Your Credit Reporting Rights Under the FCRA
Quick Summary
The Fair Credit Reporting Act (FCRA) gives you the right to access your credit report for free annually, dispute inaccurate information, control who sees your credit data, and receive notice when credit information is used against you. Credit bureaus must investigate disputes within 30 days and remove unverified information. You can freeze your credit for free to prevent identity theft and have special rights if you're a victim of identity theft or fraud.
What is the Fair Credit Reporting Act?
The Fair Credit Reporting Act (FCRA) is a federal law enacted in 1970 that regulates how consumer credit information is collected, shared, and used. The law was created to ensure accuracy, fairness, and privacy of information in the files of credit reporting agencies.
The FCRA protects you by:
- Giving you the right to access your credit reports
- Requiring credit bureaus to investigate disputes
- Limiting who can access your credit information
- Requiring companies to notify you when they use credit information against you
- Setting time limits on how long negative information can stay on your report
- Providing special protections for identity theft victims
Key principle: Your credit report should be accurate, complete, and private. Companies that use credit information must follow strict rules to protect your rights.
Three Major Credit Bureaus
Three major companies collect and maintain credit information on virtually every American adult:
Equifax
- Website: www.equifax.com
- Disputes: P.O. Box 740256, Atlanta, GA 30374-0256
- Phone: (866) 349-5191
- Credit freeze: (800) 685-1111
Experian
- Website: www.experian.com
- Disputes: P.O. Box 4500, Allen, TX 75013
- Phone: (888) 397-3742
- Credit freeze: (888) 397-3742
TransUnion
- Website: www.transunion.com
- Disputes: P.O. Box 2000, Chester, PA 19016
- Phone: (800) 916-8800
- Credit freeze: (888) 909-8872
Free Credit Reports
AnnualCreditReport.com - The ONLY Official Source
How to get your free reports:
- Website: www.annualcreditreport.com
- Phone: (877) 322-8228
- Mail: Annual Credit Report Request Service, P.O. Box 105281, Atlanta, GA 30348-5281
What you get:
- One free report from each bureau every 12 months
- All three reports at once or spread throughout the year
- Additional free reports in certain circumstances (explained below)
- No credit card required
- No impact on your credit score
When You Get Additional Free Reports
You're entitled to extra free credit reports if:
- Victim of identity theft: You placed a fraud alert on your file
- Unemployed: You plan to apply for a job within 60 days
- On public assistance: Receiving government welfare benefits
- Adverse action: Company denied you credit, insurance, or employment based on your credit report (you get a free report from the bureau they used)
- Free weekly reports: Due to COVID-19 pandemic, all three bureaus offered weekly free reports through 2023; verify current availability
Strategic Way to Monitor Your Credit
Instead of requesting all three reports at once, stagger them:
- January: Request Equifax report
- May: Request Experian report
- September: Request TransUnion report
Benefit: This gives you year-round monitoring by checking your credit every 4 months instead of once a year. You'll catch errors and identity theft faster.
What About Credit Scores?
Your free annual credit report does NOT include your credit score. However:
- Many credit card companies provide free FICO scores to cardholders
- Some banks provide free credit scores
- Credit bureaus sell scores separately (typically $10-20)
- You can buy your score, but it's not necessary for checking for errors
Focus on the report: The credit report itself (list of accounts, payment history, inquiries) is more important than the score for identifying errors and fraud.
How to Read Your Credit Report
Credit reports can be confusing. Here's how to understand what you're looking at:
Main Sections of a Credit Report
1. Personal Information
- Your name (current and previous names)
- Current and previous addresses
- Date of birth
- Social Security number
- Employment information (if reported)
Check for: Incorrect names, addresses you never lived at, wrong SSN or DOB (signs of identity theft or mixed files)
2. Credit Accounts (Trade Lines)
- Each credit account (credit cards, loans, mortgages)
- Account number (usually partial for security)
- Type of account (revolving, installment)
- Date opened
- Credit limit or original loan amount
- Current balance
- Payment history (on-time, late, how late)
- Account status (open, closed, paid off, charged off)
Check for: Accounts you didn't open, incorrect balances, wrong payment history, accounts reporting after being paid off
3. Credit Inquiries
- Hard inquiries: When you applied for credit (affects score slightly)
- Soft inquiries: When you checked your own credit or company pre-screened you (doesn't affect score)
- Date of inquiry
- Company that pulled your credit
Check for: Hard inquiries you didn't authorize (sign of identity theft)
4. Public Records
- Bankruptcies
- Tax liens (most removed as of April 2018 but older ones may remain)
- Civil judgments (most removed as of April 2018 but older ones may remain)
Check for: Records that aren't yours, bankruptcies that should have been removed
5. Collections
- Accounts sent to collection agencies
- Original creditor
- Collection agency
- Amount owed
- Date of delinquency
Check for: Debts you don't recognize, wrong amounts, debts you paid that still show as unpaid
What's on Your Credit Report
Accounts and Payment History
The most important part of your credit report is your account history:
Types of accounts:
- Revolving accounts: Credit cards, lines of credit (credit limit resets as you pay)
- Installment loans: Auto loans, mortgages, student loans, personal loans (fixed payments)
- Open accounts: Charge cards that must be paid in full each month
Payment history shows:
- Monthly payment status for typically 24-84 months
- On-time payments
- Late payments: 30 days, 60 days, 90 days, 120+ days
- Charge-offs (creditor gave up trying to collect)
- Accounts sent to collections
Why it matters: Payment history is the single most important factor in your credit score (35% of FICO score). Even one 30-day late payment can drop your score by 100+ points.
Hard Inquiries vs. Soft Inquiries
Hard Inquiries (affect your score):
- Occur when you apply for credit (credit card, loan, mortgage, auto loan)
- Remain on your report for 2 years
- Affect your credit score for about 12 months
- Each hard inquiry can lower score by 5-10 points
- Multiple inquiries for the same type of loan (like mortgage shopping) within 14-45 days usually count as one inquiry
Soft Inquiries (do NOT affect your score):
- You checking your own credit
- Employer checking your credit (with your permission)
- Credit card companies pre-screening you for offers
- Current creditors reviewing your account
- Insurance companies checking credit for quotes
Public Records and Collections
Public records (rare now):
- Bankruptcies: Chapter 7, 11, 12, 13
- Tax liens and civil judgments: Mostly removed from credit reports as of April 2018 due to National Consumer Assistance Plan (NCAP), but some older ones remain
Collection accounts:
- Accounts turned over to collection agencies
- Can include credit cards, medical bills, utility bills, phone bills, any unpaid debt
- Shows original creditor, collection agency, amount, and dates
- Medical collections under $500 no longer appear on credit reports (as of 2023)
- Paid medical collections removed from credit reports (as of 2023)
How Long Items Stay on Your Credit Report
The FCRA sets specific time limits for how long information can remain on your credit report:
Negative Items: 7 Years
- Late payments: 7 years from date of delinquency
- Charge-offs: 7 years from date of first delinquency
- Collection accounts: 7 years from date account first became delinquent with original creditor
- Foreclosures: 7 years from date of foreclosure
- Short sales and deeds in lieu: 7 years
- Repossessions: 7 years
- Settled accounts: 7 years from date of first delinquency (even though you settled)
Bankruptcies: 10 Years
- Chapter 7 bankruptcy: 10 years from filing date
- Chapter 13 bankruptcy: 7 years from filing date (completed payment plan) or 10 years (dismissed)
- Individual accounts included in bankruptcy can be removed after 7 years even if bankruptcy stays for 10
Tax Liens: 7 Years (If Reportable)
- Paid tax liens: Most removed from credit reports as of April 2018
- Unpaid tax liens: Most removed from credit reports as of April 2018
- Some older tax liens may still appear; if so, 7 years from date paid or released
Hard Inquiries: 2 Years
- Remain on report for 2 years
- Only affect credit score for first 12 months
- After 12 months, still visible but don't impact score
Positive Items: Indefinitely to 10 Years
- Open accounts in good standing: Remain as long as account is open
- Closed accounts in good standing: Typically 10 years from date closed
- Good payment history helps your score even on closed accounts
Exceptions
- Applying for $150,000+ loan: Older information may be used
- Applying for $150,000+ life insurance: Older information may be used
- Applying for job paying $75,000+: Older information may be used
- These exceptions rarely apply in practice
When Items Should Be Removed
Mark your calendar for when negative items should automatically fall off:
- Credit bureaus should automatically remove items when time expires
- They don't always do this correctly
- If an item should have been removed but wasn't, dispute it
- Point out the item has exceeded the reporting period
- Credit bureau must remove it
Example: Credit card charged off June 15, 2018, after first becoming delinquent January 1, 2018. The charge-off should be automatically removed from your credit report January 1, 2025 (7 years from first delinquency). If it's still there in February 2025, dispute it as obsolete.
Credit Report Errors
How Common Are Errors?
Credit report errors are alarmingly common:
- 52 million Americans have errors on their credit reports (CFPB study)
- 26% of consumers found at least one error when reviewing all three credit reports
- 5% of consumers had errors serious enough to result in less favorable loan terms
- Cost to consumers: Higher interest rates, denied credit, denied jobs, higher insurance premiums
Common Types of Errors
1. Accounts that aren't yours
- Someone else's account (common with similar names)
- Identity theft (fraudulent accounts)
- Ex-spouse's accounts still showing as yours
2. Incorrect account status
- Account shows as open when it's closed
- Account shows as unpaid when you paid it
- Shows as delinquent when payments were on time
3. Wrong account information
- Incorrect balance
- Wrong credit limit
- Incorrect payment history
- Wrong dates (opened, closed, last payment)
4. Duplicate accounts
- Same account listed twice
- Account listed once with original creditor and again with collection agency
- Both versions count against you unless you dispute
5. Incorrect personal information
- Wrong name, address, employer
- Incorrect SSN or date of birth
- Can indicate mixed credit files or identity theft
6. Outdated negative information
- Items older than 7 years (or 10 for bankruptcy)
- Should have been automatically removed but wasn't
7. Accounts discharged in bankruptcy
- Still showing as owed when they were discharged
- Should show $0 balance and "discharged in bankruptcy"
8. Closed accounts reported as open
- You closed the account but it still shows active
- Can affect your debt-to-credit ratio
How to Dispute Credit Report Errors
Three Ways to Dispute
1. Online
- Fastest method (results in 2-3 weeks typically)
- Dispute directly on each credit bureau's website
- Upload supporting documents
- Cons: Less detailed than mail, harder to keep records
2. Mail (RECOMMENDED)
- Creates paper trail
- Allows detailed explanation
- Include supporting documentation
- Send certified mail, return receipt requested
- Cons: Slower (30 days for investigation)
3. Phone
- Generally NOT recommended
- No paper trail
- Hard to explain complex situations
- Use only for simple issues
How to Write a Dispute Letter
Credit Report Dispute Letter Template:
[Your Name] [Your Address] [City, State ZIP] [Date] [Credit Bureau Name] [Dispute Address - see bureau contact info above] Re: Dispute of Inaccurate Information on Credit Report Dear Sir or Madam: I am writing to dispute inaccurate information on my credit report. I obtained my credit report on [date] and found the following errors: [For each error, provide specific details:] 1. [Account name or creditor] - Account #[last 4 digits if known] Error: [Describe specific error - e.g., "This account shows a balance of $5,000. The actual balance is $0 as I paid this account in full on June 15, 2024."] Correction needed: [What should it say - e.g., "Account should show $0 balance and 'Paid in Full' status."] 2. [Next error] Error: [Description] Correction needed: [What it should say] I am enclosing copies of the following documents supporting my dispute: - [List documents: bank statements, payment receipts, letters from creditors, etc.] Under the Fair Credit Reporting Act, you are required to investigate this dispute and respond within 30 days. Please correct or delete the inaccurate information, and send me a free updated copy of my credit report showing the corrections. If you are unable to verify the accuracy of this information, you must remove it from my credit report immediately. Thank you for your prompt attention to this matter. Sincerely, [Your Signature] [Your Typed Name] [Your Date of Birth] [Last 4 digits of SSN] Enclosures: [List enclosed documents]
What to include:
- Your complete contact information
- Specific identification of each error
- Clear explanation of what's wrong
- What the correct information should be
- Copies (NOT originals) of supporting documents
- Copy of your credit report with errors highlighted
- Proof of identity (copy of driver's license, utility bill)
Sending your dispute:
- Send via certified mail, return receipt requested
- Keep copies of everything you send
- Send to each bureau that has the error (often all three)
- Track when the credit bureau receives it (starts 30-day clock)
Dispute with Creditor Too
For best results, dispute with BOTH the credit bureau AND the creditor reporting the information:
- Send similar letter to the creditor's customer service or dispute address
- Request they correct the information with all three credit bureaus
- Some errors originate with the creditor, not the bureau
- If creditor corrects it, they must notify all bureaus they report to
Why dispute with both: Credit bureaus investigate by asking the creditor. If the creditor has wrong information in their system, they'll just verify the error. Disputing directly with the creditor can fix the source of the problem.
30-Day Investigation Requirement
What Happens During Investigation
Timeline:
- Day 1: Credit bureau receives your dispute
- Within 5 days: Bureau must forward dispute to creditor (data furnisher)
- Day 5-30: Creditor investigates, reviews records, responds to bureau
- Day 30: Bureau must complete investigation and respond to you
- Can be extended to 45 days if you provide additional information during investigation
What credit bureau does:
- Reviews your dispute and documentation
- Contacts the creditor who reported the information
- Creditor must investigate and respond
- Bureau reviews creditor's response
- Updates credit report if information is inaccurate or unverified
- Sends you written results
What creditor must do:
- Investigate the dispute
- Review all relevant information
- Report results to credit bureau
- Correct information with all bureaus if you're right
- Provide specific details, not just "verified"
Possible Outcomes
1. Dispute resolved in your favor
- Information is corrected or deleted
- You receive updated credit report showing change
- You can request bureau notify anyone who received your report in past 6 months
- For employment purposes, can request notification to anyone who received report in past 2 years
2. Dispute verified as accurate
- Creditor confirms information is correct
- Information remains on your report
- You receive explanation of results
- You can request details of investigation
- You have right to add statement to your report (explained below)
3. Information deleted due to lack of verification
- If creditor doesn't respond in 30 days, information must be deleted
- If creditor can't verify accuracy, information must be deleted
- This is a win for you even if the debt was actually valid
During the Investigation
Temporary notation on your report:
- Disputed items are marked as "in dispute"
- This notation appears to anyone pulling your credit
- Some lenders may delay decisions until dispute is resolved
- Notation is removed when investigation concludes
What you should do:
- Wait for the 30-day period to pass
- Don't apply for major credit during this time if possible
- Keep records of when you filed dispute
- Follow up if you don't hear back in 30 days
What If Your Dispute Is Rejected
When Credit Bureau Says Information Is Accurate
If the credit bureau investigates and concludes the information is accurate, you have several options:
1. Request method of verification
- Ask the credit bureau to provide details of their investigation
- What did the creditor say?
- What documents did they review?
- This is your right under FCRA
2. Provide additional evidence and re-dispute
- If you have more documentation, submit it
- Be more specific about the error
- Point out why the creditor's verification is wrong
- Include stronger supporting documents
3. Dispute directly with creditor (if you haven't already)
- Contact creditor's customer service or dispute department
- Provide your evidence
- Request they correct information with credit bureaus
- Get everything in writing
4. File complaints with regulators
- Consumer Financial Protection Bureau (CFPB)
- Federal Trade Commission (FTC)
- State Attorney General
- Complaints create pressure and regulatory oversight
5. Add a statement to your credit report
- Up to 100 words explaining your side
- Appears on your credit report
- Seen by anyone who pulls your report
- Doesn't change your score but provides context
6. Consider legal action
- If information is definitely wrong and causing harm
- If credit bureau or creditor violated FCRA
- Consult consumer rights attorney
- You can sue for damages under FCRA
- Many consumer attorneys work on contingency
Common Reasons Disputes Are Rejected (And How to Overcome Them)
"Verified as accurate"
- Problem: Creditor just confirmed their records match without really investigating
- Solution: Dispute again with more specific evidence, dispute directly with creditor, request details of how they verified
"Frivolous dispute"
- Problem: Bureau thinks you're disputing without basis or using a credit repair tactic
- Solution: Provide specific, detailed explanation of the error with documentation
"Consumer uses a credit repair company"
- Problem: Bureaus often automatically reject disputes from credit repair companies
- Solution: Dispute yourself instead of using a third party
"Insufficient information"
- Problem: You didn't provide enough detail or documentation
- Solution: Re-dispute with more specific information, copies of documents, detailed explanation
Adding a Statement to Your Credit Report
Your Right to Explain
If a dispute is rejected and you still believe the information is wrong (or incomplete), you have the right to add a statement to your credit report:
What it is:
- Written statement (up to 100 words)
- Explains your side of the story
- Appears on your credit report
- Anyone pulling your report can see it
When to use it:
- Dispute was rejected but you know you're right
- Circumstances explain a negative item (medical emergency, job loss, divorce)
- Identity theft claim still under investigation
- Disputed information pending legal resolution
What to include:
- Brief, factual explanation
- Specific account or item you're addressing
- Your version of what happened
- Any mitigating circumstances
Sample Consumer Statement
Example 1: Disputed Account
"I dispute the ABC Collection account listed on this report. I do not owe this debt and never received validation despite multiple requests. This account is inaccurate and should be removed. I am pursuing legal remedies to have this corrected."
Example 2: Extenuating Circumstances
"Late payments on XYZ Credit Card occurred due to medical emergency and hospitalization in 2023. I have since recovered and resumed on-time payments. All accounts are current as of January 2024."
Example 3: Identity Theft
"The account with DEF Bank is fraudulent and result of identity theft. I filed police report #12345 and FTC identity theft report. I did not open this account or authorize any charges."
Limitations of statements:
- Does NOT improve your credit score
- Some automated lending systems may not consider it
- Manual underwriters will see it but may not care
- Better than nothing but not as good as removing the negative item
How to add a statement:
- Contact each credit bureau (online, mail, or phone)
- Request to add consumer statement
- Provide your 100-word statement
- Statement remains until you request removal or update it
Your Complete FCRA Rights
Access to Your Information
- Free credit report from each bureau once every 12 months
- Additional free reports in certain circumstances (adverse action, fraud, unemployment)
- Right to know what's in your file
- Right to know your credit score (if you pay for it or it's provided free)
- Right to dispute inaccurate information
Who Can Access Your Credit Report
Companies can only access your credit report with a "permissible purpose":
Permissible purposes include:
- Your consent: You applied for credit, insurance, employment
- Credit transaction: You initiated application for credit
- Employment: With your written permission (employer must get separate authorization)
- Insurance underwriting: For insurance application
- Existing account review: Current creditors reviewing your account
- Court order: Subpoena, court order, federal grand jury
- Legitimate business need: Very limited - mostly existing business relationships
Who CANNOT access your report:
- Nosy neighbors or family members
- Employers without your written permission
- Landlords without your permission
- Anyone without permissible purpose
- Companies sending you pre-screened credit offers (unless you opted in or didn't opt out)
Adverse Action Notices
If a company uses your credit report to deny you or take negative action, they MUST send you an "adverse action notice":
What triggers adverse action notice:
- Credit application denied
- Offered less favorable terms than requested (higher interest rate, lower limit)
- Credit limit reduced or account closed
- Insurance application denied or charged higher premium
- Employment denied based on credit report (must give pre-adverse and final adverse action notices)
What the notice must include:
- Name of credit bureau that provided report
- Credit bureau's contact information
- Statement that credit bureau didn't make the decision
- Your right to get free credit report from that bureau within 60 days
- Your right to dispute inaccurate information
Why this matters: Adverse action notice triggers your right to free credit report beyond your annual report. Get that report and check for errors that may have led to the denial.
Opt-Out of Pre-Screened Offers
Credit bureaus sell lists of consumers who meet certain credit criteria to companies for pre-approved offers. You can opt out:
How to opt out:
- Phone: (888) 567-8688 (5-year opt-out)
- Website: www.optoutprescreen.com (5-year or permanent)
- Opt-out stops credit card and insurance offers based on credit bureau data
- Doesn't stop all junk mail (only credit/insurance offers from pre-screening)
Benefits of opting out:
- Less junk mail
- Reduces identity theft risk (thieves can't steal pre-approved offers from your mailbox)
- Doesn't affect your credit score
Rights When Information Is Used Against You
If denied based on credit report:
- Free copy of credit report from bureau used (within 60 days)
- Right to dispute any inaccurate information
- Company must tell you which bureau they used
If insurance based on credit:
- Insurer must tell you they used credit information
- Must tell you if you got worse rate due to credit
- Must give you your credit-based insurance score if they used one
Employment screening:
- Employer must get your written authorization
- Must give you copy of report before taking adverse action
- Must give you time to dispute errors
- Must send adverse action notice if they don't hire you based on report
Credit Freezes vs. Fraud Alerts
Credit Freeze (Security Freeze)
A credit freeze restricts access to your credit report, making it harder for identity thieves to open new accounts in your name:
How it works:
- You request freeze from each credit bureau
- Credit report becomes locked
- Lenders can't access your report to approve new credit
- You receive PIN or password to temporarily lift freeze
- When you apply for credit, you lift freeze temporarily or for specific creditor
Cost: FREE (as of September 2018)
How to freeze:
- Equifax: (800) 685-1111 or online
- Experian: (888) 397-3742 or online
- TransUnion: (888) 909-8872 or online
- Must freeze with EACH bureau separately
Pros:
- Strongest protection against identity theft
- Prevents new account fraud
- Free and easy to lift when needed
- No expiration - stays frozen until you lift it
Cons:
- Must lift freeze before applying for credit
- Must freeze at all three bureaus (identity thieves can use any)
- Doesn't prevent misuse of existing accounts
- Some creditors may not be able to check credit even with lifted freeze (rare)
When to use it:
- Data breach exposed your information
- Proactive protection against identity theft
- Not planning to apply for credit soon
- Maximum security for credit file
Fraud Alert
A fraud alert makes it harder for identity thieves to open accounts by requiring creditors to verify your identity:
How it works:
- You place alert with ONE bureau (they notify the other two)
- Alert appears on your credit report at all three bureaus
- Creditors must take reasonable steps to verify your identity before issuing credit
- Often means creditors will call you before approving new accounts
Types of fraud alerts:
- Initial fraud alert: 1 year, for suspected identity theft
- Extended fraud alert: 7 years, requires identity theft report
- Active duty alert: 1 year, for military deployed overseas
Cost: FREE
How to place fraud alert:
- Contact ONE credit bureau (they notify the others)
- Equifax: (888) 766-0008
- Experian: (888) 397-3742
- TransUnion: (800) 680-7289
Pros:
- Easy to place (contact only one bureau)
- Doesn't restrict your access to credit
- Free credit reports while alert is active (one from each bureau)
- Removes your name from pre-screened credit offer lists for 5 years
Cons:
- Less protection than freeze
- Relies on creditors actually verifying identity (not always done)
- Expires after 1 or 7 years (must renew)
- May slow down legitimate credit applications
When to use it:
- Suspect identity theft but not confirmed
- Want some protection but may need to apply for credit
- Confirmed identity theft victim (use extended alert)
- Military deployment
Credit Freeze vs. Fraud Alert: Which to Choose?
| Credit Freeze | Fraud Alert | |
|---|---|---|
| Protection level | Strongest | Moderate |
| Cost | Free | Free |
| How many bureaus to contact | All 3 | Just 1 |
| Duration | Until you lift it | 1 year (or 7 for extended) |
| Impact on credit applications | Must lift before applying | May slow approval process |
| Best for | Maximum protection, not applying for credit soon | Some protection while maintaining easy credit access |
Identity Theft Victims Rights
Special FCRA Protections for Identity Theft
If you're a victim of identity theft, the FCRA provides enhanced protections:
Your rights:
- Place extended fraud alert (7 years)
- Free credit reports (beyond annual report)
- Block fraudulent information from your credit report
- Prevent creditors from reporting fraudulent accounts
- Stop debt collectors from collecting on fraudulent debts
Steps to Take If You're a Victim
1. File FTC Identity Theft Report
- Go to IdentityTheft.gov
- Create detailed identity theft report
- This report is your legal proof of identity theft
- Used to dispute fraudulent accounts and debts
2. File Police Report
- File report with local police department
- Bring FTC Identity Theft Report and any evidence
- Get copy of police report
- Some creditors require police report
3. Place Extended Fraud Alert
- Contact one credit bureau with your identity theft report
- 7-year fraud alert placed automatically
- Requires creditors to verify identity before opening accounts
- Gives you free credit reports
4. Get Your Credit Reports
- Request free reports from all three bureaus
- Review every account and inquiry
- Identify all fraudulent accounts
- Make list of accounts that aren't yours
5. Dispute Fraudulent Information
- Send identity theft report and dispute letter to credit bureaus
- Bureaus must block fraudulent information within 4 business days
- Blocked information won't appear on your credit report
- Can't be used against you by creditors
6. Contact Creditors Directly
- Call fraud departments of companies with fraudulent accounts
- Provide identity theft report
- Request accounts be closed and removed
- Ask for letter confirming account is fraudulent
7. Consider Credit Freeze
- Freeze credit at all three bureaus
- Prevents thieves from opening more accounts
- Free for identity theft victims
Blocking Fraudulent Information
FCRA gives identity theft victims the right to "block" fraudulent information:
What blocking means:
- Credit bureau cannot include fraudulent information on your credit report
- Information is effectively removed from your file
- Can't be considered by creditors, employers, insurers, etc.
- Much faster than normal dispute process
How to request block:
- Send credit bureau your identity theft report
- Identify specific fraudulent accounts
- Provide proof of identity
- Bureau must block within 4 business days
Credit bureau can refuse only if:
- You don't provide required documentation
- They have reason to believe you're trying to evade legitimate debts
- Information is about your criminal record (not covered by blocking)
Filing Complaints
When to File Complaints
File complaints if:
- Credit bureau won't investigate your dispute
- Credit bureau verifies information you know is wrong
- Credit bureau violates 30-day investigation requirement
- Credit bureau won't remove information past reporting period
- Creditor continues reporting inaccurate information
- Company pulled your credit without permissible purpose
- Identity theft not handled properly
Where to File
Consumer Financial Protection Bureau (CFPB)
- Website: www.consumerfinance.gov/complaint/
- Phone: (855) 411-2372
- CFPB handles complaints about credit bureaus and creditors
- Company must respond within 15 days
- CFPB tracks patterns and can bring enforcement actions
Federal Trade Commission (FTC)
- Website: reportfraud.ftc.gov
- Phone: (877) 382-4357
- FTC enforces FCRA
- Uses complaints to identify patterns and bring cases
State Attorney General
- Find your state AG
- Many states have laws stronger than FCRA
- State AGs can bring enforcement actions
2025 Data Breach Examples
Recent Major Data Breaches
Equifax Data Breach (2017 - ongoing impacts)
- 147 million Americans affected
- Settlement: Up to $425 million
- Exposed: Names, SSNs, birth dates, addresses, driver's licenses, credit card numbers
- Impact: Victims eligible for free credit monitoring, cash payments, identity theft reimbursement
- Lesson: Even credit bureaus themselves aren't immune to breaches
Financial Services Data Breaches (2024)
- Multiple banks and financial institutions hit by breaches
- Millions of customers affected
- Exposed: Account numbers, SSNs, personal information
- Response: Free credit monitoring offered to affected customers
Healthcare Data Breaches (2024-2025)
- Healthcare remains top target for data thieves
- Medical information combined with SSNs extremely valuable
- Used for medical identity theft and financial fraud
- Victims should place fraud alerts and monitor credit
What to Do After a Data Breach
If you're notified your information was exposed in a breach:
Immediate steps:
- Enroll in credit monitoring: If offered free by breached company, sign up
- Change passwords: Change password for breached account and any accounts using same password
- Place fraud alert: Consider placing initial fraud alert (1 year, free)
- Consider credit freeze: For serious breaches (SSN exposed), freeze credit at all three bureaus
Ongoing monitoring:
- Check credit reports regularly for next year
- Monitor bank and credit card accounts for unauthorized charges
- Watch for suspicious emails, calls, or texts (phishing often follows breaches)
- File taxes early to prevent tax identity theft
If you detect fraud:
- Follow identity theft procedures (see Identity Theft section above)
- File FTC identity theft report at IdentityTheft.gov
- Place extended fraud alert (7 years)
- Freeze your credit