To revoke access to a mortgage bank link, identify the connected service and use its disconnection controls. That confirmation does not establish that the lender has deleted its records or withdrawn your application. If you want the loan to continue, first confirm what verification remains and how you will provide it.

This guide concerns U.S. mortgage applications. Plaid provides a documented example, but your lender’s provider, consent terms, and document requirements determine the practical steps.

1. Identify the service behind the bank link

Retrieve the original invitation, asset-verification consent, and any connection confirmation. Record the lender, verification provider, connected bank, account’s last four digits, and name of the app receiving data. Ask your loan officer to resolve unfamiliar names through a contact channel you already trust.

The distinction between lender and provider matters. The CFPB’s financial-data sharing explainer, published July 24, 2020, explains that a service often uses a separate aggregator to obtain account information. Our mortgage technology explainers provide broader context for these systems.

For a lender-specific example, Infinity Lending Services’ privacy policy dated December 1, 2025 says it uses Plaid to verify financial accounts and that using Plaid authorizes access and transmission of financial information. It lists balances, ownership details, and transaction history among the connected data. That describes this lender’s disclosed arrangement; check your own consent before assuming the same arrangement applies.

2. Confirm what verification remains

A successful connection does not mean the lender has finished reviewing your assets. Plaid’s March 5, 2026 explanation of asset verification describes reports that lenders can refresh when needed during underwriting.

Ask your loan officer:

• Which accounts and report dates are already in the file?
• Is another balance check, report refresh, or supporting document outstanding?
• What alternative will the lender accept if you disconnect, and when is it due?
• Would changing methods affect any charge or the expected closing date?

Alternatives are documented, but eligibility depends on the loan. Fannie Mae’s asset-verification guidance dated May 4, 2022 permits bank or investment statements and properly authorized third-party verification. It requires missing information to be supplemented and verification dates to meet applicable document-age requirements. Automated validation can carry different documentation requirements.

If statements are the agreed replacement, ask for the exact accounts and date range. Under that Fannie Mae guidance, bank statements identify the institution, account holder, at least the last four account digits, covered period, transactions, and ending balance. A screenshot showing only today’s balance would leave required information out.

If the report contains a discrepancy, identify it before arranging replacement evidence. Our guide to correcting mortgage verification errors explains how to organize that discussion.

3. Revoke access to the mortgage bank link

For a confirmed Plaid connection, Plaid’s January 25, 2022 Portal announcement documents the ability to view connected accounts and apps, inspect shared data types, disconnect connections, and delete data from Plaid’s systems. The steps below use those documented capabilities without assuming a particular screen layout:

1. Visit my.plaid.com directly and sign in or create a Portal account.
2. Match the displayed bank and receiving app to the connection you identified.
3. Use the connection’s disconnection control, checking its scope before confirming.
4. Save the result, date, and any confirmation or reference number.

If you cannot identify or manage the connection, ask the lender and provider to trace it. Plaid’s End User Privacy Policy, effective December 8, 2025, provides privacy@plaid.com as a contact.

Why a password change is not proof of revocation

Some connections use OAuth: you authenticate with your bank, which enables access through a digital token. Plaid’s API explanation updated April 15, 2025 describes this arrangement.

The CFPB warns that a password change may leave a service’s access intact. Ask the bank about its sharing controls and confirm the connection’s status. If you suspect compromised credentials, contact the bank promptly as a separate security matter.

4. Address deletion with each data holder

Disconnection does not establish that a report already delivered to the lender has been erased. Plaid’s End User Privacy Policy, effective December 8, 2025, excludes connected apps’ own data practices from its coverage. Direct requests about lender-held records to the lender’s privacy contact.

The same policy describes exceptions to deletion from Plaid’s systems, including legal obligations and fraud prevention. Ask what was deleted, what remains, and why.

The lender may have independent recordkeeping duties. Infinity’s December 1, 2025 policy, for example, identifies regulatory, investor-audit, and fraud-monitoring retention purposes. For a federal example, Regulation B’s record-retention rule generally requires records for a withdrawn consumer credit application to be retained for 25 months from application when no action notice is required. That period does not establish a universal deletion date for all mortgage records.

5. Confirm whether the application should continue

Tell the lender explicitly whether you intend to continue or withdraw. Disconnection is not reliable confirmation of application status.

If continuing, adapt this message:

I want to continue my mortgage application while ending future access through the identified bank connection. Please confirm the reports already received, any remaining verification, the accepted replacement documents and deadline, and any effect on cost or timing. Please also direct my separate request about stored-data deletion and retention to your privacy team.

If withdrawing, send a separate, explicit withdrawal instruction and request confirmation. Keep that response alongside the access and deletion records.

Consider the task complete when you have documented the connection’s status, the lender’s understanding of your application status, and either a plan for remaining verification or confirmation of withdrawal. Track any unresolved deletion request separately. If the purchase is continuing, use our homebuying process guides to organize the remaining transaction steps.