Have you ever applied for a mortgage and then suddenly started getting flooded with calls, texts, and emails from lenders you've never heard of? If so, you're not alone. It wasn't your agent or lender who sold your information. It's a practice called trigger leads, and it's been one of the mortgage industry's worst-kept secrets. Here's how it works: the moment you apply for a home loan, the lender pulls your credit. That inquiry signals to the credit bureaus that you're actively looking for financing. Under the old rules, the bureaus were allowed to immediately sell that signal. This signal includes your name, contact info, and the fact that you're shopping for a mortgage to anyone willing to pay for it. No notice to you. No permission required. Homebuyers would get bombarded at one of the most stressful moments of their lives, often assuming their own agent or lender had sold them out.
The good news: Congress finally put a stop to it. The Homebuyers Privacy Protection Act was signed into law in September 2025 and took effect this past March. It sharply limits when trigger leads can be used, essentially restricting the practice to active transactions with a genuine credit offer. The mass sale of mortgage applicant data without consent is now largely a thing of the past. This is a big win for consumers, and honestly, for the integrity of the homebuying process. If you have friends or family getting ready to buy, this is worth sharing with them. They'll be navigating a much cleaner process than buyers did even a year ago.
