The lender lead-ban math: what's still legal after September 2024
The CFPB ruling killed paid-lead vendor pools for a lot of brokerages. It didn't kill your own database, your own web leads, or your referral network. Here's the line.
The September 2024 CFPB enforcement guidance spooked a lot of brokerages out of their primary lead source. Vendor-supplied lead pools with shared consent — the LendingTree, Zillow Premier, and category-adjacent products that a lot of 5-25 LO shops leaned on — became legally ambiguous overnight.
Several brokerages we talked to in Q4 2024 cut their lead spend to zero. Which was the right move for that specific channel. And also a revenue cliff they hadn't planned for.
Here's what's still dialable, what's not, and how the math has to shift.
What the ruling actually restricts
The narrow legal point: when a lead vendor distributes a lead to multiple lenders under shared "we'll contact you" language, the consent arguably doesn't specifically run to your brokerage. If the consumer never picked you by name, your TCPA-compliant dialing basis is shaky.
The broad practical point: most of the big lead-pool products had consent language that was generic enough to get implicated. Brokerages who relied on them went from "spend $80k/month on leads" to "spend $0 and now what?"
What's still unambiguously fine
Five lead sources weren't touched by the ruling:
- Your own web form submissions. The consumer filled out your form. Consent runs to you.
- Inbound calls to your number. They called you. Implied consent for reasonable callback.
- Referrals from realtors, CPAs, your own past clients. Warm introductions.
- Your aged database from borrowers who originated with you before. The consent was never revoked.
- Expired locks in your LOS. They filled out a full app.
That's the dialable universe. It's bigger than most brokerages realize because they've been under-working it.
The reallocation math
Say a brokerage was spending $80k/month on shared-pool leads. Post-ruling, that $80k has to go somewhere. The two places it can actually compound:
Own-channel acquisition ($40-50k of it): better local SEO, targeted PPC landing pages, direct-mail to expired-rate-lock databases, and broker-referral programs. Slower-building but the consent is unambiguous.
Own-database reactivation ($15-25k of it): aged-lead reactivation sprints, expired-lock outreach, missed-call recovery on existing inbound. Fast payback — a single sprint pays for itself in a quarter.
Speed-to-lead lift ($5-10k of it): instrumenting your own web leads to get called in under 5 minutes. The conversion uplift on your existing inbound is typically 3-4x.
The counter-intuitive outcome
Several brokerages we work with ended 2025 with more pipeline than they started the year with, despite cutting vendor-lead spend to zero. The reallocation worked because the own-channel assets (website, brand, database) had been neglected for years.
A $60k/month vendor-lead habit masks a lot of operational laziness. When you can't lean on it, you suddenly have to work your existing channels harder. The ones who did are in better shape now than before the ruling.
The ones who didn't are shrinking.
What to do in Q1
If you haven't already:
- Pull your own database consent audit (see the weekend audit post)
- Instrument speed-to-lead on your inbound forms
- Run a reactivation sprint on your aged book
- Stop paying for shared-pool leads if you're still on any
Your own pipeline is more than you think. Let's size it in a 15-minute call.