To report to credit bureaus as a business, you go through each bureau’s credentialing process, sign a data furnisher agreement, format your customer payment records in the industry-standard Metro 2 layout, and transmit them over a secure connection on a regular cycle. Once you start, federal law treats you as a “data furnisher” under the Fair Credit Reporting Act, which brings duties around accuracy, consumer notice, and dispute investigation that carry real financial exposure if you get them wrong. Getting from internal bookkeeping to live reporting typically takes several months at each bureau you want to reach.
Getting Credentialed by a Bureau
Before Equifax, Experian, or TransUnion will accept a single record from you, they vet your business. TransUnion publishes a representative list of what its process generally requires:1TransUnion. Data Reporting – Getting Started
- An application and letter of intent describing the data you plan to report and why.
- A business license showing you are authorized to operate in your jurisdiction.
- Third-party verification through bank references, trade references, or lender sponsorship.
- An on-site inspection of your business location and data-handling practices.
The review confirms compliance with the bureau’s own policies and with applicable law, including the FCRA and the financial privacy provisions of the Gramm-Leach-Bliley Act. The other bureaus follow a similar pattern with their own documentation and review steps.
Account-volume minimums matter here too. Equifax, for example, may require furnishers with fewer than 500 records per month to subscribe to its Automated Data View tool at $50 per month.2Equifax. Furnishing Consumer Data to Equifax Banks and credit unions often qualify at lower thresholds. If your portfolio is small, direct reporting may not be practical, and a third-party service (covered below) is the more realistic route.
Consumer Data and Commercial Data Go to Different Places
Which bureau you approach depends on who your customers are. Equifax, Experian, and TransUnion handle consumer credit — individual payment history tied to Social Security numbers, for products like credit cards, personal loans, and rent. That is the world where Metro 2 and the FCRA duties described here apply.
Business-to-business trade credit runs on a separate track. Dun & Bradstreet is the dominant commercial bureau, and companies that automatically feed it payment data are known as Trade Tape Providers; smaller businesses can submit trade references manually through D&B’s CreditBuilder products.3Federal Trade Commission. UNITED STATES OF AMERICA BEFORE THE FEDERAL TRADE COMMISSION – Dun and Bradstreet Each trade reference includes variables like manner of payment, highest credit used, total amount owed, and total past due.4Dun & Bradstreet. Understanding Trade References If you extend credit to individuals and also sell on trade terms to other businesses, you will use both channels.
Signing the Agreement and Passing a Test File
Credentialing ends with a formal contract, often called a Data Contributor Agreement or Service Level Agreement, that spells out your obligations for data quality, reporting frequency, and FCRA compliance. The bureau reserves the right to reject or suspend your data if it fails quality checks. Expect upfront onboarding costs and recurring fees that scale with account volume.
Before you go live, the bureau puts your data through a testing phase. TransUnion, for instance, requires all new furnishers to submit a test credit file for approval before any data is loaded.1TransUnion. Data Reporting – Getting Started
Building a Metro 2 File
All consumer credit data goes to the bureaus in Metro 2, the industry-standard format maintained by a task force of Equifax, Experian, Innovis, and TransUnion representatives under the Consumer Data Industry Association.5CDIA. Metro 2 The point of the standard is that every furnisher’s file looks the same when it arrives, whatever system generated it.
For each account, a compliant Metro 2 file carries:
- Consumer’s full name
- Social Security number
- Current residential address
- Account balance
- Credit limit or highest credit amount
- Payment history by month
- Account status codes indicating whether the account is current, delinquent, closed, transferred, or in default
Standard accounting or invoicing software will not usually produce Metro 2 files. Specialized credit-reporting software converts your internal records into the correct alphanumeric field structure, and it needs to support the full range of status codes your business will actually use, including codes for transfers, repossession, and foreclosure.5CDIA. Metro 2
Sending the File and Fixing Rejections
Metro 2 files upload to the bureau through a secure electronic connection, commonly SFTP or an HTTPS portal. TransUnion refers to this as Electronic Data Transmission and requires the most secure available method.1TransUnion. Data Reporting – Getting Started Each upload is a snapshot of your accounts at that point in time.
After each transmission, the bureau sends back a receipt confirmation followed by a rejection report listing records that failed to process. Typical rejection reasons include mismatched Social Security numbers, invalid status codes, and formatting errors. Rejected records do not appear on your customers’ credit reports until you fix them, so someone on your team needs to review the report each cycle and correct the errors before the next submission.
Accuracy Duties Under the FCRA
Reporting makes your business a data furnisher under the Fair Credit Reporting Act at 15 U.S.C. § 1681 and the sections that follow.6Office of the Law Revision Counsel. 15 USC 1681 – Congressional Findings and Statement of Purpose The core rule is simple: you cannot report information you know is inaccurate, and you cannot keep reporting information after a consumer has told you about a specific error that turns out to be correct.7Office of the Law Revision Counsel. 15 USC 1681s-2 – Responsibilities of Furnishers of Information to Consumer Reporting Agencies
The statute defines “reasonable cause to believe that the information is inaccurate” as specific knowledge, beyond just a consumer’s allegation, that would cause a reasonable person to have substantial doubts about the data. In practical terms, that means internal procedures to catch errors before submission and a reliable process to correct them when they surface later.
Telling Consumers About Negative Information
If your business qualifies as a “financial institution” under the FCRA — a category that includes banks, credit unions, and many lenders — Section 623(a)(7) requires you to notify a consumer either before or after you furnish negative information such as a late payment, missed payment, or default.
Federal regulations provide two model notices with a safe harbor if you use them properly. Model Notice B-1 is for use before you report: “We may report information about your account to credit bureaus. Late payments, missed payments, or other defaults on your account may be reflected in your credit report.” Model Notice B-2 is for use after: “We have told a credit bureau about a late payment, missed payment or other default on your account. This information may be reflected in your credit report.”8Consumer Financial Protection Bureau. Appendix B to Part 1022 – Model Notices of Furnishing Negative Information You are not required to use these exact words, but if you draft your own, the substance, clarity, and sequence of the language must remain intact; minor formatting changes are allowed.
Handling Consumer Disputes
When a consumer disputes an item on their credit report, the bureau forwards the dispute to you. Under 15 U.S.C. § 1681s-2(b), you must investigate by reviewing your own records, report the results back to the bureau, and if you find an error, notify every bureau you originally sent the inaccurate data to.7Office of the Law Revision Counsel. 15 USC 1681s-2 – Responsibilities of Furnishers of Information to Consumer Reporting Agencies
You generally have 30 days from the date the consumer filed the dispute with the bureau to finish your investigation. That window extends by 15 additional days if the consumer supplies additional relevant information during the original 30-day period.9Office of the Law Revision Counsel. 15 USC 1681i – Procedure in Case of Disputed Accuracy
Dispute traffic between furnishers and bureaus flows through e-OSCAR, a Metro 2–compliant web system where you respond electronically by marking the reported information as verified, modified, or deleted.10e-OSCAR. e-OSCAR Home The FCRA does not require any specific platform, but e-OSCAR is the standard.
What Getting It Wrong Costs
Penalties are not theoretical. A consumer who shows a willful FCRA violation can recover actual damages or statutory damages between $100 and $1,000 per violation, plus punitive damages, attorney fees, and court costs.11Office of the Law Revision Counsel. 15 USC 1681n – Civil Liability for Willful Noncompliance A merely negligent violation still exposes you to actual damages and attorney fees.12Office of the Law Revision Counsel. 15 USC 1681o – Civil Liability for Negligent Noncompliance
One nuance shapes where your legal risk actually sits. Consumers generally cannot sue furnishers privately over violations of the duty to report accurate information under subsection (a) of 15 U.S.C. § 1681s-2; that provision is enforced by regulators like the CFPB and FTC. Consumers can sue you directly for failing to properly investigate a dispute under subsection (b).7Office of the Law Revision Counsel. 15 USC 1681s-2 – Responsibilities of Furnishers of Information to Consumer Reporting Agencies Your dispute-handling process is where the private lawsuit risk lives.
Using a Third-Party Reporting Service
Not every business can clear credentialing at every bureau, and not every business should try. If your account volume falls below the bureau’s minimums, or the technical and compliance overhead is more than your team can carry, a third-party reporting service is an alternative. These companies are credentialed furnishers themselves; they take your raw account data, convert it to Metro 2, and submit it to one or more bureaus in your name.
Pricing is usually per-record or a monthly subscription. You trade some control for a lot of setup work you no longer have to do, but you remain responsible under the FCRA for the accuracy of what gets reported on your behalf. Before signing on, confirm which bureaus the service reports to, how often it submits, and how it routes consumer disputes back to you for investigation.