A Victory for Homebuyers and Brokers: The Trigger Leads Ban Takes Effect March 5, 2026
For years, mortgage professionals and the clients they serve have dealt with one of the industry's most frustrating and damaging practices: trigger leads. The moment a prospective homebuyer applied for a mortgage and authorized a credit pull, their personal financial information was sold by credit reporting agencies to competing lenders and third-party businesses — often within hours. The result was a flood of unsolicited calls, texts, and emails that left consumers confused, overwhelmed, and mistrustful of the very process they had just entered. That practice is now federally banned. Effective March 5, 2026, the Homebuyers Privacy Protection Act (H.R. 2808) is the law of the land — and NAMB was at the table every step of the way.
Signed into law by President Trump on September 5, 2025, the Homebuyers Privacy Protection Act amends the Fair Credit Reporting Act (FCRA) to prohibit consumer reporting agencies from furnishing mortgage trigger leads except in narrowly defined circumstances. Under the new law, a trigger lead may only be generated if the requesting creditor already has a qualifying existing relationship with the consumer — such as an active mortgage loan or a deposit account — or if the consumer has affirmatively opted in to receiving such solicitations. Any permissible trigger lead must also be used for a bona fide firm offer of credit or insurance, not simply as a marketing hook.
The bipartisan legislation was co-authored in the Senate by Sens. Jack Reed (D-RI) and Bill Hagerty (R-TN) and led in the House by Reps. John Rose (R-TN) and Ritchie Torres (D-NY), passing both chambers with overwhelming support. NAMB proudly stood alongside the coalition of industry and consumer groups that championed this reform, with then NAMB President Jim Nabors noting that it is not unusual for borrowers to receive more than 100 misleading contacts within the first 24 hours of applying for a mortgage. With the March 5 effective date now here, mortgage brokers are well-positioned to benefit — the relationship-first, borrower-centric model that defines the broker channel is exactly what this law was designed to protect and promote.
Set Expectations Upfront
Before you pull credit, let clients know that as of March 5, 2026, the law has changed. They are no longer at risk of being inundated with calls and texts from lenders they never contacted. This builds immediate trust and positions you as an informed advocate.
Explain what the law does — and doesn't — cover.
The ban prohibits credit bureaus from selling their data to third parties who have no existing relationship with them. However, clients should understand that lenders or servicers they already do business with — such as their current mortgage broker — may still be permitted to reach out. The law targets cold, unsolicited outreach from companies with no prior connection.
Remind them they still have tools.
Even with the new protections in place, clients can take additional steps to safeguard their privacy. Visiting OptOutPrescreen.com or calling 1-888-567-8688 opts them out of prescreened credit and insurance offers. Registering at DoNotCall.gov adds another layer of protection. A temporary credit freeze with all three bureaus is also an option for clients who want maximum security during the application process — just remind them to lift it before you pull credit.
Use it as a differentiator.
The trigger leads ban validates what independent mortgage brokers have always offered: a transparent, client-first process. Remind your borrowers that you work for them and that this law brings the rest of the industry closer to the standard brokers have always held.
Frequently Asked Questions
What is a trigger lead?
A trigger lead is generated when a consumer applies for a mortgage and a credit inquiry is made. Credit reporting agencies historically sold that inquiry data — along with the consumer's contact information — to other lenders and third parties, often in real time. Those companies would then use the data to solicit the borrower with competing offers, frequently without the consumer's knowledge or consent.
What does the Homebuyers Privacy Protection Act prohibit?
The law amends the Fair Credit Reporting Act to prohibit consumer reporting agencies from selling or furnishing trigger leads to creditors unless specific conditions are met: the creditor must have a qualifying existing financial relationship with the consumer (such as a current mortgage or deposit account), or the consumer must have explicitly opted in to receiving solicitations. Any permissible trigger lead must be used toward a firm offer of credit or insurance — not general marketing outreach.
When does the ban take effect?
The law took effect March 5, 2026, six months after President Trump signed the Homebuyers Privacy Protection Act on September 5, 2025.
Does the ban apply nationwide?
Yes. The federal law applies in all 50 states. Several states — including Rhode Island, Connecticut, Kansas, Kentucky, Maine, Texas, Utah, Wisconsin, Idaho, and Arkansas — had already enacted their own trigger lead restrictions. The federal law now establishes a national standard.
Can a lender ever contact a borrower using a trigger lead after March 5?
Only in very limited circumstances. If the creditor already has an established financial relationship with the consumer — such as the consumer's current bank or mortgage servicer — outreach may still be permissible. A consumer who affirmatively opts in to receiving prescreened offers also removes that restriction for themselves. Outside of those narrow exceptions, the sale and use of trigger leads is prohibited.
What happens if a lender violates the law?
The Homebuyers Privacy Protection Act amends the FCRA, which carries both civil and regulatory enforcement mechanisms. Violations can result in significant penalties, and consumers may have the right to seek damages. Brokers who become aware of potential violations can report them to the Consumer Financial Protection Bureau (CFPB) or the Federal Trade Commission (FTC).
Does this affect how mortgage brokers generate leads?
Legitimate lead generation through marketing, referrals, and consumer-initiated inquiries is unaffected. The law specifically targets the practice of credit bureaus selling inquiry data without consumer consent — not how brokers build and maintain their client pipelines.
What should I tell clients who are still receiving unsolicited calls?
Remind them that the transition takes time and some pre-existing data or non-compliant activity may still generate outreach in the short term. Encourage them to report unwanted contacts to the CFPB at consumerfinance.gov/complaint and to use OptOutPrescreen.com and the Do Not Call Registry as added protection.
