Marketing AI Is Where The Fair-Housing Bodies Are Buried

This article was edited and condensed on June 16, 2026.

For the past two years, the mortgage industry’s fair-lending debate has focused almost entirely on underwriting: adverse action notices, model explainability, Shapley values, and Regulation B (Reg B) compliance after the April 22, 2026 amendment. Those issues dominate the working groups, webinars, and governance toolkits. Meanwhile, the systems that bring borrowers into the funnel in the first place (e.g., paid social, lookalike modeling, AI-curated lead lists, programmatic retargeting, etc.), operate on platforms that lenders don’t control, under rules that lender marketing teams may never have read, and with audit trails stored on third party servers. 

The Federal Pullback Did Not Save Marketing AI

The April 22, 2026, final rule amending Reg B — effective July 21, 2026 — changed two things that matter for marketing AI. First, the CFPB removed Reg B’s effects-test framework and adopted the Bureau’s view that ECOA does not authorize disparate-impact claims. While the foregoing interpretation is significant, courts remain the final arbiters of whether and what ECOA permits. Second, the rule narrows the anti-discouragement prohibition under 12 C.F.R. § 1002.4(b) by tying it to an oral or written statement — including spoken words, written words, or visual images — that the creditor knows or should know would lead a reasonable person to believe that credit would be denied, or offered on less favorable terms, because of a prohibited basis. Although affirmative targeting of one group is no longer treated as discouragement of another, the rule was merely narrowed and not eliminated.

Notwithstanding the foregoing, the Reg B amendment did not alter the Fair Housing Act. 42 U.S.C. § 3604(c) prohibits making, printing, or publishing any notice, statement, or advertisement with respect to the sale or rental of a dwelling that indicates a preference, limitation, or discrimination based on a protected characteristic. 42 U.S.C. § 3605 separately governs residential real-estate-related transactions, including the making and purchasing of loans secured by residential real estate. For mortgage lenders, both provisions remain important. 24 C.F.R. § 100.75(c)(3) also reaches the selection of media or locations for housing advertising when that selection denies a protected segment of the housing market information about housing opportunities. None of these provisions requires a discouraging statement, intent, or any change under the April 22 rule.

Even though HUD’s 2013 disparate-impact rule at 24 C.F.R. § 100.500 remains in effect as of mid-June 2026, HUD proposed rescinding it on January 14, 2026 (i.e., the comment period closes on February 13, 2027). Assuming that proposed rescission is indeed finalized, the doctrine nevertheless survives in the courts under Texas Department of Housing & Community Affairs v. Inclusive Communities Project, Inc., 576 U.S. 519 (2015), which stands for the proposition that plaintiffs must identify a specific policy and satisfy a robust causality requirement at the pleading stage, confront a defendant’s substantial, legitimate, and nondiscriminatory interests, and address any less-discriminatory alternative. Once again, while such limits may create a meaningful defense, that doesn’t mean the theory has disappeared. 

In addition, State UDAP statutes pick up whatever the federal retraction sets down. New York’s FAIR Business Practices Act, which was signed by Governor Hochul on December 19, 2025, amends General Business Law at § 349, in order to extend the attorney general’s authority to address deceptive practices, as well as “unfair” and “abusive” conduct, using definitions that track Section 5 of the FTC Act and the CFPA respectively, with extraterritorial reach against non–New York businesses whose conduct affects New York residents. A national lender running paid social campaigns into New York ZIP codes is now within the attorney general’s reach for unfair or abusive marketing practices, regardless of whether those practices would have survived a § 1002.4(b) discouragement claim under the prior standard. Of course, New York is not alone, with California, Illinois, Massachusetts, and other states already having UDAP statutes that can reach this conduct as well.

Although ECOA itself did not disappear on July 21, the amended rule removes the effects test but preserves disparate-treatment liability, including liability for facially neutral criteria that functions as a proxy for a protected characteristic when it is designed or applied with the intent to either advantage or disadvantage based on a prohibited basis. A lookalike audience built deliberately on a proxy, or a bid modifier chosen because it tracks a protected class, is not insulated by the disparate-impact retraction. 

HMDA creates another exposure point. The geographic distribution of a lender’s applications relative to its market has been central to DOJ and state redlining theories for the past decade. Paid social campaigns that steer spend toward some census tracts and away from others shape that distribution before any application is submitted. A redlining claim does not need the lender’s ad-targeting parameters; the lender’s HMDA data and a map may be enough. Geo-targeted marketing sets the application pattern, and HMDA makes it visible.

In summary, the federal pullback merely redistributes risk and doesn’t eliminate it.

What The Federal Government Has Already Sued For

The marketing-AI enforcement record is not theoretical; it is seven years deep. For instance, HUD charged Facebook with violations of the Fair Housing Act on March 28, 2019. In The Secretary, U.S. Department of Housing and Urban Development, on behalf of the Assistant Secretary for Fair Housing & Equal Opportunity v. Facebook, Inc., FHEO No. 01-18-0323-8 (Mar. 28, 2019), the charge alleged that Facebook permitted advertisers to exclude users from housing ads by drawing a red line around neighborhoods on a map, by toggling off men or women, by excluding non-English speakers, etc. The charge separately alleged that Facebook’s own personalization algorithms used protected-class-correlated signals to determine who would see housing ads.

After Facebook elected federal-court review, HUD referred the matter to the Department of Justice, which filed United States v. Meta Platforms, Inc. f/k/a Facebook, Inc., No. 1:22-cv-05187 (S.D.N.Y.) on June 21, 2022. The settlement was entered six days later, on June 27, 2022, wherein Meta agreed to: (1) retire the Special Ad Audience tool — a lookalike modeling product that delivered ads to users who “look like” the advertiser’s source audience; (2) to stop offering housing-ad targeting options that directly describe or relate to FHA-protected classes; (3) to build what the parties called the Variance Reduction System (i.e., a separate machine-learning layer that monitors the gap between an ad’s targeted audience and its actual audience along sex and estimated race and ethnicity, then adjusts delivery to close the gap). Pursuant to 42 U.S.C. § 3614(d)(1)(C)(i), as modified by 28 C.F.R. § 85.5, Meta also paid the maximum civil penalty of $115,054. By the end of 2023, Meta was required to bring variances to less than or equal to 10% for 91.7% of housing ads measured for sex and 81% measured for estimated race and ethnicity, with court oversight running through June 27, 2026.

The DOJ complaint identified three theories of liability that translate directly to mortgage marketing, including as follows: 

• Trait-based targeting. Advertiser-selected categories that act as proxies for protected characteristics.
• Lookalike targeting. Algorithmic construction of an audience that resembles the advertiser’s source audience along dimensions the advertiser cannot see.
• Personalization algorithms. The platform’s own delivery optimization, which adjusts who sees an ad based on predicted relevance using protected-class-correlated signals. 

All three theories are agnostic to the advertiser’s intent. 

On April 25, 2023, DOJ Civil Rights, CFPB, FTC, and EEOC issued a Joint Statement on Enforcement Efforts Against Discrimination and Bias in Automated Systems, and in April 2024 HUD, Labor, Education, HHS, DHS, and DOJ’s Consumer Protection Branch joined the effort. The Joint Statement is not a statute, rule, or final agency action. Rather, it identifies three risks that map cleanly to mortgage marketing AI, including (1) unrepresentative or biased training datasets, (2) opaque models that frustrate diligence, and (3) unanticipated uses of third-party tools by downstream deployers. Although the CFPB’s leadership has changed since the Joint Statement issued, the federal statutes the Statement enforces have not.

No public 2025–2026 state attorney general settlement has been verified that squarely involves AI-driven mortgage marketing. The state-risk argument is therefore forward-looking, grounded in adjacent AI and fair-lending enforcement and state UDAP authority. 

The Mortgage Marketing Stack The Industry Has Not Yet Inventoried

A typical national lender’s marketing AI stack has six layers, each with a distinct exposure profile that are primarily controlled by vendors or platforms, rarely shared with the lender, and almost never reviewed by the lender’s general counsel. These six layers include, as follows: 

1. Paid social with lookalike and predictive-audience modeling. Meta’s current public materials say lookalike audiences are limited or unavailable for some ads about financial products and services, employment, or housing opportunities. LinkedIn describes Predictive Audiences as combining advertiser data with LinkedIn’s predictive AI and engagement signals to find likely converters, and requires anti-discrimination notice language for advertisers using its targeting tools. If the source audience is the lender’s existing closed-loan book and that book is racially skewed — as most mortgage books are, then the model imports that skew at scale.
2. Search engine marketing with audience signals. Google’s personalized-advertising policy for housing, employment, and consumer-finance ads in the United States and Canada restricts age, gender, marital status, parental status, and ZIP-code targeting and exclusions. Consumer finance includes credit and lending products. The mortgage CMO selecting bid modifiers may not realize that customer match, in-market signals, automated bidding, broad-match keywords, landing-page signals, and conversion optimization can still create delivery or pricing disparities correlated with protected characteristics under 24 C.F.R. § 100.75(c)(3) — even where the obvious protected-class and ZIP targeting is already restricted.
3. AI-driven CRM and lead scoring. Salesforce Einstein, HubSpot AI, Total Expert, and a dozen mortgage-specific CRM platforms now offer predictive lead scoring that ranks inbound leads by likelihood to close. The model is typically trained on the lender’s historical conversion data. If the historical conversion data reflects loan-officer assignment patterns, geographic concentration, or product steering that correlates with protected class, the model will rank leads in a way that perpetuates that pattern. The lender does not see the weights. The vendor often will not produce them.
4. AI-generated and AI-curated outreach content. Generative AI that drafts ad copy, email subject lines, or SMS text messages now sits inside most mortgage marketing platforms. Without guardrails, the model will produce variants tuned to perform best against the historical audience — which is to say, against an audience that itself was constructed by the prior three layers. Performance optimization closes the feedback loop. The variants that perform best are the ones the model generates more of.
5. Call routing and conversational AI. AI voice agents now route inbound mortgage calls, determining which callers reach licensed loan officers and which are sent to pre-qualification chatbots. The decision logic is usually a vendor-controlled black box. TCPA exposure under FCC 24-17, CG Docket No. 23-362 (Feb. 8, 2024), is the obvious risk. The less-discussed fair-housing risk is whether the routing model relies on protected-class-correlated signals from caller ID, voice characteristics, geography, language, or prior interaction history.
6. Partner and referral networks. Real estate referral pipelines, builder partnerships, and lead aggregators each apply their own routing logic. Many now describe that logic as AI-enabled. The lender’s name is on the loan estimate. The lender owns the outcome under the FHA whether or not the lender wrote the routing rules.

In addition, those six layers operate on two different legal surfaces, and that distinction determines what controls the lender can realistically impose, including (1) platform surface: Meta, Google, LinkedIn, X, and similar platforms, where the lender accepts non-negotiable terms and can mainly control configuration, delivery monitoring, and testing; and (2) negotiable-vendor surface: mortgage-specific marketing vendors, CRM providers, lead aggregators, and similar providers, where the lender has a master services agreement and can demand contractual protections. Treating the two surfaces as the same leads to governance that asks too much of platforms and too little of vendors.

What Defensible Marketing AI Governance Looks Like

The mortgage industry has spent the last six months building origination-side AI governance frameworks under Freddie Mac Bulletin 2025-16 and Fannie Mae LL-2026-04. Those frameworks are not advertising rules and should not be cited as platform-specific marketing guidance. But their scope is not limited to underwriting. Fannie Mae and Freddie Mac use broad “origination” and “in connection with origination” language that may reach, or at least inform, lead-generation, borrower-facing CRM, call-routing, document-intake, and marketing-to-application handoff tools. Marketing AI should be evaluated inside or adjacent to the same governance file.

A defensible marketing AI program has eight components. Treat this as the checklist a fair-lending examiner, state AG, investor, GSE counterparty, or plaintiff could reasonably ask about, because each one will.

1. Marketing AI inventory. A list of every AI-enabled tool in the marketing stack, every vendor, every platform, every model the vendor uses, and every audience signal each model consumes. Include embedded AI features in tools the marketing team forgot were AI — most major mortgage CRMs added them in 2024 and 2025 without a vendor notice that triggered any compliance review.
2. Source-audience audit. For every lookalike, predictive, or audience-expansion workflow, document the source audience and assess whether it imports protected-class skew. If the source is the lender’s closed-loan book and the closed-loan book is materially imbalanced against the lender’s market demographics, the audience strategy is suspect. The fix is usually to rebuild the source from a balanced or counterfactual set, not to abandon audience expansion entirely.
3. Targeting parameter review. Every targeting parameter, audience overlay, exclusion rule, and bid modifier in active campaigns, mapped against the proxy list the DOJ identified in Meta: ZIP code, language, education, parental status, accessibility interest, cultural affinity, age band, household composition. Any parameter that carries material protected-class proxy risk comes off.
4. Delivery variance monitoring. Where the platform exposes advertiser-facing delivery composition data, pull it for every housing ad campaign. Note the limit: the Meta VRS produces compliance reports to DOJ and an independent reviewer, not advertiser-level variance reports to lenders on demand. Lenders should preserve the advertiser-facing data the platform does expose and contract for delivery and outcome data from negotiable vendors. Variance data is the closest analog to a fair-lending statistical test on the marketing side.
5. Lead-scoring fairness testing. For predictive lead-scoring models, run the same disparate-treatment and outcome testing you run on your underwriting models. If the vendor will not produce the necessary inputs, the answer is not to give up the testing. The answer is to renegotiate the contract or move vendors.
6. Generative content guardrails. Prompt-level controls on what generative AI is permitted to produce, output-level review for protected-class signals or affinity language, and version control on every prompt template. Treat every prompt and every output as a discoverable litigation artifact. Electronically stored information — which prompts and AI outputs plainly are — is discoverable under Federal Rule of Civil Procedure 34(a)(1)(A), and federal courts have already ordered production of AI interaction logs in litigation. The prompt library a marketing team treats as ephemeral is the evidentiary record a plaintiff will read back to it.
7. Two-surface contract and control architecture. The platform surface and the vendor surface require different instruments, and a program that uses one instrument for both will fail on the larger surface. For the negotiable-vendor surface — CRM, lead-scoring, conversational-AI, and mortgage-specific marketing vendors — the master services agreement should obligate the vendor to (i) disclose any AI or ML feature in the product, (ii) produce delivery and outcome data on request, (iii) cooperate in fair-housing audits, (iv) indemnify for AI-driven fair-housing claims to the extent the vendor’s design caused the exposure, and (v) flow each term down to its sub-processors. Most contracts do none of this; the renewal cycle is where you fix it. For the platform surface — Meta, Google, LinkedIn, X — those terms are not on offer. There the controls are operational, not contractual: lock down campaign configuration, pull every delivery-variance report the platform exposes, contract for variance data through an enterprise agreement where one exists, and run your own fair-housing tester audits to generate the evidence the platform will not hand you. The platform will not indemnify you, and you own the housing ad regardless. Govern accordingly.
8. Documented governance owner. A named executive owner for marketing AI risk, parallel to the executive owner Freddie Mac § 1302.8 already requires for AI generally. The owner reviews the inventory annually, approves new tools, and signs the marketing AI section of the lender’s overall AI governance file.

None of this requires a new statute. All of it is implementable inside the AI governance program a lender is already building for the GSEs.

Why This Lands Before Underwriting AI Does

Three reasons the marketing-AI enforcement story arrives ahead of the underwriting-AI enforcement story, which includes the fact that: (1) the platform theory already has a federal record; (2) the marketing stack is more visible than the underwriting stack; and (3) the federal pullback on disparate impact concentrates enforcement at the state and private level, and state AGs and private plaintiffs prefer cases they can prove with platform data rather than with internal model artifacts. Marketing AI cases meet that test and underwriting AI cases do not.

What To Do Now

If your company has not inventoried its marketing AI stack, start this week.

Have the CMO identify every AI-enabled tool, audience overlay, lookalike or predictive source, bid modifier, CRM lead-scoring model, and platform integration now in production. Then sort the inventory by surface: platforms the lender cannot negotiate with, and vendors it can. Apply the same risk-tier classification used in the lender’s origination AI governance program under Freddie Mac § 1302.8. For negotiable vendors, update renewal terms to require fair-housing audit cooperation and delivery-variance data. For platforms, where contractual leverage is limited, implement configuration review and conduct a fair-housing tester audit of paid social before someone else does. Name an executive owner for marketing AI risk and add the function to the AI governance file the lender will produce when Fannie Mae or Freddie Mac asks. That owner needs an operating model, not just a title: a fixed cadence for reviewing delivery-variance and lead-scoring fairness data, a written escalation path for campaigns that breach tolerance, and a standing reporting line to the committee that already oversees origination AI governance. The hard part is not writing the policy; it is finding what is running, where it is running, and whom it reaches.

The underwriting-AI conversation should continue. But it is not the conversation most likely to put a lender in a state attorney general’s quarterly enforcement roundup. Marketing AI is.

This article is provided for general informational purposes and reflects developments as of June 2026. It is not legal advice, is not jurisdiction-specific, and does not create an attorney-client relationship; readers should confirm current authority and consult counsel on their facts. Prepared with the assistance of AI tools under the supervision and review of counsel. Attorney advertising.