You apply for a mortgage — or just have your credit pulled for one — and within a day or two your phone lights up with calls and texts from lenders you've never heard of, sometimes a dozen of them. It feels like your information sprang a leak. It didn't. What you're hitting has a name: trigger leads. It used to be a free-for-all — and as of March 2026, federal law finally reins it in, though it hasn't ended entirely. The part that still confuses people: freezing your credit doesn't stop what remains.
Here's what's actually happening, and what does work.
What a trigger lead is
When a lender pulls your credit for a mortgage, the credit bureaus — Equifax, Experian, and TransUnion — can see two things: a fresh "hard inquiry," and that it's mortgage-related. That signals you're shopping for a home loan, which makes you valuable. The bureaus are permitted to sell that signal — your name and the fact that you're in the market — to other lenders who've paid to receive these "triggers." Those lenders then race to pitch you.
It's allowed under the federal Fair Credit Reporting Act, which lets companies make you a "firm offer of credit" based on prescreened information. In other words, the system is working as written. It's just working against your phone's peace. That changed in March 2026: the federal Homebuyers Privacy Protection Act now bars the bureaus from selling mortgage trigger leads to third parties, with narrow exceptions, and only for a firm offer of credit: a lender you've authorized (opted in to), the company that originated or services your current mortgage, and a bank or credit union where you already have an account. The flood that used to come from dozens of strangers is meant to be cut off at the source.
Why your credit freeze didn't help
This is the crux of the confusion. A credit freeze (or security freeze) stops new creditors from pulling your full report to open a new account. It's a powerful anti-fraud tool — but that's a different mechanism from the one feeding trigger leads. Prescreened, firm-offer solicitations run through the bureaus' prescreening process, which a freeze doesn't shut off. So you can have your credit fully frozen and still get the calls, because the freeze was never aimed at marketing in the first place.
The Do Not Call registry helps with telemarketing, but it has gaps, doesn't cover every kind of contact, and some operations simply ignore it.
What actually reduces the calls
If the freeze isn't the lever, here's what is:
- Opt out of prescreened offers at OptOutPrescreen. This is the official opt-out — optoutprescreen.com, or 1-888-5-OPT-OUT, run by the credit bureaus — and it's aimed squarely at the prescreening that powers trigger leads. You can opt out for five years online, or permanently by mailing in the signed form. Doing it before you apply is ideal.
- Register with the National Do Not Call Registry — donotcall.gov — to cut telemarketing calls.
- Tell callers to put you on their internal do-not-call list. That's a specific request companies are supposed to honor, separate from the national registry.
- Ask your loan officer. A good one will warn you this is coming and won't be surprised when it does.
The law just changed
As of March 4, 2026, the Homebuyers Privacy Protection Act is in effect — it amends the federal Fair Credit Reporting Act to stop the bureaus from selling your mortgage-shopping signal to third-party lenders, keeping it to the narrow exceptions above. It's still new, enforcement is settling in, and text-message tactics are under separate federal review, so you may still get some contact — but the legal floodgate that powered trigger leads is now largely closed.
The takeaway
The flood of calls isn't a breach, and it isn't your lender selling you out — it's trigger leads, legally generated the moment your credit is pulled for a mortgage. A credit freeze won't stop them, because it targets fraud, not marketing. The real levers are opting out at OptOutPrescreen and registering with the Do Not Call list — ideally before you apply. And as of March 2026 the law is on your side: federal restriction is now in force, though opting out still helps with what remains.
Sources
- Homebuyers Privacy Protection Act, Public Law 119-36
- Fair Credit Reporting Act, 15 U.S.C. 1681b (permissible purposes and prescreening)
Federal restriction on mortgage trigger leads took effect March 4, 2026, and enforcement is still settling in. Confirm the current rules and your options before relying on any single step.