Protecting an email address while getting loan quotes means keeping shopping mail apart from loan mail. A quote form passes the address to several lenders at once, so one alias serves each quote round and closes when a lender is chosen. The loan itself sits on a permanent address used only for financial accounts. Closing payment instructions are checked by phone, never from the email thread alone.
Closing fraud at the end of the transaction#
The closing payment is the largest single payment in the transaction, and the Consumer Financial Protection Bureau describes how spoofed emails target it on its mortgage closing scams page: criminals compromise the email of real estate professionals, watch the correspondence to identify upcoming transactions, then send spoofed messages posing as the agent, settlement agent or legal representative, with false instructions for wiring closing funds.
The FBI Internet Crime Complaint Center recorded real estate fraud losses of $275,110,419 across 12,368 complaints in 2025, up from $173,586,820 in 2024 and $145,243,348 in 2023. Business email compromise, the method behind most closing wire fraud, cost $3,046,598,558 across 24,768 complaints in 2025. Those figures come from the FBI IC3 2025 Internet Crime Report, and they cover reported losses only.
A title company will never change its bank account or wiring instructions during a transaction. Before wiring money, always confirm the account name and number in person or by phone using a number agreed in advance. Instructions in an email are never followed on their own, and phone numbers or links inside an email are not used for verification.
Buyers identify two trusted individuals ahead of closing and, before wiring money, confirm the instructions, including the account name and number, with those representatives in person or by phone using a number previously agreed. The American Land Title Association states the same rule in its handout on protecting your money from closing scams: detecting a misdirected wire within 24 hours gives the best chance of recovering the money.
Lead generation behind the quote form#
A rate-quote form asks for a name, an email address, a telephone number and loan details. The site running the form is often not a lender. Comparison sites and lead generators make their money from the enquiry itself. The Consumer Financial Protection Bureau described this model in Circular 2024-01: lead generators sell information about prospective customers to lenders, and some send leads to providers who bid the highest for a specific type of lead. The full text is in the CFPB Circular 2024-01.
Mortgage comparison platforms drew a specific ruling in February 2023. The Bureau issued an advisory opinion on digital mortgage comparison-shopping platforms, stating that platforms generate potential leads for participants through consumers' interaction with the platform, and that an operator receives a prohibited referral fee under section 8 of the Real Estate Settlement Procedures Act when it steers shoppers to lenders in exchange for payment. The opinion is published as the CFPB advisory opinion on digital mortgage comparison-shopping platforms, and the CFPB press release states that companies operating these platforms appear to shoppers as if they provide objective lender comparisons, but may illegally refer people to only those lenders paying referral fees.
The sharing itself is written into the policy of the site that collects the form. LendingTree is the clearest example because its policy is explicit. Its privacy policy, last updated 8 July 2026, states that when a person submits a request for a loan, insurance or another financial product, LendingTree may disclose personal information to lenders and other third parties in its network, called Network Partners. It also states that Network Partners that interact with the person may use and retain personal information whether or not the person uses their services. The text is in the LendingTree privacy policy.
An address handed to one site can remain in the hands of companies the shopper never contacted, under their own policies, after the quote round is over, and no retention period is published.
How many recipients receive the details varies by site. An industry guide for 2026 describes LendingTree enquiries as shared, with three to five other lenders usually receiving the same data, per the Zeitro mortgage lead generation guide. That is a reported figure from an industry source, not a fixed count.
Insurance quotes run on the same mechanism, covered in the guide on how to protect your email when getting insurance quotes. Loans add two things insurance quotes do not have: the credit inquiry creates a second channel for the same flood, and the closing stage adds a fraud risk.
Trigger leads after a credit inquiry#
A mortgage application creates a second route for the address to travel, one that does not pass through the quote form at all. When a lender pulls a credit report, the inquiry signals to the credit bureaus that the person is shopping for a mortgage, and the bureaus could sell lists of such consumers to other lenders making prescreened offers. The FTC explains this in its shopping for a mortgage FAQs, which state that a mortgage application may trigger competing offers, and that the offers are based on information in the credit report suggesting the person meets criteria set by the creditor.
That channel changed in 2026. The Homebuyers Privacy Protection Act was signed on 5 September 2025 and took effect in March 2026. It amends the Fair Credit Reporting Act so that a consumer reporting agency may not furnish a prescreened report based on a residential mortgage credit request unless the transaction is a firm offer of credit or insurance and the recipient either holds documented authorisation from the consumer, originated or services the consumer's current mortgage, or is an insured bank or credit union holding the consumer's current account. The exact effective day is reported as both 4 March and 5 March 2026 in different sources, so this article states the month only.
The law has a limit. It restricts lists furnished by credit bureaus after a credit inquiry, not contact that follows from a form submitted directly to a comparison site, where consent is given on the form itself.
The opt-out for the bureau channel still exists and is worth using before applying. A person can opt out of prescreened offers for five years, or permanently by returning a signed form, through OptOutPrescreen.com or by calling 1-888-5-OPTOUT. The FTC page on how to stop junk mail states that requests are processed within five days but that prescreened offers can take up to 60 days to stop. The National Do Not Call Registry covers calls, not email.
| Route | Trigger | What travels | Control |
|---|---|---|---|
| Quote form | Form submitted to a comparison site | Name, email, phone, loan details to Network Partners | One alias per quote round, closed after the decision |
| Credit inquiry | Lender pulls a credit report | Prescreened-offer lists from the bureaus | Opt-out before applying; 2026 law limits bureau lists |
One alias per quote round#
A distinct alias is created for each quote site before the form is submitted, and the form receives that alias instead of the main inbox address. Mail from the site and its lead buyers arrives on the alias and forwards to the main inbox, so quotes still arrive. When mail from unrelated sellers begins arriving on an alias, the source is already recorded: the alias name identifies the site that received that address.
The alias stays active until the purchase decision is reached, because quotes arrive over days, not minutes. Closing an alias early can cut off a quote still under consideration. After the decision, the aliases for sites not chosen are closed, and the alias for the chosen lender stays active until the loan documents have arrived.
Closing the alias is the control that the opt-outs cannot provide. It stops the whole stream from that site and its buyers in one action, with no need to unsubscribe from each sender separately and no need to change the main address. The sequence for closing an alias safely is set out in the guide on what to do when an alias starts getting spam: identify the source, update the account address first, then pause or delete the old alias. The order matters, because mail sent to a paused or deleted alias bounces.
The permanent address for the loan#
A bought loan changes the position, in the same way a bought insurance policy does. Loan mail is not marketing mail. Statements and fraud alerts attach to a contract. Loan mail therefore moves to a permanent address used only for financial accounts once a lender is chosen. That address serves no other purpose, and it is never handed to a quote site.
The loan account also sits under the permanent financial address, not under the quote alias, because the quote alias was a shopping tool. The full reasoning is in the guide on whether to use a separate email for banking, which states the canonical position: the bank gets a permanent real dedicated address used only for financial accounts, never a masked or relay alias, because recovery, statements and fraud alerts depend on it, and aliases are for everything else.
What an alias cannot do for a loan quote#
An alias governs where mail arrives and whether that mail can be stopped. It does not govern what a quote site does with the other details on the form. Name, telephone number, date of birth, income details and property details still pass to the site and its buyers. An alias does not recall those details, and it does not remove an address from a list that already holds it.
Breach exposure is a further boundary. An alias that appears in a breach of a quote site or a lead buyer can be checked at Have I Been Pwned. Closing the alias ends that exposure. A report of fraud, if it happens, goes to the FBI Internet Crime Complaint Center at ic3.gov.
AliasFleet for loan quotes#
AliasFleet provides email aliases that forward to a verified destination inbox. A separate alias serves each quote site, and a control disables it when the quote round ends. The free plan includes 10 active aliases. The pricing page states the free tier as 10 active aliases, 1 verified destination inbox and 100 MB monthly forwarding. AliasFleet is not a disposable email service: aliases are managed, persistent forwarding addresses that last for years, receive password resets and receipts like any address, and stop forwarding the moment they are paused or deleted. What an alias is, and how it differs from plus addressing and relay addresses, is set out in the guide on what an email alias is.
AliasFleet does not control what a quote site does with the other details on the form, and it does not verify wiring instructions. It does not replace the phone call to the title company before a wire is sent.
