[.green-span]How Do Brokers Verify Borrower Data? A Step-by-Step Guide[.green-span]

A loan file is only as strong as the data behind it. This guide answers the question "how do brokers verify borrower data?" for both mortgage and business loans. It covers each check, the rules behind it, and the red flags that slow deals down.

How Do Brokers Verify Borrower Data? The Short Answer

Brokers verify borrower data by matching what the borrower says against trusted outside sources. They check identity, business details, income, employment, bank activity, credit, and debts using documents, credit bureaus, banks, employers, and public records.

This process is called borrower verification. The broker gathers and checks the file, but the lender makes the final call on whether to approve the loan.

The steps look much the same for a mortgage broker and a business loan broker. A business loan broker, often called an ISO (independent sales organization), also has to check the company itself.

Careful checks matter because online fraud is widespread. The FBI 2025 Internet Crime Report states, "In 2025, losses reported to IC3 continued to climb, surpassing the $20 billion mark." IC3 is the FBI's Internet Crime Complaint Center, and its figure covers all reported internet crime rather than a loan fraud rate.

The Rules Behind Verification

Which rules apply depends on the type of loan. Consumer mortgages follow federal rules written for creditors, while business loans follow each lender's own credit policy.

Knowing this split helps brokers avoid a common mistake. Mortgage rules make a useful model for business loans, yet they do not set the legal standard for them.

Consumer Mortgages: Ability-to-Repay

For home loans made to consumers, the key rule is the ability-to-repay (ATR) standard. ATR means the creditor, the company making the loan, must make a reasonable, good-faith judgment that the borrower can pay it back.

Under the Regulation Z ability-to-repay rule, a creditor must verify the income or assets it relies on. It must use "third-party records that provide reasonably reliable evidence of the consumer's income or assets."

Examples in the rule include W-2s, payroll statements, and bank records. This duty belongs to the creditor on consumer mortgages, so the broker's role is to gather the proof the creditor needs.

Business Loans: Lender Credit Policy

The ATR rule covers consumer credit secured by a home, which leaves business-purpose loans outside its scope. Instead, each lender sets its own credit policy, which is the list of documents and limits it uses to approve loans.

One lender may ask for several months of bank statements, while another may want tax returns and a profit and loss statement. A business loan broker's job is to match each file to each lender's "box," meaning its stated approval criteria.

New reporting rules are also on the way. The CFPB small business lending rule, a final rule issued May 1, 2026, has a compliance date that is extended to January 1, 2028.

That rule requires lenders to collect and report data on credit applications from small, women-owned, and minority-owned businesses. It covers data reporting and leaves the verification steps to each lender.

Step 1: Verify Identity

Identity verification confirms the borrower is a real person and is who they claim to be. It is often called KYC, which is short for "know your customer."

Banks follow a customer identification program rule, also called CIP. Before opening an account, a bank must collect the customer's name, date of birth, address, and identification number.

The CIP rule applies to banks, but lenders and their partners often mirror its steps. The rule allows two main ways to check identity:

• Documentary checks: Reviewing an unexpired government-issued ID, such as a driver's license or passport.
• Non-documentary checks: Comparing the borrower's details against a consumer reporting agency, public database, or other source.

Brokers collect these details up front and make sure they match across the application. That way, the lender can run its own checks without stopping to ask for missing information.

Step 2: Verify the Business (KYB)

KYB, or "know your business," confirms that a company is real and that the person applying can act for it. This step applies to business loans and follows lender policy and common industry practice.

The same bank customer identification program rule covered in Step 1 also addresses businesses. It lists certified articles of incorporation and a government-issued business license as acceptable proof that a business exists. Beyond those documents, a typical KYB verification process checks the following items:

• Legal entity: The registered business name and entity type match the application.
• EIN: The employer identification number, which is the business's federal tax ID, matches the legal name.
• Good standing: State records show the business is active and current on its filings.
• Owners: The people who own the business are named, and each owner's identity is checked.
• Industry: The type of business fits what the lender is willing to fund.

Brokers also look for existing liens by checking UCC filings. A UCC filing is a public notice, made under the Uniform Commercial Code, that a lender has a claim on a business's assets. An earlier filing can block a new loan or shrink the amount a lender will offer.

Step 3: Verify Income

Income verification proves the borrower earns enough to repay the loan. The documents a lender asks for depend on how the borrower is paid and what kind of loan they want.

Asking for recent pay stubs is a common lender practice for salaried and hourly workers. An IRS transcript is a summary of a filed tax return that comes straight from the IRS. Regulation Z lists it as one permitted way to verify income.

Reading stacks of PDFs by hand is slow and easy to get wrong. Lendflow's AI document analysis pulls key figures from uploaded files, so teams can compare them against the application in less time.

Step 4: Verify Employment

Verification of employment (VOE) confirms the borrower works where they say they do. Lenders can call the employer, which is called a verbal VOE. They can also use a written form or a vendor database of payroll records.

For consumer mortgages, the same Regulation Z rule covered above lets a creditor verify employment by phone if it keeps a record of the call. Per the Fannie Mae verbal VOE requirements, "the lender must verify the borrower's employment no more than 10 business days on or before the note date."

That timing applies to loans sold to Fannie Mae, and the note date is the day the borrower signs the loan's promissory note. For self-employed borrowers, the window is 120 calendar days, and the lender may complete the verbal VOE after closing, up to loan delivery.

Lenders also review home loan employment history, which is the borrower's recent job record. Gaps or frequent job changes usually lead to questions, so brokers ask borrowers for a short written explanation before the file goes out.

Step 5: Review Bank Statements and Cash Flow

Bank statement analysis shows how money actually moves through an account. For many business loans, this check carries heavy weight because cash flow is what repays the debt.

Reviewers rely on rules of thumb built from experience rather than fixed legal standards. The table below shows the items they check most often.

Statements can also be edited before they reach the broker. Brokers who know how to spot fake bank statements catch these problems before a lender does.

A direct bank connection is safer than a PDF because it pulls transaction data straight from the bank with the borrower's permission. This approach is part of financial data aggregation for underwriting, which combines data from many sources into one view.

Step 6: Check Credit and Existing Debts

A credit check shows how a borrower has handled debt in the past. Consumer credit reports cover the person, while business credit reports cover the company's payment record with suppliers and lenders.

For consumer mortgages, the same Regulation Z rule covered above lists credit history and current debts among the factors a creditor must consider. Mortgage lenders often use debt-to-income ratio (DTI), which compares monthly debt payments to monthly income.

For business loans, reviewers also look for stacking, which means taking several loans or merchant cash advances (MCAs) close together. An MCA is funding repaid from future sales, and each open advance is called a "position" that cuts into the same cash flow.

Lendflow Trust Score provides fraud and risk signals that teams can review alongside credit data. These signals help brokers find problems while there is still time to fix them.

Common Verification Red Flags That Delay or Deny Loans

Most delays come from data that does not line up across the file. These issues are common loan denial reasons, so brokers fix or explain them before they submit.

• Mismatched names or addresses: The ID, application, and bank records show different details for the same borrower.
• Income that doesn't match deposits: Stated revenue is far higher than the money that lands in the bank.
• Unexplained employment gaps: Breaks in work history appear without a written reason.
• Altered PDFs: Fonts, totals, or dates look edited, or the file data shows recent changes.
• Undisclosed debts: Credit reports or bank records reveal loans the borrower left off the application.

A file that arrives with explanations already attached moves faster than one that raises new questions. Lenders spend less time asking, and brokers spend less time going back to the borrower.

How Borrowers Can Check a Broker Is Legitimate

Verification works both ways, so borrowers should check the broker too. Mortgage borrowers can verify a mortgage license through NMLS Consumer Access. Per the Connecticut Department of Banking, "NMLS Consumer Access is a fully searchable website that allows the public to view information concerning state-licensed mortgage companies, branches, and individuals."

This lookup is built for mortgage licenses, so it does not confirm whether a commercial or business loan broker is legitimate. Licensing rules for business loan brokers vary by state.

Business borrowers can protect themselves with a few simple checks:

• Lender relationships: Ask which lenders the broker submits to and how long they have worked together.
• Written fee terms: Get every fee in writing before signing any agreement.
• Guaranteed approval offers: Walk away from anyone who asks for payment up front and promises approval.

Verify Faster, Automate the Busywork

Manual verification means chasing documents, retyping numbers, and waiting on callbacks. Lendflow platform results show what changes when that work is automated:

• 42% faster funding: Based on Lendflow platform data, pre-qualified offers hosted on Lendflow drive an average of 42% faster speed to funding.
• 80% fewer operational resources required: Based on Lendflow platform data, embedded finance customers stay lean while converting similar funding volumes.
• $1.5B+ in offers: Based on Lendflow platform data, $1.5B+ in offers were made on the platform in the last 12 months, as of March 2025.

Lendflow's data orchestration connects credit bureaus, bank data, and document analysis in one workflow. Brokers get verified borrower data in one place instead of piecing it together from separate systems.

Demand for small business funding stays steady, and many requests still fall short. The Fed Small Business Credit Survey found that 42% of small employer firms that applied for financing received the full amount they sought.

Another 36% received some or most of what they asked for, and 22% received none. The survey uses a non-random sample, so these numbers are a useful guide rather than a precise national measure.

Clean, verified files help brokers place more of those requests with the right lender. Lendflow's broker platform brings verified borrower data and lender offers into a single workflow.

FAQ

What Documents Do Brokers Use to Verify Income?

Brokers usually collect pay stubs, W-2s, and tax returns or IRS transcripts from employees. Business owners also provide business tax returns, a P&L statement, and bank statements.

Are IRS Transcripts Required for Income Verification?

Regulation Z permits creditors to use an IRS tax-return transcript for consumer mortgages, but it does not require one. Many lenders still request transcripts because the data comes directly from the IRS.

What Looks Bad on Bank Statements for a Loan?

NSF fees, frequent overdrafts, large unexplained deposits, and loan payments the borrower did not disclose all raise concerns. Each one suggests cash flow may be weaker than the application shows.

What Counts as Third-Party Verification?

Third-party verification uses records prepared by someone other than the borrower, the creditor, or the broker. Common sources include employers, the IRS, and banks.

Why Would a Mortgage Company Verify Occupancy?

Loans for a home the borrower will live in, called owner-occupied loans, often carry different terms than loans for investment property. Lenders verify occupancy to confirm the borrower really lives in the home.

Ready to stop chasing paperwork and start funding cleaner files? Book a demo or talk to our team to see how Lendflow can help you verify borrower data and get deals funded faster.