Why you get flooded with calls after a mortgage credit pull
For years, a mortgage credit pull let the bureaus sell your name as a 'trigger lead' to competing lenders, who called within hours. The Homebuyers Privacy Protection Act, signed September 5, 2025, took effect in March 2026 and limits those leads to firm offers from lenders you authorize or already have a mortgage or bank account with.
What to know
- The Homebuyers Privacy Protection Act (Public Law 119-36) was signed September 5, 2025 and took effect 180 days later, in March 2026.
- Bureaus can now pass on mortgage-inquiry leads only for firm offers, and only to a narrow set of companies.
- Your current mortgage lender or servicer, your bank or credit union, and companies you authorized can still get them.
- Calls can still come from lead websites you filled out, public records and older data.
You talk to one lender on a Tuesday afternoon and agree to a credit pull for a preapproval. By Wednesday morning you’ve had a dozen calls and texts from lenders you’ve never heard of, several of them claiming to be “following up on your application.” That was the standard experience for mortgage applicants for years, and it had a name in the industry: trigger leads.
A federal law took most of that apart in March 2026. Not all of it, though, and knowing exactly what changed tells you which calls are now out of bounds and which ones you’ll still get.
How a trigger lead worked
When a mortgage lender pulls your credit, the bureau records an inquiry coded as mortgage. Under the old setup, other lenders could buy a prescreened list built on that event: everyone who had a mortgage inquiry in the last day, filtered by score band and location. That list was the “trigger.” Because it was technically a prescreened list, the buyers were supposed to make you a firm offer of credit, which is the legal basis for prescreening under 15 U.S.C. 1681b(c).
Within hours, competitors knew that you were shopping for a mortgage, roughly what your credit looked like, and how to reach you. The callers often didn’t say how they got your information, which is why so many people assumed their own lender had sold them out.
What the Homebuyers Privacy Protection Act changed
Congress passed the Homebuyers Privacy Protection Act as H.R. 2808, and it was signed on September 5, 2025, as Public Law 119-36. The law says it takes effect 180 days after enactment, and trade coverage and industry groups marked March 5, 2026 as the start date.
It added a new paragraph, 15 U.S.C. 1681b(c)(4). When someone requests your report in connection with a residential mortgage loan, the bureau may not, based on that request, furnish a report to another company unless two things are true. First, the transaction must be a firm offer of credit or insurance. Second, the other company must fit one of these:
| Who can still receive it | Statutory condition |
|---|---|
| A company you authorized | It certified to the bureau that it has your authorization |
| Your current mortgage originator | It “has originated a current residential mortgage loan” of yours |
| Your current mortgage servicer | It “is the servicer of a current residential mortgage loan” of yours |
| Your bank or credit union | It’s an insured depository institution or credit union that “holds a current account” for you |
Everyone else, including the lenders and brokers who used to buy these lists in bulk, is cut out.
The law also ordered the Government Accountability Office to study trigger leads sent by text message. That report came out on October 6, 2026 (GAO-27-108874). GAO found that homebuyers were often bombarded with calls and texts during the application process, and that federal survey results suggest “no more than 3.5 percent of homebuyers” may have gotten their loan through a competing offer that came from a trigger lead. Because the restrictions only started in March 2026, GAO said their effects aren’t known yet. The shopping benefit the industry defended looks small on those numbers, and whether the new rules actually quiet your phone is still being measured.
Why your phone may still ring in 2026
The law closed the bureau pipeline. It didn’t close every pipeline, and these are the usual reasons people still get calls after applying.
The exceptions are real. If your current mortgage is serviced by a big bank, or you have a checking account at a bank that also makes mortgages, that company can still receive a lead and make you a firm offer. That’s legal under the new rules.
You filled out a lead form. Rate-comparison and “get matched with lenders” websites typically pass your information to several lenders or brokers. That’s a lead you created, not a trigger lead from the bureau, and the new law doesn’t cover it. Read the consent language on any form before you hit submit.
Public records. When you buy, the deed and mortgage are recorded publicly. Mailers about mortgage protection insurance, refinancing and home warranties often come from that data, not from your credit file.
Older data and stragglers. NAMB, which supported the law, acknowledged that “some pre-existing data or non-compliant activity may still generate outreach in the short term.”
A quick test for any caller
When a lender you didn’t contact reaches out, ask three questions and note the answers:
- “How did you get my information?”
- “Do I have an existing account or loan with you?”
- “Is this a firm offer of credit, and can you send it in writing?”
If the caller has no relationship with you and won’t say where your information came from, end the call. Never give your Social Security number or bank details to someone who called you. If you’re considering a lender, look up the loan officer’s license on NMLS Consumer Access, the public licensing database for mortgage loan originators.
How to cut the calls down further
- Opt out of prescreened offers. Call 1-888-5-OPT-OUT (1-888-567-8688) or use optoutprescreen.com. Prescreening requires that no opt-out be in effect, so this should also cover the relationship-based trigger leads that survive the new law. Details are in prescreened offers and how to opt out.
- Be stingy with lead forms. Get quotes directly from the lenders you choose.
- Tell each lender you contact that you don’t want your information shared with affiliates or partners for marketing, and ask what its privacy notice allows.
- Do your shopping in one short window. You’ll limit both inquiries and exposure. Rate shopping without wrecking your score covers the timing.
- Report violations. If a company with no relationship to you says it got your name from your mortgage credit pull after March 2026, write down its name and what it said, and file a complaint. Filing a CFPB complaint explains how.
How this fits with your preapproval
None of this should stop you from shopping lenders. Comparing several mortgage offers is one of the most valuable things a borrower can do, and FICO groups mortgage inquiries made in a short window. The difference now is that comparing lenders shouldn’t hand your phone number to the whole industry. For how the credit pull itself works, see mortgage preapproval and credit pulls.
Common questions
Are mortgage trigger leads illegal now?
Mostly. Since March 2026, a bureau can't furnish a report based on your mortgage inquiry to another company unless it's for a firm offer and that company has your authorization, originated or services your current mortgage, or is a bank or credit union holding your account.
Why am I still getting calls after my mortgage application?
Common sources include lead or comparison websites you submitted information to, the permitted exceptions in the law, and marketing built from public records. Calls from those sources aren't covered by the trigger lead limits.
Does opting out of prescreened offers stop trigger leads?
It should stop the relationship-based leads that still run through prescreening, since prescreening requires that no opt-out be in effect. It won't stop a company you authorized.
Who enforces the trigger lead law?
It amends the Fair Credit Reporting Act, which federal regulators enforce. If you believe a bureau or lender broke it, you can file a complaint with the CFPB.
Sources
- Public Law 119-36, Homebuyers Privacy Protection Act, U.S. Government Publishing Office (govinfo)
- 15 U.S.C. 1681b, Permissible purposes of consumer reports, Cornell Law School, Legal Information Institute
- Trigger Lead Restrictions Begin As Homebuyers Privacy Protection Act Takes Effect, National Mortgage Professional
- Mortgage Lending: Newly Enacted Restrictions May Help Curb Unwanted Solicitations While Preserving Comparison Shopping (GAO-27-108874), U.S. Government Accountability Office
- Understanding the Trigger Leads Ban, National Association of Mortgage Brokers
- What To Know About Prescreened Offers for Credit and Insurance, Federal Trade Commission
We check every source listed here before publishing and review this page when the rules it covers change. Spot an error? Tell us and we'll fix it and log the correction. This is education, not legal or financial advice.