You applied for a mortgage. You authorized the credit pull. Within hours, your phone started ringing with calls from lenders you’d never contacted, texts from companies you’d never heard of, and emails pitching rates you never asked about.
Most people assumed their broker sold them out. The real culprit was sitting inside the credit bureaus.
That practice is now federally banned. Here’s what changed, what it means for you, and how to protect yourself if the calls haven’t stopped yet.
What Is a Mortgage Trigger Lead?
When you apply for a home loan, your lender pulls your credit report. That’s standard. What most borrowers don’t realize is what happened next: Equifax, Experian, and TransUnion would record that inquiry and sell it, including your name, your contact information, and your loan details, to other lenders and third-party marketing companies who paid for access.
That product is called a mortgage trigger lead. The credit bureaus built an entire revenue stream around it. The moment your application hit the system, competing lenders could buy your data and start calling.
Borrowers reported more than 100 unsolicited contacts in the first 24 hours of applying. Calls during work. Texts at night. Emails from lenders they had never heard of, pitching rates that may or may not have been real. For most people, it turned the mortgage process from stressful into overwhelming.
What Does the Homebuyers Privacy Protection Act Do?
The Homebuyers Privacy Protection Act (H.R. 2808) is now federal law. President Trump signed it on September 5, 2025, and it took effect March 5, 2026, six months later to give the industry time to adjust.
The law amends the Fair Credit Reporting Act (FCRA) and specifically prohibits consumer reporting agencies from selling or furnishing mortgage trigger leads unless very narrow conditions are met:
- The creditor requesting the lead already has an existing financial relationship with you, such as your current mortgage servicer or the bank where you hold a deposit account
- You have explicitly opted in to receiving prescreened mortgage solicitations
- Any permissible trigger lead must be used for a genuine firm offer of credit, not just general marketing outreach
The legislation was bipartisan from the start. Sens. Jack Reed (D-RI) and Bill Hagerty (R-TN) led it in the Senate. Reps. John Rose (R-TN) and Ritchie Torres (D-NY) carried it in the House. It passed both chambers with broad support.
The law applies in all 50 states. Several states had already enacted their own trigger lead restrictions, including Rhode Island, Connecticut, Texas, Kansas, and others. The federal law now sets a single national standard.
Did My Mortgage Broker Sell My Information?
No. Your broker did not sell your information.
Here’s how it actually worked: your broker or lender pulled your credit. The credit bureau received that inquiry and recorded it in their database. Then the bureau sold access to that inquiry data to whoever was willing to pay. Your broker never had the ability to sell that data. It was the bureaus who monetized it.
This distinction matters, because a lot of borrowers walked away from the mortgage process mistrustful of the professional who was actually trying to help them. The flood of calls came from competitors who bought their way in through the back door of the credit reporting system. Your broker was just as powerless to stop it as you were.
Why Mortgage Brokers Actually Won This Fight
The National Association of Mortgage Brokers (NAMB) pushed hard for this legislation alongside a bipartisan coalition in Congress. Their argument was simple: trigger leads were hurting consumers and undermining the broker model.
The broker model runs on relationships. One person who knows your situation, shops multiple lenders on your behalf, and calls you back when something changes. That’s how it’s supposed to work. Whether you’re looking at a conventional loan, an FHA loan, or something more specialized, a good broker was already doing what the law now requires of everyone.
Direct lenders and large banks had a clear advantage under the old system. They had the marketing budgets and the automated systems to act on trigger leads within minutes. A borrower would apply, and before they could blink, competing offers were already in their inbox. A broker working one-on-one with a client had no way to compete with that volume.
The trigger leads ban changes that dynamic. Finding the right loan matters more than who can flood your phone first.
What Should I Do If I’m Still Getting Unsolicited Mortgage Calls?
The law is in effect, but some pre-existing data will still be working its way through marketing pipelines during the transition. If you’re still receiving unsolicited mortgage calls or texts after March 5, 2026:
- File a complaint with the CFPB at consumerfinance.gov/complaint
- Opt out of prescreened offers at OptOutPrescreen.com, which tells the credit bureaus to stop sharing your information for marketing purposes
- Register on the Do Not Call Registry at donotcall.gov
- Report potential violations to the FTC. Businesses that continue using trigger leads outside the narrow permitted exceptions face civil enforcement and penalties
The FCRA has real enforcement mechanisms. Violations can result in civil penalties and consumer damages. The law isn’t a suggestion.
Need Help with Your California Mortgage?
Whether you're buying, refinancing, or tapping equity, we've got 40 years of experience finding the right loan for your situation.
Frequently Asked Questions
What is a mortgage trigger lead?
A mortgage trigger lead is generated when you apply for a home loan and a lender pulls your credit. Credit bureaus like Equifax, Experian, and TransUnion would then sell that inquiry data, including your contact information, to competing lenders and third parties, often within hours of your application.
Who was selling my mortgage application information?
The credit bureaus were selling your data, not your mortgage broker. Equifax, Experian, and TransUnion recorded the inquiry when a lender pulled your credit, then sold it as a trigger lead to competitors willing to pay for it. Your broker had no part in that practice.
What does the Homebuyers Privacy Protection Act do?
The Homebuyers Privacy Protection Act (H.R. 2808) amends the Fair Credit Reporting Act to prohibit credit bureaus from selling mortgage trigger leads. As of March 5, 2026, a trigger lead can only be generated if the requesting creditor already has an existing financial relationship with the consumer, like a current mortgage or bank account, or if the consumer explicitly opted in to receiving solicitations.
When did the trigger leads ban take effect?
The law took effect March 5, 2026. President Trump signed the Homebuyers Privacy Protection Act on September 5, 2025, and the effective date was set six months later to give the industry time to comply.
Does this law apply in California?
Yes. This is a federal law that applies in all 50 states. California homebuyers are fully protected under the new rule. Several other states including Rhode Island, Connecticut, Texas, and Kansas had already enacted their own restrictions, and the federal law now establishes one national standard.
Can lenders still contact me after I apply for a mortgage?
Lenders you actually applied with can still contact you; that's a legitimate business relationship. What's banned is credit bureaus selling your inquiry data to lenders you never contacted. The narrow exceptions are creditors who already have an existing relationship with you, like your current bank or mortgage servicer, or consumers who explicitly opted into prescreened offers.
I'm still getting unsolicited mortgage calls. What do I do?
Some pre-existing data may still be in marketing pipelines during the transition period. File a complaint at consumerfinance.gov/complaint with the CFPB, opt out of prescreened offers at OptOutPrescreen.com, and register on the Do Not Call Registry at donotcall.gov. Violations of the new law can also be reported to the FTC.
Does working with a mortgage broker protect my privacy better than going directly to a bank?
The trigger lead issue wasn't caused by brokers or banks; it was caused by credit bureaus selling inquiry data regardless of who pulled the credit. That said, working with a broker means one credit pull, one point of contact, and one person managing your mortgage search across multiple lenders. You're not shopping around and triggering multiple inquiries yourself.
Ready to start the process without the noise? We’ll find the loan that fits your specific situation, and your information stays secure.