Compliance & Risk

Mortgage Advertising Compliance: RESPA, TILA, and State Regulations Every LO Must Know

March 22, 2026 Updated March 23, 2026

Mortgage advertising compliance is one of the most complex and consequential aspects of running a mortgage origination business. Every loan officer, broker, and lender who advertises refinance products — whether through digital ads, direct mail, social media, email, or purchased lead campaigns — must navigate a layered framework of federal and state regulations. Getting it wrong does not just mean a slap on the wrist. Violations of RESPA, TILA, the CFPB’s MAP Rule, and state-specific advertising laws can result in six-figure fines, license suspension, consent orders, and reputational damage that takes years to repair.

This guide covers the federal regulations that form the foundation of mortgage advertising compliance, the state-level rules that add additional layers, and the practical steps you should take to ensure every piece of marketing you publish or purchase stays within legal boundaries.

Federal Framework: The Laws That Govern Mortgage Advertising

Three primary federal frameworks shape how mortgage professionals can advertise: the Truth in Lending Act (TILA) and its implementing Regulation Z, the Real Estate Settlement Procedures Act (RESPA) and its implementing Regulation X, and the CFPB’s Mortgage Acts and Practices Rule (MAP Rule, Regulation N). Each addresses different aspects of advertising conduct, and together they create a comprehensive compliance obligation.

TILA and Regulation Z: Advertising Trigger Terms

The Truth in Lending Act, enacted in 1968 and implemented through Regulation Z, is the cornerstone of mortgage advertising regulation. Its core principle is straightforward: if you advertise specific credit terms, you must disclose additional information so the consumer can make an informed comparison.

Regulation Z defines “trigger terms” — specific phrases that, when used in advertising, require additional disclosures. For mortgage advertising, the trigger terms include any mention of a specific interest rate (such as “rates as low as 5.5%”), the number of payments or loan term (“360 monthly payments”), the amount of any payment (“payments of just $1,200/month”), the amount of any finance charge, and the amount or percentage of the down payment (“zero down” or “only 3% down”).

When any trigger term appears in your advertising, you must also disclose the annual percentage rate (APR), the terms of repayment including the loan term, and whether the rate is fixed or variable. If the advertised rate is not available to every borrower, you must indicate that the rate shown is for illustrative purposes or is available based on specific criteria.

The practical implication is significant. That Facebook ad saying “Refinance at 5.25%!” immediately triggers disclosure requirements. If you cannot fit those disclosures meaningfully into the ad format, you should not use the trigger term. Many experienced LOs learn to advertise without trigger terms — using language like “rates have dropped — see if you qualify” — to avoid the disclosure cascade while still capturing borrower interest.

RESPA and Regulation X: Referral Fees and Kickbacks

The Real Estate Settlement Procedures Act, primarily known for regulating the settlement process, has critical advertising implications through its anti-kickback provisions in Section 8. RESPA prohibits giving or receiving any “thing of value” for the referral of settlement service business. This directly impacts how loan officers can structure relationships with lead providers, real estate agents, builders, and other referral sources.

In the context of lead generation and advertising, RESPA compliance means you cannot pay for referrals disguised as advertising. If you pay a real estate agent a “marketing fee” that is actually compensation for sending you borrowers, that is a RESPA violation. If a lead generation company charges you a fee tied to the closing of a loan — rather than a flat fee per lead — that compensation structure may violate RESPA’s prohibition on referral fees tied to settlement services.

Legitimate lead purchases are generally RESPA-compliant when the lead provider charges a fixed fee per lead regardless of whether the lead converts to a closed loan, the lead provider does not steer borrowers toward any specific lender, and the lead provider is selling information — not making referrals. This distinction matters enormously. When you purchase refinance leads from a compliant provider like BuyRefi Leads, you are paying a fixed cost per lead for consumer information — not a referral fee contingent on closing.

The CFPB’s MAP Rule (Regulation N)

The Mortgage Acts and Practices Rule, codified as Regulation N, was issued by the CFPB in 2014 and specifically targets deceptive mortgage advertising. Unlike TILA, which focuses on disclosures, the MAP Rule broadly prohibits any material misrepresentation in mortgage advertising. This includes misrepresentations about interest rates and APR, the existence or amount of fees, the type of mortgage product (advertising a fixed rate when the product has an adjustable component), the terms of the loan including prepayment penalties, the borrower’s obligations, the likelihood of receiving advertised terms, association with any government entity or program, and the availability of counseling services.

The MAP Rule also requires that mortgage advertisers keep records of all commercial communications — every ad, mailer, email, social media post, and landing page — for at least 24 months. This recordkeeping requirement catches many originators off guard. If you cannot produce a copy of an ad you ran 18 months ago when a regulator asks, you are already in violation regardless of whether the ad itself was compliant.

State-Level Advertising Regulations

Federal law establishes the floor for mortgage advertising compliance, but many states impose additional requirements that are more restrictive. Loan officers who originate across multiple states face the challenge of complying with the most restrictive applicable standard.

NMLS Licensing and Advertising Requirements

Every state requires that mortgage advertisements include the NMLS unique identifier of the company and, in many states, the individual loan officer. Some states require that the NMLS number appear in a specific format, at a specific font size, or in a specific location within the advertisement. Failure to include NMLS identifiers is one of the most common advertising violations found during state examinations — and one of the easiest to prevent.

State-Specific Disclosure and UDAP Enforcement

Individual states add their own disclosure requirements beyond federal law. New York requires that ads include the licensed company name and a “Licensed Mortgage Banker” or “Licensed Mortgage Broker” designation. California requires specific disclosures under the CFL and CRMLA depending on license type. Texas imposes stricter restrictions on home equity advertising than federal standards require. If you advertise in ten states, you may need ten different versions of your disclosure language — using a single national template without state-specific modifications is a common compliance failure.

Additionally, state Attorneys General enforce Unfair and Deceptive Acts and Practices (UDAP) statutes that give them wide latitude to pursue misleading mortgage advertising, even if it technically complies with TILA and RESPA. A refinance mailer that buries the APR in fine print may satisfy Regulation Z but still draw UDAP enforcement if the overall presentation is deemed deceptive.

Digital Advertising: Special Compliance Considerations

The shift to digital advertising has created new compliance challenges that the original regulatory framework did not anticipate. Social media ads, search engine marketing, email campaigns, and website content each present unique issues.

Social Media Advertising

Social media platforms create compliance tension because they encourage short, punchy content — exactly the format where required disclosures get omitted. A tweet or Instagram story has limited space, but Regulation Z’s disclosure requirements do not shrink to fit the medium. The CFPB has made clear that the advertising platform does not change the compliance obligation. If you use a trigger term in a social media ad, the required disclosures must be clearly and conspicuously presented — not hidden behind a “click for more” or “see terms” link that most users will never follow.

Best practice for social media mortgage advertising is to avoid trigger terms entirely and drive prospects to a compliant landing page where full terms and disclosures are presented. Your social ad captures attention and interest; your landing page provides the regulated detail.

Search Engine Marketing (SEM)

Google Ads and Microsoft Ads impose their own mortgage advertising policies in addition to federal and state requirements. Google requires LO licensing information, restricts certain ad formats for mortgage products, and may require advertiser verification. Your Google Ads account can be suspended for policy violations, which disrupts your entire lead generation pipeline. Ensure your SEM campaigns comply with both platform policies and regulatory requirements simultaneously.

Email, Website, and Landing Page Compliance

Email campaigns must comply with CAN-SPAM and all mortgage advertising regulations. If your email contains trigger terms, the full Regulation Z disclosures must appear in the email body — not solely on a linked landing page. Your website is also an advertisement under federal and state law. Every page discussing mortgage products, rates, or terms must be compliant — including landing pages, blog posts, rate tables, and calculator pages. Review website content regularly, especially rate-related pages that may become inaccurate as market conditions change. An outdated rate is not just poor marketing — it is a potential MAP Rule violation.

Lead Generation Compliance

When you purchase mortgage leads from third-party providers, your compliance obligation extends to how those leads were generated. If a lead provider uses non-compliant advertising to generate leads that you then purchase, you can face regulatory exposure even though you did not create the advertising yourself.

Vetting Your Lead Providers

Before purchasing leads from any provider, conduct due diligence on their advertising practices. Request samples of the ads, landing pages, and forms used to generate the leads you are buying. Verify that their advertising includes required disclosures, does not contain trigger terms without proper disclosures, accurately represents the product and terms, includes NMLS identifiers where required, and complies with applicable state laws in every state where leads are generated.

Reputable lead providers will readily share this information. Providers who resist transparency about their advertising methods are a red flag. At BuyRefi Leads, we maintain full compliance documentation on our lead generation advertising and make it available to our clients on request.

TCPA Compliance for Lead Contact

The Telephone Consumer Protection Act adds another compliance layer when you contact purchased leads. Under the TCPA and the FCC’s implementing rules, you generally need prior express written consent before making marketing calls or sending marketing texts to a consumer’s cell phone using an automatic telephone dialing system. Lead forms must include clear TCPA consent language, and that consent must be documented and retained. One-to-one consent requirements — where the consumer consents to be contacted by your specific company — have tightened significantly. Ensure your lead provider’s forms obtain proper consent that names your company.

Building a Compliance Program

Compliance is not a one-time checklist — it is an ongoing operational discipline. Here is how to build a mortgage advertising compliance program that protects your license and your business.

Pre-Publication Review and Recordkeeping

Every piece of advertising should go through a compliance review before publication. For individual LOs, run your ads past your company’s compliance department. For broker-owners, establish a review process — internal or through an outsourced compliance consultant — that checks every ad against federal and state requirements before it goes live.

Archive every advertisement for at least 24 months as required by the MAP Rule — print materials, digital ads with screenshots and dates, email campaigns, social media posts, and landing page copies. Cloud-based storage with date stamping and a folder structure organized by date and channel is the simplest approach.

Audits and Training

Conduct quarterly reviews of all active advertising. An ad that was compliant six months ago may not be today as rates, products, and regulations change. Additionally, provide annual compliance training to every LO and marketing team member and document attendance. A robust training program is a significant mitigating factor if a regulator examines your advertising.

Consequences of Non-Compliance

The CFPB has issued consent orders with penalties ranging from $50,000 to over $10 million for advertising violations. State regulators can suspend licenses, impose fines, and require expensive corrective action. Beyond penalties, enforcement actions are public record — appearing in NMLS and Google searches of your company name. The long-term business cost of a compliance failure far exceeds the cost of building a proper compliance program.

Key Takeaways for Mortgage Professionals

Mortgage advertising compliance is non-negotiable and non-trivial. Every loan officer and broker must understand Regulation Z trigger terms and disclosure requirements, RESPA restrictions on referral fee structures, the MAP Rule’s prohibition on misrepresentations and its 24-month recordkeeping requirement, state-specific disclosure and licensing display rules, TCPA consent requirements for contacting leads, and the special considerations that apply to digital and social media advertising.

Build a compliance program with pre-publication review, systematic recordkeeping, quarterly audits, and annual training. Vet your lead providers to ensure the advertising used to generate your purchased leads is compliant. And when in doubt, consult a mortgage compliance attorney before publishing — the cost of legal review is a fraction of the cost of an enforcement action.

If you want refinance leads generated through fully compliant advertising with documented consent and transparent sourcing, reach out to BuyRefi Leads and let us show you how compliance-first lead generation protects your business while feeding your pipeline.

Refinance Leads Available by State

We generate high-intent refinance leads in metros across the country. Start with the states where your team is licensed:

  • California — Los Angeles, San Diego, San Francisco, Sacramento
  • Texas — Houston, Dallas, San Antonio, Austin
  • Florida — Miami, Tampa, Orlando, Jacksonville
  • New York — NYC, Buffalo, Rochester, Syracuse
  • North Carolina — Charlotte, Raleigh, Durham, Greensboro

See all 50 states and 1,000+ city pages for full market coverage.