Legal advertising hit $2.5 billion in 2024 across 26.9 million ads (ATRA Legal Ad Spend Report, 2024). That kind of money attracts good operators and bad ones in roughly equal measure. The bad ones survive because most law firms buying leads don't know what to look for. They assume every vendor is legitimate, sign a contract, and only realize months later that their budget disappeared into leads that never had a chance of converting.
We route MVA leads daily through Claim Supply. We've seen what separates vendors who deliver real value from those who are basically running a recycling operation on stale data. After evaluating dozens of vendors and hearing from firms that got burned, we've identified five reliable warning signs that a lead vendor is wasting your money.
If you're new to buying MVA leads, start with our complete guide to buying MVA leads for pricing benchmarks, lead types, and the full vendor evaluation framework. This article focuses on the specific red flags that experienced buyers learn to spot.
TL;DR: The five biggest red flags in a lead vendor are refusing to share lead source details, missing TrustedForm certificates or consent documentation, selling "exclusive" leads to multiple buyers, offering no return policy or unreasonably short dispute windows, and delivering leads only via email with no API or webhook option. Any one of these signals low-quality leads, potential TCPA liability ($500 to $1,500 per violation, $6.6M average settlement), and poor conversion rates. Spot these early and switch vendors before you waste another dollar.
Red Flag #1: They Won't Share Lead Source Information
If your vendor won't tell you where their leads come from, they're hiding something. It's that simple.
Lead source matters because different channels produce leads with different intent levels, conversion rates, and compliance profiles. A lead generated from a Google search for "car accident lawyer near me" has far higher intent than one scraped from a Facebook quiz about "What's your accident claim worth?" Google search leads convert at 10-15% when handled properly. Low-intent social leads might convert at 3-5%, yet some vendors charge the same price for both (Claim Supply pillar guide, 2026).
Good vendors will tell you exactly which platforms they advertise on, what the ad creative looks like, and what landing pages prospects submit their information through. They'll break down conversion rates by channel so you can evaluate whether you're paying a fair price for the intent level you're receiving.
Bad vendors say things like "proprietary sources" or "our network" and refuse to elaborate. That usually means one of three things: they're buying leads from other aggregators (adding a markup with zero value), they're generating leads from misleading ads that don't mention legal representation, or they're pulling contact information from data brokers and packaging it as "leads." None of these scenarios end well for you.
What to do: Ask for a sample of the landing pages and ad creatives your vendor uses. If they refuse, request a trial batch of 10-20 leads and track where the prospect says they submitted their information. If the prospect doesn't remember filling out a form about a car accident, that lead was never real to begin with.
Red Flag #2: No TrustedForm Certificates or Consent Documentation
This is the one that can actually destroy your firm. TCPA penalties run $500 to $1,500 per individual violation, and the average class action settlement reached $6.6 million in 2024 (LeadGen Economy TCPA Analysis, 2025). TCPA lawsuits surged to 2,788 cases in 2024, a 67% increase year-over-year. In Q1 2025 alone, 507 class actions were filed, a 112% jump over Q1 2024 (LeadGen Economy, 2025).
Here's the part most firms miss: you're liable, not the vendor. Courts have consistently ruled that the company making the call bears TCPA liability. If your vendor generated the lead without proper consent, and you call that person using an autodialer, the lawsuit lands on your desk. Your vendor's compliance failures become your legal and financial problem.
TrustedForm certificates are the industry standard for consent verification. When a prospect fills out a form, TrustedForm captures a timestamped snapshot of the page, including the exact consent language displayed. The certificate costs $0.15 to $0.50 per lead. That's a rounding error compared to $40,000 to $750,000+ in defense costs for a single TCPA lawsuit (LeadGen Economy, 2026).
If your vendor can't provide a TrustedForm certificate or equivalent consent documentation for every lead, you are buying liability, not opportunity. Full stop. For a deeper dive into TCPA requirements, read our TCPA compliance guide for lead buyers.
What to do: Require TrustedForm certificate URLs with every lead delivery. Spot-check 10% of certificates by visiting the URL and verifying that the consent language, timestamp, and form content match what you received. If certificates are missing, expired, or don't match the lead data, escalate immediately.
Red Flag #3: "Exclusive" Leads That Aren't Actually Exclusive
Shared leads sold to 3-5 buyers convert at 5-10%. Exclusive leads convert at 10-15%. The price difference is significant. And some vendors charge exclusive prices while quietly selling the same lead to multiple firms.
This is the most common form of lead vendor fraud in the PI space. A vendor labels leads "exclusive," charges $300-$500 per lead, then sells the same contact information to two or three other firms within the same market. You're paying a premium price for shared-lead performance, and the math never works out. At $400 per lead with a 7% conversion rate (shared performance), your cost per signed case jumps to $5,714. At genuine exclusive rates with 20% conversion, that same $400 lead costs $2,000 per signed case. The vendor pockets the extra margin while you wonder why your ROI keeps shrinking.
Only 7% of personal injury leads even set a consultation appointment across the industry (MyCase 2024 Benchmark Report, 2024). When you're paying exclusive prices and getting shared performance, those already-thin margins disappear entirely.
What to do: Track how quickly prospects mention other firms when you call. If more than 20% of your "exclusive" leads say they've already spoken with an attorney, your leads aren't exclusive. Demand a written exclusivity guarantee with financial penalties for violations. Better yet, work with vendors who can prove exclusivity through their delivery infrastructure, such as real-time routing that locks a lead to a single buyer at the moment of generation.
Red Flag #4: No Return Policy or Unreasonable Dispute Windows
A vendor's return policy tells you everything about their confidence in lead quality. Good vendors stand behind their product. Bad vendors know their leads won't hold up to scrutiny, so they make it impossible to get credit.
The most common bad-vendor tactics here: no return policy at all, a dispute window under 12 hours, accepting disputes only for "wrong number" (not for wrong case type, out-of-area, or non-contactable leads), or requiring you to prove 5+ contact attempts across multiple days before they'll even review a dispute.
Here's what a reasonable vendor offers:
- 24-48 hour dispute window from the time of lead delivery
- Credits for bad contact info including disconnected numbers and invalid email addresses
- Credits for wrong case type when the lead isn't an MVA
- Credits for duplicates when you've already received the same lead
- Credits for out-of-area leads outside your geographic targeting
Elite vendors go further. They'll credit leads that don't answer after 3 call attempts within 24 hours, because they know that a lead who won't pick up the phone is worthless regardless of how it was generated. For more on what to look for in a vendor evaluation, read our guide to evaluating MVA lead vendors.
What to do: Before signing any agreement, get the dispute policy in writing. Run a 30-day pilot at low volume (20-30 leads) and file disputes for every lead that meets the criteria. Track your dispute acceptance rate. If the vendor rejects more than 30% of legitimate disputes, they're not a partner. They're a liability.
Red Flag #5: Email-Only Delivery With No API or Webhook Option
This red flag kills your conversion rate before you ever pick up the phone. Email delivery adds 2 to 10 minutes of latency between when a lead is generated and when your intake team sees it. That delay is fatal.
Contacting a lead within 60 seconds increases conversion by 391% compared to longer wait times (Velocify, 2015). After 5 minutes, conversion drops sharply. After 30 minutes, the lead has either hired someone else or lost interest. Email delivery guarantees that you'll miss the critical first-minute window for almost every lead.
Real-time API or webhook delivery pushes leads directly into your CRM the moment they're generated. Latency: under 5 seconds. Your intake team gets an SMS alert, the lead appears in their queue, and they're dialing before the prospect has closed the browser tab. That's how you hit the 60-second window consistently.
Vendors who only offer email delivery are telling you something about their infrastructure. They either don't have a real-time delivery system (which means they're a small operation reselling other vendors' leads) or they don't want you contacting leads quickly (because fast contact exposes lead quality problems). Neither scenario is good for you.
What to do: Require webhook or API delivery as a condition of working with any vendor. If they can't deliver via webhook, ask if they integrate with your CRM directly. Email-only delivery should be a dealbreaker for any firm spending more than $5,000 per month on leads.
What to Do If You Spot These Red Flags
If you've identified one or more of these red flags with your current vendor, don't wait. Here's a practical action plan.
First, document everything. Pull your conversion data, dispute history, and any communications where the vendor made claims about exclusivity, lead sources, or compliance. You'll need this if you decide to terminate early or dispute charges.
Second, run a parallel test. Before dropping your current vendor entirely, onboard a second vendor that passes all five checks. Run both side by side for 30 days at equal volume. Compare conversion rates, dispute rates, and cost per signed case. Let the data make the decision.
Third, audit your TCPA exposure. If you've been calling leads without consent documentation, consult with a TCPA defense attorney about your risk profile. The statute of limitations is four years for willful violations. Proactive compliance cleanup is always cheaper than reactive litigation.
The PI lead market is competitive enough without your vendor working against you. There are good operators in this space who provide transparent sourcing, documented consent, genuine exclusivity, fair return policies, and real-time delivery. You just have to know what to look for. For the full vendor evaluation framework, read our complete guide to buying MVA leads. For a checklist of questions every attorney should ask before buying leads, we'll be publishing that guide soon. And if you're evaluating consent verification tools, our upcoming comparison of consent verification tools compared will cover TrustedForm, Jornaya, and the alternatives.
Frequently Asked Questions
How do I know if my lead vendor is selling me shared leads as exclusive?
Track how quickly prospects mention other firms when you call. If more than 20% of your "exclusive" leads say they've already spoken with another attorney, the leads aren't exclusive. Ask your vendor for a written exclusivity guarantee with financial penalties for violations. Test by calling leads within 30 seconds to see if you're truly the first firm reaching out.
What should a TrustedForm certificate include?
A valid TrustedForm certificate includes a timestamped snapshot of the lead form the prospect filled out, the exact consent language displayed at the time of submission, the prospect's IP address and browser fingerprint, and a unique certificate URL you can verify independently. Certificates cost $0.15 to $0.50 per lead and serve as your primary defense evidence in TCPA litigation.
What's a reasonable return policy for lead vendors?
A good vendor offers a 24 to 48 hour dispute window for bad contact information, wrong case type, duplicate leads, and leads outside your target geography. Elite vendors also credit leads that don't answer after 3 call attempts within 24 hours. Any vendor with a no-refunds policy or a dispute window under 12 hours is a red flag.
Why does email-only lead delivery hurt my conversion rate?
Email delivery adds 2 to 10 minutes of latency before your intake team sees the lead. Contacting a lead within 60 seconds increases conversion by 391% compared to waiting longer (Velocify, 2015). Every minute of delay lets competing firms call first. Real-time delivery via API or webhook pushes leads directly into your CRM in under 5 seconds, triggering automated alerts to your intake staff.
How much do TCPA violations cost law firms?
TCPA penalties range from $500 to $1,500 per individual violation (per call or text). Average class action settlements reach $6.6 million (LeadGen Economy, 2025). Defense costs alone run $40,000 to $750,000+, even if you win. The firm making the call bears liability, not the lead generator, so your vendor's compliance failures become your legal problem.