Every year, thousands of mortgage loan originators sit down to knock out their eight hours of continuing education. Most do it honestly. A small number look for a shortcut — having someone else take the course, buying certificates from a shady provider, or splitting the work with a colleague and claiming full credit.
Here is the problem with the shortcut: state regulators are watching, the technology is built to catch you, and the penalties are far more expensive than the eight hours you were trying to avoid. This is not a hypothetical risk. Regulators have already disciplined hundreds of originators for exactly this behavior, and they are still doing it.
Here is what the enforcement record actually shows.
First, what the law requires
The Secure and Fair Enforcement for Mortgage Licensing Act — the SAFE Act — sets the national floor for MLO licensing. Congress passed it to reduce fraud and raise consumer protection standards, and every state has enacted its own version. Under it, state-licensed originators must complete at least 20 hours of pre-licensing education (PE) and eight hours of continuing education (CE) every year.
The eight annual CE hours are broken down as:
- 3 hours of federal law and regulations
- 2 hours of ethics, including fraud, consumer protection, and fair lending
- 2 hours of nontraditional mortgage products
- 1 hour of elective content
The SAFE Act also bars you from taking the exact same CE course in two consecutive years — the "successive years" rule — which is one reason some originators try to game the system rather than sit through fresh material.
When you complete an NMLS-approved course, you attest to the NMLS Rules of Conduct. That attestation is a statement that you did the work. Falsely claiming it is the violation regulators pursue.
Why cheating gets caught
If you have taken online CE in the last several years, you have met BioSig-ID. It is the four-character "password" you draw with your mouse or finger at points during the course. It is not a formality.
BioSig-ID is a third-party biometric authentication tool that the NMLS has required in all online self-paced courses since 2016. It does not just check what you draw — it measures how you draw it: the speed, direction, length, and angles of your strokes. That signature is unique to you. If a "helper" knows your four characters, it does not matter, because they cannot reproduce the way your hand makes them. Verification is triggered during the course and again before the final assessment.
That is the front-line control. Behind it sits the Mortgage Testing and Education Board of the State Regulatory Registry (SRR), a subsidiary of the Conference of State Bank Supervisors (CSBS), which investigates suspected education fraud and can retract credits directly from your NMLS record. When the data shows the person who was supposed to take a course did not, the credits come off — and the enforcement referrals begin.
Case one: the mass settlement that snared 441 originators
The largest example on record started with a single bad education provider.
In early 2022, 44 state financial agencies, led by the California Department of Financial Protection and Innovation (DFPI), reached settlements with 441 mortgage loan originators who had deceptively claimed to complete their required annual continuing education. The originators had run their CE through Real Estate Educational Services (REES), a Carlsbad, California course provider owned by Danny Yen.
The terms for the settling originators were not trivial. Each agreed to:
- Surrender their MLO license for a three-month period
- Pay a $1,000 fine to every participating state in which they held a license
- Complete continuing education beyond the standard SAFE Act requirements
For an originator licensed in a handful of states, that per-state fine structure adds up quickly — on top of three months out of production.
The provider fared far worse. State regulators in California, Maryland, and Oregon brought administrative actions against Yen and his family for issuing false certificates and taking courses on behalf of originators. The Yen family accepted a lifetime restriction from any direct or indirect involvement in mortgage-education businesses, agreed to cooperate and testify against the implicated originators, and faced a $15 million penalty if they failed to cooperate with the investigation.
The message from regulators was blunt: using a bad-actor school does not protect you. It hands investigators a roadmap straight to your NMLS record.
Case two: one originator, $31,000, and a career reset
If the REES settlement shows the scale of enforcement, a more recent case shows how it lands on a single person.
In a settlement finalized at the end of 2025, originator Patrick Terrance Donlon — who worked for Trusted American Mortgage LLC — was sanctioned by 21 participating states. In early 2025, CSBS received information that at least 22 pre-licensing courses and 3 continuing-education courses Donlon had claimed credit for in 2024 and 2025 had actually been taken by someone else. The Mortgage Testing and Education Board investigated and retracted 73 hours of education credit from his NMLS record.
The consequences:
- A total fine of $31,000
- Surrender of all of his MLO licenses
- A permanent bar from MLO licensure in all but two of the participating states
- Removal as a Qualified Individual and Control Person of his company, plus a two-year bar from holding either role at any NMLS-registered entity
Donlon was licensed in 19 states with applications pending in two more. In practical terms, one decision to outsource his coursework ended his ability to originate in most of the country and stripped him of his leadership standing at the firm.
Add up the true cost
Line up what the shortcut actually buys you, and the math is not close:
- Money. Per-state fines, from $1,000 each in the REES matter up to a $31,000 aggregate in the Donlon matter.
- Lost production. A three-month license surrender means a full quarter with no closings.
- Your license. Permanent bars in most states are on the table — not warnings, not probation.
- Your leadership role. If you are a QI or control person, you can lose that standing and be barred from holding it for years.
- Your record. NMLS Consumer Access is public. Anyone — a borrower, a recruiter, a referral partner — can look you up and see the action.
Against all of that, the honest path costs eight hours and the price of a legitimate course.
The takeaway for honest originators
The enforcement record makes one thing clear: CE fraud is not a paperwork slip that regulators overlook. It is treated as a SAFE Act violation, it is actively investigated, and the verification technology is specifically designed to catch the exact schemes people attempt.
The good news is that the bar to stay clean is low. Take your own courses. Draw your own BioSig-ID. Use an NMLS-approved provider that reports your completions properly. Do that, and none of the above ever touches you.
Eight hours a year is not the obstacle. Losing your license is.
