Applying for a mortgage has long produced an unwelcome surprise for some buyers: a burst of calls, texts, emails, and mail from companies they did not contact. One common source was a mortgage trigger lead. A lender's credit inquiry could signal that a consumer was shopping for a residential mortgage, and a consumer reporting agency could use that event to create a list for other companies making prescreened offers. That system changed in 2026. The federal Homebuyers Privacy Protection Act, enacted September 5, 2025, added a new limitation to the Fair Credit Reporting Act. Effective March 4, 2026—180 days after enactment—a consumer reporting agency generally may not use one lender's residential-mortgage credit request as the basis for furnishing a consumer report to another company unless the statutory conditions are met. The change is meaningful, but it does not guarantee that every unsolicited mortgage contact will disappear.
What a mortgage trigger lead was
A trigger lead was not the same thing as the credit report ordered by the lender handling the application. It was a marketing signal derived from a credit inquiry. A competing company could receive information allowing it to make a prescreened firm offer of credit or insurance. The marketer did not necessarily receive the consumer's full credit report, but the timing of the contact could make it seem as though the company was affiliated with the lender, real estate broker, government, or transaction. The Federal Trade Commission has warned that mortgage shoppers may receive prescreened or preapproved offers after applying for a loan. Some mailers and callers may use language or design that resembles a buyer's lender or a government agency. A prompt offer is not proof of affiliation, approval, or better terms.
What the Homebuyers Privacy Protection Act changed
Public Law 119-36 limits what a consumer reporting agency may do when a person requests a consumer report in connection with a residential mortgage loan. Based in whole or in part on that request, the agency may furnish another consumer report only when the transaction is a firm offer of credit or insurance and the recipient satisfies a statutory relationship or authorization condition. The law identifies three principal paths. The other company must have documented authorization from the consumer, have originated or service a current residential mortgage loan for that consumer, or be an insured depository institution or credit union that holds a current account for the consumer. The restriction applies to the consumer reporting agency's use of the mortgage-credit request; it is not a universal ban on every form of mortgage advertising or every source of consumer information.
Why buyers may still receive calls, texts, emails, or mail
The new restriction does not make every post-application contact unlawful. A consumer may have consented to marketing, submitted an inquiry through a comparison site, maintained an account or mortgage relationship covered by the statute, appeared on a list generated from another lawful source, or entered information into a lead form. A company may also be working from older data. And scammers do not become compliant simply because a law changes. That is why the right question is not only, ‘How did you get my number?’ It is also, ‘Who are you, what company do you represent, are you connected to my actual lender or agent, and what written information can I independently verify?’ Do not provide a Social Security number, verification code, banking credential, or payment information in response to an unexpected contact.
Prescreening, application shopping, and approval are different
A prescreened firm offer is a marketing process, not a final loan approval. A consumer still must apply, provide information, meet program requirements, and receive the lender's actual credit decision. Conversely, the law does not prevent a buyer from actively requesting quotes from multiple lenders. Intentional comparison shopping can still be useful when the buyer compares the same loan type, term, points, lender credits, mortgage insurance, estimated cash to close, rate-lock period, and assumptions on the same day. Keep those lanes separate: an unsolicited prescreened offer, a quote requested by the buyer, a preapproval, an underwriting decision, a rate lock, and a commitment to lend are not interchangeable evidence states.
Opting out can reduce prescreened offers, but not every solicitation
The FTC identifies OptOutPrescreen.com and 1-888-567-8688 as the official channels to opt out of prescreened credit and insurance offers. A consumer may request a five-year opt-out electronically or by phone; a permanent opt-out requires completing and returning the signed form generated through the process. The FTC states that requests are processed within five days, although offers based on lists prepared before the request may continue for several weeks. Opting out of prescreened offers is not the same as placing a number on the National Do Not Call Registry, revoking consent previously given to a particular company, blocking a sender, or reporting fraud. No single tool stops every contact. Use the control that matches the source of the solicitation and preserve evidence of suspicious messages.
A practical privacy checklist before a lender pulls credit
Before authorizing a mortgage credit inquiry, confirm the lender's legal company name, the individual loan originator's identity and licensing information, the purpose of the inquiry, and the secure channel for documents. Ask how the company communicates after the inquiry and how to identify its legitimate calls, texts, or emails. If using a website, read whether it is a direct lender, broker, marketplace, or lead generator and review the consent language before submitting a phone number. After the inquiry, treat an unfamiliar contact as independent until verified. Do not rely on caller ID, a logo, knowledge that you recently applied, or a message that creates urgency. Contact the known lender or real estate professional using a number already in your records, not a number supplied by the unexpected caller. Compare written disclosures rather than verbal promises, and report suspected identity theft or fraud through the appropriate official channel.
The useful result is less noise and clearer consent
The 2026 law addresses a long-standing homebuyer privacy concern by sharply limiting a consumer reporting agency's ability to turn a residential-mortgage inquiry into a competing prescreened lead. It does not eliminate legitimate shopping, existing customer relationships, consumer-authorized offers, other marketing sources, or fraud. California buyers should still control where they enter information, understand what they authorize, verify every unexpected contact, and compare actual written loan terms. Privacy protection and informed lender shopping can work together when consent, identity, and evidence remain clear.
Frequently asked questions
Did mortgage trigger leads become illegal in 2026?
The law did not create an absolute ban on every lead or every mortgage solicitation. It restricts a consumer reporting agency from furnishing a consumer report based on a residential-mortgage credit request unless the firm-offer and authorization or existing-relationship conditions in the statute are met.
When did the new federal restriction take effect?
March 4, 2026, which is 180 days after the September 5, 2025 enactment date.
Can my current bank, credit union, mortgage lender, or servicer still contact me?
Potentially. The statute includes specified paths involving a current mortgage originator or servicer and an insured depository institution or credit union holding a current consumer account. The facts and the company's compliance still matter.
Does the law stop me from comparing mortgage lenders?
No. A buyer may still intentionally request competing quotes or applications. Compare written terms on the same assumptions and keep a marketing offer separate from an approval or rate lock.
How do I opt out of prescreened credit and insurance offers?
The FTC directs consumers to OptOutPrescreen.com or 1-888-567-8688. A five-year opt-out can be requested electronically or by phone. A permanent opt-out requires returning a signed form.
Why am I still getting mortgage calls after opting out?
The company may be using a source other than a prescreened credit list, relying on consent given elsewhere, working from a list prepared before the opt-out, or acting unlawfully. Opting out does not stop every form of marketing or fraud.
What should I do with a suspicious mortgage message?
Do not provide personal information or use the contact details in the message. Verify the sender independently with the known lender or professional, preserve the message, block it when appropriate, and report suspected fraud to the relevant agency or platform.
Continue the research
Preapproval Before the Home Search: What Buyers Actually Need to Know ↗
A useful preapproval is a planning tool—connecting income, assets, credit, payment, cash, loan structure, and the property search.
Why Financing Fluency Belongs in Real Estate Representation ↗
The contract and the loan are separate, but they meet at price, appraisal, credits, property eligibility, deadlines, and the buyer’s ability to close.
Before the Search: A California First-Time Buyer Readiness Checklist ↗
A useful home search begins with a documented financial range, a property-risk plan, and clear priorities—not a saved-listing feed.
The Fed Raised Interest Rates. Will Your Mortgage Rate Go Up? ↗
Not automatically. Here’s what a Fed rate hike can mean for your mortgage rate—and what it costs to get it.
Official resources
About the author
Bethany Lopez is a California Real Estate Broker and Mortgage Loan Originator. She is the Broker/Owner of Bethany Lopez Real Estate, DRE #01774923, and a Mortgage Loan Originator with Answer Home Lending, Inc., NMLS #2027014. Brokerage and mortgage services are separate.
How this information is prepared
Bethany Lopez Real Estate distinguishes general education from transaction-specific advice, identifies official sources when relied upon, and corrects material inaccuracies. Read the editorial standards and corrections policy.
Bethany Lopez is a California Real Estate Broker, DRE #01774923, and Mortgage Loan Originator, NMLS #2027014. Brokerage and mortgage services remain separate. Consumer-reporting rules, privacy requirements, marketing practices, opt-out procedures, credit-reporting processes, loan programs, licensing, and enforcement may change and depend on the facts. This article provides general educational information and is not legal, privacy, credit, cybersecurity, regulatory, tax, financial, or lending advice; a commitment to lend; a loan approval; or a guarantee that solicitations will stop. Consumers should verify unexpected contacts independently and consult the appropriate licensed professional, attorney, regulator, consumer reporting agency, or law-enforcement authority for situation-specific guidance. Equal Housing Opportunity.
© 2026 Bethany Lopez Real Estate. All rights reserved.