Compliance Center for Mortgage Loan Originators
Compliance for Mortgage Loan Originators
Federal licensing, disclosure, anti-fraud, and anti-money laundering rules apply to every MLO, whether you're closing your first loan or your five thousandth. This page pulls the core requirements together in one place, straight from NMLS, the CFPB, FinCEN, and the FBI, alongside the NAMB Strategic Sponsors built to help you put a compliance program in place and keep it running.
Licensing & registration is the foundation
Before an MLO can take a single application, federal law requires licensing or registration through a shared national system built and overseen by state regulators.
NMLS: your license lives here
The Nationwide Multistate Licensing System (NMLS) is the system of record for MLO licensing in nearly every state, the District of Columbia, and several U.S. territories. It's owned and operated by the State Regulatory Registry, a subsidiary of the Conference of State Bank Supervisors, and it's also where federally registered MLOs at banks and credit unions are recorded under the CFPB's Regulation G.
Under the SAFE Act, state-licensed MLOs must hold an NMLS Unique ID, complete 20 hours of NMLS-approved pre-licensure education plus any state-specific hours, pass the SAFE MLO Test, submit fingerprints for an FBI background check, and authorize a credit report pull. Staying licensed means completing annual continuing education and renewing every year during the November 1 through December 31 renewal window.
AARMR: who's behind the system
The American Association of Residential Mortgage Regulators is the national organization of state agencies that license, supervise, and examine mortgage brokers, lenders, and servicers. AARMR co-created NMLS with the Conference of State Bank Supervisors, and its mission is to coordinate how state regulators administer mortgage law so that supervision stays consistent from one state to the next.
For an MLO, AARMR's relevance is practical: the examiners who review your license file, run your renewal, and conduct state exams are drawn from AARMR's member agencies. Understanding that these regulators coordinate with each other, and with NMLS, helps explain why documentation and education requirements tend to look similar across state lines even though each state sets its own rules.
Federal disclosure & compensation rules
The Consumer Financial Protection Bureau enforces the rules that govern how loans are quoted, disclosed, and compensated. These four are the ones that touch an MLO's day-to-day work most directly.
TRID / Know Before You Owe
The TILA-RESPA Integrated Disclosure rule sets the timing, format, and content requirements for the Loan Estimate and Closing Disclosure on most closed-end consumer mortgages, including how tolerances and revised disclosures work.
CFPB: TRID resources →Loan Originator Compensation Rule
Regulation Z restricts paying an MLO based on the terms of a transaction and sets qualification, screening, and identifier requirements for anyone who originates loans.
CFPB: Loan originator rule →Ability-to-Repay / Qualified Mortgage
Before making a covered loan, a lender must make a reasonable, good-faith determination that the borrower has the ability to repay it, based on verified income, assets, and debts, not just the loan's initial terms.
CFPB: Mortgage resources →RESPA Section 8
RESPA prohibits kickbacks and unearned referral fees in exchange for settlement service business, and the CFPB has specifically flagged the risk that marketing services agreements can cross that line.
CFPB: RESPA compliance →Anti-money laundering & suspicious activity reporting
FinCEN, the Financial Crimes Enforcement Network, closed a long-standing gap in 2012 by bringing non-bank mortgage lenders and originators under the same Bank Secrecy Act obligations banks have carried for years.
Since the compliance deadline in August 2012, residential mortgage lenders and originators, brokers included, must maintain a written anti-money laundering program and file Suspicious Activity Reports on transactions that show signs of fraud or money laundering, generally within 30 days of becoming aware of the activity. FinCEN's reasoning was straightforward: brokers and originators deal directly with consumers and are well positioned to spot the red flags before a loan ever funds.
A SAR filing obligation isn't optional and it isn't discretionary once the facts meet the threshold. FinCEN and state regulators can examine a company's AML program the same way they'd examine any other compliance function, and gaps here carry the same enforcement exposure as a bank's would.
A written AML program generally needs
- Written policies and procedures tailored to the business's size and risk
- A designated compliance officer responsible for day-to-day oversight
- Ongoing employee training on red flags and reporting duties
- Independent testing of the program's effectiveness
- A process for filing SARs within the required timeframe
Fraud awareness, straight from the FBI
Two distinct but related threats show up constantly in FBI guidance for the mortgage and real estate industry: application fraud, and wire fraud aimed at closings.
Mortgage fraud
The FBI defines mortgage fraud as a material misstatement, misrepresentation, or omission relied on by a lender or underwriter to fund, purchase, or insure a loan. It can be committed by borrowers, but the FBI is explicit that loan originators and other industry professionals are common participants too, whether through straw buyers, inflated income or asset documentation, occupancy misrepresentation, or property flipping schemes. Penalties can run up to 30 years in federal prison and a $1,000,000 fine. Suspected fraud can be reported directly to the FBI at tips.fbi.gov.
Wire fraud & business email compromise at closing
Business email compromise is consistently among the costliest categories of cybercrime the FBI's Internet Crime Complaint Center (IC3) tracks, and real estate closings are a favorite target. Criminals monitor public listing sites and email threads for closing timelines, then send spoofed wiring instructions timed to land right before a buyer sends funds. IC3 data has shown real estate-linked BEC complaints and losses climbing year over year.
- Never treat emailed wiring instructions as final, and never send funds based on a last-minute change delivered only by email
- Verify any change in wiring instructions by phone, using a number you already had, not one supplied in the email
- Tell every borrower in writing, early in the loan process, that legitimate parties will never change wiring instructions by email alone
- If a wire is suspected fraudulent, report it to ic3.gov and the receiving bank immediately. Acting within 72 hours gives the best chance of recovery
NAMB Strategic Sponsors built for compliance
These three Strategic Sponsors focus specifically on the operational side of staying compliant: licensing, policy, and ongoing program support. NAMB membership is required to access member discounts.
Firstline Compliance, LLC
Provides operational and technology risk and compliance advisory services designed to keep regulatory adherence in place without slowing down growth.
firstlinecompliance.com →
Guide Mortgage Licensing
A full-service, nationwide mortgage licensing company that helps lenders and brokers navigate state licensing requirements as they open new markets.
guidemortgagelicensing.com →
Strategic Compliance Partners
Its Compliance Essentials Program sets the foundation for new brokers, with policies, training, and support built around putting a Compliance Management Program in place.
See the full partner directory, including education and technology sponsors, on the NAMB Member Benefits page.
Compliance resource directory
Bookmark this list. Every source on this page, in one table.
| Organization | What it covers | Link |
|---|---|---|
| NMLS Resource Center | Licensing, pre-licensure and continuing education, renewal requirements | Visit site |
| NMLS Consumer Access | Public lookup to verify any MLO's license status | Visit site |
| AARMR | State mortgage regulator coordination and policy | Visit site |
| CFPB Mortgage Resources | TRID, Loan Originator Rule, ATR/QM, RESPA compliance | Visit site |
| FinCEN | BSA/AML program and SAR filing requirements for RMLOs | Visit site |
| FBI — Mortgage Fraud | Fraud schemes, reporting, and prevention guidance | Visit site |
| FBI IC3 | Report wire fraud and business email compromise | Visit site |
