
The Tuesday morning in June 2026 that Marcus applied for a mortgage on a $415,000 house, his phone started buzzing before lunch. By dinner he'd fielded a dozen calls from lenders he'd never heard of, two texts promising a "better rate," and a voicemail from someone who claimed to be "following up on your application." He hadn't applied anywhere but his own credit union. He just didn't know yet that the moment his lender pulled his credit, his name went up for sale.
That practice has a name: trigger leads. And as of this spring, it's mostly illegal.
If you're buying or refinancing a home this year, this is one of the few pieces of consumer-finance news that actually makes your life quieter. Let me walk you through what happened, what it does and doesn't cover, and the ten-minute cleanup that stops the rest of the noise.
What a trigger lead actually is
When you apply for a mortgage, your loan officer pulls your credit report. That inquiry gets logged at the three big credit bureaus, and here's the part almost nobody realizes: the bureaus were allowed to package that inquiry, along with your name, phone number, and address, and sell it as a "lead" to other lenders within hours.
Those buyers knew exactly what you were doing. They knew you were mid-application, shopping for hundreds of thousands of dollars in credit, and emotionally invested in closing. So they pounced.
It was legal because of an old carve-out in the Fair Credit Reporting Act that let credit bureaus share your file for "firm offers of credit," even ones you never asked for. The idea, back when the rule was written, was that a little competition might help you. In practice it turned every mortgage application into an auction for your attention.
How bad did it get? Pretty bad. According to Jim Nabors, president of the National Association of Mortgage Brokers, it wasn't unusual for a borrower to receive more than 100 misleading contacts in the first 24 hours after applying. A hundred. Some of those callers even implied they were calling on behalf of your actual lender, which is where annoyance tips over into genuine confusion about who you're supposed to trust with your closing.
Related Reading
What changed on March 5, 2026
Congress finally closed the loophole. The Homebuyers Privacy Protection Act was signed into law on September 5, 2025, and it took effect March 5, 2026. It amends the Fair Credit Reporting Act so the bureaus can no longer sell your mortgage-inquiry data to just anyone.
This was years in the making. The Mortgage Bankers Association and NAMB had been pushing for it for the better part of a decade, and both trade groups applauded final passage. When the lenders themselves are begging to stop a marketing tactic, you know it had gotten out of hand.
The new rule doesn't ban every follow-up call. It creates a short list of who's still allowed to contact you after a mortgage inquiry, and everyone else is shut out.
The narrow exceptions
A credit bureau can still release your trigger-lead data only if the offer is a genuine firm offer of credit and the company asking for it fits one of these buckets:
You gave explicit permission. If you opted in and told a lender it's fine to receive your information, they can still reach you. This is consent you actively grant, not a pre-checked box buried in a form.
They already hold your business. Your current mortgage originator, your current loan servicer, and any bank or credit union where you already have an account can still contact you. So if your own credit union wants to offer you something, that door stays open. That's the relationship you chose.
Everyone else, the random call centers that bought your name in bulk, no longer qualifies. The buffet is closed.
The gap nobody mentions: it's mortgages only
Here's the catch that keeps this from being a total privacy fix, and it's worth reading twice.
The Homebuyers Privacy Protection Act covers mortgage inquiries. It does not cover auto loans, personal loans, credit cards, or student loans. If you go finance a car next month, the old trigger-lead machinery is still perfectly legal, and your phone can light up the same way it used to.
So the law solves one specific, painful problem. It doesn't hand you blanket protection across your whole financial life. A lot of the coverage I've seen frames this as "the end of financial spam," and that's just not accurate. It's the end of mortgage trigger leads. Your car deal is still fair game.
That distinction matters because it changes what you should do next. The law handles the mortgage side automatically. The rest is on you, and it takes about ten minutes.
What to do this week
Even with the ban in place, there's a broader layer of prescreened junk, the preapproved credit card and insurance offers, that the mortgage law doesn't touch. Closing those off is the same set of tools that protects you when you shop for that car loan. Do these now, before your next big application.
Opt out of prescreened offers. The Federal Trade Commission's Consumer Advice site points to one official tool: OptOutPrescreen.com, or 1-888-5-OPT-OUT (1-888-567-8688). The three credit bureaus run it jointly. You can opt out for five years online or by phone, or make it permanent by mailing back a signed form. You'll enter your name, address, date of birth, and Social Security number, which feels invasive but is how they match your file. Requests are processed within five days, though stray offers already in the pipeline can trickle in for a few weeks.
Register with the Do Not Call list. Add your cell and landline at DoNotCall.gov. It won't stop a determined scammer, but it gives you legal footing and cuts the legitimate telemarketing volume.
Tell your loan officer you don't consent to sharing. Since one exception is you granting permission, be clear at the start that you're not opting in to anything. A good lender will confirm they don't sell or share your information. If they get squirrelly about it, that tells you something.
Screen unknown numbers hard for the next few weeks. If someone calls claiming to be "with your lender," hang up and call the number on your actual loan paperwork. Real trigger-lead abuse is fading, but scammers love a homebuyer mid-transaction because the dollar amounts are enormous and the pressure is real. Never confirm your loan details or move money based on an inbound call.
Related Reading
One quick reality check on the mortgage side: if you applied before March 5 and are still getting hammered, some of that is leftover data already sold under the old rules. It fades. And if a caller is spoofing your lender's name, that's fraud, not a trigger lead, so treat it accordingly and report it.
Why this is a quiet win worth understanding
Most consumer-finance headlines this year have been about things getting more expensive or more complicated. This one goes the other way. It removes a genuine hazard, not just an annoyance.
The confusion those calls created had real stakes. When you're 21 days from closing and five strangers are telling you your rate is wrong and theirs is better, some people panicked, switched lenders late in the process, and blew up their own timelines. The complaint volume backs up how widespread the frustration was: the Consumer Financial Protection Bureau logged roughly 1.3 million consumer complaints in 2023, and more than 80% of them dealt with credit or consumer-reporting issues, the same bucket trigger-lead grievances fall into.
Cleaning that up protects your peace of mind and your ability to make a clear-headed decision on the biggest purchase most of us ever make.
Related Reading
Bottom Line
The mortgage trigger-lead ban did the hard part for you automatically. Your job is to close the remaining gaps this week:
- Opt out of prescreened offers at OptOutPrescreen.com or 1-888-5-OPT-OUT. Choose the five-year option now, and mail the permanent form if you want it gone for good. This is what protects you on auto and personal loans, which the new law leaves untouched.
- Add every phone number to DoNotCall.gov. Two minutes, and it strengthens your position against unwanted marketing calls.
- Tell your lender in writing that you don't consent to having your information shared, and verify any "we're calling about your loan" contact against the number on your real paperwork before you say a word about your file.
Do those three things and the next time you apply for a mortgage, your phone stays quiet, and the only lender in your ear is the one you actually chose.
Get Smarter With Your Money
Join 10,000+ readers getting weekly tips on budgeting, investing, and building wealth — no spam, just actionable advice.
Free forever. Unsubscribe anytime.