Where to Buy Medicare Leads: A Buyer's Vetting Guide

You can buy Medicare leads from seven broad places: direct-mail response vendors, inbound call and pay-per-call networks, web form vendors selling exclusive records, web form vendors selling shared records, aged lead files, your FMO or upline, and carrier or co-op programmes. You can also build your own. None is best in the abstract. What decides it is which channel your agency can actually work with the staff you have, and whether the vendor can show you how each lead was generated and prove the consumer agreed to the contact you are about to make.

This is a guide about where and how to vet, not about price. We covered the ranges in what Medicare leads cost in 2026, and the position there holds: unit price is the least informative number on the invoice.

Where can you actually buy Medicare leads?

A Medicare lead is a record of a Medicare-eligible consumer who has taken some action signalling interest in a plan, together with the evidence of how that action happened. The second half of that sentence is what most buyers skip, and it is what separates a lead you can work from a spreadsheet row you cannot.

The main channels and who each one suits

Direct-mail response leads come from a consumer returning a reply card or calling a number on a mailer. Intent is high and the demographic fit is good. The trade-off is timing: drops book weeks or months ahead, so you commit to volume before you know your agent capacity. If you plan around the enrolment calendar, decide this channel first, as we sequence in planning Medicare Advantage lead buys for AEP 2027.

Inbound calls and pay-per-call put a consumer on the phone while intent is live. Highest converting for most agencies, and most expensive. The mechanic to understand is the billable trigger: pay-per-call bills on a connected duration threshold, so a caller who stays past it and turns out ineligible still bills. Negotiate that gate, ask what share of calls historically bills, and ask whether calls are screened by an IVR or a live agent first. Screened transfers cost more per call and usually less per issued policy.

Web form vendors sell the same underlying record in two very different ways.

The maths is the same one in the exclusive versus shared lead comparison, but the Medicare difference is regulatory: rules on sharing a beneficiary's contact details with other marketing organisations make casual resale harder to defend.

Aged files, FMO leads and carrier co-op programmes

Aged lead files are records generated months ago and resold cheaply. The problem is structural: at that age the consent trail is usually a claim rather than a record. If a vendor cannot produce a per-record certificate for a lead generated by a publisher they no longer work with, you are not buying a discount, you are buying someone else's unresolved risk. Most agencies should skip them.

FMO and upline-supplied leads are the most common starting point for newer agents and the least transparent. They are free or subsidised in exchange for writing through that FMO, so the cost sits in your contract level, not on an invoice. You cannot evaluate that without two answers: what level would I get without the leads, and who generated these records. If the second answer is "we buy them in", run the full checklist on that supplier too.

Carrier and co-op programmes reimburse marketing spend or supply leads directly, usually once you have production history. They are often the cleanest leads available, because the carrier runs its own compliance review, and the most constrained: prescribed creative and disclaimers, reporting obligations, and prospects who can only be shown that carrier's plans. Good for an agency with real carrier concentration, disqualifying for an independent broker selling a wide panel.

Should you build your own source instead?

Building your own means running search, social or content acquisition, capturing the lead on your own site, and owning the consent record end to end. No resale, no queue position, full visibility of the source creative, and an asset that keeps producing after you stop paying. The catch: a twelve-month project with an unknown cost per lead for the first several months, competing for budget that would otherwise buy leads working today.

Do both, with a fixed split. Keep buying the channel producing your best cost per issued policy, and cap owned acquisition at a share of budget you could write off entirely in year one. Agencies that get burned switch wholesale and come back to vendors on worse terms. Note that the compliance burden moves onto you: you capture the disclosure, store the consent record and produce it on demand.

The vendor vetting checklist

This is the part that protects you. Run it before the first invoice, in writing, and keep the answers.

• Ask how the lead was generated, then ask to see the source creative. Not a description: the actual ad, mailer image or landing page URL. Vague origin stories ("co-registration", "our network") are the most reliable warning sign, because that is how records with no defensible origin get laundered clean.
• Demand the consent record per lead, not a blanket assurance. You want a certificate tied to that consumer, that page and that disclosure text, retrievable on demand. A warranty that "all leads are TCPA compliant" is a promise to indemnify, not evidence. Mechanics are in our guide to TrustedForm and Jornaya consent certificates.
• Confirm whether the vendor is a TPMO and how they handle CMS disclaimer requirements. If they generate or sell Medicare leads for compensation, they very likely fall under CMS third-party marketing organisation rules. Ask what disclaimer appeared at capture, and to see it on the page.
• Get the return and replacement policy in writing, with the window and qualifying reasons. The number of days, the accepted dispositions (disconnected number, wrong person, not Medicare eligible, no recollection of enquiring), the submission process, and whether you get credit or a replacement. A window shorter than your time to first contact never pays out.
• Ask how many times a shared lead is sold and to whom. A number, not a range, plus whether sale order is fixed or auctioned, and whether the record is also sold into another vertical. A consumer who filled in one form and gets calls from six organisations complains about all of them, including you.
• Check state and plan-year coverage before committing. Plan availability is county-level, so a vendor with strong Florida volume may have nothing usable in your footprint. Ask for volume by state for the last full month, and about the counties you are contracted in.
• Verify data handling, storage and retention. Where is the data held, who has access, and how long are consent records kept. If retention is shorter than your likely exposure window, the evidence is gone when you need it.
• Check who generated the lead, not just who sold it. Many vendors are aggregators buying from publishers. Ask how they vet publishers and what happens when one misrepresents a source, using the due diligence in the insurance publisher vetting checklist.
• Never sign a volume commitment on a demo call. Buy a small paid test batch with tracked outcomes first, work it properly, and let the data decide.

The compliance questions that disqualify a vendor

A TPMO, or third-party marketing organisation, is an entity CMS defines as one compensated to perform lead generation, marketing, sales or enrolment functions for Medicare Advantage or Part D plans. Buy leads and make calls and you are probably one; a vendor generating them for payment probably is too. That brings requirements around disclaimers, call recording and reporting. What that means operationally is in TPMO compliance for Medicare lead generation.

On the telephone side the governing framework is the TCPA, enforced by the FCC and mirrored by a growing set of state statutes. This area has moved recently. The FCC's one-to-one consent rule, which would have required separate express written consent for each seller, was struck down before taking effect, and several states tightened their own statutes instead. The CMS data-sharing consent provisions have also been through litigation and later guidance. For a buyer both facts mean the same thing: do not build a process on a summary you read somewhere, including this one. Confirm the current position with CMS, the FCC and your state Department of Insurance, or with counsel. Our overview of TCPA consent for lead buyers is a starting point, not a legal opinion.

Three answers should end the conversation. A refusal or inability to produce a per-lead consent record. A generation story that cannot be traced to a page or mailer. And any suggestion that compliance is entirely your problem because you are the one dialling. That last one is half true, which is why it disqualifies: the vendor has priced their leads assuming they never stand behind them.

How to run a paid test batch

A test batch is a deliberately small paid purchase run under controlled conditions so you can compare sources on outcomes rather than sales claims. It is the only part of vendor selection that produces evidence.

Apply the same discipline to product types, not just vendors. The choice between Medicare Advantage and Medicare Supplement inventory changes contact and close behaviour more than most vendor differences do, as we break down in Medicare Supplement leads versus Medicare Advantage leads.

Common questions

Where is the best place to buy Medicare leads? There is no single best source. Inbound calls and screened transfers convert best and cost most, exclusive web forms suit small teams whose constraint is agent hours, shared web forms suit high-capacity dialling operations, and direct mail suits field agents with a defined county footprint. Pick on fit with your staffing model, then vet the vendor on consent records and returns.

How do I verify that a Medicare lead is compliant? Ask for a per-lead consent record tying a specific consumer to a specific page and disclosure, retrievable on demand, then ask to see the source creative they responded to. A contractual warranty is not verification. If a vendor offers assurances rather than records, assume the evidence does not exist.

Are aged Medicare leads worth buying? Rarely. The price is low because risk transfers to you: at typical file ages the consent trail is a claim rather than a retrievable record, and the original publisher is often gone from the chain. Consider them only with per-record consent verification and a permissioned reactivation plan.

What does exclusive mean when buying Medicare leads? Whatever the contract says, which varies by vendor. Some mean sold to one buyer permanently, some mean exclusive for a few days, and some mean exclusive per carrier, so the same record reaches another agent selling a different plan. Get the definition in writing before paying an exclusivity premium.

Should I take free leads from my FMO? Only after calculating the embedded cost. Free leads are usually paid for through your contract level, so compare the level you would get without them, multiply the difference by expected annual production, and divide by expected lead volume. Vet the FMO's own supplier too, since exposure attaches to whoever calls.

How many leads should I buy in a test batch? Roughly 50 to 100 per source for a first read. That compares contact rate, disposition mix and return handling across vendors, but is not enough to judge close rate reliably. Run a confirming second batch with the winner before agreeing any volume commitment or minimum spend.