Unauthorized credit pulls: how to get $1,000 statutory damages

Digital Learning Guide Team

Published May 17, 2026 · Last updated May 18, 2026 · 5 min read · Legal Self-Help & Know Your Rights

Written by Digital Learning Guide Team · Reviewed by Darsheel Tiwari, Editor-in-Chief, TheDigitalLife · Editorial standards

---

Understanding Unauthorized Credit Pulls

An unauthorized credit pull happens when a company, lender, or individual accesses your credit report without a legally permitted reason. Under the Fair Credit Reporting Act (FCRA), a federal law that protects consumer credit information, companies can only pull your credit report for specific purposes, such as when you apply for credit, employment, insurance, or with your written permission.

Common examples include a prospective employer checking your credit during a background check with consent, or a bank reviewing your report when you apply for a loan. If no such permission exists and no permissible purpose applies, the pull may violate FCRA. This is general information, not legal advice. Rules can vary based on your situation, and you should verify details through official sources like the Consumer Financial Protection Bureau (CFPB) website.

Spotting these issues early matters because repeated unauthorized pulls can lower your credit score, making it harder to get loans, rentals, or jobs. In many cases, consumers have successfully disputed inquiries and, for willful violations, pursued statutory damages up to $1,000 per violation plus actual damages and attorney fees.

Signs You May Have an Unauthorized Credit Inquiry

Credit inquiries appear on your credit reports from the three major bureaus: Equifax, Experian, and TransUnion. There are two types: hard inquiries, which affect your score and stem from credit applications, and soft inquiries, like account reviews or pre-qualifications that do not impact scores.

Look for inquiries from companies you do not recognize or did not contact. Other red flags include:

  • Multiple pulls from the same entity without your application.
  • Inquiries labeled as "account review" when you have no account there.
  • Employer pulls without a job application or signed authorization.

Do not ignore unfamiliar inquiries. They could signal identity theft, errors, or FCRA violations. Read your credit reports carefully for the date, company name, and type of inquiry.

Checking Your Credit Reports for Free

The first step is to review your credit reports. By federal law under FCRA, you can get one free report from each bureau every 12 months through AnnualCreditReport.com. If you suspect unauthorized activity, request reports immediately.

Additional free reports may be available weekly online due to ongoing programs—check AnnualCreditReport.com for current options. You can also get free reports from each bureau if denied credit, suspect fraud, or after placing a fraud alert.

Gather these reports and note:

  • Inquiry dates.
  • Names and addresses of the inquiring parties.
  • Any associated accounts or applications you did not initiate.

Save digital copies, print them, and keep originals. Note the date you accessed them—this starts timelines for disputes and potential claims.

Your Rights Under the FCRA

The FCRA, enforced by the Federal Trade Commission (FTC) and CFPB, requires user furnishers (companies requesting reports) to have a permissible purpose. Without it, the access is improper.

For violations:

  • Negligent violations may lead to actual damages.
  • Willful violations (knowing or reckless disregard) allow statutory damages of $100 to $1,000 per violation, punitive damages, and attorney fees without proving harm.

You have the right to dispute inaccurate information, including inquiries, and receive investigation results within 30 days. This does not guarantee outcomes—consult official FTC resources at consumer.ftc.gov/credit-loans-debt for details.

State laws may add protections, such as California's stricter rules on credit reporting. Always check your state's attorney general website for local consumer laws.

Step-by-Step Actions After Discovering an Unauthorized Pull

Follow these general steps calmly and methodically. Document every action with dates, names, and confirmation numbers.

1. Place a Fraud Alert or Credit Freeze

Contact one credit bureau to place a free fraud alert lasting one year (or seven years for identity theft victims). It extends to all three bureaus. For stronger protection, add a security freeze, which blocks most new account access.

  • Equifax: 1-800-685-1111 or equifax.com/personal/credit-report-services
  • Experian: 1-888-397-3742 or experian.com/fraud
  • TransUnion: 1-888-909-8872 or transunion.com/fraud

Verify instructions on their official sites, as processes change.

2. Dispute the Inquiry Directly with Credit Bureaus

Send a dispute letter to each bureau listing the problematic inquiry. Explain why it is unauthorized—no application, no permission, etc. Include copies of your ID, proof of address (like a utility bill), and credit report pages highlighting the issue.

Use certified mail for proof of delivery. Bureaus must investigate within 30 days and notify the furnisher. Keep copies of everything sent and received.

Sample dispute language (adapt generally): "I did not authorize this inquiry from [company] on [date]. Please remove it as it lacks a permissible purpose under FCRA."

3. Contact the Furnisher (Company That Pulled Your Credit)

Write to the company requesting they delete the inquiry and explain why it was unauthorized. Demand written confirmation. Under FCRA, they must investigate if notified by a bureau.

Track responses. If they ignore you, note dates for later use.

Documents to Gather and Organize

Strong evidence strengthens disputes and potential claims. Create a folder (digital and physical) with:

  • Credit reports from all three bureaus, dated.
  • Dispute letters and mailing receipts (certified mail slips).
  • Company correspondence—letters, emails, call logs (date, time, name of representative).
  • Proof of no relationship—no account statements, no application confirmations.
  • ID and address verification—driver's license, recent bills.
  • Timeline notes—when you discovered the pull, actions taken.

If identity theft is involved, get a police report and FTC Identity Theft Report at IdentityTheft.gov.

Document TypeWhy It MattersWhere to Get It
Credit reports (Equifax, Experian, TransUnion)Shows the inquiry details and historyAnnualCreditReport.com or bureau sites
Dispute confirmation lettersProves you notified bureaus/furnisherMailed responses or online portals
Call logs and emailsRecords communications for timelinesYour notes, screenshots
Police report (if fraud)Supports identity theft claimsLocal police department

Organize chronologically. This helps if you speak with legal aid or file a complaint.

Filing Complaints with Government Agencies

Agencies investigate FCRA violations but do not award damages directly. Complaints build records and may prompt enforcement.

Consumer Financial Protection Bureau (CFPB)

Submit online at consumerfinance.gov/complaint or call 1-855-411-2372. Describe the unauthorized pull, attach documents. CFPB forwards to the company for response within 15 days.

Use their tools at consumerfinance.gov/consumer-tools for templates.

Federal Trade Commission (FTC)

File at reportfraud.ftc.gov for credit issues. No direct FCRA enforcement, but it tracks patterns.

State Attorney General

Most states have consumer protection divisions. Search "[your state] attorney general consumer complaint" for forms. For example, New York's at ag.ny.gov/complaint-forms.

AgencyBest ForSubmission Method
CFPBCredit reporting disputesOnline: consumerfinance.gov/complaint
FTCFraud patternsreportfraud.ftc.gov
State AGLocal enforcementState AG website search

Complaints are free and confidential. Expect responses in weeks; follow up if needed.

When to Consider a Lawsuit for Statutory Damages

If disputes fail and you suspect a willful FCRA violation, you may sue in federal or state court. Statutory damages up to $1,000 apply without proving financial harm, but you must show willfulness.

Statutes of limitations: Generally two years from discovery for negligent claims, five years for willful (verify via CFPB or attorney).

Small claims court handles some cases if damages are low, but FCRA suits often go to federal court due to attorney fee provisions. Many consumer attorneys take FCRA cases on contingency—no upfront fees.

Do not file without professional input. Rules vary by state and court.

Finding Qualified Legal Help

Legal aid can review your case for free. Search LawHelp.org or your state bar's referral service (e.g., "California bar lawyer referral").

  • Court self-help centers: Many superior courts offer FCRA dispute guidance.
  • Consumer attorneys: Find via NACA.net (National Association of Consumer Advocates).
  • Legal aid societies: Prioritize low-income; check eligibility on their sites.

Prepare questions: "Is this a willful violation?" "What evidence do I need?" "What are local filing deadlines?"

State and Local Variations

While FCRA is federal, states like California (Rosenthal Act), New York, and Texas have mini-FCRA laws with extra damages or procedures. Check your state attorney general or court self-help site.

For example, some states allow private actions for higher penalties. Verify through official state resources—do not assume federal rules alone apply.

Avoiding Scams Related to Credit Disputes

Scammers pose as credit repair firms promising to remove inquiries for fees. Watch for:

  • Upfront payments via wire or gift cards.
  • Guarantees of results.
  • Pressure to sign contracts quickly.

Legitimate help is free from CFPB/FTC or low-cost via legal aid. Verify attorneys via state bar sites.

Preparing for Next Steps and Long-Term Protection

Monitor reports quarterly. Consider credit monitoring services, but review terms. Keep records for at least seven years, matching credit history retention.

If damages occur (e.g., denied loan), document them for potential claims.

This article provides general educational information, not legal advice. For your situation, contact CFPB, your state attorney general, or a qualified attorney. Do not ignore deadlines on notices or responses—read them carefully and act promptly.

(Word count: 2648) ---

TDL Expert Panel editorial team for TheDigitalLife

About the TDL Expert Panel

TDL Expert Panel · TheDigitalLife Editorial Team

TDL Expert Panel is the editorial team behind TheDigitalLife. The team researches, reviews, and creates practical guides to help everyday readers make better decisions about home repair costs, refunds, AI tools, digital safety, productivity, and useful online resources. Each guide is written to be clear, useful, and easy to understand.