Let's Get This Closed!

A demand letter shows up. It cites a law from 1967. It claims your website's chat widget, or maybe just Google Analytics, amounts to illegal wiretapping. It asks for up to $50,000.

That's not a scam email you can delete. It's a real legal theory, it's being filed by the hundreds against California businesses right now, and real estate websites are squarely in the crosshairs.

This isn't an obscure corner of privacy law anymore. It's an active, well-funded litigation strategy, and it's specifically found its way into an industry that's built its entire lead-generation model around exactly the tools now being targeted.

What CIPA Actually Is, and Why It's Suddenly Everywhere

The California Invasion of Privacy Act was written in 1967 to stop illegal phone tapping. Long before websites existed, the law's pen register and trap and trace provisions were designed to catch someone secretly recording a phone call or intercepting call routing data.

Plaintiff's attorneys have repurposed those same provisions to argue that common website technology, analytics scripts, chat widgets, session recording tools, amounts to the same kind of unauthorized interception. The argument is that a visitor's activity on your site, their clicks, their mouse movement, their chat messages, gets captured and shared with a third-party vendor without proper consent, which the plaintiff claims is legally equivalent to someone secretly listening in on a call.

Whether that theory should hold up is genuinely contested right now. As of August 2026, one tracker following documented CIPA website cases counts 46 lawsuits with more than $153 million in disclosed settlements. The legal ground underneath all of it is anything but settled.

What makes CIPA different from the privacy laws most agents already think about, like the California Consumer Privacy Act, is the penalty structure and the plaintiff's bar behind it. CCPA compliance is largely about disclosure and opt-out mechanisms, and enforcement runs primarily through the state attorney general. CIPA carries a private right of action with statutory damages attached, which means any individual, not a regulator, can file a claim and collect. That difference is exactly why CIPA has become the more aggressively litigated of the two, even though it predates the modern internet by decades.

The Real Estate-Specific Wake-Up Call

This stopped being an abstract industry risk in July 2026, when it hit real estate directly. Lofty, a proptech platform serving more than 91,000 real estate professionals and roughly 30,000 hosted websites, received a CIPA demand letter of its own over its standard analytics tools.

Rather than settle quietly, Lofty filed a lawsuit on July 8, 2026, against Vivek Shah, a self-represented litigant who has reportedly filed more than a thousand similar suits across California, asking a federal court to declare that Lofty's standard analytics implementation doesn't violate CIPA. The next day, Lofty launched a CIPA Defense Program, offering existing customers a free legal review and defense against demand letters tied to Lofty's standard platform tools.

That's a notable move. A vendor stepping in to fight a legal theory on behalf of its customers isn't common, and it tells you how seriously the proptech side of the industry is taking this. It also tells you the letters are real. Real estate brokerages nationwide, not just in California, have been receiving templated demand letters over tools as ordinary as Google Analytics 4 and HubSpot, tools that are effectively industry standard on agent and brokerage websites.

Real Estate News covered the Lofty situation directly, noting that Zillow and Redfin faced nearly identical CIPA suits from the same plaintiff back in 2024 over tracking pixels, both of which were eventually dismissed voluntarily. That history matters. It suggests these claims can be beaten, but only after real legal effort, not by ignoring the letter and hoping it goes away.

What Tools Are Actually Getting Targeted

The pattern across documented cases is consistent. Three categories of technology show up again and again: session-replay tools that record mouse movement, clicks, and form input for user experience analysis, advertising and analytics pixels like Meta Pixel and Google Analytics, and live chat widgets, especially ones that log or store conversation transcripts.

AI chatbots have become a newer target. If a chatbot vendor logs, stores, or trains on a visitor's conversation, plaintiffs are arguing the website operator "aided" an unconsented interception of that conversation. For real estate specifically, that's a direct hit. Chat widgets and AI-powered lead capture bots are common on IDX-powered agent websites precisely because they're effective at converting visitors into leads. The same feature driving your lead flow is the one drawing legal attention right now.

It's worth being precise about scope here. This isn't about whether these tools are illegal in some general sense. It's about whether they were deployed in a way that captured visitor activity before the visitor gave clear consent. The technical fix, in most cases, comes down to consent timing and disclosure, not ripping the tools out entirely.

Check your own site against this list honestly. If you're running any of the popular lead capture and marketing tools most agents use, there's a real chance at least one of them falls into a category that's already been named in a demand letter somewhere.

The Legal Ground Is Genuinely Unstable Right Now

Here's what makes this different from a straightforward compliance checklist. The courts themselves haven't settled the underlying question yet.

On June 26, 2026, a federal judge approved a $3.85 million class action settlement against the Los Angeles Times over tracking pixels. Three weeks earlier, a California state court dismissed a nearly identical claim with prejudice. Two courts, two opposite outcomes, on essentially the same legal theory. The Second and Sixth District Courts of Appeal are expected to issue the first appellate rulings on whether CIPA even reaches website tracking technology at all, and until that happens, the legal environment stays genuinely unpredictable.

There's also a legislative fix in motion. California SB 690 has been introduced specifically to close the loophole that's turned CIPA into what critics describe as a cottage industry of website litigation. Whether it passes, and when, is still an open question. Until it does, or until the appellate courts weigh in, the demand letters keep coming regardless of how the underlying legal theory eventually shakes out.

What Settlement Demands Actually Look Like

Demand letters in this category typically ask for up to $50,000. Actual settlements have tended to run lower, commonly between $5,000 and $15,000, according to reporting on the pattern across multiple cases. That's still a meaningful hit for a solo agent or small team, and it doesn't account for the time and legal fees involved in responding even when a claim eventually gets dismissed.

CIPA carries statutory damages of $5,000 per violation, which is part of what makes the threat credible enough that businesses settle rather than fight, even when they believe the underlying claim is weak. Nearly 2,000 CIPA cases were filed in California state courts between 2023 and 2026, with a small handful of law firms responsible for the majority of filings since 2024. This has the structure of a volume-based legal strategy, not isolated individual complaints. HousingWire's proptech coverage has been tracking how brokerage consolidation and shared technology platforms are reshaping legal exposure industry-wide, and CIPA is a clear example of a risk that scales with how many agents share the same underlying website infrastructure.

What to Actually Do If Your Website Runs These Tools

Start by knowing what's actually running on your site. If you're on a platform like Lofty, BoldTrail, or a similar all-in-one system, ask your provider directly whether they have any defense program or compliance guidance specific to CIPA. Some vendors are actively responding to this the way Lofty has. Others haven't said anything yet, which is worth knowing before you assume you're covered.

If you've built your own site or added third-party tools beyond what your platform provides, session replay software, a standalone chat widget, a custom AI chatbot, those additions typically fall outside any vendor's standard defense coverage. That's exactly the kind of gap worth auditing directly rather than assuming someone else's compliance program extends to cover it.

Review your cookie consent and disclosure setup. A lot of the legal exposure here traces back to timing, whether tracking tools fire before a visitor has given any indication of consent. If your site doesn't have a clear consent banner or if your tools load immediately on page visit regardless of consent status, that's the specific gap plaintiff's firms are built to find.

If you receive an actual demand letter, don't respond on your own and don't ignore it either. This sits in the same category as ADA website accessibility demand letters, a legal risk tied directly to your website's technical setup rather than anything about how you conduct business day to day, and it deserves the same seriousness. Loop in your broker or your errors and omissions coverage, and talk to an attorney who's actually handled a CIPA claim before deciding how to respond. The California DRE doesn't regulate CIPA directly, but a brokerage-wide legal exposure like this is exactly the kind of thing worth raising at your next office meeting rather than letting individual agents discover it one demand letter at a time.

The Broader Pattern Worth Watching

This is part of a wider trend of decades-old statutes getting reinterpreted for modern website technology, and real estate keeps showing up as a target because agent and brokerage sites are full of exactly the interactive features, chat, forms, IDX search, that these legal theories are built around. It's not that real estate is doing anything unusual. It's that the industry's websites are unusually feature-rich compared to a typical small business site, which means more potential surface area for a claim.

If your website has been sitting untouched for a year or more while you focus on transactions and leads, this is a good prompt to actually look at what's running on it. Not just for CIPA specifically, but as a general practice. A transaction coordinator catches deadline and disclosure gaps on the file side. Nobody's doing the equivalent audit on your website unless you're the one doing it, or paying someone to.

Pull up your website today and check what's actually loading before a visitor clicks anything. If you don't know the answer, that's the first thing to find out.

Forty eight listings. Banned from Zillow and Trulia for the entire life of the listing agreement. Not a warning. Not a temporary flag. Gone, for as long as the seller is under contract with that brokerage.

Forty three of those forty eight belonged to Compass.

That's not a rumor from a Facebook group. That's what actually happened after Zillow rolled out its Listing Access Standards and started enforcing them. If you've been hearing conflicting things about whether going off-MLS gets your listing blacklisted, here's the current, accurate version of what's actually true right now.

A lot of the confusion out there is because the rules genuinely changed twice in one year. What got an agent banned in 2025 isn't necessarily what gets flagged today. If you're relying on advice from a coaching call or a brokerage memo from last summer, there's a real chance you're working from an outdated version of this policy.

What Zillow's Listing Access Standards Actually Say

Zillow introduced its Listing Access Standards, commonly shortened to LAS, back in April 2025. The core idea is simple. If a listing is marketed to some buyers, Zillow's position is that it should be marketed to all buyers.

In practice, that means any listing under an exclusive for-sale agreement that gets publicly marketed, a yard sign, a social media post, a listing on the brokerage's own website with an address or price attached, has to be entered into an MLS within one business day and made accessible through IDX or VOW feeds. If it isn't, Zillow won't publish it. Not temporarily. Not with a warning label. It simply never shows up on Zillow or Trulia for the duration of that listing agreement.

The policy went through a phased rollout starting in May 2025, with real enforcement beginning June 30, 2025. Under the original version, a third violation, and everything after it, triggered a permanent block. That's the mechanism that produced the 48 banned listings, the overwhelming majority tied to Compass's off-MLS marketing strategy.

Zillow was specific about what counted as a violation from the start. Posting a "coming soon" teaser with a price or address on Instagram or Facebook before the listing hit the MLS was the single most common trigger, accounting for a majority of the early bans. A yard sign going up before MLS entry counted too. So did a page on a brokerage's own website naming the property before it was searchable anywhere else. The pattern across nearly every banned listing was the same: public exposure first, MLS entry delayed or skipped entirely, usually as part of a deliberate listing management strategy meant to build early buyer interest before opening the property to the broader market.

The Compass Fight, and How It Actually Ended

Compass didn't take this quietly. The brokerage sued Zillow, arguing the policy amounted to anticompetitive conduct designed to force listings onto Zillow's platform against agents' wishes.

A federal judge disagreed. On February 6, 2026, the court rejected Compass's legal challenge and upheld Zillow's right to enforce its own listing access standards. That ruling mattered. It meant Zillow wasn't backing down under legal pressure, and any agent still betting that the policy would get struck down in court needed a new plan.

The ruling also settled a question a lot of agents had been asking privately. Plenty of brokerages were watching the Compass case before committing to their own private-listing strategy, treating the lawsuit's outcome as a signal for whether off-MLS marketing was a safe long-term play. Once the court sided with Zillow, that signal became clear. Building a marketing strategy around avoiding MLS entry wasn't a gray area waiting to get resolved in Compass's favor. It was a losing legal position.

Six weeks later, on March 18, 2026, Compass dropped the lawsuit entirely. In response, Zillow updated and simplified its standards. The current version is meaningfully different from the original 2025 policy, and this is the part most agents haven't caught up on yet. Coverage of the settlement from HousingWire framed it less as Zillow backing down and more as Zillow narrowing its rules to something both sides could actually live with long term.

What's Actually Allowed Now

Under the updated policy, truly private listings, meaning ones that are never publicly marketed at all, are fine. If a seller wants their home kept entirely off public marketing and signs a written acknowledgment of that tradeoff, Zillow has no issue with it. That listing was never going to show up on Zillow anyway, so there's nothing to ban.

Office Exclusives are also fine, as long as they stay inside the brokerage or in direct one to one communication with actual clients, not broadcast publicly. Sneak peeks on social media or email are permitted too, but only if they skip the price, the address, and any call to action like "DM me for details." The moment identifying details show up in a public post, the clock starts. You have one business day to get that listing into the MLS or it's exposed to a violation.

What still gets flagged: publicly marketing a listing, meaning a yard sign, a social post with an address, a page on your own website, without MLS entry within a business day. Selectively marketing to buyers who aren't already your clients while withholding the listing from everyone else. Advertising "off-market access" as a perk if a buyer agrees to work with your brokerage specifically. Those are the practices Zillow built this policy to stop, and they're still banned under the current version.

Why This Traces Back to Clear Cooperation

None of this exists in a vacuum. The National Association of Realtors' Clear Cooperation Policy set the original standard that public marketing requires MLS submission within one business day. Zillow's rules were originally written to be even stricter than Clear Cooperation and stricter than some local MLS rules, specifically because NAR's own enforcement posture around Clear Cooperation has loosened in some markets over the past two years.

That gap, MLSs relaxing enforcement in some regions while brokerages like Compass push private listing networks, is exactly what Zillow says it's trying to close. Zillow has been explicit that the goal isn't rule-making for the industry generally. It's a platform decision about what appears on Zillow specifically. But because so much buyer traffic flows through Zillow, the practical effect functions like an industry rule whether or not that was the intent. Inman's ongoing coverage of the broader Zillow, Compass, and MLS dispute has tracked this tension for over a year now, and it isn't fully resolved even after the lawsuit ended.

For California agents, this matters more than it might in smaller markets. CRMLS, the California Regional MLS, is the largest MLS in the country by subscriber count, and its member agents are directly affected by how strictly Zillow enforces this policy against listings that skip MLS entry. If your brokerage or team is testing a private-first marketing strategy anywhere in a CRMLS coverage area, you're operating inside exactly the environment this policy was built to catch. Whatever tools your team already uses to manage listing syndication, this is worth confirming directly rather than assuming your current setup handles it automatically.

The Fair Housing Angle Nobody Mentions

Zillow's own public reasoning for the policy leans heavily on a consumer protection and fair housing argument, and it's worth taking seriously beyond the platform politics.

Zillow has argued that selectively marketing listings, sharing them with some buyers and not others, disproportionately affects communities of color, citing research suggesting off-MLS selling can cost sellers thousands of dollars on average compared to broad market exposure. Whether or not you find that framing persuasive as a business matter, it's the argument that's shaping how this policy gets defended publicly, and it's worth understanding if a client asks why their listing strategy is being scrutinized.

There's a real liability angle buried in this too. Selectively choosing which buyers get access to a listing, even informally, edges toward exactly the kind of disparate treatment concern that fair housing law exists to catch. A private listing strategy built around "call me directly if you want early access" can look very different in a fair housing complaint than it does in a marketing meeting.

What to Actually Check Before Your Next Listing

If you're taking a new listing anywhere in California, walk through this before you put anything public.

Decide upfront whether this listing is going fully private, meaning no public marketing at all, or publicly marketed from day one. The middle ground, quietly showing it to a few buyers while telling the seller it's "coming soon," is exactly the gray zone that gets flagged.

If you're doing any public marketing, a sign, a social post, a page on your website, build the one business day MLS entry deadline into your process the same way you'd track any other transaction deadline. This isn't a soft guideline. It's the difference between a normal listing and one that's permanently unsearchable on the platform most buyers start with. Treat it with the same seriousness you'd give a contingency deadline, because the consequence of missing it, in this case, doesn't go away after escrow closes. It follows the listing for the life of the agreement.

If a seller specifically wants to test the market privately first, get that decision in writing, and be honest with them about the tradeoff. Zillow's own data, and most independent research on the subject, suggests broader exposure tends to produce better outcomes for sellers. A seller who chooses privacy anyway should be making that choice with real information, not because the agent wanted to avoid the MLS clock.

Once you do publish, make sure your listing description and marketing actually earn the exposure you're now guaranteed to get. There's no point fighting this hard to stay compliant if the listing itself doesn't convert once buyers see it. And check that your MLS entry process doesn't have any built-in delays, some brokerage systems queue MLS submissions overnight or batch them, which can quietly eat into your one-day window without anyone noticing until it's too late.

The Part That's Easy to Miss in a Busy Pipeline

None of this is complicated in isolation. One business day, MLS entry, no selective access. The problem is bandwidth, not comprehension. An agent juggling six active files doesn't always remember that the social post they scheduled Tuesday morning started a countdown clock they now have to track separately from everything else on that file.

That's exactly the kind of detail that gets missed when nobody's specific job is watching for it. If you're the one tracking every deadline across a growing pipeline, a transaction coordinator catching this kind of timing issue before it becomes a permanent platform ban is worth more than the subscription fee on whatever CRM you're already paying for.

Check your active listings today. If anything went public more than a day ago and isn't showing up in your MLS feed, that's not a someday problem. That's a today problem, and the clock started the moment that post went live.

A buyer types "does this agent work with first-time buyers" into Google Maps, right on your business listing.

Nobody wrote an answer to that question. Not you, not a past client, nobody. Google's own AI just answered it anyway, pulling from your profile, your reviews, and whatever your website says about you.

If that sounds like it happened without your permission, that's because it basically did.

This isn't a small tweak buried in a settings menu. It's a real shift in how Google represents your business to anyone searching for an agent, and most agents haven't caught up on what actually changed or what it means for their leads.

What Actually Happened to the Q&A Section

For years, Google Business Profiles had a simple Q&A feature. Anyone could post a question. Anyone, including strangers with no connection to your business, could post an answer. You could add your own answers too, and plenty of agents used it to seed useful questions about their service areas or specialties.

That feature is gone. Google announced it would shut down the Q&A API on September 17, 2025, and the API was fully discontinued on November 3, 2025. The public-facing Q&A threads themselves started disappearing from listings starting December 3, 2025, with the removal rolling out gradually over the following few months. If your profile still shows old Q&A content today, that content is frozen. You can't add to it, and it's on its way out entirely.

In its place, Google built what it calls Ask Maps. It's a Gemini-powered feature that lets someone type a natural question directly on your listing, "do they handle rentals," "are they good with first-time buyers," "how fast do they respond," and get an instant, synthesized answer. No human wrote that answer. Gemini generated it on the spot.

Google's own stated reasoning for the change centers on usability. Q&A threads piled up over years, and the useful, current answers got buried under old, outdated, or flat-out wrong entries nobody ever cleaned up. Rather than continue moderating a feature that had become genuinely hard to use, Google replaced the whole mechanism with something generated fresh, every time, from current data. Whether or not that tradeoff favors you depends entirely on how well you keep your own profile updated, which is the theme running through everything below.

How Gemini Actually Builds the Answer

This is the part worth understanding clearly, because it changes what you're optimizing for.

Ask Maps pulls from several sources, roughly in order of weight. Your Google Business Profile fields come first, your business description, categories, services, hours, and any attributes you've filled in. Customer reviews come next, and Gemini reads them closely enough to cite specific details, not just star ratings. If several reviewers mention that you're responsive on weekends or great with anxious first-time buyers, Gemini will surface that. Your website is the third major source, particularly any content structured as clear questions and answers.

HousingWire's coverage of AI-driven proptech shifts has been tracking this broader pattern across real estate specifically, agent-facing platforms increasingly pulling structured data into AI systems that make recommendations on an agent's behalf, whether that agent actively participated in shaping the input or not.

Barry Schwartz's coverage for Search Engine Roundtable confirmed the Gemini integration expanded to Business Profile management directly, letting business owners ask Gemini questions about their own listing performance and reviews, not just letting customers ask questions about the business. That integration went fully live on desktop and mobile on June 10, 2026, and it expanded to multi-location accounts within the last few weeks, meaning teams and brokerages managing several office listings can now use it too.

The practical effect is that your profile isn't a static form anymore. It's raw material an AI model reads and synthesizes on demand, every time someone asks it a question.

The Tactic That Just Died

If you or your marketing person spent time seeding your Q&A section with keyword-rich questions, "does this agent serve Rancho Cucamonga," "do they work with VA loans," that tactic is gone. There's no Q&A box left to seed.

That's not necessarily a loss. The old system had a real problem. Anyone could answer a question on your listing, including competitors, bots, or people who'd never worked with you. Wrong answers about your pricing, your service areas, or your availability could sit there for years, and correcting them meant manually flagging bad content and hoping Google acted on it.

Ask Maps removes that specific vulnerability. Nobody can post a fake answer to your listing anymore. But it also removes your ability to directly control the exact wording of what a prospective client sees. You're no longer writing the answer. You're feeding the raw material Gemini uses to write it for you.

What This Means for Real Estate Specifically

Real estate runs almost entirely on local search. A buyer or seller typing "real estate agent near me" or "best realtor in [city]" into their phone is the exact kind of query Ask Maps is built to answer conversationally, and increasingly to answer instead of just listing you as one of three map pack results.

If your profile is thin, an incomplete service area, a generic one-line description, categories that don't reflect what you actually specialize in, Gemini has almost nothing to work with. It either skips the answer entirely or infers something from whatever scraps of review text it can find, which can produce an answer that undersells you or gets a detail wrong.

If your profile is genuinely complete, specific service areas, a description that names your actual specialties, current photos, and a steady stream of detailed reviews, Gemini has real material to draw from. The gap between those two agents just got wider, because one of them is now being represented by an AI system pulling from good data and the other is being represented by an AI system pulling from almost nothing.

This connects directly to the work we've covered before on how to rank in AI search generally. That piece covers the broader strategy. This is the specific platform mechanic sitting underneath a big part of it.

Worth noting too, Google hasn't rolled Ask Maps out uniformly across every business category. Some regulated categories have been excluded so far, largely over compliance and data sensitivity concerns. Real estate hasn't been one of the excluded categories, which means agent profiles are squarely inside this rollout right now, not waiting on the sidelines for it to arrive later.

The Review Queue Nobody's Checking

Here's a detail worth knowing about specifically, because it's easy to miss inside your Business Profile dashboard.

Google added a safeguard as this rolled out. AI-drafted answers to certain questions don't always go live instantly. Some sit in a pending review queue where the business owner can approve, edit, or reject them before they're published. If you haven't looked at your Business Profile dashboard recently, there's a real chance something is sitting there waiting for your attention, and if nobody checks it, it can eventually publish unreviewed.

That queue deserves the same regular attention you'd give a new lead notification. Whoever manages your reviews and profile should be the same person checking that queue, and it takes minutes, not hours, once it becomes a habit.

What to Actually Fix on Your Profile This Week

Start with completeness. Every field, your business description, your service areas, your categories, your attributes, should be filled in accurately and specifically. Generic entries give Gemini nothing to work with. "Real estate agent serving Southern California" is worse than "Real estate agent specializing in first-time buyers in Riverside and San Bernardino counties," because the second one gives the AI something concrete to cite when someone asks a location-specific question.

Audit your photos. Ask Maps regularly pulls images directly into its answers, and outdated headshots or photos from listings you sold three years ago don't help you. Replace anything stale.

Look at your reviews differently now. A five-star rating with no detail gives Gemini almost nothing to cite. A review that says "she walked us through the entire inspection contingency process and caught something our first agent missed" gives the AI a specific, usable detail it can surface when someone asks a relevant question. When you ask past clients for reviews, a gentle prompt toward specifics, what stood out, what surprised them, produces material that actually helps you now.

Check your website's FAQ content and make sure it's structured clearly, since it's one of Gemini's stated source categories. If you've already got FAQ schema on your key pages, this is exactly the kind of update that makes that investment pay off in a new way. If your site doesn't have anything structured that way yet, a clean contact page and clear service pages are a reasonable place to start before tackling FAQ schema specifically.

Make sure your categories are accurate and specific too. "Real Estate Agent" as your primary category with the right secondary categories added, rather than a vague catch-all, gives Gemini a clearer signal about what you actually do and who you serve.

And check that pending answer queue. Today, not eventually.

The Bigger Pattern Here

This is the second major platform shift in local search mechanics this year, and it won't be the last. Whatever comes next, the underlying lesson stays the same: complete, specific, recently updated information wins, and thin or stale profiles lose ground quietly, without any warning that it's happening.

The same principle runs through nearly everything we've covered about showing up in AI search results and about why generic listing copy underperforms specific, detailed content. AI systems reward specificity because specificity is what they can actually use. That was true before Ask Maps existed, and it's more true now that an AI model is directly generating the first impression a prospective client gets of you. Search Engine Journal's ongoing coverage of Ask Maps has made the same point repeatedly across other local business categories, not just real estate.

If you're managing a growing pipeline of listings and clients, this kind of ongoing profile maintenance is exactly the sort of task that slips when nobody owns it specifically. It's a smaller cousin of the same problem a transaction coordinator solves on the compliance side of your business, someone whose job is noticing the thing that's easy to deprioritize when you're juggling six other things.

Pull up your Google Business Profile right now. Check every field for gaps, look at your last five reviews for specificity, and check whether anything's sitting in a pending queue waiting on you. The AI answering questions about your business is only as good as what you've actually given it to work with.

Somewhere in Altadena or Pacific Palisades right now, a homeowner who lost everything in January's fires is getting a text.

"I noticed your property. I buy houses fast, as-is, no repairs needed. Cash offer, quick close."

That text used to be just tasteless. As of November 2025, in specific ZIP codes, sending it is a misdemeanor. If you're the agent who sent it on a client's behalf, you've also just violated your real estate license. Automatically. No investigation required to establish that part.

Welcome to AB 851.

What AB 851 Actually Bans

Start with the basics, since the details matter more than usual here. AB 851 prohibits unsolicited offers to purchase residential property in a specific list of ZIP codes across Los Angeles and Ventura counties, the areas hit by the Palisades and Eaton fires. The affected codes include 90049, 90263, 90265, 90272, 90290, 90402, 91001, 91024, 91103, 91104, 91106, 91107, 91301, 91302, and 91320.

The ban runs until January 1, 2027. It isn't permanent, but it's not a short window either.

"Unsolicited" has a specific legal meaning here, and it's worth being precise about it. It covers any offer made by text, email, phone call, mail, or other direct outreach, unless the property is already listed on an MLS or public marketing platform, has a for-sale sign up, or was advertised in print or a public flyer. In plain terms, if a seller didn't put their home on the market and you reach out anyway with an offer, that's unsolicited. If they listed it and you respond, that's normal business.

This grew directly out of emergency executive orders issued right after the January 2025 fires. The California DRE issued its own consumer notice warning homeowners about predatory outreach almost immediately after the fires started. AB 851 took that emergency protection and turned it into standing law.

The original executive orders had a hard expiration date, and once they lapsed there was a real gap where nothing stopped the practice from resuming. That's the specific problem AB 851 was written to close. It's why the bill moved through Sacramento as an urgency statute, meaning it took effect immediately upon signing rather than waiting for the standard January 1 start date most new California real estate law follows. If you've gotten used to tracking new disclosure requirements that land every January 1, this one broke that pattern entirely, it was already live months before this year's more typical batch of new laws arrived.

Why This Law Exists

Disaster zones attract a specific kind of buyer. Not every investor working a fire-affected area is predatory. Plenty are legitimate. But the pattern of lowball, high-pressure outreach to grieving, displaced homeowners is well documented after nearly every major California wildfire, and the 2025 LA fires were no exception.

The bill's own legislative analysis describes the target directly, offers made for less than a property's fair market value as of January 6, 2025, sent to homeowners who never asked to be contacted. Someone who just lost a house to a fire is not in a strong negotiating position. They may be staying in a hotel, dealing with an insurance claim, and getting a same-day cash offer that sounds like relief instead of exploitation.

AB 851 doesn't ban buying property in these areas. It bans the specific tactic of cold-soliciting people who haven't indicated they're selling. Coverage from the Senate Judiciary Committee's analysis frames it as closing a gap that existed the moment the original executive orders expired. The full statutory language sits in Civil Code Section 2079.26, added specifically for this purpose, if you want the exact wording your compliance team should be working from.

The Part That Should Actually Worry You

Here's the sentence that separates this law from a typical consumer protection statute. If a licensed real estate agent makes a written unsolicited offer on a client's behalf in violation of this law, that conduct is automatically deemed a violation of their real estate license.

Not "may result in." Deemed. That's a direct trigger, not a discretionary finding the DRE has to build a separate case around. If you cold-texted a fire zone homeowner an offer and that offer meets the statute's definition of unsolicited, you've handed the DRE a violation on a plate.

Stack the penalties on top of that. Civil penalties run up to $25,000 per violation, and each individual offer counts separately, this isn't a one-time fine for the practice. It's also a misdemeanor. The Attorney General, a county counsel, a city attorney, or a district attorney can all bring a civil enforcement action.

And the seller gets a remedy too. If a home sale happened because of an unsolicited offer that violated this law, the seller can cancel the contract for up to four months after closing, with reimbursement for the purchase price and any improvements made. That's not a typical cancellation window. Four months post-close is long enough for a transaction to feel completely settled before it unravels.

That cancellation right runs through the same mechanism as any other contract cancellation in California, meaning a proper Cancellation of Contract needs to get filed correctly if a seller actually exercises it. The difference here is the timeline. Most cancellation scenarios play out during an active escrow, while contingencies are still open. This one can surface months after everyone involved thought the file was closed and archived.

The Attestation Requirement Nobody's Talking About

This is the part that actually affects your paperwork on every deal in these ZIP codes, not just the predatory ones.

Before title transfers on any residential sale in an affected ZIP code, the buyer and seller both have to sign a written attestation confirming the offer was not unsolicited, meaning it came through a listing, a for-sale sign, or public marketing, not cold outreach. That signed attestation creates a legal presumption the offer was properly solicited. It has to be recorded before the deal closes.

This applies to every sale in these ZIP codes right now, not just the ones involving a fire-damaged property. If you're closing a completely unrelated, unaffected transaction that happens to sit in one of those ZIP codes, you still need this attestation on file. Skipping it isn't just sloppy paperwork. It removes your legal presumption of compliance and leaves the transaction more exposed if anyone ever questions how the deal originated.

Add this to your intake checklist immediately if you work any of these areas. It's a new line item, not an optional extra, and it needs to sit alongside your Natural Hazard Disclosure Statement ordering process for any property in a fire-affected zone.

Escrow and title companies operating in these counties are still catching up on this requirement, and it's not something every office has fully built into their standard closing packet yet. That's a gap worth checking for directly rather than assuming someone else in the transaction is handling it. If you're the one tracking deadlines and required documents across a file, this attestation belongs on that list the same way a signed Transfer Disclosure Statement does.

Where TCs and Agents Actually Get Tripped Up

The predatory cold-caller scenario is the obvious one, and it's not really who this section is for. Most agents reading this aren't running a wholesale investor operation. The more common failure mode is subtler.

An agent working a completely legitimate deal in Altadena reaches out to a homeowner they know personally, maybe a past client, maybe someone from a networking group, to ask if they've thought about selling. No malice, no lowball number, just a normal relationship-based conversation an agent has all the time in any other ZIP code in the state. In one of these specific fire-affected areas, that conversation can technically qualify as an unsolicited offer if it crosses into an actual offer to purchase before the property is listed.

The safest posture right now, in these specific ZIP codes only, is to treat any offer-adjacent conversation as something that needs to happen after a listing exists, not before. If a client wants to explore selling, get the property listed first, even informally through an MLS entry, before any specific purchase number gets discussed. That single sequencing change is the difference between a normal real estate conversation and a technical violation.

This is exactly the kind of nuance that's easy to miss when you're managing five files at once and one of them happens to sit in an affected ZIP code you didn't think twice about. It's also exactly the kind of gap transaction compliance work exists to catch before it becomes a DRE letter instead of after.

The broader lesson tracks with something we've written about before. A lot of the compliance failures that actually cost agents money aren't dramatic. They're small procedural gaps that compound because nobody's job is specifically to catch them. AB 851 just raises the stakes on one very specific gap, in one very specific set of ZIP codes, for the next year and change.

How Long This Actually Lasts

AB 851 sunsets January 1, 2027, which sounds distant right now but isn't as far off as it feels. The law was structured as an urgency statute specifically because the original executive order protections had already expired once and left a gap, so lawmakers built in a defined end date rather than making it permanent. Whether it gets extended, made permanent, or allowed to lapse depends on what happens between now and then, and on how the affected communities are doing with rebuilding.

For now, treat the ZIP code list as fixed and the enforcement risk as real. The California Association of Realtors has been tracking post-fire real estate practice closely since the disaster, and this law reflects exactly the kind of regulatory response that tends to stick around longer than its original sunset date once it's on the books.

If you're not actively working in the Palisades or Eaton fire footprint, this law doesn't touch your day to day. But agents statewide should know it exists, because the next California wildfire, and there will be one, could trigger a similar law with a different set of ZIP codes attached to it. This is very likely the template going forward, not a one-off. It sits in the same family as other post-disaster consumer protections California has leaned on before, and NAR's own guidance on disclosure and consumer protection obligations generally trends toward more of this, not less, whenever a major disaster reshapes a local market fast.

What to Actually Do About It

If you have a listing or a buyer client anywhere in the affected ZIP codes, confirm the attestation is part of your closing checklist before you get anywhere near title transfer. Don't assume your title company is automatically catching this since it's new enough that not every office has fully operationalized it yet.

If you're a buyer's agent working these areas, especially anyone doing volume with investor clients, audit how leads are being generated before any offer goes out. A lead list scraped from public records and cold-texted to non-listed properties is exactly the fact pattern this law was built to catch.

If you're a listing agent with a client who owns property in one of these ZIP codes, whether or not it burned, loop them in on this protection specifically. A lot of homeowners in these areas have no idea this law exists, and knowing it does gives them real leverage if the unsolicited offers keep coming, which reporting on the aftermath of the fires suggests they still are, months later.

If your team is active in these ZIP codes regularly enough that this feels like an ongoing compliance question rather than a one-time read, it's worth having someone dedicated to tracking what's required at each stage of a file instead of relying on memory across a busy pipeline. New requirements like this one tend to slip through exactly when volume is highest, which in a rebuilding market is likely to be soon.

None of this requires new software or a new vendor relationship. It requires one new form in the closing package and a genuine mental note about where your listing outreach crosses a line that didn't exist a year ago. Miss it, and the DRE isn't the only party with a claim against you. The seller has four months to unwind the whole deal.

Check your active files right now. If anything sits in those fifteen ZIP codes, that attestation needs to be on your radar today, not at your next file review.