The Fair Credit Reporting Act (FCRA) gives U.S. consumers rights over information in reports prepared by Equifax, Experian, TransUnion, and other consumer reporting agencies. Those rights cover access, accuracy disputes, privacy, security freezes, fraud alerts, and possible remedies.
Start with the report, not the score. A lender, employer, insurer, or landlord makes the decision; the credit bureau usually supplies information. Your score is a separate product.
Save every report before you challenge an entry. Really.
What the FCRA actually gives you
The FCRA covers more than one disputed account. Access and privacy rights have boundaries, too.
| Right | What it means | Limit to remember |
|---|---|---|
| Access | You can request reports from the nationwide credit bureaus. | A credit report is not the same thing as a credit score. |
| Accuracy | You can dispute information that is inaccurate, incomplete, or unverifiable. | Accurate negative information usually may remain for the legal reporting period. |
| Privacy | A business generally needs a permissible purpose to obtain your report. | A freeze does not block every lawful use of an existing file. |
| Security | You can place a free credit freeze or fraud alert. | A fraud alert warns businesses; it does not block access like a freeze. |
| Remedies | Some negligent or willful violations can support a damages claim. | The facts, evidence, and filing deadline matter. |
Credit bureaus must use reasonable procedures to assure maximum possible accuracy. They also must investigate qualifying disputes and correct or delete information that is inaccurate, incomplete, or cannot be verified.
The law does not guarantee approval or a particular score.
Get all three credit reports and check them carefully
Order the reports through AnnualCreditReport.com, the federally authorized site identified in the FTC's free credit report guidance. Under the FCRA, the baseline is one free report from each nationwide bureau every 12 months.
Extra free access may apply in certain situations. Examples include an adverse action, unemployment while seeking work, public assistance, or suspected identity theft. Check the official ordering page for the current eligibility rules.
Turns out, reports and scores are different things. A report lists account and inquiry information; a score applies a separate scoring model to that information.
Save the reports before disputing anything. Then compare them side by side:
- Accounts, balances, payment statuses, limits, and dates
- Late payments, collections, charge-offs, and bankruptcies
- Hard inquiries you don't recognize
- Names, addresses, employers, or accounts connected to someone else
- New accounts or unfamiliar creditors that could point to identity theft
A mismatch isn't automatically an error. One creditor may report to one bureau and not another.
How to dispute a credit report error
Dispute the entry with every bureau that shows it. You don't have to wait for a lender to deny an application.
Online filing is convenient. A written dispute can leave a clearer paper trail, and copies are safer than originals.
- Identify the exact account or entry. Include the account number if you have it.
- Explain precisely what is wrong and state the correction you want.
- Attach relevant evidence, such as statements, payment records, identity theft documents, or court records.
- Use the bureau's online dispute channel or the dispute address listed by the bureau. Tracked mail can help show when the dispute arrived.
- Send the same information to the company that furnished the data if its records appear to be the source of the error.
- Calendar the investigation deadline from the date the bureau receives the dispute.
Keep the explanation tight. "This is wrong" may not give the bureau enough to investigate. Tie each claim to a supporting document.
A bureau generally has 30 days after receiving the dispute. If you provide relevant information during that initial period, the deadline can extend to 45 days in some situations. The bureau should send written results.
If the bureau can't verify the entry, it generally must correct or delete it. A "verified" result allows you to request a description of the reinvestigation procedure and the furnisher's contact information.
Thing is, an accurate debt won't disappear because you dispute it. After notice, a bureau may treat repeated disputes with no new evidence as frivolous or irrelevant and stop investigating.
How long negative information can stay
Most adverse information generally cannot be reported after seven years. A bankruptcy may be reported for up to 10 years. The federal reporting limits appear in 15 U.S.C. 1681c.
For many collection and charge-off accounts, the important date is the first delinquency that led to the collection. Selling the debt or making a payment should not ordinarily restart the federal reporting period.
The reporting deadline doesn't erase the debt. It also doesn't decide how long a creditor has to sue or collect; state law may control those questions. Civil judgments and tax-related records have special rules, so don't apply the seven-year period automatically to every public record.
Credit freezes and fraud alerts solve different problems
A credit freeze and a fraud alert do separate jobs. A freeze generally restricts access to your file for most new-credit applications, and you usually place it separately with Equifax, Experian, and TransUnion.
A fraud alert is a warning instead. It tells businesses to take reasonable steps to verify your identity before opening new credit. An initial alert lasts one year; an extended alert can last seven years when you provide the required identity theft documentation.
| Tool | Main effect | How to start |
|---|---|---|
| Credit freeze | Restricts most prospective creditors from accessing your file. | Contact each nationwide bureau separately. |
| Initial fraud alert | Signals businesses to verify your identity. | Contact one bureau, which must notify the others. |
| Extended fraud alert | Provides a longer identity-verification warning after identity theft. | Submit the required identity theft documentation. |
Both tools are free under federal law. A freeze stays in place until you ask the bureau to remove or lift it.
Existing creditors, debt collectors, employers with a permissible purpose, and certain government entities may still have lawful access in appropriate circumstances. A freeze doesn't close existing accounts or stop every form of identity theft.
The FTC's credit freeze and fraud alert guidance explains the choices and links to the official bureau pages. If identity theft is involved, the CFPB's identity theft guidance describes fraud alerts and recovery steps.
What an adverse action notice should tell you
An adverse action notice usually means a creditor, insurer, landlord, or employer relied partly or entirely on a consumer report when taking an unfavorable action.
For many credit decisions, the notice should name the bureau that supplied the report, state that the bureau did not make the decision, and explain your right to request a free report within 60 days. It should also explain your right to dispute inaccurate information. If a credit score was used, additional score-related disclosures usually apply.
Employment decisions have extra safeguards. Before taking final adverse action based on a report, an employer generally must give you the report and the FCRA Summary of Rights. The employer must then provide a follow-up adverse action notice.
The notice isn't proof that the report is wrong. It does identify the data source and gives you somewhere concrete to begin.
What to do when a bureau will not fix an error
A "verified" response is a checkpoint, not necessarily the end of the process. Keep a clean file.
- Preserve the original report, dispute, attachments, delivery proof, and investigation result.
- Mark the exact information that remains inaccurate.
- Ask for the bureau's reinvestigation description and the furnisher's contact information.
- Send a focused follow-up to the bureau and furnisher with any new evidence.
- File a complaint with the Consumer Financial Protection Bureau and upload the key documents.
The CFPB accepts complaints about credit reports and other personal consumer reports. Companies generally respond within 15 days. You can review the response and provide feedback within 60 days, and the CFPB sends email updates and provides complaint-status information.
A complaint creates a documented escalation. It doesn't award damages or decide whether a law was violated. Filing one also doesn't extend a deadline for a lawsuit.
When suing a credit bureau may be an option
FCRA cases depend on the details. A consumer may have a claim if a bureau failed to use reasonable accuracy procedures, mishandled a proper dispute, or continued reporting information that should have been corrected or deleted.
Negligent noncompliance may support actual damages. Willful noncompliance may support actual or statutory damages from $100 to $1,000, along with possible punitive damages and reasonable attorney fees. The particular FCRA section and the evidence determine the remedy.
Keep the inaccurate report, dispute, delivery proof, response, and proof of harm. An adverse action notice can help connect the report to a denied loan, higher cost, lost housing opportunity, or another consequence.
The general federal deadline is two years after you discover the violation, with an outside limit of five years after the violation occurred, whichever comes first. State law may create separate claims or deadlines.
To be honest, identifying the right defendant can matter as much as identifying the error. A bureau and a furnisher may have different duties. For many claims against a furnisher, the dispute must first reach that company through a credit reporting agency. A consumer generally can't use a private FCRA lawsuit to enforce every furnisher duty, especially duties tied only to the initial reporting of information.
Consult a qualified consumer law attorney promptly if the error caused significant harm or keeps returning. This is general information for U.S. consumers, not legal advice.
What the FCRA does not promise
A dispute can't force a bureau to delete accurate information. It also can't make a lender approve an application, change its underwriting, or use a different scoring model.
A low score alone isn't proof of a reporting violation. A denial alone isn't enough either; you generally need evidence that the report contained inaccurate information or that the company mishandled a legal obligation.
State laws may add protections or provide different remedies. These steps focus on federal FCRA rights and don't replace a review of the law in your state.
Your next move
Pull all three reports from AnnualCreditReport.com and save them. Mark the exact entries that appear wrong, then send one focused dispute to each bureau showing the error, the correction you want, and the evidence supporting it.
Calendar the response deadline. Keep every reply with the reports you saved.