Ever applied for a mortgage and suddenly received 30–50 calls from lenders you never contacted? That wasn’t an accident. It was something called a trigger lead. For years, when a lender pulled your credit for a mortgage application, the credit bureaus could quickly sell that inquiry data to other lenders.
As of March 5, 2026, that practice is largely shut down under the Homebuyers Privacy Protection Act (HPPA) — a big consumer win.

What the HPPA Changes
The HPPA amends the Fair Credit Reporting Act (FCRA) and significantly restricts the ability of credit bureaus to sell mortgage inquiry data. Going forward, lenders can only obtain that information under limited conditions:
- Express consent: You specifically opted in to receive offers from other lenders.
- Existing relationship: The lender already services your mortgage.
- Qualified prescreened offer: The lender must meet strict requirements for a legitimate firm offer of credit.
Why This Matters Beyond Annoying Calls
Most people think trigger leads are just a nuisance. But there’s a bigger issue: security. When buyers are flooded with calls, it becomes easier for bad actors to impersonate a lender and pressure borrowers into sharing personal or financial information. The HPPA helps ensure that when you apply for a mortgage, your information stays with the lender you chose to work with.
What Buyers Should Do Now
- Choose your lender before your credit is pulled.
- Ignore unsolicited calls claiming they can “beat your rate.”
- Never share personal info with someone who contacted you first.
A legitimate mortgage professional won’t need to chase you down minutes after your credit is pulled. If you’re planning to buy a home and want to understand your options, feel free to give me a call.
