Court Opinion

ID: 6343041
Source: CourtListenerOpinion
Date Created: 2022-05-23 17:00:54.333133+00
Date Added: 2024-06-11T14:21:25.057891
License: Public Domain

FOR PUBLICATION

  UNITED STATES COURT OF APPEALS
       FOR THE NINTH CIRCUIT

CONSUMER FINANCIAL PROTECTION         Nos. 18-55407
BUREAU,                                    18-55479
              Plaintiff-Appellant/
                 Cross-Appellee,            D.C. No.
                                         2:15-cv-07522-
                v.                         JFW-RAO

CASHCALL, INC.; WS FUNDING,
LLC; DELBERT SERVICES                      OPINION
CORPORATION; J. PAUL REDDAM,
            Defendants-Appellees/
                 Cross-Appellants.

     Appeal from the United States District Court
        for the Central District of California
      John F. Walter, District Judge, Presiding

      Argued and Submitted September 9, 2019
      Submission Withdrawn October 21, 2019
     Argued and Resubmitted September 23, 2021
                Pasadena, California

                 Filed May 23, 2022

     Before: John B. Owens, Ryan D. Nelson, and
            Eric D. Miller, Circuit Judges.

               Opinion by Judge Miller
2                      CFPB V. CASHCALL

                          SUMMARY *

     Consumer Financial Protection Act / Consumer
            Financial Protection Bureau

    The panel affirmed the district court’s judgment finding
CashCall, Inc., its CEO, and several affiliated companies
liable for a deceptive loan scheme; and vacated the district
court’s order imposing a civil penalty of $10.3 million and
declining to order restitution.

    CashCall made unsecured, high-interest loans to
consumers throughout the country, and sought to avoid state
usury and licensing laws by using an entity operating on an
Indian reservation. The entity issued loan agreements that
contained a choice-of-law provision calling for the
application of tribal law.      The Consumer Financial
Protection Bureau brought this action alleging that the
scheme was an “unfair, deceptive, or abusive act or abusive
practice.” 12 U.S.C. § 5536(a)(1)(B). The district court held
that CashCall violated the Consumer Financial Protection
Act (“CFPA”).

    The panel first considered whether the Bureau lacked
authority to bring this action because it was
unconstitutionally structured. The panel held that pursuant
to Collins v. Yellen, 141 S. Ct. 1761 (2021), despite the
unconstitutional limitation on the President’s authority to
remove the Bureau’s Director, the Director’s actions were
valid when they were taken. Both the complaint and the
notice of appeal were filed while the Bureau was headed by
    *
      This summary constitutes no part of the opinion of the court. It
has been prepared by court staff for the convenience of the reader.
                     CFPB V. CASHCALL                          3

a lawfully appointed Director, Richard Cordray. The panel
declined to consider CashCall’s new theory, offered months
after oral argument, that the Bureau’s structure violated the
Appropriations Clause of the Constitution.

    The panel next considered CashCall’s argument that the
loans were valid because they were subject to tribal law, not
state law. The loans were valid under the law of the
Cheyenne River Sioux Tribe. CashCall did not dispute that
the loans were invalid under the laws of the States in which
the customers resided. The panel applied federal common
law choice-of-law principles. The panel held that the Tribe
had no substantial relationship to the transactions, and
because there was no other reasonable basis for the parties’
choice of tribal law, the district court correctly declined to
give effect to the choice-of-law provision in the loan
agreements. For the States at issue in this case, application
of the state law meant the loans were invalid.

    CashCall also argued that CFPA liability for a deceptive
practice could not be predicated on a violation of state law.
The panel held that CashCall’s argument found no support
in the text of the CFPA. CashCall led borrowers to believe
that they had an obligation to pay, when in fact under their
States’ laws they did not. That is the deceptive act pursued
by the Bureau, and it fell within the prohibition of the statute.

    The panel next considered the Bureau’s argument that
the district court should have imposed a tier-two civil
penalty, which requires a finding that CashCall acted
recklessly, rather than a tier-one penalty, which does not.
The district court determined that CashCall did not act
recklessly. The panel held that this was not clearly
erroneous – but only as it applied to the early stages of
CashCall’s scheme. From September 2013, CashCall’s
4                   CFPB V. CASHCALL

conduct was reckless. The panel concluded that from
September 2013, the danger that CashCall’s conduct
violated the CFPA was so obvious that CashCall must have
been aware of it. The district court’s contrary conclusion
was clearly erroneous. The panel vacated the civil penalty
and remanded with instructions that the district court
reassess it, with the penalty for the period beginning in
September 2013 being based on tier two.

    CashCall’s CEO Paul Reddam argued that the district
court erred in finding him personally liable. The panel held
that Reddam’s liability turned on whether he had the
requisite knowledge or acted recklessly. The panel rejected
Reddam’s argument that he lacked the necessary mental
state because he relied on the advice of counsel. The panel
held that continuing to collect loans after September 2013
was reckless, and the district court did not err in holding
Reddam personally liable.

    The Bureau argued that the district court erred in denying
restitution. Agreeing with the Bureau that the district court’s
decision rested on a legal error, the panel vacated the order
denying restitution and remanded for further proceedings.
The panel left it to the district court to determine whether
restitution was appropriate in this case, and if so, in what
amount. The panel noted that any restitution award must be
consistent with the CFPA, and whether consumers received
the benefit of their bargain was not relevant.
                   CFPB V. CASHCALL                     5

                       COUNSEL

Kristin Bateman (argued) and Kevin E. Friedl, Senior
Counsel; Steven Y. Bressler, Assistant General Counsel;
John R. Coleman, Deputy General Counsel; Mary McLeod,
General Counsel; Bureau of Consumer Financial Protection,
Washington, D.C.; for Plaintiff-Appellant/Cross-Appellee.

Reuben Camper Cahn (argued), Reuben C. Cahn, and
Gregory M. Sergi, Keller/Anderle LLP, Irvine, California;
Allen L. Lanstra Jr. (argued), Caroline W. Van Ness, and
Kasonni M. Scales, Skadden Arps Slate Meagher & Flom
LLP, Los Angeles, California; Thomas J. Nolan, Pearson
Simon Warshaw LLP, Sherman Oaks, California; for
Defendants-Appellees/Cross-Appellants.

Robert M. Loeb and Analea J. Patterson, Orrick Herrington
& Sutcliffe LLP, Washington, D.C.; Christopher J. Cariello
and Ned Hirschfeld, Orrick Herrington & Sutcliffe LLP,
New York, New York; for Amicus Curiae Innovative
Lending Platform.
6                   CFPB V. CASHCALL

                         OPINION

MILLER, Circuit Judge:

    CashCall, Inc., made unsecured, high-interest loans to
consumers throughout the country. After attracting
unwanted attention from regulators, it sought to avoid state
usury and licensing laws by using an entity operating on an
Indian reservation. CashCall paid for that entity to issue
loans and then purchased the loans days later. The loan
agreements contained a choice-of-law provision calling for
the application of tribal law, so they would not be subject to
the law of borrowers’ home States, which would have
prohibited the loans. CashCall sought advice from a scholar
of federal Indian law, who opined that the scheme “should
work but likely won’t.”

    His concern proved well founded. The Consumer
Financial Protection Bureau brought this action against
CashCall, its CEO, and several affiliated companies,
alleging that the scheme was an “unfair, deceptive, or
abusive act or practice,” 12 U.S.C. § 5536(a)(1)(B), because
CashCall demanded payment from consumers under the
pretense that the loans were legally enforceable obligations,
when in fact they were invalid under state law. The district
court found the defendants liable and imposed a civil penalty
of $10.3 million, but the court declined to order restitution.

    The Bureau appeals, arguing that the civil penalty should
have been larger and that the district court should have
ordered restitution. CashCall cross-appeals the finding of
liability. We conclude that the district court correctly found
liability but erred in assessing the penalty and in evaluating
whether to grant restitution. We therefore affirm in part,
vacate in part, and remand for further proceedings.
                    CFPB V. CASHCALL                        7

                              I

     CashCall, Inc., is a California corporation that makes
high-interest consumer loans. Until 2006, California was its
primary market. CashCall sought to expand beyond
California, but it was concerned that complying with usury
laws in other States would make its operations unprofitable.
It decided to pay two federally insured state-chartered banks
to make loans, which it then purchased and serviced. Under
federal law, those banks were exempt from out-of-state
usury limits. See 12 U.S.C. § 1831d(a) (permitting a
federally insured state-chartered bank to charge interest “at
the rate allowed by the laws of the State . . . where the bank
is located”).

    The arrangement drew regulatory scrutiny. In 2009,
Maryland authorities ordered CashCall to pay a civil penalty
of $5.6 million for what they characterized as a “rent-a-
bank” scheme, in which “a payday lender partners with a
federally insured bank to take advantage of the bank’s
exemption from state usury caps.” CashCall, Inc. v.
Maryland Comm’r of Fin. Regul., 139 A.3d 990, 995–96 &
n.12 (Md. 2016). West Virginia also imposed a large civil
penalty. CashCall, Inc. v. Morrisey, No. 12-1274, 2014 WL
2404300, at *1 (W. Va. May 30, 2014). Under pressure from
the Federal Deposit Insurance Corporation, the state-
chartered banks ceased their partnerships with CashCall.
CashCall’s last purchase of a loan from a bank was in
November 2008.

    CashCall then decided to pursue a similar arrangement
with a lender operating under the laws of an Indian tribe. In
2009, a member of the Cheyenne River Sioux Tribe formed
Western Sky Financial, LLC, as a South Dakota limited
liability company with its offices located on the Cheyenne
River Sioux Reservation. CashCall and Western Sky entered
8                   CFPB V. CASHCALL

into an assignment agreement and a service agreement.
Under the assignment agreement, CashCall used a
subsidiary, WS Funding, LLC, to set up an account with
funds that Western Sky used to make loans. CashCall agreed
to purchase all of the loans that Western Sky made; it did so
just days after the loans were made, before the borrowers had
made any payments. All economic benefits and risks then
passed to CashCall, which also agreed to indemnify Western
Sky for any expenses associated with legal or regulatory
action. CashCall serviced the loans, together with Delbert
Services Corporation, a company that CashCall created to
collect on defaulted loans.

    Western Sky offered loans of up to $10,000 at interest
rates ranging from 89 to 169 percent. None of the borrowers
resided on the Tribe’s reservation. The borrowers did not
apply for loans on tribal land; instead, they applied online or
by telephone. At first, the calls were handled by CashCall
loan agents in California, but eventually those duties
transitioned to Western Sky loan agents on tribal land.
Borrowers signed the loan agreement electronically on
Western Sky’s website, which was hosted by CashCall’s
servers in California. Borrowers made all payments from
their home States.

    Borrowers signed a loan agreement with Western Sky
that identified Western Sky as the lender. The agreement
contained a choice-of-law provision calling for the
application of tribal law:

       This Agreement is governed by the Indian
       Commerce Provision of the Constitution of
       the United States of America and the laws of
       the Cheyenne River Sioux Tribe. . . . Neither
       this Agreement nor Lender is subject to the
                    CFPB V. CASHCALL                        9

       laws of any state of the United States of
       America.

     By early 2011, several state authorities had initiated
enforcement actions against CashCall or Western Sky. In
September 2013, CashCall discontinued its purchase of
Western Sky loans; without CashCall, Western Sky ceased
its operations.

    In December 2013, the Bureau brought this enforcement
action against CashCall, WS Funding, and Delbert Services
(collectively, “CashCall”). The complaint also named as a
defendant J. Paul Reddam, CashCall’s founder, CEO, and
sole owner.

    The Bureau alleged a violation of the Consumer
Financial Protection Act (CFPA), which makes it unlawful
for any “covered person”—defined as anyone who “engages
in offering or providing a consumer financial product or
service”—or any service provider “to engage in any unfair,
deceptive, or abusive act or practice.” 12 U.S.C.
§§ 5481(6)(A), 5536(a)(1)(B). The complaint focused on
16 States (later narrowed to 13 States) in which CashCall,
using Western Sky, made loans to consumers that were
unlawful either because they had excessively high interest
rates or because CashCall lacked a license to operate in the
State. According to the complaint, CashCall engaged in
deceptive acts by “represent[ing], expressly or impliedly,
that the entire loan balance was owed . . . and that consumers
were legally obligated to pay the full amount collected or
demanded,” when in fact “the loans, or some parts thereof,
were void or not subject to a repayment obligation” under
applicable state law.

   The parties filed cross-motions for summary judgment,
and the district court granted summary judgment to the
10                  CFPB V. CASHCALL

Bureau on liability. The court observed that the Bureau’s
theory of liability “rests entirely on its argument that the
Court should disregard the tribal choice-of-law provision in
the loan agreements, and apply the law of the borrowers’
home states.” The court agreed that state law governed.
Although the loan agreements called for the application of
tribal law, the court found that provision to be unenforceable
because CashCall, not Western Sky, was the true lender and
real party in interest to the loan agreements, so the Tribe did
not have a substantial relationship to the parties or the
transactions. The court also concluded that applying tribal
law would violate the fundamental public policy of the
States involved. After determining that the choice-of-law
provision was unenforceable, the district court then
concluded that the borrowers’ home States had the most
significant relationships to the parties and the transactions,
so it applied the law of those States. And under state law, the
court determined that “the Western Sky loans are void or
uncollectible.”

    The district court concluded that CashCall “engaged in a
deceptive practice . . . [b]y servicing and collecting on
Western Sky loans, . . . [which] created the ‘net impression’
that the loans were enforceable and that borrowers were
obligated to repay the loans in accordance with the terms of
their loan agreements.” That impression, the court explained,
was “patently false.” CashCall objected that the Bureau’s
enforcement action improperly federalized state-law
violations by using them as the basis for identifying a
violation of the CFPA. The district court rejected that
argument, reasoning that “while Congress did not intend to
turn every violation of state law into a violation of the CFPA,
that does not mean that a violation of a state law can never
be a violation of the CFPA.”
                     CFPB V. CASHCALL                        11

    The district court also determined that Reddam was
individually liable for CashCall’s violation of the CFPA. It
found that he had “participated directly in and had the
authority to control CashCall’s . . . deceptive acts.” In
addition, it concluded that the undisputed facts demonstrated
that “Reddam had the requisite factual knowledge to subject
him to individual liability” and that, “[a]t the very least,” he
“was recklessly indifferent to the wrongdoing.”

    The district court then held a bench trial to determine the
appropriate remedy. The CFPA provides for three tiers of
civil penalties depending on a defendant’s level of
culpability. 12 U.S.C. § 5565(c)(2). A first-tier penalty
requires no showing of scienter; a second-tier penalty applies
to “any person that recklessly engages in a violation” of the
CFPA; and a third-tier penalty applies to “any person that
knowingly violates” the CFPA. Id. § 5565(c)(2)(A)–(C).
The district court concluded that CashCall’s violation was
neither knowing nor reckless, so it imposed a first-tier civil
penalty, which amounted to approximately $10.3 million.

    The Bureau also sought a restitution award of
approximately $235.6 million, reflecting the total interest
and fees on the void loans. The district court declined to
order restitution because, in its view, the Bureau “did not
show that Defendants intended to defraud consumers or that
consumers did not receive the benefit of their bargain from
the Western Sky Loan Program.” The court observed that the
Bureau “did not present testimony from a single consumer
that suggests that a borrower would not have entered into a
loan transaction if they had known that CashCall—not
Western Sky—was the true lender.” The court also
determined that even if restitution were warranted, the
Bureau had not shown that the amount of restitution it sought
was appropriate. Noting that the requested amount did not
12                  CFPB V. CASHCALL

account for expenses, the court concluded that it “would
create a windfall for borrowers, including those who may not
have made any payments on their loans.”

                              II

    Before we consider whether CashCall violated the CFPA
or what remedy would be appropriate for any violation, we
must address a more fundamental issue. CashCall argues that
the Bureau lacked authority to bring this action because the
Bureau is unconstitutionally structured. By statute, the
Bureau is headed by a single Director, who is appointed by
the President with the advice and consent of the Senate, and
who serves a five-year term during which the President may
remove him only for “inefficiency, neglect of duty, or
malfeasance in office.” 12 U.S.C. § 5491(b)–(c). In Seila
Law LLC v. CFPB, 140 S. Ct. 2183, 2197 (2020), the
Supreme Court held “that the [Bureau’s] leadership by a
single individual removable only for inefficiency, neglect, or
malfeasance violates the separation of powers.”

    Anticipating that decision, CashCall argued in the
district court and in its brief to us that the Bureau was
unconstitutionally structured. By the time we first heard oral
argument, this circuit had considered and rejected that theory
in CFPB v. Seila Law LLC, 923 F.3d 680 (9th Cir. 2019),
vacated, 140 S. Ct. 2183 (2020). But shortly after we heard
oral argument, the Supreme Court granted certiorari in Seila
Law, so we withdrew submission pending the Court’s
decision.

    Seila Law involved a challenge to a civil investigative
demand issued by the Bureau. 140 S. Ct. at 2194. After
determining that the restrictions on the removal of the
Director were unconstitutional, the Supreme Court severed
the removal provision and remanded the case to this court to
                    CFPB V. CASHCALL                       13

determine whether the demand had been validly ratified “by
an Acting Director accountable to the President” and to
determine whether any such ratification would be “legally
sufficient to cure the constitutional defect in the original
demand.” Id. at 2208 (plurality opinion); id. at 2224 (Kagan,
J., concurring in the judgment with respect to severability
and dissenting in part).

    Following the Supreme Court’s decision, then-Director
Kathleen Kraninger expressly ratified the civil investigative
demand. CFPB v. Seila Law LLC, 997 F.3d 837, 846 (9th
Cir. 2021). On remand, this court concluded that because
“[a] Director well aware that she may be removed by the
President at will [had] ratified her predecessors’ earlier
decisions,” any constitutional injury that Seila Law suffered
had been remedied. Id.

    Here, as in Seila Law, Director Kraninger issued a
statement formally ratifying the Bureau’s “decisions to file
the original and amended complaints against Defendants,
and to file the notice of appeal to the U.S. Court of Appeals
for the Ninth Circuit.” We called for supplemental briefing
on the effectiveness of the ratification, and we set this case
for reargument. The Bureau argues that, just as in Seila Law,
the ratifications were effective and cured the constitutional
violation. But CashCall argues that Director Kraninger’s
ratification of the appeal was ineffective because it came
after the deadline for filing a notice of appeal had expired.
See 28 U.S.C. § 2107; FEC v. NRA Political Victory Fund,
513 U.S. 88, 98 (1994). Similarly, CashCall argues that her
ratification of the action was ineffective because it came
after the statute of limitations had expired. See 12 U.S.C.
§ 5564(g)(1).

   We find it unnecessary to consider ratification because a
more recent decision of the Supreme Court has made clear
14                  CFPB V. CASHCALL

that despite the unconstitutional limitation on the President’s
authority to remove the Bureau’s Director, the Director’s
actions were valid when they were taken. In Collins v.
Yellen, 141 S. Ct. 1761 (2021), the Court considered a
statutory restriction on the President’s authority to remove
the Director of the Federal Housing Finance Agency. The
restriction paralleled that applicable to the Bureau’s
Director, and the Court held that it was unconstitutional
based on “[a] straightforward application of our reasoning in
Seila Law.” Id. at 1784. But the Court went on to hold that
the unconstitutionality of the removal restriction did not
invalidate any actions taken by the Director: “All the officers
who headed the [agency] during the time in question were
properly appointed,” and even though “the statute
unconstitutionally limited the President’s authority to
remove the confirmed Directors, there was no constitutional
defect in the statutorily prescribed method of appointment to
that office.” Id. at 1787 (emphasis omitted). The Court
explained that Seila Law’s holding does not mean that
actions taken by an officer unconstitutionally insulated from
removal “are void ab initio and must be undone.” Id. at 1788
n.24. It saw “no basis for concluding that any head of the
[agency] lacked the authority to carry out the functions of
the office.” Id. at 1788.

    The same is true here. CashCall does not dispute that
both the complaint and the notice of appeal were filed while
the Bureau was headed by a lawfully appointed Director,
Richard Cordray. See CFPB v. Gordon, 819 F.3d 1179,
1185, 1190–91 (9th Cir. 2016). As in Collins, “the
unlawfulness of the removal provision does not strip the
Director of the power to undertake the other responsibilities
of his office.” 141 S. Ct. at 1788 n.23.
                      CFPB V. CASHCALL                          15

    That is not to say that the unlawfulness of a removal
provision can never be a reason to regard an agency’s action
as void. See Collins, 141 S. Ct. at 1788. But at a minimum,
the “party challenging an agency’s past actions must . . .
show how the unconstitutional removal provision actually
harmed the party.” Kaufmann v. Kijakazi, No. 21-35344,
2022 WL 1233238, at *5 (9th Cir. Apr. 27, 2022); see also
Collins, 141 S. Ct. at 1788–89. For example, a party might
demonstrate harm by showing that the challenged action was
taken by a Director whom the President wished to remove
but could not because of the statute. Kaufmann, 2022 WL
1233238, at *5. No one suggests that anything of the sort
happened here. Under Collins, “there is no reason to regard
any of the actions taken by the [Bureau] in relation to the
[enforcement action] as void.” 141 S. Ct. at 1787.

    Here, because Director Cordray exercised power that he
lawfully possessed, “there is no basis for concluding that
[he] lacked the authority to carry out the functions of [his]
office.” Collins, 141 S. Ct. at 1788. With or without Director
Kraninger’s ratification, this action was validly initiated, and
the notice of appeal was validly filed.

     Finally, offering a new theory months after oral
argument—and more than eight years after this litigation
first began—CashCall asks us to hold that the Bureau’s
structure violates the Appropriations Clause of the
Constitution. See CFPB v. All Am. Check Cashing, Inc., No.
18-60302, 2022 WL 1302488, at *2 (5th Cir. May 2, 2022)
(Jones, J., concurring). CashCall forfeited that argument
twice over by failing to present it to the district court or in its
briefing before us on appeal. See Hawkins v. Kroger Co.,
906 F.3d 763 (9th Cir. 2018). CashCall suggests that the
argument somehow affects our subject-matter jurisdiction,
but that erroneously conflates “the [Bureau’s] authority to
16                   CFPB V. CASHCALL

execute the laws (Article II) with the United States’ interest
in the case (Article III).” Gordon, 819 F.3d at 1189. Because
CashCall elected to wait until long after oral argument to
raise this theory, we decline to consider it.

                              III

    The district court found that CashCall had engaged in a
deceptive practice by collecting payments on loans that were
invalid under state law. CashCall challenges that conclusion
in two ways. First, it argues that the loans were valid because
they were subject to tribal law, not state law. Second, it
argues that CFPA liability for a deceptive practice cannot be
predicated on a violation of state law. Because the district
court resolved the issue of liability on summary judgment,
we review de novo. Stephens v. Union Pac. R.R. Co.,
935 F.3d 852, 854 (9th Cir. 2019). We find neither of
CashCall’s arguments persuasive.

                               A

    Although the loans were valid under the law of the
Cheyenne River Sioux Tribe, CashCall does not dispute that
they were invalid under the laws of the States in which the
customers resided, whether because the interest rates were
usurious or because neither CashCall nor Western Sky was
licensed in those States. The validity of the loans thus
depends on which law applies.

     The district court determined that the choice-of-law
question is governed by federal common law because the
court’s jurisdiction was based on a federal question.
CashCall does not challenge that holding on appeal, nor does
it suggest that the application of state or tribal choice-of-law
rules would change the result. In the absence of any specific
guidance in the CFPA, we apply federal common law. See
                    CFPB V. CASHCALL                        17

Huynh v. Chase Manhattan Bank, 465 F.3d 992, 997 (9th
Cir. 2006) (explaining that when federal jurisdiction is not
based on diversity of citizenship, “federal common law
choice-of-law rules apply”); Harris v. Polskie Linie
Lotnicze, 820 F.2d 1000, 1003 (9th Cir. 1987). We have
looked to “the approach outlined in the Restatement
(Second) of Conflict of Laws” as a description of the federal
common law rule. Huynh, 465 F.3d at 997.

    All of the loan agreements contained a choice-of-law
provision specifying the law of the Cheyenne River Sioux
Tribe. When parties contract for the application of a
particular jurisdiction’s law, their choice normally controls.
Restatement (Second) of Conflict of Laws § 187 (1971). But
where the “issue is one which the parties could not have
resolved by an explicit provision in their agreement,”
including, as here, because of substantive limits on their
ability to contract, federal common law recognizes two
circumstances in which the parties’ choice does not control:
(1) if “the chosen [jurisdiction] has no substantial
relationship to the parties or the transaction and there is no
other reasonable basis for the parties’ choice,” or (2) if
“application of the law of the chosen [jurisdiction] would be
contrary to a fundamental policy of a state which has a
materially greater interest than the chosen [jurisdiction]” and
which “would be the state of the applicable law in the
absence of an effective choice of law by the parties.” Flores
v. American Seafoods Co., 335 F.3d 904, 917 (9th Cir. 2003)
(quoting Restatement (Second) of Conflict of Laws
§ 187(2)). The district court determined that both exceptions
were satisfied. We agree with the district court that the first
exception is satisfied, so we do not consider whether
applying tribal law would be contrary to fundamental state
policies.
18                  CFPB V. CASHCALL

    The district court correctly determined that the Cheyenne
River Sioux Tribe “has no substantial relationship to the
parties” to the loans. Restatement (Second) of Conflict of
Laws § 187(2)(a); see Industrial Indem. Ins. Co. v. United
States, 757 F.2d 982, 987–88 (9th Cir. 1985). To be sure,
Western Sky was nominally a party to the loans, and a
jurisdiction ordinarily has a substantial relationship to a
transaction if one of the parties has its principal place of
business there, as Western Sky did. Restatement (Second) of
Conflict of Laws § 187 cmt. f; see PAE Gov’t Servs., Inc. v.
MPRI, Inc., 514 F.3d 856, 860 (9th Cir. 2007); Ruiz v.
Affinity Logistics Corp., 667 F.3d 1318, 1323 (9th Cir.
2012). But assessing whether a jurisdiction has a “substantial
relationship” to a transaction requires looking at the
substance of the transaction, not merely its form. Cf.
Abramski v. United States, 573 U.S. 169, 184–85 (2014).
After all, the reason the parties’ choice of law is not always
controlling is that there are some issues “which the parties
could not have resolved by an explicit provision.”
Restatement (Second) of Conflict of Laws § 187(2). Parties
cannot circumvent substantive limits on their ability to
contract simply by applying the law of a jurisdiction that
does not have those limits. Id. cmt. d (“Permitting the parties
in the usual case to choose the applicable law is not, of
course, tantamount to giving them complete freedom to
contract as they will.”). Similarly, parties cannot circumvent
limits on their ability to specify the governing law simply by
structuring their agreement so that it has some nominal—but
entirely artificial—relationship to the desired jurisdiction.
Cf. Industrial Indem. Ins. Co., 757 F.2d at 987–88. We
therefore follow the “standard practice, evident in many
legal spheres . . . , of ignoring artifice when identifying the
parties to a transaction.” Abramski, 573 U.S. at 184–85.
                    CFPB V. CASHCALL                       19

    In substance, all of the loan transactions at issue here
were conducted by CashCall, not Western Sky. As the
district court observed, “the entire monetary burden and risk
of the loan program was placed on CashCall.” Western Sky
was formed for the purpose of making loans for CashCall,
and it amounted to little more than a shell for CashCall’s
operations. Through a subsidiary, CashCall provided the
money with which Western Sky made loans. CashCall
agreed to purchase the loans that Western Sky made, and it
did in fact purchase all of Western Sky’s loans, just a few
days after they were made and before the borrowers had
made any payments. From then on, it bore all economic risk
and benefits of the transactions. It also agreed to indemnify
Western Sky for any legal or regulatory expenses. And even
in the act of originating the loans, Western Sky’s
involvement was limited: At least at the beginning of the
program, CashCall hosted Western Sky’s website and phone
number, and CashCall employees handled communications
with customers. In sum, Western Sky’s involvement in the
transactions was economically nonexistent and had no
purpose other than to create the appearance that the
transactions had a relationship to the Tribe.

    Nor is there any other basis for finding a relationship
between the Tribe and the transactions. Western Sky was
organized under South Dakota law, not tribal law, and it was
neither owned nor operated by the Tribe. And the borrowers
applied online or over the phone, never set foot on tribal
land, and made payments from their home States, not the
reservation. The only reason for the parties’ choice of tribal
law was to further CashCall’s scheme to avoid state usury
and licensing laws.

    Because the Tribe had no substantial relationship to the
transactions, and because there is no other reasonable basis
20                  CFPB V. CASHCALL

for the parties’ choice of tribal law, the district court
correctly declined to give effect to the choice-of-law
provision in the loan agreements. Instead, the court applied
the law of the jurisdiction with “the most significant
relationship to the transaction and the parties,” which it
found to be the borrowers’ home States. Restatement
(Second) of Conflict of Laws § 188(1)–(2). And for the
States at issue in this case, application of state law means
that the loans were invalid.

    CashCall does not dispute the district court’s
determination that the borrowers’ home States had the most
significant relationship to the transactions. Instead, it
invokes the rule that if a loan is valid when made, it does not
become usurious upon transfer to an assignee in a different
jurisdiction. See Nichols v. Fearson, 32 U.S. (7 Pet.) 103,
109 (1833). But these loans were not valid when made
because there was never any basis for applying the law of the
Tribe in the first place, and they were invalid under the
applicable laws of the borrower’s home States. CashCall
also objects that the district court phrased its conclusion in
terms of a determination that CashCall was the “true lender,”
a concept that CashCall says “would disrupt lending markets
and undermine the secondary loan market.” To the extent
that CashCall invokes cases involving banks, we note that
banks present different considerations because federal law
preempts certain state restrictions on the interest rates
charged by banks. See, e.g., 12 U.S.C. § 1831d (permitting
state-chartered banks to charge the interest rate allowed in
their home State). We do not consider how the result here
might differ if Western Sky had been a bank. And we need
not employ the concept of a “true lender,” let alone set out a
general test for identifying a “true lender.” To answer the
choice-of-law question, it suffices to examine the economic
reality of these loans. As we have explained, doing so reveals
                    CFPB V. CASHCALL                        21

that the Tribe had no substantial relationship to the
transactions.

                              B

    CashCall does not dispute that if the loans were governed
by state law, they were void because (depending on the
State) the interest rates were usurious or CashCall and
Western Sky lacked required licenses. Nor does it dispute
that it demanded payment from consumers under the
pretense that the consumers had a valid obligation to pay.
Instead, it argues that a finding of a deceptive practice under
the CFPA is impermissible when the deception involves
state law.

    CashCall’s argument finds no support in the text of the
CFPA. The statute grants the Bureau broad authority to
“enforce Federal consumer financial law consistently for the
purpose of ensuring that all consumers have access to
markets for consumer financial products and services and
that markets for consumer financial products and services
are fair, transparent, and competitive.” 12 U.S.C. § 5511(a).
It makes it unlawful for a covered person to “to engage in
any unfair, deceptive, or abusive act or practice.” Id.
§ 5536(a)(1)(B). The statute does not define “unfair,”
“deceptive,” or “abusive,” so we give those terms their
ordinary meaning. Wall v. Kholi, 562 U.S. 545, 551 (2011).
A “deceptive” practice is one “tending to deceive,” that is,
“to cause to believe the false”—a meaning that easily
encompasses leading a consumer to believe that an invalid
debt is actually a legally enforceable obligation. Webster’s
Third New International Dictionary 584–85 (2002)
(defining “deceive” and “deceptive”).

   In this case, of course, the reason that the debts were
invalid happens to involve state law. But we see no reason
22                   CFPB V. CASHCALL

why that should make the statute inapplicable. In this
respect, the CFPA is similar to the Fair Debt Collection
Practices Act (FDCPA), which prohibits using “unfair or
unconscionable means . . . to collect any debt.” 15 U.S.C.
§ 1692f. In accord with the uniform view of other courts of
appeals, we have held that a debt collector violates the
FDCPA when it attempts to collect a debt that state law has
made invalid. See Kaiser v. Cascade Cap., LLC, 989 F.3d
1127, 1133–34 (9th Cir. 2021); see also Madden v. Midland
Funding, LLC, 786 F.3d 246, 254 (2d Cir. 2015); Currier v.
First Resol. Inv. Corp., 762 F.3d 529, 534–35 (6th Cir.
2014); Johnson v. Riddle, 305 F.3d 1107, 1121 (10th Cir.
2002). Likewise, other circuits have held that a debt collector
violates the FDCPA’s prohibition on threatening “to take
any action that cannot legally be taken,” 15 U.S.C.
§ 1692e(5), by threatening an action that is prohibited under
state law. See, e.g., LeBlanc v. Unifund CCR Partners,
601 F.3d 1185, 1192 (11th Cir. 2010) (per curiam); Picht v.
Jon R. Hawks, Ltd., 236 F.3d 446, 451 (8th Cir. 2001).

      The Sixth Circuit’s analysis in Currier is particularly
instructive. There, the plaintiff alleged that a debt collector
had violated the FDCPA by filing a lien against her home
when the lien was invalid under state law. 762 F.3d at 532.
The debt collector argued that “a violation of state law is not
a per se violation of the FDCPA.” Id. at 536. The court
agreed with that proposition but explained that it “does not
mean that a violation of state law can never also be a
violation of the FDCPA.” Id. at 537. “The proper question
. . . is whether the plaintiff alleged an action that falls within
the broad range of conduct prohibited by” federal law, and
in answering that question, “[t]he legality of the action taken
under state law may be relevant.” Id.
                    CFPB V. CASHCALL                       23

    CashCall asserts that the FDCPA is different from the
CFPA. Citing provisions of the FDCPA that refer to the
“legal status” of a loan and to collection activities that are
“permitted by law,” 15 U.S.C. §§ 1692e(2)(A), 1692f(1),
CashCall says that that statute, unlike the CFPA, “explicitly
incorporates state law.” The claim is puzzling. To explicitly
incorporate state law, Congress would need, at a minimum,
to explicitly reference state law, which the cited provisions
in the FDCPA do not do. Instead, courts have read the
general language of those statutory provisions to refer to
state law by accounting for the background principle that, in
our federal system, state law defines property and
contractual rights. See Richards v. PAR, Inc., 954 F.3d 965,
969–70 (7th Cir. 2020). That principle is equally applicable
to the provision of the CPFA at issue here.

    CashCall points to other provisions of the CFPA that
mention state law, and it argues that they suggest, by
negative implication, that a deceptive-practice claim cannot
be based on a deception about state law. We find no such
implication in the statute, which creates a co-regulatory
regime between the States and the federal government. It
directs the Bureau to cooperate with state regulators, and
vice-versa. See 12 U.S.C. §§ 5495; 5552(b)(1)(A). Its
preemption clause does not modify or limit state law, except
to that extent that state law is inconsistent with the CFPA.
Id. § 5551(a)(1). Nothing in those provisions suggests that
deceptions involving state law are somehow exempt from
the prohibition on deceptive practices.

    And although the CFPA prohibits establishment of a
federal usury rate, 12 U.S.C. § 5517(o), the Bureau has not
established a federal usury limit here. Each state’s usury and
licensing laws still apply, and lenders must fairly and
transparently represent to consumers the requirements of
24                  CFPB V. CASHCALL

applicable state law. See id. § 5511(a). That is not
federalizing state usury law, as CashCall would have it; it is
simply applying the CFPA’s prohibition on deceptive acts.

    CashCall argues that applying the CFPA here would
raise constitutional concerns because it would “federalize an
area of state regulation.” In the cases on which CashCall
relies, the Supreme Court applied a presumption that
Congress does not lightly interfere with State authority over
“punishment of local criminal activity.” Bond v. United
States, 572 U.S. 844, 858 (2014); see also Cleveland v.
United States, 531 U.S. 12, 25 (2000); Jones v. United
States, 529 U.S. 848, 858 (2000). But the CFPA is not a
criminal statute. More importantly, CashCall’s conduct was
hardly “local”—it was a multi-jurisdictional lending
scheme. That interstate commercial conduct is at the heart of
Congress’s regulatory authority under the Commerce
Clause, and applying the CFPA to cover it raises no
substantial constitutional questions. See United States v.
Lopez, 514 U.S. 549, 558 (1995).

    CashCall worries that the Board will convert a “dizzying
array” of state-law violations into CFPA violations, offering
examples of state laws requiring “that contracts be bilingual,
in 12-point font, or notarized.” But we have already held that
a CFPA violation requires that a “representation, omission,
or practice” be not only “likely to mislead consumers acting
reasonably under the circumstances” but also “material.”
Gordon, 819 F.3d at 1192–93 & n.7 (quoting FTC v. Pantron
I Corp., 33 F.3d 1088, 1095 (9th Cir. 1994)); Currier,
762 F.3d at 534 (emphasizing that the conduct at issue “was
not a mere technical violation of Kentucky law”). CashCall’s
examples would not necessarily qualify, but CashCall’s
actual conduct clearly does. CashCall led borrowers to
believe that they had an obligation to pay, when in fact under
                    CFPB V. CASHCALL                        25

their States’ laws they did not. That is the deceptive act
pursued by the Bureau, and it falls within the prohibition of
the statute.

                              IV

    We next consider the Bureau’s argument that the district
court should have imposed a tier-two civil penalty, which
requires a finding that CashCall acted recklessly, rather than
a tier-one penalty, which does not. The district court’s
assessment of whether a party acted recklessly is a factual
finding that we review for clear error. United States v. Luna,
21 F.3d 874, 884 (9th Cir. 1994).

    In general, “[a] person acts recklessly . . . when he
consciously disregards a substantial and unjustifiable risk
attached to his conduct, in gross deviation from accepted
standards.” Borden v. United States, 141 S. Ct. 1817, 1824
(2021) (quotation marks and citations omitted). We have
described reckless conduct “as a highly unreasonable
omission, involving not merely simple, or even inexcusable
negligence, but an extreme departure from the standards of
ordinary care, and which presents a danger . . . that is either
known to the [actor] or is so obvious that the actor must have
been aware of it.” Howard v. Everex Sys., Inc., 228 F.3d
1057, 1063 (9th Cir. 2000) (quoting Hollinger v. Titan Cap.
Corp., 914 F.2d 1564, 1569 (9th Cir. 1990) (en banc)).

    The district court determined that CashCall did not act
recklessly because it “sought out highly regarded regulatory
counsel to assist [it] with structuring the Western Sky Loan
Program”; counsel opined that the program was lawful; and
“there was no case law that clearly established that the Tribal
Lending Model was not a lawful model.” Although that
conclusion is debatable, we conclude that it is not clearly
erroneous—but only as it applies to the early stages of
26                  CFPB V. CASHCALL

CashCall’s scheme. From September 2013, CashCall’s
conduct was reckless.

    From the beginning, CashCall understood that to expand
outside of California and make a profit, it would need to
avoid state licensing and usury laws. To that end, it sought
to work with state-chartered banks. But that approach
received significant regulatory scrutiny from authorities in
West Virginia and Maryland, leading to enforcement actions
and large civil judgments. CashCall then pursued a tribal
lending program that was nearly identical in structure to
CashCall’s state-chartered banking program that had already
landed it in legal trouble. And over time, CashCall faced
escalating regulatory scrutiny of the tribal program. In
January 2011, Colorado sued Western Sky; in February,
Maryland brought an administrative action against Western
Sky; and in August, Washington brought an enforcement
action against CashCall based on its servicing of Western
Sky loans. Of the 13 States at issue here, seven ultimately
brought enforcement actions against CashCall. In September
2013, CashCall stopped buying loans from Western Sky,
which then shut down.

    None of this should have been a surprise: Counsel had
told CashCall that its plan faced “significant” risk, and one
expert advised that the plan “should work but likely won’t”
because the “lower courts will shun our model and . . . if we
reach the Supreme Court, . . . we will lose.” Nevertheless,
the district court was correct that CashCall had “secured
multiple formal and informal opinions” from legal counsel
stating “that the structure of the Western Sky Loan Program
was viable.” Given the uncertainty reflected in counsel’s
advice, the district court might have concluded that
CashCall’s conduct was reckless even at that point. But clear
error is a deferential standard, and we are unable to say that
                     CFPB V. CASHCALL                          27

the district court’s contrary determination was clearly
erroneous. See In re United States Dep’t of Educ., 25 F.4th
692, 698 (9th Cir. 2022).

    By September 2013, however, things had changed. In
August, counsel recommended that the program cease
because “the regulatory and litigation environments have
risen from dangerous to near extinction.” That opinion
prompted CashCall to shut down the program and stop
buying new loans. But despite the intense regulatory
scrutiny, and despite shuttering the tribal lending program
for new loans, CashCall continued to collect on existing
loans. CashCall modified loans in States in which it had
already reached settlements with regulators. But otherwise,
even after this litigation began, CashCall continued
collecting fees and interest until it lost at summary judgment
in August 2016.

     We conclude that from September 2013 on, the danger
that CashCall’s conduct violated the statute was “so obvious
that [CashCall] must have been aware of it.” Howard,
228 F.3d at 1063 (quoting Hollinger, 914 F.2d at 1569). The
district court’s contrary conclusion was clearly erroneous.
We therefore vacate the civil penalty and remand with
instructions that the district court reassess it, with the penalty
for the period beginning in September 2013 being based on
tier two.

                                V

    Reddam argues that the district court erred in finding him
personally liable. We have held that an individual is liable
for a corporation’s violation of the CFPA if “(1) he
participated directly in the deceptive acts or had the authority
to control them and (2) he had knowledge of the
misrepresentations, was recklessly indifferent to the truth or
28                   CFPB V. CASHCALL

falsity of the misrepresentation, or was aware of a high
probability of fraud along with an intentional avoidance of
the truth.” Gordon, 819 F.3d at 1193 (quoting FTC v.
Stefanchick, 559 F.3d 924, 931 (9th Cir. 2009)). Reddam
does not dispute that the first component of that test was
satisfied because, as CEO, he had authority to control
CashCall’s acts. Thus, Reddam’s liability turns on whether
he had the requisite knowledge or acted recklessly.

    Reddam argues that he lacked the necessary mental state
because he relied on the advice of counsel. But as the district
court correctly observed, we have held that “reliance on
advice of counsel [is] not a valid defense on the question of
knowledge required for individual liability.” FTC v. Grant
Connect, LLC, 763 F.3d 1094, 1102 (9th Cir. 2014)
(quotation marks and citation omitted) (alteration in
original). In any event, even taking account of counsel’s
preliminary advice, continuing to collect loans after
September 2013 was reckless for the reasons we have
already explained. The district court did not err in holding
Reddam personally liable.

                              VI

    The Bureau argues that the district court erred in denying
restitution. We review the district court’s order on restitution
for abuse of discretion, Gordon, 819 F.3d at 1187, and a
district court necessarily abuses its discretion if it makes an
error of law, Koon v. United States, 518 U.S. 81, 100 (1996).
We agree with the Bureau that the district court’s decision
rested on a legal error, so we vacate the order denying
restitution and remand for further proceedings. We
emphasize at the outset that we do not hold that restitution is
necessarily appropriate in this case, or if so, in what amount,
but leave those questions to be resolved by the district court.
                     CFPB V. CASHCALL                        29

     The CFPA permits the Bureau to seek “any appropriate
legal or equitable relief with respect to a violation of Federal
consumer financial law,” which “may include, without
limitation . . . restitution; [and] disgorgement or
compensation for unjust enrichment.” 12 U.S.C.
§ 5565(a)(1), (2)(C), (2)(D). Restitution may be either legal
or equitable. “‘[R]estitution is a legal remedy when ordered
in a case at law and an equitable remedy . . . when ordered
in an equity case,’ and whether it is legal or equitable
depends on ‘the basis for [the plaintiff’s] claim’ and the
nature of the underlying remedies sought.” Great-W. Life &
Annuity Ins. Co. v. Knudson, 534 U.S. 204, 213 (2002)
(second and third alterations in original) (quoting Reich v.
Continental Cas. Co., 33 F.3d 754, 756 (7th Cir. 1994)).
Thus, restitution is legal when the plaintiff cannot “assert
title or right to possession of particular property” but is
nevertheless “able to show just grounds for recovering
money to pay for some benefit the defendant had received
from him.” Id. (citation omitted). “In contrast,” restitution is
equitable “where money or property identified as belonging
in good conscience to the plaintiff could clearly be traced to
particular funds or property in the defendant’s possession.”
Id.

    The Bureau argues that while equitable restitution may
be discretionary, the district court lacked discretion to deny
legal restitution. See Curtis v. Loether, 415 U.S. 189, 197
(1974). CashCall responds that the Bureau waived this
theory by arguing below that restitution was discretionary.
CashCall also relies on the Supreme Court’s recent decision
in Liu v. SEC, 140 S. Ct. 1936 (2020), which CashCall says
limited the scope of equitable restitution by establishing
“that equitable remedies—whether labeled disgorgement,
restitution, accounting, or otherwise—must be limited to a
30                   CFPB V. CASHCALL

wrongdoer’s ‘net profits,’” not the larger award sought by
the Bureau.

    We do not decide whether the Bureau has waived a claim
to legal restitution or how, if at all, Liu might limit equitable
restitution. The district court may consider those issues on
remand; we confine ourselves to the issues it has already
addressed. The district court relied on its conclusion that the
Bureau did not show that CashCall “intended to defraud
consumers or that consumers did not receive the benefit of
their bargain.” First, noting that CashCall had relied on the
advice of counsel, it saw “no evidence that [CashCall]
decided to embark on an unlawful scheme to structure the
Western Sky Loan Program to defraud borrowers.” Second,
it found that “consumers received the benefit of their
bargain—i.e., the loan proceeds.” Neither of those
considerations was an appropriate basis for denying
restitution.

    First, while a district court may award restitution when
“appropriate,” 12 U.S.C. § 5565(a)(1), its decision must be
made consistent with the statute. See Pantron I, 33 F.3d at
1103; see also Albemarle Paper Co. v. Moody, 422 U.S. 405,
416 (1975) (holding that a court deciding whether to award
backpay under Title VII “must exercise this power in light
of the large objectives of the Act” (quotation marks and
citation omitted)). One of the statute’s express objectives is
to ensure that “consumers are protected from unfair,
deceptive, or abusive acts and practices.” 12 U.S.C.
§ 5511(b)(2). Another is to promote transparency in the
markets for consumer financial products and services. Id.
§ 5511(b)(5). The statute authorizes the Bureau to initiate
civil litigation and seek remedies to achieve those objectives.
See id. §§ 5531, 5564(a). Restitution is one of those
remedies, and it serves to ensure that consumers are made
                    CFPB V. CASHCALL                       31

whole when they have suffered a violation of the statute. See
id. § 5565(a)(2).

    Significantly, although scienter is required for an award
of heightened civil penalties under the CFPA, 12 U.S.C.
§ 5565(c)(2)(B)–(C), it is not required for an award of
restitution. Id. § 5565(a)(2). In giving dispositive weight to
CashCall’s lack of bad faith, the district court employed an
approach that would make the restitutionary remedy
“punishment for moral turpitude, rather than a
compensation” for consumers’ injuries. See Albermarle
Paper, 422 U.S. at 422. That approach would frustrate
Congress’s objective of compensating consumers who
suffered harm on account of CashCall’s deceptive practices.

    Second, whether consumers received the benefit of their
bargain is not relevant. The Bureau did not allege that the
consumers were denied the loan proceeds or that they
entered into the loan agreements against their will. Rather,
the Bureau alleged that CashCall harmed consumers by
deceiving them about a major premise underlying their
bargain: that the loan agreements were legally enforceable.
The district court misunderstood the nature of CashCall’s
deceptive practice when it treated consumers’ receipt of the
benefits of that bargain as a reason to deny restitution.

    The district court also determined that the Bureau did not
establish the amount of restitution that would be appropriate.
Specifically, the court stated that the “proposed restitution
amount [should be] netted to account for expenses.” That
statement is inconsistent with our precedent, which
establishes a two-step burden-shifting framework for
calculating restitution. See Gordon, 819 F.3d at 1195. At
step one, the Bureau “bears the burden of proving that the
amount it seeks in restitution reasonably approximates the
defendant’s unjust gains.” Id. (citation omitted). If the
32                   CFPB V. CASHCALL

Bureau makes that threshold showing, then “the burden
shifts to the defendant to demonstrate that the net revenues
figure overstates the defendant’s unjust gains.” Id.

    Applying that framework, we have held that
“[r]estitution may be measured by the ‘full amount lost by
consumers rather than limiting damages to a defendant’s
profits.’” Gordon, 819 F.3d at 1195 (quoting Stefanchik,
559 F.3d at 931). In other words, “[a] district court may use
a defendant’s net revenues as a basis for measuring unjust
gains.” Id. Net revenues are “typically the amount
consumers paid for the product or service minus refunds and
chargebacks.” FTC v. Commerce Planet, Inc., 815 F.3d 593,
603 (9th Cir. 2016), abrogated on other grounds by AMG
Cap. Mgt., LLC v. FTC, 141 S. Ct. 1341 (2021). An award
of net revenues differs from an award of net profits, which
allows a defendant to “deduct legitimate expenses.” Liu,
140 S. Ct. at 1950. We have held that “there are instances in
which a defendant does not ultimately reap any profits from
his wrongful conduct, and others where even though the
defendant obtained some profit, the ‘loss suffered by the
victim is greater than the unjust benefit received by the
defendant.’” CFTC v. Crombie, 914 F.3d 1208, 1216 (9th
Cir. 2019) (quoting FTC v. Figgie Int’l, Inc., 994 F.2d 595,
606 (9th Cir. 1993) (per curiam)); see also Stefanchik,
559 F.3d at 931.

    Perhaps net revenues would overstate CashCall’s unjust
gains, but if so, that was CashCall’s burden to prove. On
remand, if the district court determines that an award of
restitution is appropriate, it should take these principles into
account in calculating the award.

  AFFIRMED in part, VACATED in part, and
REMANDED.