At an FTC-regulated mortgage company, an originator sends a complete loan file, including tax returns and a Social Security number, to a personal email address to work at home. The mailbox is not approved and is outside the company’s information-security controls. Is sending the file there permitted under those safeguards?

In a closing-readiness check, a disclosure specialist sees facts tied to Appraisal Fraud Detection. What should the file reflect?

An MLO recommends a loan with a low initial payment that will increase sharply in two years. The borrower says retirement income will be fixed and asks whether the payment can change. What is the appropriate response?

An MLO alters a bank statement to make the applicant's account balance appear higher and submits it to underwriting. Which response is appropriate?

A branch manager asks about a loan file because marketing proposes a rate the company is not prepared to offer. What should happen?

A borrower wants cash for necessary home repairs. A proposed refinance provides $15,000 cash but adds $12,000 in costs and extends repayment by 15 years. What is the best next step for the MLO?

Before closing, the team discovers that an ad shows an interest rate but omits the APR presentation. What is the safest compliant answer?

The loan team is resolving Privacy and Confidentiality during a quality-control sample. Which action best fits the rule?

A house last sold for $185,000 in January. In March it changes hands 3 times in 9 days, reaching $410,000, with the same appraiser and the same closing agent on every leg. Assuming the parties colluded to inflate appraisals without improvements to support the higher prices, what fraud scheme does this pattern illustrate?

For closings involving federally related mortgage loans, a title company pays a real estate brokerage $75 for each referred client who closes. The brokerage only passes along the client’s name and number. Does this referral payment comply with RESPA Section 8?

Before closing, the team discovers that a loan officer wants different terms because of a protected applicant characteristic. What is the safest compliant answer?