A credit report can tell a lender about your accounts, but a lender cannot request it simply out of curiosity. Federal law limits access to specific purposes. Your report also has an access list, which gives you a place to check who has requested it.
The legal test: a permissible purpose
The Fair Credit Reporting Act, or FCRA, sets the federal rules for when a consumer reporting agency can furnish a report. The requester must have a purpose allowed by the law. The statute lists those circumstances, and a request alone does not create a permissible purpose.
Some purposes are connected to credit. A creditor may request a report when considering an application, reviewing an existing account, or collecting on an account. Insurance companies may use reports for purposes such as offering coverage or setting premiums. Government agencies may have access for certain benefits or licensing decisions.
Other situations include a legitimate business need related to a transaction you started, such as a rental application. The law also addresses court orders, grand jury subpoenas, certain child support matters, and some investors or servicers. A report may be furnished to someone acting on your written instructions, too. The Consumer Financial Protection Bureau, or CFPB, explains the main categories.
Having a familiar business name is not the legal test. The question is why the report was requested and whether that reason fits the law.
Employers and landlords have different rules
An employer or prospective employer generally needs your written consent before getting your credit report for employment purposes. If you are reviewing a job application, look for the authorization you signed and consider which employer it covered. A request without the required consent is a reason to ask questions.
A landlord may have a permissible purpose when you submit a rental application. That does not mean every property owner can look at your report whenever they choose. The connection to a transaction you initiated matters.
The CFPB has also said that a reporting agency using the employment or business-related permissible purpose must have reason to believe the information in the report pertains to the person who is the subject of the request. A disclaimer does not fix the absence of that reason. The agency’s guidance on permissible purposes also explains that obtaining or using a report without a permissible purpose is prohibited.
Prescreened offers are a separate kind of access
You may receive a firm offer of credit or insurance even though you did not apply. Prescreening allows prospective creditors or insurers to use certain information from your credit file to identify people who meet their criteria for an offer.
You have the right to opt out of prescreening if you do not want those offers. The CFPB’s overview of who can request a report discusses that right. Opting out addresses prescreened offers; it should not be confused with a general rule that no one can request your report.
The sources used here do not establish whether prescreening requests appear on the access list. An entry or its absence should not be treated as confirmation that an opt-out is in effect.
Use your access list to review requests
The CFPB says your credit report includes a list of those who requested it within the past year. Employers or prospective employers who requested it for employment purposes can appear for two years. Lenders, credit card companies, and landlords are among the businesses that may show up.
You can get a free annual report from each of the three nationwide credit reporting agencies: Equifax, Experian, and TransUnion. USAGov identifies AnnualCreditReport.com as the only website the federal government authorizes for these free annual reports. A credit report usually does not include your credit score, so the access list and a score are separate things to look for.
As you read an access list, compare the entries with your own records. An unfamiliar name is a reason to look further, not proof that someone broke the law. These questions can help you organize what you know:
- Did you apply for credit, housing, insurance, or a job around the time of the request?
- Is the requester connected to an account you already have, including an account being collected?
- If the request was for employment, did you give written consent?
- Could the stated reason fit one of the permissible purposes under federal law?
Keep a copy of the report and note the requester’s name and date while you review your records. The access list may prompt a question that the list itself cannot answer: what purpose did the requester have?
When a request or report needs a closer look
No one should obtain or use a consumer report without a permissible purpose. Obtaining one under false pretenses can lead to civil and criminal penalties. Still, an entry you do not recognize does not by itself establish the requester’s purpose or prove false pretenses.
If a credit reporting agency refuses to give you your report, USAGov says to contact that agency first and then the CFPB if the matter remains unresolved. The sources here do not provide a detailed complaint procedure for an unfamiliar inquiry, so they do not support a promise that a particular contact will resolve it.
Start with the information you can verify: the report, the name and date on the list, and any related application or account records. Those details can help you describe your question clearly when you contact the reporting agency.
Please seek a professional. This article is general information, not financial, tax or insurance advice. Please seek a licensed financial, tax or insurance professional about your own situation.
