YOUR QUESTION
We are ending our long relationship with a quality control company. When we were acquired in June, the auditors raised concerns about several aspects of the QC company's reports. They also criticized our management for not reviewing the QC report each month.
I am preparing a governance outline for the board. They asked me to provide a risk-versus-benefit review to include in the minutes. I need help. I want to show why QC is required, what the benefits are, and provide some citations. I have managed our QC for many years, but I need fresh ideas. I don't want to rely only on our policies and QC plans.
What are the risks versus the benefits of quality control?
OUR RESPONSE
Given the scope of the needed response, I am providing a 3-part series, as follows:
· Part I: Agency QC
· Part II: Non-Agency QC
· Part III: Enforcement and QC Plans
Let's set the record straight from the start: mortgage quality control (QC) is not a back-office formality! It is the system a mortgage originator uses to prove, loan by loan, that it made the loan it says it made: to the borrower described, on the income and assets documented, against a fairly valued property, under the rules of every investor, insurer, and regulator involved.
When we first established our QC group, we set these four audit goals for our clients:
1. Mitigate Risk: Act as the ultimate safety net, identifying errors, non-compliance, and variations early to keep your supply chain intact.
2. Protect Brand Equity: A single recall can ruin a reputation. Maintain strict, consistent standards that keep your brand elite.
3. Maximize Profitability: Catch defects early to eliminate the costly financial sting of waste, rework, and customer returns.
4. Data-Driven Transparency: Receive comprehensive, transparent inspection logs and downstream performance analytics after every evaluation.
Unlike other QC auditors who focus on training and licensing and then move into quality control, we are a compliance firm with regulatory experts who have provided QC since 2006 to virtually all types of financial institutions.
Please get in touch with us here to discuss your QC needs. We can scale up or down, and we handle all residential mortgage loan products. No company is too big or too small for us.
The Elevator Description
Here's a quick description of QC:
Quality control is a system of internal reviews and audits that financial institutions use to ensure mortgages meet regulatory standards, investor guidelines, and internal company policies. Its primary goal is to verify loan data accuracy, prevent fraud, and minimize financial risk before and after closing.
Every major loan buyer and government insurer requires it. Fannie Mae, Freddie Mac, FHA, VA, and USDA each mandate a written QC plan, prefunding and post-closing file reviews, and reporting to senior management. State regulators examine for it as part of licensing. And the agencies keep raising the bar: Fannie Mae rewrote its QC chapters in 2025 and refined them again in 2026.
Most Agency loans are Qualified Mortgages (QM), though not all agency loans automatically receive QM status depending on how they are structured or underwritten. Loans eligible for purchase, guarantee, or securitization by Fannie Mae, Freddie Mac, or government agencies (FHA, VA, USDA) generally qualify as QM loans under specific GSE or federal agency rules.
In this series, I will explain what a strong QC program provides a financial institution, what federal and state rules apply, and what an effective program looks like in practice.
In this Part I, we will discuss Agency QC.
The Business Case for Quality Control
A strong QC program pays for itself by catching defects while they are still cheap to fix. Errors found before closing cost a corrected document; errors found by an investor cost a repurchase, an indemnity, or a damaged relationship.
The risk is not theoretical. The critical defect rate (defects serious enough to make a loan unsaleable or uninsurable) rose from 1.38% in Q4 2025 to 1.71% in Q1 2026, the largest quarterly jump since 2022. Compliance findings on fees, points, and rate spreads drove much of that increase, reaching 26% of critical defects.
The main benefits of an effective QC program are:
- Fewer repurchases and indemnifications
Prefunding reviews let a lender fix calculation errors, bad data, and missing documents before closing, which Fannie Mae notes keeps ineligible loans from being sold in the first place.
- Protected agency and investor approvals
Fannie Mae, Freddie Mac, FHA, VA, and USDA all treat a functioning QC plan as a condition of approval. HUD's Mortgagee Review Board has sanctioned lenders for failing to have or implement one.
- Early fraud detection
QC reverifications, Social Security number checks, and occupancy reviews surface misrepresentation that slipped past production.
- Lower legal and enforcement exposure
FHA lenders certify compliance on every insured loan so that systemic defects can become False Claims Act liability. Documented QC and timely self-reporting are a lender's best evidence of good faith.
- Exam readiness
State and federal examiners ask for the QC plan, recent findings, and corrective actions. A clean, current file shortens exams and reduces findings.
- Better operations and pricing
Defect trends point to the training gaps, process weaknesses, and third-party originators that drive risk. Lenders with strong quality records keep better standing with investors, warehouse banks, and mortgage insurers.
- Fair treatment of borrowers
QC confirms that disclosures, fees, and underwriting decisions were accurate and consistent, protecting consumers and the lender's reputation.
Federal and Agency requirements
No single federal statute prescribes mortgage QC. The detailed rules come from the agencies that buy, insure, or guarantee loans, and each makes a written, functioning QC plan a condition of doing business. Federal consumer-protection law then defines much of what QC must test.
Here's an outline that we have used, subject to updates from time to time, that provides the agencies' core QC requirements, along with the respective citations.
· Fannie Mae
o
QC
Requirements
§
Written prefunding and post-closing plans; QC independent of production.
Monthly prefunding full-file reviews from every channel. Post-closing: monthly
random sample of at least 10% (or a statistical sample) plus discretionary
selections, with the full cycle done within 90 days of the closing month.
o Rulebook: Selling Guide Part D (D1-1 to D1-3)
· Freddie Mac
o
QC
Requirements
§
In-house QC program covering prefunding and post-funding reviews, random,
targeted and discretionary samples, early payment defaults, and reporting to
management. Freddie Mac also evaluates sellers' QC programs directly.
o Rulebook: Seller/Servicer Guide Chapter 3402
· FHA / HUD
o
QC
Requirements
§
Written plan covering the loan life cycle: monthly pre-closing and
post-closing samples, and review of 100% of early payment defaults (60 days
delinquent within the first six payments). Post-closing reviews due within 60
days; new credit reports, reverifications and field reviews on at least 10% of
loans. Findings rated low, moderate or material; material findings
self-reported to HUD.
o Rulebook: Handbook 4000.1, Section V.A
· VA
o
QC
Requirements
§
Lenders with automatic authority must maintain and execute a QC plan; a
separate plan covers staff appraisal reviewers under LAPP. VA monitoring audits
review both.
o Rulebook: Lenders Handbook (M26-7)
· USDA / Rural Development
o
QC
Requirements
§ A written QC plan is required for approval. Lenders submit origination and servicing QC plans, as applicable, at each recertification.
o Rulebook: HB-1-3555, Chapter 3
Fannie Mae's recent changes
Fannie Mae has revised its QC rules twice in two years, so plans written before 2025 are likely out of date.
· 2025 overhaul: Expanded file-review requirements, including occupancy reviews for second homes and investment properties, applied to QC reviews conducted on or after September 2, 2025.
· 2026 streamlining: On April 1, 2026, Fannie dropped the fixed 10% prefunding minimum in favor of risk-based sampling, narrowed reverifications (i.e., no reverification of data from approved vendors, tax transcripts only when tax returns were used), and simplified management reporting. Lenders were required to apply it to all QC reviews conducted on or after July 1, 2026.
The flexibility comes with a caveat: Fannie Mae can still impose minimum prefunding samples on any lender whose approach does not adequately capture risk.
Conclusion
Quality control is where a lender's promises about its loans get tested before someone else tests them. Agencies require it, state regulators examine it, and recent HUD OIG audits show what happens when it lapses: missed reviews, unreported defects, look-backs, and indemnifications.
The payoff for doing it well is just as concrete: fewer repurchases, stronger investor relationships, cleaner exams, and better loans for borrowers. With Fannie Mae's 2026 changes giving lenders more room to design risk-based sampling, now is a good time to revisit the QC plan and make sure it reflects how the business actually operates.
In Part II, I will discuss quality control for Non-Agency QC loans. In Part III, I will discuss Enforcement and QC Plans. I hope you continue to enjoy our Mortgage FAQs articles!
_________________
This article, Why Mortgage Quality Control Matters – Part I: Agency QC, published on November 12, 2026, is authored by Jonathan Foxx, PhD, MBA, the Chairman & Managing Director of Lenders Compliance Group, founded in 2006, the first and only full-service mortgage risk management firm in the United States, specializing exclusively in residential mortgage compliance.
