The Multi-State Licensing Minefield
Why 2026 Is the Year Private Lenders Can’t Afford to Get It Wrong
A national private lender closes a warehouse facility. During a routine collateral audit, the warehouse bank’s counsel discovers that a dozen loans were originated in states where the lender held no license. The warehouse agreement’s compliance representation is now false. The bank demands repurchase and freezes future advances. The lender’s growth stalls and its reputation with capital partners takes a
hit it cannot undo.
This scenario is not hypothetical. Variations play out across the industry with increasing frequency. The root cause is almost always the same: a fundamental misunderstanding of multi-state licensing requirements for business purpose loans. In our practice advising private lenders across all 50 states, we see licensing mistakes that range from correctable oversights to portfolio-level exposure events.
This article breaks down the current landscape, identifies the most common pitfalls, and provides a practical framework for getting it right.
The SAFE Act Misconception
The most persistent myth in private lending is that federal law governs mortgage licensing. It does not—at least not for business purpose loans. The SAFE Act applies to individuals who originate consumer purpose residential mortgage loans. It does not apply to business or investment purpose loans, regardless of collateral type. This leads lenders to one of two dangerous conclusions: those in licensing states assume every state requires one, while those in non-licensing states assume they can originate nationwide without one. Both are wrong. Licensing for business purpose loans is governed entirely at the state level, and the requirements vary dramatically based on collateral type, borrower type, lending activity, and volume.
The Current State-by-State Landscape
Roughly 32 states and D.C. do not require a mortgage lender license for business purpose loans. The remaining states impose requirements that vary based on a matrix of factors. The chart below classifies how states currently treat licensing for private lenders.
Note: This chart is a general reference. Licensing obligations are fact-specific. Always confirm requirements with qualified counsel before entering a new market.
| Classification | States | Notes |
|---|---|---|
| License Required — All Collateral Types | California, Nevada, Arizona, North Dakota, South Dakota, Vermont | License needed for any real estate–secured loan, regardless of collateral or loan purpose. |
| License Required — 1–4 Unit Residential Collateral | Idaho, Oregon, Utah, Minnesota | License needed for BPLs secured by 1–4 unit residential property. Commercial/multifamily (5+ units) generally exempt. |
| Broker Exemption Available | California, Arizona, Oregon, Washington | Unlicensed lender may fund if loan is arranged by a licensed, substantively involved mortgage broker. |
| Special Rules / Registration | Florida, North Carolina, Tennessee, Texas, Washington | Licensing depends on borrower type, property type, or volume. NC requires registration; FL hinges on entity vs. individual borrower and “institutional investor” status. |
| No License Required for BPL | ~32 states + D.C. | No state mortgage lender license required to make business purpose loans, regardless of collateral. |
Key points: California and Nevada require a license for any real estate–secured loan regardless of purpose. A business purpose bridge loan on a fix-and-flip triggers the same obligation as a consumer purchase. The residential collateral states (Idaho, Oregon, Utah, Minnesota) catch lenders who assume a business purpose exemption eliminates the licensing requirement; it does not when the collateral is a one-to-four unit residential property. And the broker exemption states require genuine, substantive broker involvement, not a “broker in name only” arrangement. Beyond lending, several states require separate licenses for brokering and servicing—activities lenders may not realize they are engaging in.
Why the Calculus Changed in 2026
First, the enforcement gap is shifting to the states. The CFPB has significantly reduced examination and enforcement activity, creating a false sense of regulatory calm. But the underlying statutes remain fully enforceable by state attorneys general and state financial regulators. California’s SB 825, effective January 1, 2026, expanded the DFPI’s authority to pursue deceptive and abusive acts against licensed finance lenders. States are not standing down—they are leaning in.
Second, institutional counterparties are digging deeper. Warehouse lenders, loan purchasers, and securitization sponsors now routinely require reps and warranties on licensing compliance. In our experience, diligence has become markedly more granular (i.e. requests for license copies in every origination state, confirmation of the licensed entity in the lending chain, and independent NMLS
verification). A licensing gap that was once a “technical issue” is now a deal- breaker.
Third, the licensing-usury nexus compounds the risk. In many states, a lender’s ability to charge interest above statutory usury caps depends on holding the appropriate license. An unlicensed lender may lose rate exemptions it believed applied, creating retroactive usury exposure across an entire state portfolio. Licensing statutes are strict-liability frameworks—either you were licensed or you were not. There is no good-faith defense.
Common Pitfalls
Conflating collateral type with loan purpose. Idaho, Utah, Oregon, and Minnesota trigger licensing based on the residential character of the collateral, regardless of loan purpose. A business purpose construction loan on a single-family lot requires a license in these states.
Relying on broker exemptions without substantive involvement. States like California, Arizona, Oregon, and Washington allow unlicensed lenders to fund loans arranged by a licensed broker. But the broker must be substantively involved: collecting borrower information, participating in underwriting, delivering disclosures, maintaining direct borrower contact, and keeping independent loan files. A broker who merely signs documents will not satisfy regulators—and every loan originated under that structure is at risk.
Licensing the wrong entity. Lenders frequently operate through multiple entities. Which one holds the license matters. In California, the CFL license requires the licensee to fund from its own balance sheet. If a separate debt fund or warehouse entity provides capital, and that entity is not the licensee, the structure may be noncompliant. Ignoring servicing and brokering triggers. Several states require separate licenses for servicing and brokering. A lender that retains servicing or closes loans in a broker’s name using its own funds may be engaging in licensable activity without realizing it.
Failing to register as a foreign entity. Many states require the lender to register with the Secretary of State before it can even apply for a license, a prerequisite that is frequently overlooked but essential to legal standing in the jurisdiction.
The Consequences Are Real
Licensing statutes are strict-liability regimes. Consequences of unlicensed lending include per-loan civil penalties, cease-and-desist orders, usury exposure including disgorgement of interest, and loan enforceability risk—where noncompliant loans may be deemed void or voidable. In some states, borrowers who discover a lender was unlicensed have grounds to challenge enforceability. Regulators may also force retroactive licensing, subjecting the lender’s existing portfolio to a comprehensive examination. For lenders with institutional capital relationships, a breach of licensing reps in a warehouse or loan sale agreement can trigger repurchase obligations and facility termination.
What the Process Involves
All state licensing applications are filed through the NMLS. The process requires a company application (Form MU1) and individual applications (Form MU2) for each control person, who must authorize FBI background checks and credit reports. States typically also require foreign entity registration, a surety bond, and in some cases minimum net worth (California: $25,000; Arizona: $100,000 with audited
financials). Nevada and Arizona require a physical in-state office and a qualified resident employee—the most significant barriers to entry for national lenders. Timelines range from 60–90 days in simpler states to 10–12 months for a California CFL. Ongoing maintenance includes annual renewals, continuing education, bond upkeep, and regulatory reporting.
A Practical Framework
Conduct a state-specific licensing analysis before entering any new market, tailored to your collateral types, borrower types, and entity structure. Align your entity structure with licensing requirements and determine which entity must hold the license based on your funding model. Pressure-test broker exemptions: ensure any broker you rely on is substantively involved and document their role. Account for servicing and secondary market activity, including whether separate licenses are required. Build licensing into your capital markets infrastructure before entering warehouse, loan sale, or securitization relationships. And monitor for changes—licensing laws evolve, and ongoing compliance is a condition of the license, not an afterthought.
Conclusion
Multi-state licensing is a legal risk issue, a capital markets issue, and a business strategy issue. With states expanding enforcement, counterparties tightening diligence, and licensing gaps capable of unwinding entire portfolios, there is no justification for treating licensing as anything less than a strategic priority. Lenders who get it right protect their portfolios and strengthen their institutional relationships. Those who do not will learn that licensing statutes draw no distinction between intentional noncompliance and honest mistakes.
