The Trigger-Lead Ban Exemptions Most Loan Officers Get Wrong

The HBPPA trigger-lead ban that took effect March 5, 2026 does not apply equally to everyone. Three categories of lenders are exempt, and most loan officers either do not know the exemptions exist or misunderstand who qualifies.

The Homebuyers Privacy Protection Act amended the Fair Credit Reporting Act to prohibit credit bureaus from selling trigger leads (credit inquiry data packaged and sold to competing lenders within seconds of a borrower applying for a mortgage). But the law carved out specific exemptions that keep certain contact channels open. If you work for or with one of the exempt categories, you have a competitive advantage most of your peers do not realize you have.

Diagram showing which lender types are exempt vs covered by the trigger lead ban

Exemption 1: The Original Creditor

The lender that originated the borrower’s existing mortgage can still contact that borrower based on their own account relationship. This is not a trigger-lead exemption in the narrow sense; it is a broader FCRA principle. If you originated the loan, you have an existing business relationship with the borrower, and you can reach out to them about their account, including offering refinance options or new products.

The catch: most loan officers do not retain servicing. If you originated the loan but it was sold to a servicer, the original-creditor relationship may not extend indefinitely. The exemption is strongest when you still hold the note or service the loan.

Exemption 2: The Current Servicer

The entity currently servicing the borrower’s mortgage can contact them based on the servicing relationship. This is the exemption that matters most in practice, because mortgage servicing rights change hands frequently. If a large servicer also has an origination arm (and many do), they can contact borrowers in their servicing portfolio to offer refinance, purchase, or equity products without using trigger leads at all.

For independent loan officers, this exemption works against you. The servicer who bought your client’s loan can market to them directly, and you cannot use trigger leads to compete for that contact. Your defense is the relationship itself: if you stay in touch with your past clients proactively, the servicer’s outreach competes against an established relationship rather than cold contact.

Exemption 3: The Account-Holding Depository Institution

Banks, credit unions, and thrift institutions where the borrower holds a deposit account (checking, savings, CD, money market) can contact that borrower about mortgage products based on the existing deposit relationship. This is the exemption most loan officers misunderstand.

If you are a loan officer at a bank or credit union, your institution’s existing deposit customers are reachable for mortgage marketing without trigger leads. The deposit relationship creates the permissible purpose. This gives depository LOs a structural advantage over independent mortgage company LOs, who cannot access this exemption at all.

For independent LOs, the implication is clear: the borrowers you have already worked with are the only asset you fully control. A bank or credit union LO can reach your past client through their deposit relationship. You can only reach them through your own relationship and your own monitoring.

Shield protecting a loan officer's database with credit monitoring alerts active

The Practical Implication: Monitor or Lose

The trigger-lead ban removed one competitive threat (third-party trigger-lead sellers). It did not remove the three exempted channels above, all of which are actively used by the organizations that qualify. Original creditors, servicers, and depositories are contacting borrowers right now based on these exemptions.

If you are an independent loan officer, the only defense is proactive monitoring. A CRM with credit monitoring that alerts you when a past client’s profile changes lets you reach out before the servicer’s marketing email or the bank’s refinance offer arrives. You cannot block the exemptions. You can beat them on timing.

Frequently Asked Questions

Who is exempt from the mortgage trigger-lead ban?

Three categories: (1) the original creditor who originated the borrower’s existing mortgage, (2) the entity currently servicing the borrower’s loan, and (3) depository institutions (banks, credit unions, thrifts) where the borrower holds a deposit account. Each can contact borrowers based on their existing relationship without using trigger leads.

Can a mortgage servicer still market to borrowers after the trigger-lead ban?

Yes. The current servicer of a borrower’s mortgage is exempt from the trigger-lead ban. They can contact borrowers in their servicing portfolio to offer refinance, purchase, or equity products based on the existing servicing relationship.

Do credit unions have an advantage after the trigger-lead ban?

Yes. As depository institutions, credit unions (and banks) can contact any borrower who holds a deposit account with them about mortgage products. This exemption is not available to independent mortgage companies or non-depository lenders.

How can independent loan officers compete against trigger-lead exemptions?

By monitoring their own database proactively. Credit monitoring alerts notify you when a past client’s profile changes, letting you reach out before an exempt servicer or depository institution contacts them. The trigger-lead ban levels the field against third-party lead sellers, but the exempted channels require proactive defense through relationship and monitoring.

Servicers and banks can still reach your past clients. Can you reach them first? BNTouch’s Credit Check Alerts monitor your database and alert you the moment a client’s profile changes. Free for 90 days starting July 1. Start here.

Artemiy Soldatov
Request a Demo
Try BNTouch's marketing automation platform for yourself
By submitting this form you consent to receive informational messages from BNTouch Inc. Reply STOP to opt-out; Reply HELP for support; Message & data rates may apply; Messaging frequency may vary. Visit Privacy Policy to see our privacy policy and Terms of service for our Terms of Service.