RESPA Section 8 Violation
Regulatory / Legal
HIGH
Med
TruLux's REβMortgage referral structure is a primary CFPB enforcement target. Penalties up to $10,000 per violation plus imprisonment. Many operators get this wrong, assuming co-branding is sufficient.
Mitigation: Properly structured AfBA β mandatory written disclosure before or at referral, explicit consumer choice language ("you are free to choose any lender"), distributions tied only to ownership percentage (never referral volume). Use a real estate attorney to draft all AfBA disclosure templates. Annual compliance audit. Never pay per-referral bonuses.
MLO W-2 Misclassification
Employment / Legal
HIGH
Med
DOL's 2024 "economic reality" test makes 1099 LO classification risky. Most wholesale lenders (including UWM) require W-2. Active FLSA lawsuits against NEXA, CrossCountry, and others. Exposure: back wages, benefits, penalties.
Mitigation: Classify all sponsored LOs as W-2 employees from day one. Use payroll service (Gusto or ADP). Consult employment attorney before any 1099 arrangements. The cost of W-2 is offset by UWM's pricing advantage unavailable to true 1099 brokers.
UWM Lender Concentration
Operational
HIGH
Low-Med
UWM's 2021 "All-In" ultimatum forced brokers to choose between UWM and Rocket/Fairway. Platform changes, pricing changes, or new ultimatums could disrupt the pipeline overnight if 80%+ of volume goes through one lender.
Mitigation: Maintain active approved accounts with 5β7 lenders. Cap UWM at 40% of monthly volume. Priority secondary lenders: AmWest (non-QM), Pennymac TPO (agency), Planet Home (ITIN). Run at least one non-UWM loan per month to keep relationships active.
Rising Rate Environment Returns
Market
MED
Med
Rate spikes reduce purchase originations significantly. Historically, every 1% rate increase eliminates ~15% of qualified buyers. 2022β2023 proved how quickly volume can collapse.
Mitigation: Build non-QM specialty (DSCR, bank statement) as rate-agnostic pipeline. Investors continue borrowing at any rate if DSCR works. Maintain VA/FHA assumable mortgage expertise. Develop refi pipeline for when rates inevitably drop.
TRID Timing Violation
Compliance
MED
Med
Failure to deliver Loan Estimate within 3 business days of application, or Closing Disclosure at least 3 business days before closing, triggers CFPB enforcement. Manual tracking fails at scale.
Mitigation: Automate TRID deadline calculation from application date entry. Zapier/Make workflows create calendar events + 2-day warning alerts. Weekly pipeline compliance review. Designate compliance officer role as team grows beyond 5 LOs.
Data Security / PII Breach
Cybersecurity
MED
Low
Mortgage files contain SSNs, bank statements, tax returns, employment records. VA team access to borrower PII creates breach risk. GLBA compliance requires active data security program.
Mitigation: NDAs with all VAs (PH-enforceable). Floify's document portal β borrowers upload directly, not emailed. Google Workspace with 2FA mandatory. Principle of least privilege: VAs see only what their role requires. Cyber liability insurance ($1,500β$3,000/year).