Mortgage Trigger Leads: Current Rules and Consumer Options

What is a mortgage trigger lead, and how did the law change?

When you apply for a mortgage or a lender pulls your credit, consumer reporting agencies have historically been able to sell a version of that activity to other lenders, who then solicit you with competing offers. These are the 'trigger leads' that produce the flood of calls, texts, and mail after a mortgage inquiry.

The Homebuyers Privacy Protection Act changed the default. Before the law, trigger leads were generally permitted under the Fair Credit Reporting Act's prescreen exception, with consumers able to opt out. Under the new law, a consumer reporting agency may generally furnish a mortgage trigger lead only when the recipient has an existing relationship with the consumer or the consumer has affirmatively opted in. This is a meaningful shift from opt-out to opt-in for mortgage trigger leads.

What are the effective dates and exceptions?

The Homebuyers Privacy Protection Act passed the House and Senate in 2025, was signed into law on September 5, 2025, and took effect about 180 days after enactment, on or around March 2026. The law includes specific exceptions, including the existing-relationship and affirmative-opt-in pathways, and its implementation continues to be clarified by regulators.

The CFPB had proposed a separate rule on data broker practices, but that proposed rule was formally withdrawn in May 2025. The statutory change in the Homebuyers Privacy Protection Act is the operative federal law on mortgage trigger leads. Confirm current effective dates and implementation details with the official statutory text and the CFPB, because guidance continues to develop.

What can you lawfully do to reduce unwanted solicitations?

• For non-mortgage prescreened offers, opt out through 1-888-5-OPTOUT or optoutprescreen.com, which offers a five-year or permanent opt-out.
• Register on the National Do Not Call Registry to reduce related marketing calls.
• Confirm current options with the official sources, because the trigger-lead framework changed in 2026.
• Never share a one-time code, your full account number, or payment details with an unverified caller.

These are practical steps, not legal advice and not a guarantee that you will stop receiving every solicitation. The law restricts how consumer reporting agencies furnish trigger leads; it does not end all mortgage marketing, and some solicitations remain lawful.

How do you protect yourself from a scam?

Legitimate lenders do not pressure you for immediate payment, one-time codes, or wire transfers over the phone. If a caller claims to be your lender or a partner, hang up and call the number on your official statement or the lender's verified website. Report suspected fraud to the Federal Trade Commission and your state attorney general, and if you believe your personal information was misused, contact the relevant consumer reporting agency. None of these steps guarantees a particular outcome, but they are the right places to start.