California Residential Mortgage Lending Act: Licensing and Compliance

To operate as a residential mortgage lender or servicer in California, your company must hold a license from the Department of Financial Protection and Innovation (DFPI) under the California Residential Mortgage Lending Act. The license requirements include an electronic application through the Nationwide Multistate Licensing System (NMLS), audited financial statements showing at least $250,000 in tangible net worth, a surety bond, fingerprint-based background checks on owners and officers, a $900 application fee plus a $100 investigation fee, and a designated responsible officer to oversee compliance. Each individual who takes applications or negotiates loan terms needs a separate mortgage loan originator license. The CRMLA sits in Division 20 of the California Financial Code, Sections 50000–50706.

Who Needs a CRMLA License

Any company that makes, funds, or services residential mortgage loans involving California borrowers needs a CRMLA license, whether or not the company is physically located in the state. The license covers lending, servicing, or both, and you choose which authority you want when you apply.1Department of Financial Protection and Innovation. About the California Residential Mortgage Lending Act

The CRMLA is a lender/servicer regime. Mortgage brokers, who arrange loans between borrowers and lenders without funding them, are regulated separately through the Department of Real Estate or under the California Finance Lenders Law. If your business model is pure brokerage, you are looking at the wrong statute.

Who Is Exempt

The CRMLA carves out several categories of entities that do not need a license, generally because another regulator already covers them:

  • Banks, trust companies, insurance companies, industrial loan companies, savings and loan associations, savings banks, and credit unions, state or federally chartered, authorized to do business in California.
  • Federal, state, and municipal government agencies.
  • California-licensed real estate brokers making, arranging, selling, or servicing residential loans under their broker license.
  • Entities licensed under Division 9 of the Financial Code (California Finance Lenders Law) when acting under that license.
  • Companies engaged solely in business, commercial, or agricultural mortgage lending.
  • Employer or employee pension plans making residential mortgage loans only to their participants.
  • Persons acting under fiduciary authority granted by a court.
  • Trustees under a deed of trust performing duties in a judicial or nonjudicial foreclosure.

If you do not cleanly fit one of these, assume you need the license. The DFPI has little patience for companies that claim an exemption without meeting every element.2Department of Financial Protection and Innovation. Who Is Required to Obtain License or Branch License Under the CRMLA

What the Application Requires

Applications are filed electronically through NMLS.3Department of Financial Protection and Innovation. How Do I Apply for a Residential Mortgage Lender and/or Servicer License The process is document-heavy and typically runs several months from submission to approval.

Fees

The DFPI charges a non-refundable $900 application fee, a $100 investigation fee, and roughly $62 per person for fingerprint processing.4California LaborMarketInfo. California Residential Mortgage Lending Act License Information NMLS adds a separate company filing fee of its own.

Financial Condition

You must submit audited financial statements prepared by an independent certified public accountant showing a minimum tangible net worth of $250,000. A surety bond is also required, with the amount set by regulation based on the applicant’s loan volume.

Background Checks and Disclosures

Owners, officers, directors, and anyone who controls 10 percent or more of the company’s stock must submit to fingerprinting and criminal background checks through the California Department of Justice and the FBI, and must disclose their experience, disciplinary history, and any adverse court judgments involving fraud or dishonesty.5California Legislative Information. California Code Financial Code 50002 The DFPI reviews past regulatory actions, civil judgments, and criminal convictions, and expects disclosure of any disciplinary actions or license revocations from other states.

Responsible Officer

Every applicant must designate a responsible officer who meets specific experience and background requirements and who oversees the company’s compliance with the CRMLA.

Mortgage Loan Originators Need Their Own Licenses

A company license does not cover the people inside the company. Every individual who takes residential mortgage loan applications or negotiates loan terms must separately hold a mortgage loan originator (MLO) license, implemented in California through Chapter 3.5 of the CRMLA under the federal SAFE Act.6California Legislative Information. California Code Financial Code 50144

The individual must complete at least 20 hours of NMLS-approved pre-licensing education, including 3 hours on federal law, 3 hours on ethics (covering fraud and consumer protection), and 2 hours on nontraditional mortgage products.7Office of the Law Revision Counsel. 12 USC 5104 – State License and Registration Application and Issuance They must then pass the SAFE MLO national test with a score of at least 75 percent. Three consecutive failures trigger a six-month waiting period before another attempt.

Criminal history is a hard barrier. Any felony conviction within the preceding seven years automatically disqualifies an applicant. Felonies involving fraud, dishonesty, breach of trust, or money laundering result in a permanent ban with no path to reinstatement. The DFPI also pulls an independent credit report on every MLO applicant.

Annual Renewal

Both the company license and each MLO license must be renewed annually. The NMLS renewal window runs from November 1 through December 31. The DFPI charges no separate renewal fee for the company license itself, though NMLS charges a $100 processing fee. MLO renewal also requires annual continuing education.

Ongoing Compliance After You Are Licensed

Holding the license is the beginning, not the end. The operational burden sits in the ongoing obligations, which pull from both state and federal law.

Fair Lending

Licensees must comply with the federal Equal Credit Opportunity Act, which prohibits discrimination in any credit transaction on the basis of race, color, religion, national origin, sex, marital status, or age, among other protected categories.8Consumer Financial Protection Bureau. 12 CFR Part 1002 – Equal Credit Opportunity Act (Regulation B) California’s Fair Employment and Housing Act adds parallel state protections. Examiners actively look for evidence of internal audits and regular fair lending training.

Loan Disclosures

Federal TILA-RESPA Integrated Disclosure rules govern the paperwork borrowers receive. You must deliver a Loan Estimate within three business days of receiving a borrower’s application, which the rule defines as six specific pieces of information: the borrower’s name, income, Social Security number, the property address, an estimated property value, and the loan amount sought.9Consumer Financial Protection Bureau. TILA-RESPA Integrated Disclosure FAQs A Closing Disclosure must reach the borrower at least three business days before closing.10eCFR. 12 CFR 1026.19 – Certain Mortgage and Variable-Rate Transactions Certain changes after that point (an inaccurate APR, a changed loan product, or an added prepayment penalty) force a corrected Closing Disclosure and a new three-day waiting period.

Recordkeeping and Quality Control

Licensees submit annual reports to the DFPI covering loan volume, financial health, and compliance measures. Federal rules require creditors to retain records of loan originator compensation and related agreements for at least three years, readily accessible for regulatory review.11Consumer Financial Protection Bureau. Comment for 1026.25 – Record Retention Every CRMLA licensee must also maintain a written quality control program designed to catch deficiencies in origination and servicing before regulators do.

Data Security

Non-bank mortgage lenders fall under the FTC Safeguards Rule, which requires a written information security program with administrative, technical, and physical safeguards for customer information, scaled to the size and complexity of the business and the sensitivity of the data.12Federal Trade Commission. FTC Safeguards Rule – What Your Business Needs to Know Mortgage lenders handle large volumes of Social Security numbers, income documentation, and credit data daily. Breaches routinely trigger enforcement from both the FTC and the DFPI.

Examinations

The DFPI examines CRMLA licensees roughly every other year, and every licensee at least once every four years. Lenders flagged for compliance problems or elevated risk get reviewed more often. Examiners assess financial records, loan files, and internal policies against the CRMLA’s provisions in Sections 50000–50706.13California Legislative Information. California Code FIN Division 20 Chapter 3 – California Residential Mortgage Lending Act Reviews may be on-site or through electronic document submissions via NMLS. Where examiners find deficiencies, you must submit a corrective action plan with specific remediation timelines.

Expect federal supervision alongside state oversight. The Consumer Financial Protection Bureau has supervisory authority over nondepository mortgage originators and servicers of all sizes, so a CRMLA licensee can face examination from both the DFPI and the CFPB in the same year.14Consumer Financial Protection Bureau. Institutions Subject to CFPB Supervisory Authority

Penalties for Falling Short

The DFPI treats each violation as a separate offense. Ten instances of the same problem means ten penalties, not one.

The commissioner can also deny, suspend, revoke, or condition any license, order restitution to harmed borrowers, and issue cease-and-desist orders, including immediate temporary orders that shut down operations before a hearing. Knowingly submitting false information or misrepresenting loan terms can be referred to the California Attorney General’s Office for prosecution.