Trigger lead alternatives: where lenders find borrowers now
Since early March 2026, the Homebuyers Privacy Protection Act lets a credit bureau sell a mortgage trigger lead only for a firm offer, and only to a company the consumer authorized or already does business with. For every other lender, the list of shoppers that used to arrive each morning is gone. These are the routes that are left, and the rules that come with each one.
Updated
The short version
- Still allowed
- Trigger leads on your own customers, for a firm offer
- Opt-in leads
- Homeowners who filled out a form and agreed to be contacted
- Referrals
- Allowed, but RESPA section 8 bars paying for them
- Prescreen
- Firm offers not based on a mortgage inquiry follow the existing FCRA rules
- Not legal advice
- Run any program past your own counsel
1. Trigger leads on your own customers
The one kind of trigger lead the Act still allows.
The Act did not end trigger leads for everyone. A credit bureau may still furnish one, for a firm offer of credit or insurance, to a company that:
- originated the consumer's current residential mortgage,
- services the consumer's current residential mortgage,
- is a bank or credit union that holds a current account for the consumer, or
- has certified to the credit bureau that it has the consumer's authorization.
What it is good for: keeping your own borrowers when they shop for a refinance or a HELOC somewhere else. What it cannot do: bring you a borrower you have never done business with. That is what the rest of this page is for.
2. Opt-in request leads
A homeowner asks for offers, and agrees to be contacted by the companies named in the consent.
An opt-in lead starts on a form, not at a credit bureau. The homeowner picks the loan they want, answers questions about the property and their mortgage, and agrees in writing to be contacted. No credit report is sold, so the trigger lead limit does not apply to it.
The quality of an opt-in lead comes down to the consent and the proof behind it. Before you buy, check:
- The consent text. Is it published, and does it name your company or link to a list that does?
- The proof. Does every lead carry a TrustedForm certificate or a Jornaya LeadiD you can look up yourself?
- How many companies get it. A request sent to a handful of lenders is a different lead from one sold to dozens.
- Speed. Is it delivered at the moment of submit, or in a batch hours later?
- Filters and returns. Can you set states, credit, loan-to-value and amounts, and is the return policy in writing?
How LenderMatch answers each one: the consent text and proof, a sample lead with every field, at most four companies per standard request with exclusive programs on request, real-time delivery into your CRM, and filters and returns written into your insertion order.
3. Referral partners
Agents, builders, financial planners, CPAs and past clients.
Referrals still work, and no credit bureau is involved. The rule to know is RESPA section 8, implemented in Regulation X section 1024.14: on a federally related mortgage loan, no one may give or accept a fee, kickback or other thing of value for referring settlement service business. Paying an agent per referral is out. Co-marketing and marketing services agreements exist, but they get a hard look from regulators and need a review by your counsel.
4. Prescreened firm offers not based on a mortgage inquiry
Lists built from credit criteria, not from a fresh mortgage application.
The Act's limit applies when a credit bureau's list is based, in whole or in part, on a residential mortgage credit inquiry. Prescreened lists built from other criteria, such as equity, credit range or a mortgage balance, still run under the existing Fair Credit Reporting Act prescreen rules in section 604(c): a firm offer of credit, and the prescreen opt-out notice. The difference from a trigger lead is timing: they reach homeowners who match a profile, not homeowners who applied for a mortgage this week.
What else do lenders ask about trigger lead alternatives?
What can lenders use instead of mortgage trigger leads?
Four main routes: trigger leads on your own customers, which the law still allows; opt-in request leads from homeowners who filled out a form and agreed to be contacted; referral partners; and prescreened firm offers that are not based on a mortgage inquiry. Each has its own rules, covered on this page.
Can I still get trigger leads on my own borrowers?
Under the Act, a credit bureau may still furnish one for a firm offer to the originator or servicer of the consumer's current residential mortgage, or to a bank or credit union that holds a current account for the consumer, or to a company the consumer authorized. Ask your credit bureau how it handles the certification.
Are opt-in mortgage leads the same as trigger leads?
No. A trigger lead is a credit bureau report sold because someone applied for a mortgage. An opt-in lead starts when a homeowner fills out a form and agrees to be contacted by the companies named in the consent. No credit report is involved.
Are prescreened mortgage offers still allowed?
The new limit applies when a credit bureau's list is based on a residential mortgage credit inquiry. Prescreened firm offers built from other criteria still follow the existing Fair Credit Reporting Act prescreen rules. Confirm with your counsel before running a program.
Can I pay real estate agents for mortgage referrals?
Generally no. RESPA section 8 and Regulation X section 1024.14 prohibit giving or accepting a thing of value for referrals of settlement service business on federally related mortgage loans. Marketing agreements and co-marketing need a review by counsel.
What should I check before buying opt-in leads?
Whether the consent text is published and names your company or links to a list that does, whether every lead carries a TrustedForm certificate or Jornaya LeadiD, how many companies receive each request, how fast it is delivered, which filters you can set and how returns work.
Which sources is this page based on?
Read on October 27, 2026. This page summarizes the rules and is not legal advice.
- Public Law 119-36, Homebuyers Privacy Protection Act, 139 Stat. 493, approved September 5, 2025. Section 2, the limitation on mortgage trigger leads.
- 15 U.S.C. 1681b, Fair Credit Reporting Act section 604, Legal Information Institute, Cornell Law School. Subsection (c), prescreened reports and firm offers.
- 12 CFR 1024.14, Prohibition against kickbacks and unearned fees, Consumer Financial Protection Bureau, Regulation X (RESPA section 8).
More for lenders
Every page in this section, plus the public partner network page borrowers see before they submit.
- Join our networkProducts, delivery, filters, pricing model and the test program form
- HELOC leadsHome equity line of credit requests
- Refinance and cash-out leadsRate-and-term and cash-out refinance requests
- VA cash-out refinance leadsRequests from the VA cash-out form
- Sample leadEvery field on a HELOC request, with sample values
- CRM integrationsVelocify, Insellerate, LeadMailbox, Bonzo and direct post
- How requests are generatedConsent text, TrustedForm, Jornaya, opt-outs, records
- The trigger leads banWhat the 2025 law restricts and when it took effect
- Lender FAQEvery question lenders ask before buying
Guides for buying leads
- How to buy mortgage leadsWhat to check before you pay for a lead
- Mortgage lead generation companiesThe kinds of lead companies and how to compare them
- Exclusive vs shared mortgage leadsWhat each means and when each fits
- Real-time vs aged mortgage leadsPlus live transfers, and how to test each
- How to get mortgage leadsEvery channel for loan officers and brokers
- Speed to leadHow fast to call and what to say
- TCPA rules for mortgage leadsConsent, Do Not Call and revocation in 2026
- Trigger lead alternativesYou are on this page
- Mortgage lead calculatorCost per funded loan and break-even lead price
Start with a test program.
Tell us your products, states and filters. We reply within one business day to talk through pricing and a test insertion order, and a test post reaches your system before any live request does.
Prefer email? Write to contact@lendermatch.io.