A hard inquiry may raise an FCRA issue when a company obtains a consumer report without a permissible purpose. The central question is not simply whether the consumer remembers giving written permission. The Fair Credit Reporting Act permits access in several circumstances, and some lawful purposes do not require a separate written authorization.
Fowkes & Hasanbasic represents consumers throughout Florida in Fair Credit Reporting Act cases involving allegedly unauthorized access to credit reports and other consumer-reporting violations. We evaluate potential FCRA matters without charge, and clients pay no out-of-pocket attorney’s fees to retain the firm for an accepted FCRA case.
For a free case review, call (727) 500-1010.
Contents
Was Your Credit Report Obtained Without a Permissible Purpose?
You may have an FCRA claim when a person or company obtained or used your consumer report without a purpose authorized by 15 U.S.C. § 1681b and the access caused legally cognizable harm. An unfamiliar hard inquiry alone does not automatically establish a violation. The identity of the user, the reason for access, any transaction or account relationship, the certification supplied to the bureau, and the resulting harm must be investigated.
What Is a Credit Inquiry?
A credit inquiry records access to a consumer’s credit file. The Consumer Financial Protection Bureau explains that inquiries generally fall into two categories:
| Hard inquiry | Soft inquiry |
|---|---|
| Often occurs when a lender obtains a report in connection with an application for credit. | May involve account review, prescreening, a consumer’s own report request, or another qualifying review. |
| May affect credit scores, depending on the scoring model and circumstances. | Generally does not affect credit scores. |
| Can generally be seen by others who obtain the consumer’s report. | Generally appears only on the disclosure provided to the consumer. |
The display of an inquiry as “hard” or “soft” does not itself decide whether the user had a permissible purpose under the FCRA.
What Is a Permissible Purpose Under the FCRA?
15 U.S.C. § 1681b identifies the circumstances in which a consumer reporting agency may furnish a consumer report. Depending on the facts, permissible purposes can include:
- A credit transaction involving the consumer, including extending credit or reviewing or collecting an account
- Written instructions from the consumer
- Employment purposes subject to applicable FCRA requirements
- Underwriting insurance involving the consumer
- A legitimate business need connected to a business transaction initiated by the consumer
- Certain court orders, subpoenas, governmental determinations, child-support matters, or other purposes specifically authorized by law
- Prescreening for a firm offer of credit or insurance under the statute’s requirements
The complete statutory language and context matter. A company cannot lawfully obtain a report merely because it would be useful or because it possesses the consumer’s identifying information.
No Written Permission vs. No Permissible Purpose
| No written permission | No permissible purpose |
|---|---|
| The consumer did not sign a specific authorization. | The user lacked any purpose permitted by § 1681b. |
| This does not automatically make every credit inquiry unlawful. | Obtaining or using a report without a permissible purpose may violate the FCRA. |
| Written consent is specifically important in settings such as employment reporting. | The analysis focuses on the actual statutory basis claimed for access. |
Calling every inquiry “unauthorized” because the consumer did not sign a form can be legally misleading. The stronger factual question is: what permissible purpose did the company have when it obtained the report?
When Might a Hard Inquiry Be Improper?
Examples requiring further investigation may include:
- A company pulled a report even though the consumer never applied for credit or initiated a transaction with it
- An auto dealer or lender obtained multiple reports outside the scope of the consumer’s transaction
- A former landlord, employer, business associate, or other person accessed a report for curiosity, leverage, or a personal dispute
- A debt collector obtained a report concerning a debt or consumer with no legitimate connection to its collection activity
- A business represented to a credit bureau that it had a permissible purpose when the underlying facts did not support that certification
- A report was obtained for one authorized purpose and then used for a materially different, unauthorized purpose
- An identity thief generated inquiries by applying for credit in the consumer’s name
These examples do not establish liability by themselves. Each requires evidence regarding who obtained the report, why, and what relationship or transaction existed.
When Might an Unfamiliar Inquiry Still Be Lawful?
An inquiry that a consumer does not recognize may have an innocent or lawful explanation. For example:
- A lender used a parent company, affiliate, or third-party service whose name differs from the name the consumer recognizes
- An existing creditor reviewed an account
- A mortgage, automobile, or other credit application resulted in access by multiple potential lenders
- A debt collector accessed the report in connection with collection of an account involving the consumer
- The inquiry resulted from prescreening rather than a completed credit application
- The consumer initiated a transaction that created a legitimate business need for the report
The user’s identity and asserted purpose should be confirmed before concluding that the inquiry violated the FCRA.
What to Do After Finding an Unfamiliar Hard Inquiry
- Preserve the complete report. Save the full report showing the inquiry, the bureau, the date, and the displayed company name.
- Check all three nationwide credit reports. An inquiry may appear with one bureau but not the others.
- Review recent transactions and applications. Consider credit applications, automobile shopping, mortgage activity, rentals, account reviews, and collection matters.
- Identify the company. The name displayed on a report may differ from the consumer-facing business name. Record any address and telephone number supplied with the inquiry.
- Request the asserted permissible purpose. Ask the company to identify why it obtained the report and preserve its response.
- Dispute inaccurate inquiry information when appropriate. Clearly identify the inquiry and explain the factual reason it is inaccurate or unauthorized. Preserve the dispute, attachments, delivery proof, and results.
- Investigate possible identity theft. If the inquiry resulted from an application you did not make, inspect the report for fraudulent accounts and consider the federal resources at IdentityTheft.gov.
- Document harm. Save credit-score records, denial notices, unfavorable loan terms, time and expense records, and contemporaneous evidence of distress or invasion of privacy.
The CFPB provides a useful explanation of hard and soft inquiries and a separate overview of who may request a consumer report.
What Evidence Matters in a Permissible-Purpose Case?
We commonly examine:
- The complete credit report containing the inquiry
- The identity of the company that obtained the report
- The date, bureau, inquiry type, and any contact information displayed
- Credit applications, authorizations, contracts, account agreements, and transaction records
- Evidence showing whether the consumer initiated a transaction
- The company’s explanation of its purpose
- The certification or coding supplied to the consumer reporting agency
- Disputes and investigation results
- Evidence of identity theft, if applicable
- Credit-score changes, denials, unfavorable terms, and other resulting harm
Who May Be Responsible?
The user of the consumer report
A person or company that obtains or uses a consumer report without a permissible purpose may face liability under the FCRA, depending on the facts, state of mind, causation, and injury.
The consumer reporting agency
A consumer reporting agency generally may furnish a report only when it has reason to believe the recipient has a permissible purpose. Potential bureau liability requires separate analysis of the bureau’s knowledge, procedures, certifications, and the circumstances of the disclosure.
The fact that a report was furnished does not automatically establish liability against both entities. The duties and evidence applicable to the report user and the reporting agency differ.
A Florida consumer finds a hard inquiry from a company the consumer does not recognize. The consumer confirms that no application, existing account, collection matter, rental transaction, or other relationship existed. The company cannot identify a legitimate transaction and gives conflicting explanations for obtaining the report.
The legal analysis includes whether the company actually obtained a consumer report, the purpose it certified, whether any statutory purpose existed, what the bureau knew, whether the conduct was negligent or willful, and what harm resulted.
This example is illustrative only. Liability and damages depend on the individual evidence.
Potential Damages Under the FCRA
Available remedies depend on the violation, causation, the defendant’s state of mind, and the supporting evidence.
- Actual damages: Potentially including financial loss, unfavorable credit terms, supported emotional distress, and privacy-related harm caused by an actionable violation.
- Statutory damages: For willful noncompliance, the FCRA permits statutory damages of $100 to $1,000 as an alternative to actual damages under 15 U.S.C. § 1681n.
- Punitive damages: Potentially available for willful noncompliance.
- Attorney’s fees and costs: A prevailing consumer may recover reasonable attorney’s fees and costs under the applicable FCRA provisions.
An unfamiliar inquiry does not automatically entitle a consumer to $1,000, and a temporary score change does not establish every element of a claim.
Frequently Asked Questions About Hard Inquiries
Is every hard inquiry made without written permission illegal?
No. The FCRA recognizes several permissible purposes, and not every lawful inquiry depends on a separate written authorization. The issue is whether a purpose authorized by § 1681b existed.
Does checking my own credit create a hard inquiry?
No. A consumer’s request for their own report is generally treated as a soft inquiry and does not affect the consumer’s credit score.
Can an existing creditor review my credit report?
The FCRA recognizes review or collection of an account as a potential permissible purpose. The facts must still establish that the account and purpose genuinely involved the consumer.
Can a debt collector obtain my report?
Collection of an account involving the consumer can provide a permissible purpose. If the debt belongs to someone else or no legitimate collection relationship exists, further investigation may be warranted.
What if an auto dealer sent my application to several lenders?
A consumer’s vehicle-financing transaction may result in inquiries from multiple potential lenders. Whether each access was authorized by a permissible purpose depends on the transaction and the facts.
What if an identity thief caused the inquiry?
The inquiry may be evidence of an unauthorized application rather than an improper pull by a lender that reasonably believed it was processing the consumer’s application. The resulting accounts and inquiry should be addressed through appropriate identity-theft and dispute procedures.
Can a hard inquiry lower my credit score?
Hard inquiries may affect credit scores, but the effect varies. A score impact alone does not prove that the inquiry lacked a permissible purpose.
How long does a hard inquiry remain on a credit report?
Inquiry display and scoring treatment can differ. Preserve the report showing the inquiry rather than waiting for it to disappear before investigating the issue.
Why Choose Fowkes & Hasanbasic?
- Florida consumer-law attorneys with substantial FCRA litigation experience
- Representation available throughout Florida
- Direct attorney evaluation of potential claims
- No charge for the initial case review
- No out-of-pocket attorney’s fees to retain the firm for an accepted FCRA case
Request a Free FCRA Case Review
If you believe a company obtained your credit report without a permissible purpose, preserve the complete report and related records and contact Fowkes & Hasanbasic.
Call (727) 500-1010.
Return to the Florida FCRA Lawyers main page
Paul R. Fowkes, Esq., is a co-founding shareholder of Fowkes & Hasanbasic and has more than 20 years of experience handling consumer-related claims in Florida. His practice includes Fair Credit Reporting Act litigation involving allegedly unauthorized consumer-report access, credit bureaus, furnishers, identity theft, inaccurate reporting, and consumer disputes.
Read Paul Fowkes’s biography or verify his license through The Florida Bar.
This page provides general information and is not legal advice. Reading it or contacting the firm does not create an attorney-client relationship. Past experience does not guarantee a particular outcome.