How to Audit a Mortgage Lead Vendor Before You Buy

Auditing a mortgage lead vendor comes down to five checks: where the leads come from and whether consent is documented; whether exclusivity is contractual and verifiable; what the invalid-lead credit policy says in writing; what volume and pacing are actually committed; and whether every lead carries a timestamped event log you can inspect. A vendor that passes will enjoy the questions, because good operations are easy to show off. A vendor that fails will answer with adjectives.

We're a lead vendor, so read this with that in mind. But that's also why the checklist is real: these are the questions we've built our own platform to answer, and the ones we'd ask anyone else.

1. Source and consent: where do these leads come from?

Every audit starts here, because everything else inherits from it. Ask the vendor to walk you through a lead's origin, step by step: what does the consumer see, what do they fill out, what do they agree to?

Good answers describe a first-party flow: a consumer site the vendor operates, a full inquiry form, express written consent to be contacted (captured and stored on each lead record, retrievable if anyone ever asks).

Bad answers involve fog: "trusted partners," "data providers," "a network of publishers." Fog means the vendor is buying inventory it didn't generate and can't fully vouch for. Since the trigger-lead restrictions took effect in March 2026, provenance fog is also a compliance question, not just a quality one.

Ask the follow-up: "If I get sued over a call to one of your leads, can you produce the consent record?" The pause tells you as much as the answer.

2. Exclusivity: can they prove a negative?

"Exclusive" is the most abused word in this industry, because reselling is invisible to the buyer: you can't see the other four originators who got the same record. So don't evaluate the claim; evaluate the proof.

• Is exclusivity in the contract, with plain language about resale, re-routing, and recycling?
• Does each lead carry a delivery record showing who it was routed to and when, a record where a second recipient would have to appear?
• What's the remedy if a lead turns out to have been sold elsewhere?

A vendor with real exclusivity has infrastructure that demonstrates it. A vendor with marketing exclusivity has a slide.

3. The credit policy: what happens when a lead is bad?

Some leads are junk: disconnected numbers, fake names, consumers outside your market, borrowers already mid-loan with someone else. This is true for every vendor, including us. The audit question isn't whether bad leads happen; it's who pays for them.

Get the credit policy in writing and check four things:

• What qualifies. Wrong numbers and fake identities should be automatic. The more categories the policy names explicitly, the fewer arguments later.
• How you flag. It should be a button in a portal, not an email negotiation.
• Who decides, against what. Disputes should resolve against data (call attempts, timestamps, the lead record), not against a salesperson's discretion.
• What a credit means. A real credit restores your allocation: the vendor still owes you a lead in its place. A "credit" toward some future invoice line is a weaker promise.

4. Volume and pacing: what's actually committed?

Ask what the contract commits the vendor to deliver, and over what rhythm. You're listening for numbers: a monthly allocation, measured daily, delivered at a steady pace across the month rather than in a month-end dump. Then ask the uncomfortable capacity question: "How many loan officers do you serve in my market, and what's the cap?" Exclusive leads plus unlimited seats is arithmetic that doesn't work; a vendor who caps seats can tell you the cap.

If there's no committed number, you're not buying a supply. You're buying a maybe, at a fixed price.

5. The event log: the audit that never ends

Everything above is what a vendor promises. The per-lead event log is how you check what they did. Created, scored, routed (to a named recipient), alerted, delivered, booked, each with a timestamp. With it, you can reconcile any invoice line to a real event chain: this lead, delivered at this moment, to me alone, worked this fast.

Make it a yes/no question in your evaluation: "Will I be able to see the full event history of every lead I pay for?" This is the single highest-signal question on the list, because the log is expensive to fake and trivial to show. It's why we put one on every lead: the invoice and the log should tell the same story, and the client should be able to check.

Running the audit

Practically: put the five areas in an email, send it to the vendor before any sales call, and grade the responses on specificity. Then, if you proceed, treat the first allocation cycle as the second audit: work the leads with real discipline, flag the invalids, watch the pacing chart, and reconcile the month against the contract. The vendor you want is the one whose numbers look the same in their reporting and yours.

The bottom line

You can't inspect a lead before you buy it, but you can inspect the machinery around it: source and consent, provable exclusivity, a written credit policy, committed volume with honest pacing, and a per-lead log that ties it all together. Vendors who run good machinery will show it to you eagerly. Treat reluctance as data.