To dispute a credit inquiry, file a separate dispute with each of the three credit bureaus — Equifax, Experian, and TransUnion — that shows the unauthorized hard inquiry on your report. You can submit the dispute online, by mail, or by phone, and the bureau generally has 30 days to investigate. If the creditor cannot verify that it had a legitimate reason to pull your credit, the bureau must remove the inquiry.
When You Can Actually Dispute an Inquiry
Federal law lets a credit bureau release your report only to a party with a specific permissible purpose, such as evaluating a credit application you submitted, underwriting insurance, or running an employment screening you authorized.1Office of the Law Revision Counsel. 15 USC 1681b – Permissible Purposes of Consumer Reports If a company pulled your report without one of those reasons, the inquiry has no legal basis to stay on your file.
The situations that give you real grounds to dispute:
- Identity theft, where someone used your information to apply for credit in your name.
- No application on your end — a lender pulled your report even though you never applied with them.
- An accidental pull, such as a creditor confusing you with another applicant or running a hard check when only a soft check was appropriate.
One boundary worth naming: an inquiry tied to a credit application you genuinely submitted is legitimate even if you were denied. Permissible purpose exists at the moment of application, regardless of the outcome. Soft inquiries — background checks, pre-approved offers, your own credit checks — cannot be disputed and don’t need to be, because they aren’t visible to lenders and don’t affect your score.
What to Gather Before You File
Start by pulling your report from each of the three bureaus. Federal law entitles you to a free report from each every 12 months through AnnualCreditReport.com, and all three currently offer free weekly reports through that same site.2AnnualCreditReport.com. Your Rights to Your Free Annual Credit Reports Check each one separately. An unauthorized inquiry may appear on one bureau’s file and not the others.
When you spot an inquiry you don’t recognize, write down the exact creditor name as it appears and the date the inquiry was recorded. Investigators use those details to locate the entry rather than combing your entire file.
A strong dispute package includes:
- Your full legal name, current address, date of birth, and Social Security number.
- The creditor name and inquiry date as shown on the report.
- A short written statement explaining why the inquiry is unauthorized — you never applied, or you were a victim of identity theft.
- Proof of identity: a copy of your driver’s license, state ID, or a utility bill showing your current address.
- Any supporting documents you have, such as a police report, an FTC identity theft report, or a letter from the creditor acknowledging the error.
If Identity Theft Is Behind It
Filing at IdentityTheft.gov produces an official Identity Theft Report, which strengthens your dispute considerably. With that report, you can ask the bureaus to block the fraudulent inquiry from your file rather than merely investigate it. Blocking is a stronger remedy because the bureau is required to honor the request.3Consumer Financial Protection Bureau. A Summary of Your Rights Under the Fair Credit Reporting Act Send the Identity Theft Report, proof of identity, and a letter identifying which entries are fraudulent.
How to File With Each Bureau
You have to file a separate dispute with every bureau that lists the inquiry. Three channels are available.
By Mail
A mailed dispute creates a paper trail, which matters if the bureau later fails to respond properly. The addresses are:4Equifax. How Do I Correct or Dispute Inaccuracies on My Credit Reports by Mail
- Equifax: P.O. Box 740256, Atlanta, GA 30374-0256
- Experian: P.O. Box 4500, Allen, TX 75013
- TransUnion: P.O. Box 2000, Chester, PA 19016
Use certified mail with a return receipt. The investigation deadline starts on the day the bureau receives your package, so documented delivery matters. The certified mail fee runs about $5 on top of postage.
Online or by Phone
Each bureau accepts disputes through its website. You create an account, identify the inquiry, and upload scanned copies of your documents. Online is faster, and you get a confirmation number to track the investigation. Phone disputes work too, though it’s harder to be sure the bureau has a complete record of your evidence.
Keeping Your Dispute From Being Called Frivolous
A bureau can end its investigation if it reasonably decides your dispute is frivolous or irrelevant, usually because you didn’t give it enough to work with. If that happens, the bureau has to notify you within five business days, explain why, and tell you what more it needs. To avoid this, make sure your first submission clearly identifies the specific inquiry, states why it is unauthorized, and includes supporting documents.
Disputing With the Creditor Directly
You can also send a dispute directly to the creditor that pulled your report. Under federal regulations, a furnisher must investigate a direct dispute you send to the address on your credit report for that company, an address it has designated for disputes, or any of its business addresses if none has been designated.5Consumer Financial Protection Bureau. Regulation V – 1022.43 Direct Disputes
Include enough information to identify the inquiry, a clear explanation of why it was unauthorized, and copies of any supporting documents. The creditor has the same general 30-day window a bureau does and must report the results back to you. If it treats the dispute as frivolous, it has to tell you within five business days.
What Happens After You File
The bureau generally has 30 days to complete its investigation. That extends to 45 days if you send additional information after the initial filing.6Office of the Law Revision Counsel. 15 USC 1681i – Procedure in Case of Disputed Accuracy The bureau contacts the creditor and asks it to verify that a permissible purpose existed when the pull happened. If the creditor can’t verify the inquiry or doesn’t respond, the bureau must remove it.
You’ll get written notice of the results within five business days after the investigation ends. It will say whether the inquiry was deleted, verified, or modified. If the bureau sides with the creditor, the notice will tell you about your right to add a statement of dispute to your file.
A bureau is allowed to re-insert a deleted inquiry, but only if the creditor certifies the information is complete and accurate. If that happens, the bureau must notify you in writing within five business days, give you the creditor’s name and contact information, and remind you of your right to add a dispute statement. Skipping any of those steps is itself a violation you can challenge.
If the Dispute Is Denied
A denial isn’t the end of the road.
Add a Consumer Statement
You can add a brief written statement to your credit file explaining why you believe the inquiry is unauthorized. The bureau may limit it to 100 words. Once it’s on file, the bureau must include the statement, or a summary of it, whenever it sends out your report showing the disputed inquiry.6Office of the Law Revision Counsel. 15 USC 1681i – Procedure in Case of Disputed Accuracy That won’t remove the inquiry, but it gives context to any lender who sees it.
File a CFPB Complaint
If you think the bureau mishandled the dispute, file a complaint at consumerfinance.gov/complaint. The CFPB forwards it to the bureau, which generally responds within 15 days, though the response can take up to 60 days. You’ll be notified when the response arrives and have 60 days to give feedback on it.7Consumer Financial Protection Bureau. Submit a Complaint Put all the relevant facts and documents in your first submission, because you generally can’t file a second complaint about the same issue.
Sue Under the FCRA
If a bureau deliberately ignores your dispute, blows the investigation deadline, or otherwise violates its obligations, you may be able to recover damages in court. Willful violations allow either actual losses or statutory damages of $100 to $1,000 per violation, plus punitive damages and attorney’s fees.8Office of the Law Revision Counsel. 15 USC 1681n – Civil Liability for Willful Noncompliance Negligent violations allow actual damages plus attorney’s fees, but no statutory or punitive damages.9Office of the Law Revision Counsel. 15 USC 1681o – Civil Liability for Negligent Noncompliance A suit has to be filed within two years of discovering the violation or five years of when it occurred, whichever comes first.10Office of the Law Revision Counsel. 15 USC 1681p – Jurisdiction of Courts; Limitation of Actions
Protecting Yourself While the Dispute Is Pending
If identity theft is behind the unauthorized inquiries, two tools can stop further damage while your dispute works through the process.
An initial fraud alert is free and lasts at least one year. You place it by contacting any one of the three bureaus, and that bureau has to notify the other two. The alert tells lenders to take extra steps to verify your identity before opening accounts in your name.11Office of the Law Revision Counsel. 15 USC 1681c-1 – Identity Theft Prevention; Fraud Alerts and Active Duty Alerts With an official identity theft report, you can request an extended alert that lasts seven years.
A credit freeze, sometimes called a security freeze, goes further. It stops the bureaus from releasing your report to new creditors at all, which blocks most fraudulent applications. Placing and lifting a freeze is free under federal law, and it stays in place until you decide to lift it. You’ll need to lift it temporarily when you apply for credit yourself.