Introduction

One wrong sentence on a sales call can cost a mortgage broker $500 — and if a court decides the violation was willful, that number jumps to $1,500 per call. Violations of the National Do Not Call Registry carry even steeper consequences, with fines exceeding $43,000 per call. And because TCPA liability is strict, intent doesn't matter — the call itself is enough.

The stakes have never been higher. The FCC has closed the so-called "lead generator loophole," requiring that consumers give one-to-one written consent naming a specific lender before that lender can call or text them. Consent can no longer be shuffled horizontally between lenders, and the old aggregator model — buying data from casual browsers who convert "less than 1% of the time" — is on its way out.

Here's what catches many brokers off guard: the problem isn't just who you call. It's what you say once you're on the line. A federal judge recently allowed TCPA claims to proceed against a company whose texts looked informational on the surface, because the context implied a sales motive. As compliance analysts put it, the TCPA doesn't require an explicit mention of a service if the context suggests one is being offered.

The rise of AI voice agents adds another layer of risk. Regulators now treat AI agents like autodialers, and industry leaders report documented "horror stories" — AI quoting outrageously low interest rates, failing to disclose it's AI, or neglecting to mention the call is being recorded. Each of these is a compliance failure waiting to become a lawsuit.

So what exactly should never come out of your mouth — or your AI agent's? The biggest verbal landmines include:

• Sales language disguised as "informational" messaging, which strips away TCPA exemptions
• Rate quotes that aren't locked, accurate, and documented
• Missing disclosures — your name, your company, and a contact method, required at the start of every call
• Any outreach outside the 8 a.m. to 9 p.m. local-time window
• Continued contact after a "STOP" request, which law firms call the one defense that holds up under every legal theory

The good news: compliant conversations convert better than risky ones. When consent is properly documented, disclosures are clear, and opt-outs are honored instantly and automatically, brokers build trust instead of liability. That's the same philosophy behind CallMyLeads' approach — every caller knows they're talking to AI, every opt-out is honored immediately, and consent is collected explicitly in the booking flow.

In this guide, we'll walk through the specific statements, scripts, and habits that put mortgage brokers at legal risk — and what to say instead.

Key Concepts

The compliance ground under mortgage brokers has shifted hard and fast. The FCC closed the "lead generator loophole," requiring one-to-one consent that names a specific lender — consent can no longer be passed around like a business card. Violations run $500 per call, up to $1,500 for willful breaches, and National Do Not Call Registry fines exceed $43,000 per call.

Brokers and their AI agents must treat every outreach as a compliance event. The TCPA does not need an explicit sales pitch to trigger liability; if the context implies a service is being offered, the exemption evaporates. A federal court let claims proceed against a real estate company whose "informational" text bundled appraisal, title, and escrow services — the built-in sales motive was enough. Even fraud alerts and transaction notifications lose their safe harbor when they drift toward promotion.

• Opening a call without stating your name, the entity you represent, and a contact method
• Calling outside the 8 a.m.–9 p.m. local-time window
• Using language that implies a rate, product, or service offer without documented consent
• Failing to honor a "STOP" request or Do Not Call registration immediately
• Letting an AI agent quote rates or skip required AI and recording disclosures

AI voice agents are treated as autodialers and carry the same consent and registry obligations. Industry leaders report horror stories of AI quoting outrageously low rates, failing to disclose they are AI, or skipping recording notices. Landline-versus-cell checks, opt-out tracking, and per-call audit trails are not optional. The Seventh Circuit narrowed Do-Not-Call text liability in its jurisdiction, but Nixon Peabody advises that honoring every opt-out remains the best defense under every legal theory.

CallMyLeads builds these guardrails into every conversation: explicit consent captured at lead intake, mandatory disclosures at the top of every call, instant opt-out honoring, and honest AI that never guesses at rates. The cost of a single violation dwarfs the cost of getting it right the first time.

Best Practices

The compliance landscape has shifted from "ask forgiveness later" to "prove consent first" — and the penalties for getting it wrong start at $500 per violation and climb to $1,500 for willful violations, with National Do Not Call Registry breaches adding more than $43,000 per call. TCPA rules now treat AI voice agents as autodialers, require one-to-one consent for every lender, and consider implicit sales language the same as an explicit pitch.

The FCC's one-to-one consent rule means you cannot contact a lead unless that consumer knowingly gave permission to your specific business — horizontally transferred consent from aggregators no longer counts. Even remarketing to past customers requires documented express written consent in the form the rules prescribe. At the same time, courts have held that "the TCPA doesn't require an explicit mention of a service if the context suggests one is being offered," so informational scripts that imply a sales motive lose their exemption.

• Open every call with the mandatory disclosures — your name, the entity you represent, and a contact method — and stay inside the 8 a.m.–9 p.m. local-time window.
• Strip implicit sales language from every "informational" text and call; if a message could reasonably be read as promoting a service you benefit from, it warrants a review.
• Honor every opt-out immediately and automatically across calls and texts — this remains your best defense under every legal theory regardless of how courts rule on text liability.
• If you use AI voice agents, require AI disclosure, recording disclosure, landline-versus-cell checking, and per-call audit trails — and guard against the documented risk of AI quoting inaccurate rates.

CallMyLeads builds these safeguards into every booking flow: consent is captured explicitly at lead capture, opt-outs are honored instantly, and every AI interaction discloses its identity while keeping your leads, data, and calendar under your control.

Implementation

Knowing what not to say is only half the battle — the other half is building outreach habits that keep every call and text on the right side of the TCPA. Here is how to put the rules into practice, step by step.

Start with your consent records. Before any outreach, verify that the lead gave one-to-one written consent naming your specific business. The FCC's rule prohibits consent being "moved horizontally among lenders without the express approval of the consumer," so a lead bought from an aggregator is a liability unless the consumer directly approved contact from you. Even remarketing to your own past customers requires documented express written consent in the form the rules require, according to National Mortgage News.

Next, audit every script for implied sales language. As Ncontracts notes, "The TCPA doesn't require an explicit mention of a service if the context suggests one is being offered." A message that could reasonably be read as promoting something your brokerage benefits from — even one framed as an "update" or "notice" — warrants a compliance review before it goes out.

Then build your calling discipline around the mandatory disclosures:

• Open every call with your name, the entity on whose behalf you're calling, and a contact method, per TCPA disclosure rules.
• Call only between 8 a.m. and 9 p.m. in the recipient's local time.
• Honor every opt-out immediately and automatically — Nixon Peabody calls this "your best defense under every legal theory."
• Scrub numbers against the National Do Not Call Registry, where violations can add more than $43,000 per call in fines.

If you use AI voice agents, tighten the screws further. The FTC treats AI voice agents like autodialers, and industry reporting documents real horror stories: AI quoting "outrageously low interest rates" or failing to disclose it's AI or that the call is recorded. Require AI disclosure, recording disclosure, landline-versus-cell checking, and a per-call audit trail — because when the auditor comes, you need something to show.

The stakes make this worth the effort. TCPA penalties run $500 per violation, up to $1,500 for willful ones, and strict liability means intent doesn't matter — class actions often end in multi-million-dollar settlements. CallMyLeads builds these guardrails into every response system: consent collected explicitly in the booking flow, AI always identified as AI, and opt-outs honored instantly, so compliance runs in the background while your team focuses on the leads who want to talk.

Conclusion

The rules of mortgage broker outreach have changed, and the old playbook now carries real financial risk. With fines of $500 per violation — up to $1,500 for willful ones — plus more than $43,000 per call for Do Not Call Registry violations, a single careless script can cost more than a month of marketing spend.

The safest path forward comes down to a short list of habits. Get them right, and most TCPA exposure disappears before a dial tone is ever heard.

• Never contact a lead without documented one-to-one consent naming your specific business. The FCC has closed the lead generator loophole, so consent can no longer be transferred among lenders without the consumer's express approval.
• Audit your scripts for implicit sales language. Courts have allowed TCPA claims to proceed where a message never named a service but the context suggested one was being offered — so "informational" texts that hint at an offer are not safe.
• Open every call with the mandatory disclosures: your name, the entity you're calling on behalf of, and a contact method. Stay inside the 8 a.m. to 9 p.m. local-time window.
• Honor every opt-out immediately, across calls and texts. Even after a recent court ruling narrowed Do-Not-Call text liability, legal guidance is clear that processing STOP requests "remains your best defense under every legal theory."
• If AI voice agents touch your leads, require AI and recording disclosure, landline-versus-cell checking, and audit trails — and never let an agent quote rates it can't verify. Horror stories of AI "hallucinating" outrageously low interest rates are already circulating in the industry.

One nuance worth remembering: the legal landscape is still shifting. The Seventh Circuit's ruling on text messages is narrow, applies only in three states, and does not touch the consent rules that drive most TCPA risk for SMS marketing. Relaxing compliance because of one favorable ruling is exactly the wrong read.

For brokers handling high lead volume, the practical challenge is doing all of this consistently — every call, every text, every hour of the day. That's where systems earn their keep. CallMyLeads answers every new lead in seconds, 24/7/365, with callers always told they're speaking with AI, explicit consent collected at booking, and opt-outs honored immediately and automatically. Your leads, your data, and your calendar stay yours.

The brokers who thrive in this environment won't be the ones who say the most — they'll be the ones who say the right things, to the right people, with consent on file. Stop paying for leads you never get to talk to: make sure every new lead gets a fast, compliant response before the interest disappears.