This may be old, but for us its new. Customer applied for a mortgage on Monday. By Tuesday the customer is getting a letter from NYZ Mortgage inferring that they know our customer's score and, hey, have they got a mortgage for them!

Are CRAs allowed to provide lists of customers to other credittype entities (mortgage brokers, "lead generators", etc. whose credit report was pulled?

If yes, in what reg is this blessed?

We are getting customers thinking that there is a "leak" in our shop when they receive these letters, etc.

Yes and it isn't in a regulation. If you'll search the threads you'll see previous conversations concerning this.

OK. I looked at a site optoutprescreen.com. It is supposed to be run by the CRAs. Is anyone recommending customers go to this site in order to reduce/eliminate such offers of credit?