SAFE Act — Mortgage Loan Originator Licensing

The Secure and Fair Enforcement for Mortgage Licensing Act (SAFE Act, 2008) — codified at 12 U.S.C. §§ 5101–5116 — requires all individuals who originate residential mortgage loans to be either licensed (if working for a non-bank mortgage company) or registered (if working for a federally regulated depository institution). For the disclosure rules governing the mortgage process, see RESPA real estate settlements. For CFPB enforcement of this statute, see CFPB consumer financial protection. The SAFE Act created the Nationwide Multistate Licensing System and Registry (NMLS) — a federal database where consumers can look up any mortgage loan originator's license status, disciplinary history, and employment history. Congress passed the SAFE Act in response to the mortgage crisis, where unqualified and sometimes fraudulent mortgage brokers originated trillions of dollars of toxic loans with no federal oversight. The law's core requirement: before a person can take a mortgage loan application or negotiate mortgage terms, they must pass a national exam, complete pre-licensing education, pass a background check, and be licensed by their state. Under Dodd-Frank (2010), the CFPB took over administration of the SAFE Act and the NMLS from the Conference of State Bank Supervisors.

Current Law (2026)

Legal Authority

• 12 U.S.C. § 5103 — License and registration required (any individual engaged in the business of a mortgage loan originator — taking a loan application or offering or negotiating terms of a residential mortgage loan — must be licensed or registered; no exemptions for occasional or incidental activity)
• 12 U.S.C. § 5104 — State license and registration application requirements (minimum standards: pre-licensing education, national exam, criminal background check, credit report review, surety bond or recovery fund; states may impose additional requirements; the NMLS is the single portal for state license applications in all participating states)
• 12 U.S.C. § 5105 — Minimum standards for state licensing (states must ensure each licensed MLO: completed at least 20 hours of pre-licensing education; passed the National SAFE Mortgage Loan Originator Test; completed background check; no felony conviction in the past 7 years; no financial crimes conviction ever; demonstrated financial responsibility)
• 12 U.S.C. § 5106 — Standards for registration (depository institution employees must register with the NMLS; background check required; employer responsible for registration; but no exam or pre-licensing education required — the regulatory gap that critics argue creates a two-tier system)
• 12 U.S.C. § 5107 — NMLS Registry (the Nationwide Multistate Licensing System provides: publicly accessible information on licensees; employment history; adverse actions and disciplinary history; unique identifier that must appear on all loan documents; facilitates multi-state licensing; CFPB maintains the federal registry component)
• 12 U.S.C. § 5108 — Enforcement (states are primarily responsible for licensing and disciplining non-bank MLOs; federal banking regulators enforce registration requirements for bank employees; CFPB has authority to establish minimum standards if states fail to enact the SAFE Act)
• 12 U.S.C. § 5110 — Background checks (fingerprint-based FBI background check required for all MLOs; states must assess convictions for financial crimes, fraud, dishonesty, breach of trust; mandatory denial for MLOs with certain convictions)
• 12 U.S.C. § 5113 — Preemption (the SAFE Act establishes minimum standards; states may impose stricter requirements; federal law does not preempt more protective state licensing laws)
• 12 U.S.C. § 5114 — Liability (MLO's unique identifier must appear on all loan documents, including applications and advertisements; helps consumers verify the person they're dealing with is actually licensed)
• 12 U.S.C. § 5116 — CFPB authority (Dodd-Frank transferred administrative responsibility from the Conference of State Bank Supervisors to the CFPB; CFPB can establish minimum standards if states fail to comply and issue rules implementing the Act)

How It Works

The SAFE Act's operational backbone is the Nationwide Multistate Licensing System (NMLS) — a centralized database every state uses to issue, track, and display mortgage loan originator credentials. The free NMLS Consumer Access portal lets anyone verify whether a specific originator is licensed, see which states they're licensed in, check their disciplinary history, and trace their employment across mortgage companies. An unlicensed person who originates a residential mortgage commits a federal violation — and courts have found such loans may be unenforceable.

A significant structural gap runs through the Act's two-tier system: bank employees who originate mortgages must only register with the NMLS — no national exam, no pre-licensing education, no continuing education required. Independent mortgage broker employees must satisfy all of those requirements. The split reflects the theory that bank employees are subject to direct federal prudential supervision, but critics argue it leaves consumers dealing with bank loan officers who may be less trained than their broker counterparts. State requirements add a further layer: some states impose state-specific exams beyond the national test, surety bond requirements range from $25,000 to $300,000 or more depending on loan volume, and states like New York and California set requirements well above the federal minimums — an MLO must be separately licensed in each state where they work (the NMLS streamlines multi-state applications). Every licensed originator carries a unique NMLS number that must appear on every mortgage document — application, loan estimate, and closing disclosure — creating a traceable chain from origination through closing.

How It Affects You

If you're getting a mortgage: Look up every mortgage professional before you sign anything at NMLS Consumer Access (nmlsconsumeraccess.org) — it's free, public, and takes 30 seconds. Search by name, company, or NMLS number. Verify the license is active in your state and check for any disclosed regulatory actions, complaints, or disciplinary history. Every licensed originator must display their NMLS number on every document, including loan estimates and closing disclosures — if someone can't give you their NMLS number or it doesn't appear on their paperwork, that's a red flag. If you believe you've worked with an unlicensed person, file a complaint with your state banking regulator (find yours at csbs.org/regulatory-guidance/state-regulators) and with the CFPB at consumerfinance.gov/complaint.

If you're pursuing a mortgage loan originator license: Before you can take a single loan application, you need: (1) 20 hours of SAFE Act-approved pre-licensing education, including 3 hours of federal law, 3 hours of ethics, 2 hours of non-traditional mortgage products, and 12 hours of electives; (2) a passing score of at least 75% on the National SAFE Mortgage Loan Originator Test (wait 30 days before retaking after a fail; 6 months after three failures); (3) a criminal background check — any felony in the past 7 years, or any financial-crime felony ever, is a mandatory disqualifier; and (4) annual 8-hour continuing education to maintain the license. Apply through the NMLS at nmls.stateregulatoryregistry.org, which handles multi-state applications through a single portal. California, New York, and Texas add state-specific exam requirements and higher fees on top of federal minimums — check NMLS for current requirements in each state where you plan to originate.

If you're a licensed MLO moving to a new state: Federal law gives you up to 120 days of "temporary authority to operate" in a new state while your license application is pending — you can originate loans immediately without waiting for full approval, provided you held a valid license in another state within the past 30 days and have applied in the new state through the NMLS. The temporary authority ends when the new license is granted, denied, withdrawn, or when 120 days elapse, whichever comes first. This covers interstate career moves and expanding into neighboring states — it does not apply to anyone who has never been licensed before.

If you received a mortgage from an unlicensed originator: Taking a loan application or negotiating mortgage terms without a license is a federal SAFE Act violation and likely a state criminal offense. For you as the borrower, courts have split on enforceability — some have held that unlicensed origination voids the loan; others have not. More practically, an unlicensed originator is not subject to CFPB or state regulatory oversight and may have charged illegal fees or failed to make required disclosures. File complaints with: (1) your state banking regulator (csbs.org/regulatory-guidance/state-regulators), (2) the CFPB at consumerfinance.gov/complaint, and (3) the NMLS Consumer Protection Complaint Center. If you suffered financial harm, consult a consumer financial protection attorney about private remedies under applicable state law.

State Variations

Every state has enacted the SAFE Act or equivalent legislation. State-specific requirements beyond the federal minimums:

• New York (Article 12-E): Additional state exam, higher net worth requirements for mortgage bankers
• California (DFPI & DRE): California has two separate mortgage licensing regimes depending on whether you're a mortgage banker or broker; both require SAFE Act compliance plus additional state requirements
• Texas (OCCC & SML): Requires state-specific exam portion; separate licensing tracks for mortgage bankers vs. servicers

Implementing Regulations

The CFPB's implementing regulations for the SAFE Act cover two parallel tracks: 12 CFR Part 1007 (Regulation G) for employees of federally regulated depository institutions, and 12 CFR Part 1008 (Regulation H) for state-licensed originators.

12 CFR Part 1007 — Regulation G: Federal Registration of Residential Mortgage Loan Originators at Depository Institutions. Bank and credit union employees who originate mortgages are not state-licensed — they register through the NMLS under federal regulation instead. Key provisions:

• § 1007.103 — Registration requirement: every employee of a covered financial institution (federally regulated bank, thrift, or credit union) who acts as a mortgage loan originator must (1) register with the NMLS; (2) obtain a unique identifier; and (3) maintain that registration; the institution is responsible for ensuring each MLO employee's registration is current; failure to register is a violation attributable to the institution; a background check is required, but — unlike the state licensing track — no pre-licensing education, no national exam, and no continuing education are required; this regulatory gap between bank employees and independent brokers is the SAFE Act's most persistent criticism
• § 1007.104 — Policies and procedures: every institution employing registered MLOs must adopt written policies and procedures designed to assure compliance; the policies must be appropriate to the nature and size of the lending operation; regulators (OCC, Federal Reserve, FDIC, NCUA, CFPB) examine these policies during routine supervisory exams
• § 1007.105 — Unique identifier disclosure: the institution must make each registered MLO's NMLS unique identifier available to consumers "in a manner and method practicable to the institution"; a registered MLO must provide their unique identifier (1) upon consumer request; (2) before acting as a loan originator in connection with any residential mortgage loan; and (3) on all loan application documents; this disclosure requirement is identical for registered bank employees and licensed independent brokers — even though their underlying credentials differ substantially

Part 1007 creates the federal registration track that covers the majority of bank employees originating mortgages at JPMorgan Chase, Bank of America, Wells Fargo, and community banks. Registration is administered through the same NMLS portal as state licensing, but the substantive requirements are lower — no education, no exam. The consumer-facing implication: the NMLS profile for a registered bank MLO and a licensed independent broker look similar, but the regulatory scrutiny behind them differs significantly. Always use NMLS Consumer Access to check whether you're dealing with a licensed or registered originator and whether any disciplinary actions appear.

12 CFR Part 1008 — Regulation H: State Licensing Standards. The CFPB's implementing regulations for the SAFE Act are at 12 CFR Part 1008 — Regulation H. The regulation has four operative subparts: minimum standards for state licensing (Subpart B), definitions (Subpart A), CFPB backup authority (Subpart C), and NMLSR administration (Subpart D). Key provisions:

• § 1008.103 — Individuals required to be licensed: every individual who acts as a mortgage loan originator — meaning they take a residential mortgage loan application or offer or negotiate the terms of a residential mortgage loan for compensation — must hold a valid state license or a federal registration; the section enumerates exemptions (registered loan originators employed by depository institutions, nonprofit employees making certain loans, and individuals doing purely administrative tasks that don't involve taking an application or negotiating terms)
• § 1008.105 — Minimum license requirements: to be eligible for a loan originator license, a state must require the individual to: (1) complete at least 20 hours of pre-licensing education (including 3 hours of federal law, 3 hours of ethics, 2 hours of non-traditional mortgage products, and 12 hours of electives); (2) pass the National SAFE Mortgage Loan Originator Test with a score of at least 75% (30-day waiting period after first two failures; 6-month waiting period after third failure); (3) pass a criminal background check — mandatory disqualification for any felony in the past 7 years or any financial-crime felony ever; and (4) demonstrate financial responsibility through credit report review
• § 1008.107 — Annual renewal: licensed MLOs must complete 8 hours of annual continuing education (including 3 hours of federal law, 2 hours of ethics, 2 hours of non-traditional mortgage lending, and 1 hour of elective); the same approved course cannot be taken again in the same year; "successive years" restriction prevents gaming the system with the same materials; licenses lapse if renewal requirements are not met
• § 1008.109 — Effective dates: a state must provide that licensing requirements apply to all individuals originating loans in the state regardless of where the individual is physically located — closing the loophole of a broker claiming to work "remotely" from a different jurisdiction
• § 1008.111 — State supervisory authority requirements: every state must maintain a licensing and supervisory authority empowered to: grant and deny licenses; examine licensees; take disciplinary action (suspension, revocation, cease-and-desist); impose civil money penalties; report license denials and disciplinary actions to the NMLS; and cooperate with other state and federal regulators in multi-state examinations
• § 1008.113 — Performance standards: for the CFPB to determine a state's program provides "effective supervision," the state must demonstrate: adequate examination staffing; timely processing of applications and renewals; prompt investigation of consumer complaints; effective enforcement against unlicensed activity; and accurate, current maintenance of NMLS data
• § 1008.115 — Noncompliance determination: if a state's program does not meet minimum standards, the CFPB must notify the state and give an opportunity to correct; if the deficiency is not corrected, the CFPB publishes a finding of noncompliance — triggering the CFPB's backup licensing authority under Subpart C
• § 1008.203 — CFPB backup licensing system: if a state is found noncompliant under § 1008.115, the CFPB may establish and administer its own loan originator licensing system for that state — effectively federalizing state mortgage licensing as a backstop; this authority has never been formally invoked but creates a strong incentive for state compliance
• § 1008.301 — NMLSR administration: the Nationwide Multistate Licensing System and Registry must: maintain a public consumer access portal; store and display employment history, disciplinary history, and licensing actions; enable multi-state applications through a single portal; ensure data accuracy and currency; the administrator (CSBS/AARMR) must report annually to CFPB on system finances and operation
• § 1008.307 — NMLSR fees: CSBS, AARMR, or the CFPB (as administrator) may charge reasonable fees to cover NMLS costs; the Bureau reviews fees for reasonableness; fees are charged both to applicants (for license applications) and to mortgage companies (for company registration and NMLS participation)
• § 1008.401 — CFPB examination authority: the CFPB may examine any books, papers, records, or other data of any loan originator operating in a state where the CFPB has established a backup licensing system; the examination authority runs parallel to state authority and enables coordinated multi-regulator examinations

The regulation creates a federal floor / state ceiling structure: states can exceed federal minimums but cannot fall below them. The CFPB's backup licensing authority provides the enforcement mechanism — states face federalization of their licensing system if they allow their programs to fall below federal standards. NMLS reporting requirements bind states into a unified data infrastructure even when their substantive standards vary.

Recent Developments

• Temporary authority to operate (2018): Congress authorized mortgage loan originators who are licensed in one state to operate temporarily in a new state while their license application is pending — a response to complaints that the licensing process was too slow for MLOs who moved states. Temporary authority lasts 120 days.
• Remote work and COVID adaptations: State regulators worked through the NMLS to permit remote work for licensed MLOs during and after COVID, addressing questions about whether originating loans from a home office in a different state than the employer's licensed location violated state law.
• CFPB SAFE Act enforcement: The CFPB has taken enforcement actions against mortgage companies that failed to ensure their loan originators were properly licensed, including cases where companies allowed unlicensed "assistants" to take loan applications or negotiate terms.
• Tribal lending and SAFE Act: Federal courts have wrestled with whether tribal lenders are subject to SAFE Act licensing requirements; most have concluded that the federal registration requirement applies even to tribal entities, though state licensing jurisdiction over tribes remains contested.