Mortgage Trigger Leads Are Restricted Now: What the Homebuyers Privacy Protection Act Means for You

Since early March 2026, a federal law has limited who can buy your information after you apply for a mortgage. The Homebuyers Privacy Protection Act amends the Fair Credit Reporting Act (FCRA) so credit bureaus can sell "trigger leads" on mortgage applicants only in narrow cases. If you are getting ready to buy a home, you should see fewer unsolicited calls and texts from lenders you never contacted. You will not see them disappear entirely.

Why trigger leads existed in the first place

One mortgage application, many phone calls

When you apply for a home loan, the lender pulls your credit report. That inquiry used to become a product. (https://www.mpamag.com/us/mortgage-industry/industry-trends/new-law-targets-spam-calls-fueled-by-mortgage-trigger-leads/592853). The (https://www.ftc.gov/news-events/news/press-releases/2007/03/applying-mortgage-can-trigger-landslide-competing-offers): a mortgage inquiry on your report can lead other mortgage companies to send competing offers, pitched as "prescreened" or "preapproved." The FTC noted these offers can help you compare prices, as long as you read the conditions closely.

Where it went wrong

It got abused. Some homebuyers received texts advertising low rates that were quickly raised after they followed up. Others got messages from parties claiming to work with their original lender. The Government Accountability Office (GAO) said selling homebuyers' personal information raises privacy concerns because it happens without their consent. Also from the GAO's analysis of a large national survey: at most 3.5% of homebuyers got their mortgage from a trigger lead offer. The calls were loud. They rarely decided who won the loan.

If you are still planning your purchase, it helps to know (/mortgage-credit-report-costs-2026/), since the same pulls are what this law is about.

What the Homebuyers Privacy Protection Act changes

The timeline

President Trump signed the law (H.R. 2808) on September 5, 2025. It took effect 180 days later, in early March 2026. Industry coverage gives March 4 or March 5, so we say early March.

The two conditions

Under (https://natlawreview.com/article/homebuyers-privacy-protection-act-amends-fcra), a credit bureau may furnish a trigger lead for a residential mortgage transaction only if both of these are true:

1. It is a firm offer of credit. That means an offer that will be honored if your credit report shows you meet the stated criteria. A vague "see if you qualify" pitch is not enough.
2. The requester has a legitimate connection to you. Either you gave documented authorization (an opt-in, with evidence handed to the bureau), or the requester is your current mortgage originator, your current mortgage servicer, or a bank or credit union where you hold a current account.

In plain terms, a lender you've never dealt with can't simply buy your inquiry because you shopped for a loan. Your own lender, servicer, or bank can still make you an offer. So can any company you said yes to in writing.

What the law does not do

It doesn't change how your score is calculated, and it doesn't end every kind of marketing. It limits one product: the trigger lead. Congress also asked for a follow-up: the Comptroller General must study the value of trigger leads received by text message, with a report due September 4, 2026. That study could prompt further changes, but nothing is decided yet.

What you may still receive

Some contact will continue, and that's normal:

• Offers from your current relationships. Your existing lender, servicer, or bank can still send a firm offer.
• Offers you opted into. If you ticked a consent box on a rate-comparison site, that documented authorization can count.
• Prescreened offers from other lists. The FTC explains that creditors can ask a bureau for people who meet their criteria, or give the bureau their own list to check. Those general prescreening channels still exist for credit cards and other products.
• Mail addressed to "occupant" or "resident," and offers from local merchants, charities, and companies you already do business with.

Opt out of prescreened offers

The law helps most when you also close the other doors, so do both. The FTC points to one channel run by the major bureaus:

• Five years: go to optoutprescreen.com or call 1-888-5-OPT-OUT (1-888-567-8688).
• Permanent: start online or by phone, then sign and return the Permanent Opt-Out Election form.
• What they ask for: your name, address, Social Security number, and date of birth. The FTC says the information is confidential and used only to process the request.
• Timing: requests are processed within five days, but offers can keep arriving for several weeks because some companies already had your information.

Opting out does not affect your credit, and it stops only offers based on the major bureaus' lists. Offers from other sources keep coming. For sales calls, the FTC also recommends DoNotCall.gov, which is free and can take up to 31 days to take effect.

A (/credit-freeze-vs-credit-lock-difference/) is a different tool. It controls who can open new credit in your name, so read how it works before you place one in the middle of a mortgage application.

Shopping for a mortgage with less noise

A few habits matter more now that your consent is the main way into your inbox:

• Read every consent box. Rate-comparison sites often ask permission to share your details. Under the new rules, that checkbox is exactly how a lender can lawfully buy a lead on you.
• Verify who is calling. If a text says it is from "your lender," call the number on your loan paperwork, not the number in the message.
• Compare written offers. Ask for official quotes from lenders you choose, side by side, instead of reacting to the lowest rate in a text.
• Know your options if your file is thin. If your score is limited or missing, (/get-a-mortgage-with-no-credit-score-manual-underwriting/).

If your credit report has errors that could cost you a better rate, fix those first. When you are ready to compare credit-repair help, you can (/#top-companies).

What to do next

The law narrows who can buy your mortgage inquiry, and it asks lenders to prove consent or a relationship. Your next step is simple: opt out at optoutprescreen.com before you apply, and be selective about the consent boxes you check afterward.

Frequently Asked Questions

When did the Homebuyers Privacy Protection Act take effect?

Early March 2026, 180 days after it was signed on September 5, 2025. Sources give March 4 or March 5.

Do mortgage trigger leads still exist?

Yes, in narrow cases. The offer must be a firm offer of credit, and the requester must have your documented consent or be your current mortgage originator, servicer, or a bank or credit union where you have a current account.

Does the law stop all credit offers and calls?

No. Prescreened offers from other lists, offers from companies you already deal with, and mail addressed to "occupant" can continue. Opt-out tools still matter.

How do I opt out of prescreened offers?

Visit optoutprescreen.com or call 1-888-567-8688 for a five-year opt-out. For a permanent opt-out, sign and return the Permanent Opt-Out Election form. Processing takes about five days, and offers may continue for several weeks.

Does the law change how mortgage inquiries affect my credit?

No. The Act limits who can buy trigger lead data, not how inquiries are scored.