Compliance

Mortgage advertising compliance for loan officers: NMLS, Equal Housing and trigger terms

What a loan officer's website, ads and social posts must show — NMLS IDs, licensing, Equal Housing, Reg Z trigger terms, consent — with the public rules behind each.

· Compliance & AI Editor
Published · Updated · 7 min read

Infographic: The Mortgage Website Compliance Checklist — NMLS ID; Equal Housing; License lines; Trigger terms. Tavi the hare mascot holding a clipboard with a big check mark.

Key takeaways

  • Every piece of mortgage marketing — website, ad, social bio, email signature — is advertising and carries the same core disclosures.
  • Show your individual NMLS ID, your company's name and NMLS ID, and accurate licensed states.
  • Use Equal Housing Opportunity (or your company's Equal Housing Lender wording) on every page.
  • Trigger terms (down payment %, number of payments, payment or finance charge amounts) require full Regulation Z disclosures; the simplest fix is to avoid them.
  • Consent before calls and texts, honest reviews, and a privacy notice at every form round out the basics. This is education, not legal advice.

Before you read: I’m an editorial persona for our compliance desk, not a lawyer. This guide explains public rules in plain English so you can have a better conversation with your compliance team. It is not legal advice, and your company’s policies may be stricter.

Mortgage marketing compliance has a reputation for being impossibly detailed. The core of it, though, is a short list that applies to every website, ad, social profile and email you send. Get that list right everywhere, and most of the remaining questions become “check with compliance” rather than “start over”.

What counts as mortgage advertising?

Almost everything you publish to win business. Regulation Z defines an advertisement broadly as a commercial message that promotes consumer credit, and in practice compliance teams treat all of these as advertising:

  • Your website and every page on it, including old blog posts
  • Social media profiles and posts used for business
  • Email signatures and newsletters
  • Flyers, open-house sheets and co-branded materials with agents
  • Paid ads, landing pages and funnels
  • Text messages and automated replies

If it promotes your lending, assume the rules apply.

The identity disclosures: who you are and who licenses you

Your NMLS ID

Under the SAFE Act framework (implemented in Regulation H, 12 CFR Part 1008), states require loan originators to be licensed or registered through NMLS and to use their unique identifier. State rules commonly require that identifier on solicitations and advertising — websites, business cards, social profiles. Your individual NMLS ID stays with you for your whole career.

Do: show “NMLS ID ######” next to your name in the site footer, on your bio page, on your contact page and in social bios. Link it to NMLS Consumer Access.

Your company’s name and NMLS ID

Borrowers need to know which licensed company you originate through. Most lenders dictate the exact format (“Jordan Example, NMLS ID ###### | Example Lending Co., NMLS ID ######”).

Your licensed states

List only states where you’re actively licensed — and keep it current. Advertising to borrowers in a state where you aren’t licensed is one of the easiest problems to create by accident, especially after a license lapses or a company change.

The fair lending disclosures

Equal Housing Opportunity

Fair housing advertising guidance (see 24 CFR Part 110 and HUD’s related guidance) expects the equal housing statement or logo in housing-related advertising. Lenders typically require “Equal Housing Opportunity” or “Equal Housing Lender” — and the official logo or the text — on every page and ad. Use the official asset; never redraw it.

Language and imagery

Fair lending laws (the Fair Housing Act and the Equal Credit Opportunity Act / Regulation B) prohibit discouraging applicants on a prohibited basis. In marketing, that means avoiding phrases that signal a preference (“perfect for young families”, “ideal for empty nesters”) and avoiding imagery that consistently shows only one kind of borrower.

The big one: trigger terms

Regulation Z §1026.24(d) says that if a closed-end credit ad states certain terms, it must also state other terms. The trigger terms are:

If your ad states…ExampleYou must also disclose…
Amount or percentage of any down payment“Just 3% down”Down payment, terms of repayment, APR
Number of payments or period of repayment“30-year loan”Down payment, terms of repayment, APR
Amount of any payment“$1,850 a month”Down payment, terms of repayment, APR
Amount of any finance charge“Closing costs under $3,000”Down payment, terms of repayment, APR

Separately, §1026.24(c) says any rate of finance charge must be stated as an annual percentage rate, and §1026.24(i) lists misleading terms (for example calling a rate “fixed” without saying for how long, in some contexts).

The simplest compliant habit: talk about programs, process and people rather than numbers. “FHA loans can help first-time buyers with smaller down payments — let’s look at your options” is helpful and usually free of trigger terms. If you want to advertise specific terms, your compliance team writes the disclosures with you.

Misrepresentations and superlatives

Regulation N (12 CFR Part 1014) prohibits material misrepresentations in mortgage advertising — about rates, fees, government affiliation, the type of product and more. In practice, compliance teams are wary of:

  • “Lowest rates” or “best rates in town”
  • “Guaranteed approval” or “everyone qualifies”
  • “No closing costs” (often inaccurate in some form)
  • Anything implying government endorsement (“government-approved lender”)

Describing who insures or guarantees a loan program (for example that FHA loans are insured by the Federal Housing Administration) is factual; implying the government endorses you is not.

Calls and texts

The Telephone Consumer Protection Act and FCC rules restrict automated calls and texts without the right consent. Your forms should say clearly how you’ll contact people (calls, texts, automated), that consent isn’t a condition of purchase, and how to opt out. For business texting from ordinary numbers, carriers require A2P 10DLC registration.

Privacy notice

State privacy laws such as California’s CCPA/CPRA require notice at the point of collection. Put a privacy policy link beside every form, not just in the footer.

Reviews and testimonials

The FTC’s rule on consumer reviews and testimonials (16 CFR Part 465) bans fake reviews (including AI-written ones), buying reviews, and certain suppression of negative reviews. Only show real reviews, with the source and date. If you’re new and have none, show your process instead.

How we prioritize the checklist

Not every item carries the same risk. In our checklist, identity disclosures, Equal Housing, trigger terms and contact consent carry the highest weight because they’re both common and serious when wrong.

Checklist items by risk weight

Source: the GetsMortgageNow compliance checklist (educational, not legal advice). Weights reflect how often and how seriously these items come up in reviews, in our judgment.
Show data table
Risk weightItems
High priority (3)7 items
Medium (2)8 items
Lower (1)3 items

Where the checklist items sit

Source: the GetsMortgageNow compliance checklist, current version.
Show data table
GroupItems
Identity & licensing5 items
Fair lending2 items
Advertising & trigger terms5 items
Privacy & consent3 items
Trust & accessibility3 items

Who checks what?

Who owns which part

You

Responsible for your marketing

  • Know your licenses and states
  • Approve every page and post
  • Easy to miss old content

Your company

Sets the rules and approves

  • Required wording and logos
  • Recordkeeping
  • Review queues take time

Your website provider

Builds to the rules

  • Places disclosures sitewide
  • Runs a checklist before launch
  • Cannot give legal advice

RESPA and co-marketing

RESPA Section 8 (Regulation X) restricts giving or receiving anything of value for referrals of settlement services. It’s why co-marketing with real estate agents (shared flyers, co-branded landing pages, shared ad spend) needs a careful, documented split of costs. If you plan co-marketing pages on your site, route them through your compliance team first.

How do the rules apply to everyday marketing?

Here are five situations loan officers ask about most, and how compliance teams typically think about them. Always confirm with your own team.

An open-house flyer with an agent

A co-branded flyer is advertising for both of you. It needs your NMLS ID and company details, Equal Housing, and no trigger terms without full disclosures. If it shows a sample payment, it needs the Regulation Z disclosures — and cost sharing with the agent should be reviewed for RESPA Section 8.

A short video on social media

Treat the video and its caption as an ad. Your NMLS ID belongs in your profile bio, and anything you say on camera about down payments or payments counts the same as written text. Educational videos (“what closing costs pay for”) are usually the safer format.

A “today’s rates” post

This is where trigger-term and APR rules bite hardest, and rates go stale within a day. Many compliance teams discourage it entirely. If yours allows it, use their approved template with the date, APR and assumptions.

A testimonial from a happy client

Real, unedited in meaning, with permission, and shown with its source and date. Never write one for a client to “approve”, and never offer anything in exchange for a positive review.

An old blog post from three years ago

Old posts are the most common place stale rate or payment examples hide. Search your site for ”%” and ”$” in rate or payment contexts and update or remove what you find.

How do you fix an existing site in an afternoon?

  1. Footer first. Add or correct your NMLS ID, company name and company NMLS ID, licensed states and Equal Housing. Because the footer appears on every page, this one change fixes most of the site.
  2. Search for numbers. Look for down payment percentages, payment amounts and rates. Remove them, or add full disclosures with your compliance team.
  3. Check every form. Consent language for calls and texts, a privacy link, and no sensitive fields.
  4. Review testimonials. Remove anything you can’t source and date.
  5. Send it for approval and keep the approval email.

If your platform makes these edits hard, that’s a sign the site is costing you more than it should.

A one-page compliance routine

  • Every page: NMLS IDs, company name, licensed states, Equal Housing, privacy link
  • Every form: consent language, privacy link, no SSNs or account numbers
  • Every ad and post: NMLS ID in the profile, no trigger terms without disclosures
  • Every quarter: search your site and PDFs for ”%” and ”$” in rate or payment contexts; delete or update anything stale
  • Every change (license, company, program): update the footer block the same day and keep the approval email

Compliance done this way isn’t a quarterly panic. It’s a footer that’s right on every page and a habit of asking before you publish numbers.

Illustrated avatar for Rosa Quintero, compliance and AI editor persona

Written by

Rosa Quintero, Compliance & AI Editor

Rosa writes about mortgage advertising rules, consent, and how AI receptionists and chat should behave for loan officers.

Editorial persona — GetsMortgageNow compliance desk · Not a lawyer; cites primary sources (CFPB, FCC, HUD)

Sources

  1. CFPB — Regulation Z §1026.24 (advertising)
  2. CFPB — Regulation N (Mortgage Acts and Practices — Advertising), 12 CFR Part 1014
  3. CFPB — Regulation H (SAFE Act), 12 CFR Part 1008
  4. eCFR — 24 CFR Part 110 (Fair Housing poster / equal housing)
  5. eCFR — 16 CFR Part 465 (consumer reviews and testimonials)
  6. CFPB — RESPA (Regulation X)
  7. FCC — Telemarketing and robocalls (TCPA)

Educational content, not legal, compliance or financial advice. GetsMortgageNow is not a lender.

FAQ

Questions about this topic

What are trigger terms in mortgage advertising?

Under Regulation Z §1026.24(d), stating the amount or percentage of any down payment, the number of payments or period of repayment, the amount of any payment, or the amount of any finance charge in an ad for closed-end credit triggers a requirement to also disclose the down payment, the terms of repayment and the annual percentage rate.

Do I have to show my NMLS ID on social media?

State rules under the SAFE Act framework generally require a loan originator's unique identifier on advertising and solicitations, which commonly includes social profiles used for business. Put it in your bio and follow your company's format.

Is the Equal Housing logo required?

Fair housing advertising guidance expects the equal housing statement or logo in housing-related advertising, and most lenders require it on every page and ad. Use the official logo file or the text.

Can I say 'lowest rates' or 'no closing costs'?

These claims are risky. Regulation Z lists misleading terms for closed-end credit ads and Regulation N prohibits misrepresentations in mortgage advertising. Avoid superlatives and absolute promises unless your compliance team has approved specific, accurate wording.

Does a mortgage calculator count as advertising?

Treat it as part of your marketing. Use neutral example inputs, label results as estimates, and avoid presenting a rate as an offer.

Do I need consent to text leads from my website?

Yes — automated texts and calls are regulated by the TCPA and FCC rules. Collect clear consent on your forms and register your sender for business texting (A2P 10DLC).

Can I use testimonials?

Real ones, from real clients, shown honestly. The FTC's rule on consumer reviews and testimonials (16 CFR Part 465) bans fake reviews, bought reviews and some forms of review suppression.

Do state rules differ?

Yes. Some states require specific license statements, regulator contact details or other wording. Ask your compliance team for each state you're licensed in.

Who is responsible for compliance on my website?

You and your sponsoring company. A website provider can build to a checklist and your company's standards, but approval and responsibility stay with you and your company.

How often should I review my site for compliance?

Whenever your licenses, company or programs change, and at least every few months. Old blog posts and images are where outdated rate examples hide.

Does RESPA affect my website?

RESPA's Section 8 restricts giving or receiving things of value for referrals of settlement services. It matters for co-marketing with agents and for referral arrangements — run those past your compliance team.

Related guides

#compliance#Regulation Z#trigger terms#NMLS#fair lending

Launch day in 5 business days

Check your site in five minutes

Our free compliance checklist scores any loan officer website and lists what to fix first.

No payment on the form · Monthly plans cancel any time · Reply within 4 business hours