New Federal Law Protects Mortgage Borrowers from Trigger Leads
What the Homebuyers Privacy Protection Act Means for Homebuyers
As of March 5, 2026, a new federal law called the Homebuyers Privacy Protection Act is now in effect. The law was passed by Congress to protect consumers who apply for a mortgage from being bombarded with unsolicited calls and competing loan offers.
For many homebuyers, this has been a frustrating part of the mortgage process. You apply for a loan with one lender, and suddenly multiple other lenders start calling or texting you — sometimes within minutes.
This new law is designed to stop that.
What Is a Mortgage Trigger Lead?
A trigger lead occurs when a consumer applies for a mortgage and their credit is pulled. Credit bureaus historically sold that inquiry information — along with the consumer’s contact details — to other lenders.
Those companies could then contact the borrower with competing mortgage offers, often without the borrower realizing their data had been sold.
In many cases, borrowers assumed their original lender had shared their information. In reality, it came from the credit inquiry itself.
What the Homebuyers Privacy Protection Act Prohibits
The new law amends the Fair Credit Reporting Act (FCRA)and restricts how credit bureaus can sell mortgage inquiry data.
Under the new rule, credit reporting agencies cannot sell trigger leadsunless one of two conditions exists:
The lender already has an existing financial relationshipwith the consumer (for example, their current bank or mortgage servicer), or
The consumer has explicitly opted into receive prescreened offers.
Even when allowed, the lead must be used for a firm offer of credit or insurance, not general marketing or solicitation.
When the Trigger Lead Ban Took Effect
The law was signed by President Trump on September 5, 2025, and took effect March 5, 2026.
From that date forward, the sale and use of mortgage trigger leads is severely restricted nationwide.
Does the Law Apply Across the United States?
Yes. The Homebuyers Privacy Protection Act applies in all 50 states.
Several states had already passed their own trigger lead restrictions before the federal law, including:
Texas
Utah
Wisconsin
Idaho
Arkansas
Kansas
Kentucky
Maine
Rhode Island
Connecticut
The new federal law now establishes a national standard for mortgage consumer privacy.
Can Lenders Still Contact Borrowers After a Credit Pull?
Only in limited situations.
A lender may still contact a borrower if:
They already have a current financial relationship with the consumer, such as a bank account or mortgage servicing relationship, or
The borrower has actively opted in to receiving prescreened offers.
Outside of those exceptions, using mortgage credit inquiries to solicit borrowers is now prohibited.
What Happens If a Company Violates the Law?
Because the law amends the Fair Credit Reporting Act, violations can carry civil penalties and regulatory enforcement.
Consumers who believe their information was used improperly may also have the right to pursue damages.
Mortgage professionals who suspect violations can report them to:
Consumer Financial Protection Bureau (CFPB)
Federal Trade Commission (FTC)
Does This Affect Legitimate Mortgage Lead Generation?
No.
The law does not affect traditional mortgage marketing such as:
Referrals
Consumer inquiries
Advertising
Existing client relationships
The law specifically targets the practice of credit bureaus selling consumer credit inquiry data without consent.
What Borrowers Should Do If They Still Receive Unsolicited Calls
Because the law is new, there may still be a short transition period while the industry adjusts.
If you receive unwanted mortgage solicitations, you can:
File a complaint with the CFPB at consumerfinance.gov/complaint
Register at OptOutPrescreen.com to stop prescreened credit offers
Add your number to the National Do Not Call Registry
These tools can provide additional layers of protection.
The Bottom Line
The Homebuyers Privacy Protection Actis a major step toward protecting mortgage applicants from aggressive solicitation and protecting consumer data privacy.
For borrowers, it means applying for a mortgage should no longer trigger a flood of unexpected phone calls from competing lenders.
For the mortgage industry, it creates a clear national standard for responsible use of consumer credit information.
If you have questions about the mortgage process or what happens when your credit is pulled for a home loan, feel free to reach out. I’m always happy to explain how it works.
Brian Wiesner – NMLS #276531
21st Century Lending
[email protected]
909-792-
All loans subject to approval. Equal Housing Lender.
