Mortgage lead follow-up after the trigger lead limits

Since early March 2026, a borrower who applies for a mortgage no longer sets off a wave of unsolicited offers from other lenders. The Homebuyers Privacy Protection Act limits trigger leads, so your follow-up after an application, and with past clients, now decides more of your pipeline than buying lists does. This playbook covers what changed, the rules that still apply, and a follow-up plan a loan officer team can run.

What the trigger lead law changed

A trigger lead was a list sold by a credit bureau after a borrower's credit was pulled for a mortgage. Other lenders bought it and called, texted and mailed the borrower within hours. Public Law 119-36, the Homebuyers Privacy Protection Act, amended the Fair Credit Reporting Act to stop that in most cases.

A credit bureau may now furnish such a report based on a mortgage inquiry only when the transaction is a firm offer of credit, and the buyer of the report either has the consumer's authorization, originated or services the consumer's current mortgage, or is a bank or credit union holding a current account for that consumer. The law was approved on September 5, 2025 and took effect 180 days later, in early March 2026.

The rules that still apply to every follow-up

The law narrowed one source of leads. It did not loosen anything else.

• NMLS identification. Regulation Z requires the loan originator organization's name and NMLSR ID, and the individual loan originator's name and ID, on the credit application, the Loan Estimate and Closing Disclosure, the note and the security instrument.
• Referrals. RESPA Section 8, in Regulation X, prohibits giving or taking anything of value for referring settlement service business. A referral partner program with a real estate team must not pay per referral.
• Calls and texts. The FCC's TCPA rules apply to every automated call and text: prior express written consent for marketing, quiet hours, the National Do Not Call Registry, and opt-outs honored within ten business days. Our post on speed to lead and text message consent covers the FCC changes taking effect on November 25, 2026.

This is general information, not legal advice. Check your own processes with your compliance lead.

A follow-up plan built on your own leads

With fewer bought leads, the work moves to three groups you already have. Each needs its own sequence.

The first journey is where speed still pays. A borrower who applied with you and hears nothing for a day may apply elsewhere. Our help article on mortgage lead management sets out what should happen to an inquiry in the first hours, and the guide to mortgage document collection covers the reminders that keep a file moving.

The third journey is the one most teams neglect. Past clients already trust you, and the law still lets the lender that originated or services a borrower's current mortgage receive these reports alongside a firm offer. A mortgage retention strategy turns that into a routine instead of a good intention.

What this means for your team

For a brokerage with 10 to 250 staff, the trigger lead limits move money from buying lists to working your own relationships. That rewards teams with a clean CRM, a record of consent on every contact and follow-up that runs without someone remembering it.

Start with the past client list: clean it, record consent, and set the yearly review. Then tighten the first hours after an application. The mortgage brokers page shows how the platform runs these journeys for loan officers, with every contact, document and conversation on one record.