're asked to build the compliance risk framework for Affirm's entry into a buy-now-pay-later product in a market that already has an active CFPB consent order against a direct competitor for deceptive BNPL marketing practices. How do you use that consent order as an input?

11.Affirm is considering launching a 'pay in 2' short-term product with zero interest and no fees. From a compliance standpoint, why might a zero-cost product actually create more regulatory complexity, not less?

12.You're a year into Affirm's compliance program and you're asked to present a single 'top three risks' slide to the board's audit committee. How do you decide what makes the cut, and how do you present risks that are uncertain rather than certain?

13.How do you monitor for Regulation Z compliance on a product like Affirm's Pay-Over-Time loans — what metrics or triggers do you track on a regular basis?

14.Walk me through how you'd build a consumer complaint trending analysis. What data do you pull, how do you categorize it, and what does a 'signal worth escalating' look like versus normal noise?

15.Affirm's Adaptive Checkout personalizes loan terms — rate, term length — at the individual consumer level based on underwriting signals. What BSA/AML or fair lending risks does that kind of real-time decisioning create, and how would you build a control around the most significant one?

16.You're scoping a new compliance risk assessment for the Affirm Card, which touches both the BNPL credit product and a debit card rails. How do you structure the assessment, and how do you decide which regulatory frameworks apply?

17.Affirm is entering a new state and needs to determine whether it requires a money transmitter or consumer lending license — or both. Walk me through how you'd do that analysis and what you'd deliver as output.

18.Your BSA/AML transaction monitoring program flags a 3x spike in suspicious activity reports filed on transactions run through one specific merchant integration in the last 30 days. What's your investigation plan, and when do you involve the regulator?

19.A merchant partner asks you to review their proposed marketing copy that describes Affirm loans as 'interest-free' — but only some of their customers will actually qualify for a 0% APR offer. How do you handle it?

20.During a routine QA review of Affirm's loan servicing communications, you notice that a batch of billing statements sent last month showed the APR rounded differently than the Truth in Lending Act disclosure at origination. The difference is small — about 0.01%. What do you do?

21.Your team's annual risk assessment rated the Affirm Card's debit-to-BNPL conversion flow as 'low risk.' Three months later, a consumer advocacy group publishes a report claiming that feature is trapping consumers in unplanned debt. You haven't changed the risk rating yet. What do you do now?

22.You're in the middle of a compliance review and you discover that a control Affirm has been citing to regulators — specifically, a monthly reconciliation of loan originations — hasn't actually been running for the past two quarters due to an engineering migration. Leadership doesn't know yet. Walk me through what you do in the next 24 hours.

23.Affirm's growth team wants to launch a pre-approved loan offer via push notification targeting consumers who haven't used the app in over 90 days. Marketing says it'll drive re-engagement. You've been asked to sign off on the compliance review. What concerns do you raise and what does your sign-off actually cover?

24.Six months after Affirm launched in a new state, you get a message from the state's DFI asking for documentation of your complaint resolution process. The request is informal — no subpoena, no examination notice — just an email. Meanwhile, you know that one of your team's complaint metrics for that state has been running elevated for three months and nobody has fixed the root cause yet. How do you respond?

25.Tell me about a time you had to get a business team — sales, product, or marketing — to slow down a launch because of a compliance issue they hadn't flagged to you. How did you frame it so it landed?

26.Describe a time you were the only person in the room who understood a compliance or regulatory constraint, and you had to explain it to a group of people making a real-time decision. How did you handle it?

27.You've completed a compliance review and given a product team a clear set of required changes before launch. Three weeks later you learn they shipped anyway and made different, smaller changes than what you specified. How do you respond?

28.Tell me about a time you had to align two internal teams who had contradictory views on what a regulation required — and both thought they were right. How did you get to a single answer?

29.A senior executive asks you to speed up your compliance review timeline for a high-priority product launch — cutting it from four weeks to one. What do you say and how do you say it?

30.You're six months into a role and you realize the compliance team and the data engineering team have fundamentally different definitions of what counts as a 'complaint' in Affirm's systems — and the number your team reports to regulators every quarter doesn't match what's actually in the database. What do you do?