If a credit inquiry is truly unauthorized, dispute it with every bureau that shows it and ask the company that made the inquiry to explain its access. If the entry came from identity theft, use the identity-theft block process as well. An unfamiliar name alone is not proof of unlawful access.
Most hard inquiries can remain for up to two years; Experian's explanation describes the usual 24-month reporting period. Their scoring effect is generally shorter. Soft inquiries don't affect credit scores, though you can still question an access you believe was improper.
This guide covers U.S. consumer reports under the Fair Credit Reporting Act. It is general information, not legal advice. GDPR and other countries' rules use different procedures.
Identify what the inquiry actually is
Start with the exact line on the report. That detail controls the next step.
FCRA Section 604 permits access for several reasons, not only a signed loan application. A current creditor may review an existing account, an insurer may underwrite, and a lender may make a prescreened offer. Employment reports generally require written authorization.
| Report entry | What it usually means | Best first move |
|---|---|---|
| Hard inquiry | A credit application or another credit-related access that may affect your score | Ask the company to identify the application or permissible purpose |
| Soft inquiry | A self-check, account review, or prescreened offer that doesn't affect your score | Dispute it only if the access itself is inaccurate or unauthorized |
| Specialty-report entry | A bank, employer, insurer, landlord, or other company accessed a separate consumer report | Request the file from the agency named in the notice |
| Multiple inquiries | Several lenders, a broker, or a dealership may have submitted or routed an application | Confirm whether you authorized the broker or transaction |
Turns out, the name on a report can be a parent company, affiliate, broker, or dealership. Ask for the legal name and application date before calling it fraud. Multiple entries can still be accurate if you authorized a broker or several lenders.
Don't request removal of a legitimate inquiry simply because it lowered your score. A bureau should correct or delete information that is inaccurate, incomplete, or cannot be verified.
Pull every relevant report and preserve evidence
The same inquiry may appear on one bureau and not another. Check each report separately.
- Get your Equifax, Experian, and TransUnion reports through AnnualCreditReport.com, the federally authorized source for credit reports.
- Mark the company name, inquiry date, inquiry type, reference number, and bureau that lists it.
- If a bank denial or checking-account problem is involved, request your disclosure from ChexSystems. If the denial notice names another reporting company, request that separate file too.
- Save a PDF or paper copy of each report before disputing anything.
- Gather the documents that support your explanation, such as a lender email, account-closing letter, fraud report, police report, or proof that you were not applying for employment or credit.
Use copies, not originals. Keep a simple log with the date you filed each dispute, the delivery method, the confirmation number, and the response deadline.
Call the company using contact information from its official website or a statement you already trust. Don't rely on a phone number from a suspicious text or email.
Dispute an unauthorized credit inquiry
The CFPB's dispute guidance recommends giving the bureau enough information to identify and investigate the exact error.
- File a separate dispute with every bureau that lists the inquiry. Use the bureau's current online dispute center or the mailing address shown on your report.
- Describe the precise problem. For example, say that you did not apply to the named lender, the company confirmed it pulled the wrong consumer's file, or an employment check occurred without your written authorization.
- Attach a copy of the report page and supporting documents. Include identity and address documents if the bureau requests them.
- Contact the company that made the inquiry. Ask what permissible purpose it relied on and request that it correct the entry with every bureau it contacted.
- Record when the bureau received the dispute and watch for the investigation result.
The federal investigation period is generally 30 days. It can extend to 45 days in limited situations, including when you provide additional relevant information during the investigation or dispute information after receiving a free annual report.
A vague statement such as "I don't recognize this" may not be enough. Explain what you checked and why the entry is wrong. The bureau may treat a dispute as frivolous or irrelevant if it lacks enough detail.
Online submission can work. Certified mail is not required, but a delivery record can help you prove when the bureau received your dispute.
Use this letter as a starting point:
[Your full name]
[Your address]
[City, state, ZIP]
[Date]
Re: Dispute of an unauthorized inquiry
I dispute the following inquiry appearing on my consumer report:
Company: [Company name]
Inquiry date: [Date]
Bureau listing it: [Equifax, Experian, or TransUnion]
Reference or partial number: [If shown]
I did not apply for credit from this company and did not authorize this access [use only if true]. I also have no account relationship that would provide a permissible purpose for the inquiry [use only if true].
Please conduct a reasonable reinvestigation under FCRA Section 611. Please delete or correct the inquiry if it cannot be verified as accurate and supported by a permissible purpose. Send me the written results and an updated report.
Enclosures: copy of the report page, identification, proof of address, and supporting documents.
Sincerely,
[Your signature]
[Your printed name]Include only facts you can support. If the company later confirms that no application exists, send that written response to the bureau.
If identity theft is possible, move faster
An unauthorized inquiry can be an early warning, but it doesn't prove fraud. If you also find a new account, unfamiliar address, or application you didn't make, treat those entries as one incident.
- Create an identity theft report through IdentityTheft.gov and save the completed report.
- Place a security freeze with each nationwide credit bureau. The FTC's guidance on freezes and fraud alerts explains the difference. A freeze can help stop new applications, but it won't erase an old inquiry.
- Ask each bureau to block the fraudulent inquiry and related information under FCRA Section 605B. Include proof of identity, the identity theft report, the exact information to be blocked, and a statement that it did not result from a transaction you made.
- Dispute related accounts, collections, addresses, and other fraudulent information separately. Removing the inquiry alone won't remove an account opened in your name.
- Notify the lender's fraud department through an official channel. Ask what application or contact information it has associated with your identity.
For a qualifying identity-theft block, the bureau generally must block the information within four business days after receiving a complete request. Incomplete documents can delay or defeat the request.
Remove a ChexSystems inquiry or bank-screening error
ChexSystems is a consumer reporting agency for deposit accounts. It is not one of the three nationwide credit bureaus.
Request your ChexSystems consumer disclosure, then read it line by line. Thing is, a bank denial may result from a negative account record rather than the inquiry itself. Dispute the exact item causing the problem.
| What you see | What it may be | Response |
|---|---|---|
| Inquiry or access record | A bank or credit union checked your file | Ask the institution when and why it accessed the file |
| Account history | A balance, closure, returned item, or other reported event | Compare it with your bank records and dispute inaccurate details |
| Identity-theft item | An application or account connected to fraud | Use identity-theft documentation and request the applicable block |
| Accurate paid item | A valid record whose status may have changed | Ask for a status update rather than assuming deletion is required |
Submit the dispute through ChexSystems' current instructions. Include your report number, the institution name, the date, the disputed item, and a plain explanation of the error. Attach copies of supporting records.
Send a parallel correction request to the reporting bank. ChexSystems may verify information with that institution, so the source correction matters. That sounds repetitive, but send it to both.
ChexSystems generally investigates disputes within 30 days under the FCRA. If the response leaves an error in place, ask for the investigation details and include your earlier dispute, documents, and result in a CFPB complaint. A credit bureau dispute does not automatically reach ChexSystems or Early Warning Services.
Paying an accurate bank debt may change its status or balance. It does not, by itself, prove that the original inquiry was unauthorized or require deletion of accurate history.
Employment, insurance, and other specialty reports
An employment background check has a different consent rule. Before obtaining a third-party consumer report, an employer generally must provide a stand-alone disclosure and obtain your written permission. The FTC's employer guidance explains the process.
If you did not authorize the check, dispute it with the screening company named in the notice and ask the employer how the request was made. If an employer is considering adverse action based on the report, it generally must provide a copy of the report and a summary of your rights before making the final decision.
Insurance, tenant-screening, and other specialty reports use the same basic starting point: identify the agency, request your file, and dispute the exact access or data entry with that agency. A credit bureau dispute won't automatically reach MIB or another specialty reporting company.
Don't call every specialty entry an inquiry. Some are file records, underwriting data, or account history. The label affects which dispute process makes sense.
If the bureau says the inquiry is verified
Read the result closely. "Verified" means the bureau accepted the information supplied during its investigation; it doesn't necessarily answer every question about how the company obtained your report.
Send the bureau any written response that contradicts the result. You can also request a description of the procedure used to verify the information under FCRA Section 611(a)(7), including how the bureau checked with the source.
If the company admits there was no application, attach that admission to a focused follow-up dispute. Avoid sending a new form letter that repeats the same claim without new evidence.
Escalate to the CFPB after you have submitted the dispute and received an inadequate response, or after the applicable investigation period passes. Upload the report page, original dispute, delivery proof, company correspondence, and investigation result. A complaint is an escalation path, not a replacement for the required dispute.
Your state attorney general or banking regulator may offer another complaint route. If the inquiry caused a serious denial, financial loss, or repeated unauthorized access, speak with a consumer-law attorney promptly. Time limits can apply.
Avoid common mistakes
Disputes often go sideways for simple reasons:
- Calling only the lender. The bureau needs its own dispute.
- Writing only, "I don't recognize this." Give the date, company, and exact reason.
- Disputing an accurate inquiry from a completed application.
- Sending original documents or your full Social Security number by ordinary email.
- Assuming a credit freeze deletes an old inquiry.
- Paying a service that promises guaranteed deletion. No service can force a bureau to delete accurate information through a dispute.
To be honest, a clean, narrow dispute is usually stronger than a long accusation. Focus on one entry and one verifiable explanation.
Questions people ask
Can a creditor check my report without my express permission?
Sometimes. The FCRA allows access for permissible purposes, including a credit transaction you initiated, an existing account review, insurance underwriting, and some prescreened offers. Employment screening generally requires written authorization.
Will disputing an inquiry remove a fraudulent account?
No. Dispute the inquiry, account, collection, address, and any other information separately. Each item needs to be identified.
How long does removal take?
A credit bureau generally has 30 days to investigate, with limited situations allowing 45 days. ChexSystems generally uses a 30-day investigation period. A legitimate hard inquiry may remain for up to two years.
What if the company says I authorized the inquiry?
Ask for the application, timestamp, contact information, and any broker or dealership records. Compare those details with your own records. If they don't match, send the evidence to the bureau and the company.
Start with one report entry today. Save the report page, contact the company through an official channel, and submit a specific dispute with copies of the evidence.