The FCRA gives you enforceable rights over your credit data — rights most people never use because they don't know they exist. This guide covers what the law actually says, what you can dispute, and how to make credit reporting agencies take you seriously.
The Fair Credit Reporting Act (FCRA) is a federal consumer protection law passed in 1970 and significantly expanded by the Fair and Accurate Credit Transactions Act (FACTA) in 2003. It governs how consumer credit information is collected, stored, shared, and used by credit reporting agencies (CRAs) — Equifax, Experian, and TransUnion — as well as by lenders, employers, insurers, and debt collectors.
The law was created in response to rampant inaccuracies in credit files and a total lack of consumer recourse. Before the FCRA, you had no right to see your own credit report, no way to dispute errors, and no knowledge of who was using your credit data or why.
You have the right to: access your credit reports for free (once annually from each credit reporting agency); dispute inaccurate or incomplete information; know when your credit has been used against you; know who has accessed your report; place security freezes and fraud alerts; sue for damages when the law is violated.
The three major credit reporting agencies — Equifax, Experian, and TransUnion — are consumer reporting agencies under the FCRA. They are required to maintain reasonable procedures to ensure maximum possible accuracy of the information they report. When they fail, the law gives you concrete remedies.
The entities that report information to the CRAs (banks, lenders, debt collectors) are called "furnishers." The FCRA places obligations on furnishers too — they must report accurately and must investigate disputes that CRAs forward to them.
A 2021 Consumer Reports study found that 34% of respondents had at least one error on their credit report, and 29% had an error that could affect their credit score. The errors aren't random — they cluster around identifiable patterns.
Wrong name, address, phone number, or Social Security number. These can cause another person's credit history to appear in your file — especially common with Jr./Sr. or similar names.
Accounts opened through identity theft, accounts mixed in from a similarly-named person (a "mixed file"), or authorized-user accounts that should not be appearing.
Payments reported as late when paid on time, accounts showing missed payments after a hardship agreement was in place, or late payments that have aged off being re-aged.
The same debt appearing multiple times — often after a debt is sold or transferred to a new collector. One debt cannot legally generate multiple negative entries.
Most negative items must be removed after 7 years. Bankruptcies: 10 years. If negative information is still appearing past those limits, it's a clear FCRA violation.
Credit utilization is a major scoring factor. A balance or limit reported incorrectly can artificially suppress your score — even if the account is otherwise in good standing.
"Re-aging" is when a collector resets the original delinquency date to make an old debt appear newer. This is illegal under the FCRA and extends how long the item appears negatively.
Debts discharged in bankruptcy must be reported as such. Accounts that should show a $0 balance after settlement that still show the original balance are inaccurate.
Inconsistencies across credit reporting agencies are also a red flag. An account reported as current on Experian and 60 days late on TransUnion is a contradiction — at most one of them can be accurate. Cross-CRA analysis catches these discrepancies that single-CRA reviews miss.
Beyond FCRA, furnishers must report data according to Metro 2 format standards set by the Consumer Data Industry Association. Metro 2 errors — like incorrect account type codes, wrong date of first delinquency fields, or missing account status codes — are legitimate dispute grounds even if the underlying information is approximately correct.
You have three channels for disputing information: directly with the credit reporting agency, directly with the data furnisher, or both. Filing with the CRA triggers the CRA's investigation obligation. Filing with the furnisher triggers theirs. You can pursue both simultaneously.
Request your reports from Equifax, Experian, and TransUnion at AnnualCreditReport.com — the only federally authorized source. You're entitled to free weekly reports as of 2023 under permanent CFPB rules. Don't order from any other source.
Review all three reports. For each error, note the exact account name, account number, which CRA has the error, the nature of the inaccuracy, and what the correct information should be. Cross-compare: what differs between Equifax, Experian, and TransUnion on the same account often reveals which report is wrong.
Depending on the error, supporting documents might include: bank statements showing on-time payments, a debt settlement letter, bankruptcy discharge papers, a police report for identity theft, or a letter from the original creditor. Not every dispute requires documentation, but having it significantly strengthens your position.
The letter should clearly identify each item you're disputing, explain the specific inaccuracy, state what you believe is correct, and request removal or correction. Include your name, address, and the last four digits of your Social Security number. Cite the relevant FCRA sections (Section 611 for the right to dispute, Section 623 for furnisher obligations). Send by certified mail with return receipt so you have proof of delivery and the receipt date — this starts the CRA's 30-day clock.
File copies of your dispute letters, certified mail receipts, and any responses you receive. Document dates. If the dispute escalates to a lawsuit, your paper trail is your case. FCRA disputes are time-sensitive — the CRA's investigation clock starts when they receive your letter.
All three credit reporting agencies offer online dispute portals. They're fast but limit what you can submit and may route disputes through automated systems less likely to conduct a genuine investigation. Certified mail disputes — especially those citing specific FCRA sections — are more likely to trigger a real human review, and they create a documented record that is far more valuable if you need to escalate.
Once the credit reporting agency receives your dispute, a specific legal process begins. Here's what the FCRA requires to happen:
The 30-day investigation window opens. The credit reporting agency must acknowledge receipt and provide you with the results when complete. If you submitted online, the clock starts immediately. By certified mail, it starts on delivery.
The credit reporting agency is required to forward your dispute to the company that provided the information (the furnisher). It must include all relevant information you submitted. The furnisher then must investigate and report back.
The credit reporting agency must complete its investigation within 30 days (45 if you provide new information during this period). "Investigation" is a legal obligation — not a rubber stamp. If a CRA conducts only a cursory automated check, that can itself be a FCRA violation.
You'll receive written results of the investigation. If the item was corrected or removed, the credit reporting agency must notify anyone who received your report in the past 2 years. If the item was verified as accurate, the CRA must tell you it remains and provide the furnisher's contact information.
You have options. You can dispute again with new evidence. You can dispute directly with the furnisher. You can add a 100-word statement of dispute to your file. Or you can escalate to the CFPB or to federal court. A rejection is not the end — it's often the beginning.
If a credit reporting agency fails to investigate properly, fails to correct a verified error, or violates the FCRA's procedural requirements, you have legal remedies — and they have real teeth.
The Consumer Financial Protection Bureau maintains a public database of complaints against credit reporting agencies and furnishers. Filing a complaint often prompts faster resolution because CRAs monitor their CFPB complaint rates. Submit at consumerfinance.gov/complaint. Include your dispute letters, the CRA's response, and a clear description of what they failed to do.
The Federal Trade Commission enforces the FCRA at the federal level. While an FTC report alone won't resolve your individual dispute, it contributes to enforcement patterns and establishes a documented record of the violation.
This is your most powerful option. FCRA Section 616 allows you to sue a credit reporting agency or furnisher in federal or state court if they willfully or negligently violate the act. Willful violations: statutory damages of $100–$1,000 per violation plus punitive damages and attorney's fees. Negligent violations: actual damages plus attorney's fees. Because attorney's fees are recoverable, consumer attorneys often take FCRA cases on contingency — meaning no upfront cost to you.
You must file an FCRA lawsuit within 2 years of the date you discovered the violation, or 5 years after the violation occurred — whichever is earlier. Document when you first identified each error and the date of any CRA or furnisher responses. The clock starts on discovery, not on dispute filing.
Upload your Equifax, Experian, and TransUnion reports. LegacyArmor cross-references all three, identifies FCRA violations and errors, and generates dispute letters citing the exact laws being violated.
Analyze My Reports FreeNo credit card required. Free analysis of one CRA report.
Legal Disclaimer: This guide is for informational purposes only and does not constitute legal advice. LegacyArmor is not a law firm, and use of this service does not create an attorney-client relationship. Credit laws vary by state and individual circumstances differ. For legal advice specific to your situation, consult a licensed attorney. Information in this guide reflects federal law (FCRA) as of the publication date and may not reflect subsequent legislative or regulatory changes.