Finance lead provider red flags: nine signs you are buying a list, not leads
A list is a set of contact details somebody compiled. A lead is a person who asked for finance this week and is expecting a call. Most of the difference is visible before you pay, if you know where to look.
Almost every bad lead purchase a broker makes comes down to one mistake: paying enquiry prices for list records. The provider said "leads", you heard "enquiries", and the file that arrived was a set of business names with a phone column. The nine red flags below are the tells. Four are visible in a single sample lead. Five only surface in the first sales conversation, usually in what the provider will not answer.
This page assumes you have already run the basic checks in how to choose a provider. These are the signs for when a provider passes those and still sells you a list. None is proof on its own. Three or more together, and you are looking at a list.
1. It arrived in bulk
A real enquiry happens at a moment in time and is delivered as it happens, one at a time, in real time. A list arrives as a file. If the delivery method is a spreadsheet on a Monday, the data was sitting somewhere before you bought it.
2. No timestamp, or an old one
Every genuine enquiry carries the date and time the person submitted the form. Ask for it on the sample. Missing is bad. Present but days old is worse, because it tells you how long the record has been for sale.
3. Every record looks the same
People type badly. Real submissions have odd capitalisation, a half-finished notes field, an amount rounded to a strange figure. A file where every row is tidy, complete and identical in shape was built by a machine or a data vendor, not by a borrower.
4. No notes, no purpose, no timeframe
A list can give you a name, a number and an industry code. It cannot tell you why the person wants money or when. If the sample has no free-text field, no purpose and no timeframe, nobody asked, which means nobody enquired.
The remaining five only show up when you ask. Ask all of them on the first call, before anyone mentions volume.
- 5. They cannot tell you which ad the lead came from. A provider running its own campaigns knows the platform, the ad and the landing page behind every enquiry, because that is how the campaign is measured. "Various sources" and "our partner network" are the phrases to listen for. Both usually mean the data was bought in.
- 6. Volume is offered before they ask what you write. Genuine enquiries are produced by campaigns, and campaigns have a natural rate. A provider who can give you any number you name, in any niche, from tomorrow, is not describing a campaign. Expect the first questions to be about your niche, your states and your capacity, not your budget.
- 7. The mobile was not confirmed by the person before delivery. The question is specific: did the enquirer receive a code on that mobile and type it back before the lead was released? "Validated", "checked" and "cleaned" describe things done to a database. Only the code step proves the number was in the person's hand at the time of enquiry. The full comparison is in verified vs unverified leads.
- 8. They cannot show you the form. Ask for the live landing page and the exact wording the person saw before pressing submit. A provider who built it can send the link while you are still on the phone. One who cannot either did not build it or would rather you did not read it. Read the headline too: words that promise an outcome rather than describe an enquiry have been a problem for whoever wrote them since June 2026, covered below.
- 9. Exclusivity is claimed but not enforced. "Exclusive" is a promise; what matters is the mechanism. Ask what stops the same enquiry reaching another of their clients next month, and whether that check runs across every client or only yours. No dedup mechanism means a list with a waiting period. Exclusive vs shared leads sets out why that matters more for considered deals.
If you want the questions in the order to ask them, use questions to ask a provider.
One red flag is a question, not a verdict. Ask it directly and listen to the shape of the answer. A provider with real campaigns answers in specifics: the platform, the form, the timestamp. A reseller answers in adjectives. Two or three flags together, and the sensible move is a small paid test with the form link in hand, so you can check the promise against what lands. Four or more, and there is nothing to test.
Free samples are not the fix. A free record is the easiest way to put a list in front of you, and what 'free' leads really cost explains why the discount exists. Keep the test honest on your side too: a real enquiry called the next day sounds a lot like a list on the phone. Call what you buy as it lands.
In 2026 the red flags above stopped being purely commercial. ASIC reissued Regulatory Guide 234 on 9 June 2026, and the reissued guide expressly covers intermediaries including lead generators, AI-generated ads and search and social ads (ASIC, June 2026). The advertising that produced the enquiry you buy now sits inside the same guidance that already applied to your own marketing, which makes the headline on a provider's landing page a compliance question as well as a quality one.
Then on 28 July 2026 the ACCC published its report on unsolicited selling and lead generation, recommending that lead generation be brought inside the unsolicited-selling rules and treating a sale as unsolicited unless the person was clearly told, when their details were collected, what those details would be used for (ACCC, July 2026). Read that against red flag eight: if the provider cannot show you the form, you cannot know what the person was told, and neither can anyone else. What our own forms say is set out below, word for word.
Every enquiry comes from a form that tells the person, before they submit, that their details will be passed to a licensed finance broker or credit representative who will contact them about the finance they asked about. SMS verification confirms the mobile number is real and in their hands at the time of enquiry; it is separate from that disclosure.
We generate every enquiry ourselves from our own Google and Meta campaigns in Australia and deliver it to your inbox or CRM in real time, with the loan amount, purpose, timeframe and the person's own notes attached, and every mobile confirmed by SMS code before it ships. Each lead is sold once, with dedup enforced across all clients, and we publish our contact rate, 72.5%, because it is the number the nine flags above are really about. If you write business lending, start with business loan leads; the same checks apply to the asset and commercial flows, and all nine questions are fair game on the first call.