No, One-to-One Consent Isn’t the Law Anymore. Here’s What Loan Officers Actually Have to Follow in 2026.

One-to-one consent is not a legal requirement in 2026. The FCC rule that would have forced it was struck down by the Eleventh Circuit on January 24, 2025 (Insurance Marketing Coalition v. FCC), and the FCC formally deleted it from its rules in September 2025. For loan officers, the standard reverts to what it was before: prior express written consent for marketing calls and texts that use an autodialer or a prerecorded voice. The stricter “one seller, one product, one consent at a time” version never took effect.

Why half the mortgage internet still tells you otherwise

The rule was finalized in late 2023, everyone wrote the panic post, and then it died one day before it was supposed to start. The court decision and the FCC’s cleanup never got the same wave of coverage the original scare did. So those warnings are still sitting in search results, still ranking, still describing a dead rule as if it were current. If you read three vendor blogs this week and got nervous, that is why. They never updated.

A rule struck through, representing the vacated one-to-one consent requirement

What actually applies now

Prior express written consent, often shortened to PEWC, for autodialed or prerecorded marketing contact. In plain terms: a clear, written agreement from the person that you can text or call them with marketing, captured before you do it. A single clean consent can cover more than one potential caller. You do not need a separate, individually named consent for every company that might reach out.

What this changes for how you work leads

Shared-consent and comparison-style leads are workable again. A consumer who gave proper written consent can be contacted by you, even if your name was not listed one by one at the moment they opted in. That is the practical reversal: the rule that was about to turn shared lead generation into a minefield is gone. PEWC is still required, and the disclosure still has to be clear, so this is “back to the prior standard,” not “anything goes.”

The part that bites you if you stop reading here

Two live threads are easy to confuse with this one, and both still apply:

  • The TCPA “revoke-all” rule takes effect January 31, 2027. Once someone opts out of one type of your messages, you will have to treat it as opting out of all of them. Your texting and email systems need to handle that cleanly before it lands.
  • The federal trigger-lead ban took effect March 5, 2026. That is a separate change to the Fair Credit Reporting Act, not a TCPA rule. Different law, different mechanism, same year. Do not file them in the same mental folder. We break that one down in the trigger-lead recapture guide.
A contact record with a consent tag, representing consent tracked inside a CRM

Frequently asked questions

Is one-to-one consent required for loan officers in 2026?

No. The rule was vacated by the Eleventh Circuit in January 2025 and formally removed by the FCC in September 2025.

What consent do I actually need for marketing texts?

Prior express written consent before any autodialed or prerecorded marketing contact.

Can I still work shared or comparison leads?

Yes, as long as proper written consent was obtained. The consumer does not have to have named you specifically.

When does the TCPA revoke-all rule start?

January 31, 2027.

Is the trigger-lead ban the same thing as one-to-one consent?

No. The trigger-lead ban is a March 2026 change to the Fair Credit Reporting Act. One-to-one consent was a TCPA rule that no longer exists.

The cleanest protection is structural

Whichever rule moves next, the loan officers who adapt in an afternoon are the ones whose consent and opt-out status lives on the contact record, not in someone’s inbox. A CRM that tags consent to the person is the difference between handling the 2027 revoke-all rule calmly and scrambling. For a full map of what changed this year, see the 2026 Mortgage Compliance Tracker.

This article is general information for mortgage professionals, not legal advice. Confirm your specific obligations with your compliance team or counsel.

Sources: Morrison Foerster, Eleventh Circuit vacates the one-to-one consent rule; FCC removes the one-to-one consent rule; FCC extends the TCPA revoke-all effective date to January 31, 2027.

Artemiy Soldatov
Request a Demo
Try BNTouch's marketing automation platform for yourself
By submitting this form you consent to receive informational messages from BNTouch Inc. Reply STOP to opt-out; Reply HELP for support; Message & data rates may apply; Messaging frequency may vary. Visit Privacy Policy to see our privacy policy and Terms of service for our Terms of Service.