⚖️ CROA Notice: No advance fees are charged. You have the right to dispute inaccurate information directly with credit bureaus at no cost. Read your rights →

Your FCRA Rights Explained

Your rights under the Fair Credit Reporting Act, updated for 2026 — free weekly reports, the 30-day dispute window, unauthorized inquiries, medical debt, and when you can sue.

Introduction

The Fair Credit Reporting Act (FCRA) is a federal law that governs how credit bureaus collect, maintain, and report your information. But most people have no idea what rights they actually have—and credit bureaus count on that ignorance.

This guide walks you through your most important FCRA protections, plus one major consumer protection that comes from bureau policy rather than statute. Understanding these rights is your first step to taking control of your credit.

Bottom line: The FCRA is written to protect YOU. Here's how to use it.


Right #1: Free Credit Reports — Now Weekly

The Law (FCRA § 1681j)

The FCRA guarantees you one free report from each bureau every 12 months. In practice you get far more than that. Equifax, Experian, and TransUnion began offering free weekly reports in 2020, and made that permanent in October 2023. As of 2026 you can pull all three, every week, at no cost.

How to Get Yours

  • Website: AnnualCreditReport.com (the official site)
  • Phone: 1-877-322-8228
  • Mail: Annual Credit Report Request Service, PO Box 105281, Atlanta, GA 30348-5281

Important: AnnualCreditReport.com is the only federally authorized source for your actual credit reports, and it is the one to use for disputes. Services like Credit Karma are a different thing—they show you a score and monitoring, not the official report, and the score they display is usually VantageScore rather than the FICO score most lenders pull. Useful for tracking movement; not a substitute for the report itself.

What You'll Receive

The bureau will send you:

  • Your complete credit report from that bureau
  • Your accounts, balances, and payment history
  • Hard inquiries and personal information
  • Collections, judgments, and negative items

Pro tip: The old advice was to stagger one bureau every four months to stretch the annual allowance. That is obsolete. Pull all three together so you can compare them side by side—items frequently appear on one report and not the others, and you can only spot that by looking at them at the same time.


Right #2: Dispute Inaccurate Information

The Law (FCRA § 1681i)

You have the right to dispute anything on your credit report that you believe is inaccurate—and the bureau must investigate within 30 days.

The Investigation Process

When you file a dispute, the bureau must:

  1. Review your dispute — Read your letter carefully
  2. Contact the creditor — Ask them to verify the accuracy
  3. Investigate the claim — Check if the creditor can prove the account is accurate
  4. Remove if unverifiable — If the creditor can't verify, the item must be deleted
  5. Notify you in writing — Send results within 30 days

What Happens If You Win

If the bureau investigates and removes the item, they must:

  • Delete it from your report — Permanently remove it
  • Notify you — Send written confirmation
  • Notify other bureaus — Let Equifax, Experian, and TransUnion know it's inaccurate (if you dispute with all three)
  • Notify the creditor — Tell them to stop reporting it

Important: If an item is unverifiable, it MUST be removed by law. The creditor doesn't get to decide—the law does.


Right #3: Accuracy Is a Legal Requirement

The Law (FCRA § 1681e)

Credit bureaus and creditors must maintain accurate, complete information. If they report something inaccurate, even if it's accidental, it violates federal law.

What "Accurate" Means

Bureaus must verify:

  • ✓ Payment history (are you paying on time?)
  • ✓ Account balance (is the amount correct?)
  • ✓ Account status (is it open, closed, delinquent?)
  • ✓ Payment amounts (are minimums reported correctly?)
  • ✓ Account dates (was it opened/closed when reported?)

Your Recourse

If information is inaccurate, you can:

  1. Dispute it (free, FCRA § 1681i)
  2. Demand correction in writing
  3. File CFPB complaint if they refuse
  4. Sue for FCRA violations (damages + attorney fees)

Real example: A creditor reports your payment as 30 days late when it was actually 15 days. This is inaccurate reporting under FCRA § 1681e. You can dispute it and demand removal.


Right #4: Know Who's Accessing Your Credit

The Law (FCRA § 1681b — permissible purpose; § 1681g — your right to see the disclosure)

You have the right to know who's checking your credit report. There are two types of inquiries:

Hard Inquiries (Damage Your Score)

  • Mortgage lenders
  • Auto loan companies
  • Credit card companies
  • Collection agencies
  • Employers checking credit

Your right: You must authorize hard inquiries. Unauthorized inquiries are illegal and can be disputed and removed.

Soft Inquiries (Don't Damage Your Score)

  • Banks (account review)
  • Insurance companies
  • Pre-approval offers
  • Employers (with consent)
  • Existing creditors

Your right: You can see ALL inquiries on your report and challenge any you didn't authorize.

How to Check

Pull your credit report and look for "inquiries" or "credit checks." Each one should correspond to an application YOU made.

Action: If you see an inquiry you didn't authorize, dispute it immediately. Unauthorized inquiries can indicate identity theft.


Right #5: Opt Out of Pre-Screened Offers

The Law (FCRA § 1681b(e))

Credit companies and insurers use your credit report to send "pre-approved" offers. You can opt out.

How to Stop Them

  • Online: OptOutPrescreen.com
  • Phone: 1-888-567-8688
  • Mail: Opt-Out Request Service, PO Box 92778, Louisville, KY 40292-0778

Options:

  • ✓ Opt out for 5 years (temporary)
  • ✓ Opt out permanently (for life)

Benefit: Fewer offers = less temptation to apply = fewer hard inquiries = better credit.


Right #6: Protect Yourself Against Identity Theft

The Law (FCRA § 1681c-2)

If you're a victim of identity theft, the FCRA gives you powerful protections:

What You Can Do

  1. Fraud alert — Place a 1-year alert (free) on your credit report
  2. Security freeze — Lock your credit so only YOU can open new accounts
  3. Block fraudulent accounts — Remove accounts opened in your name by someone else
  4. Demand investigation — Bureau must investigate within 30 days

Timeline for Removal

Once you report identity theft, fraudulent accounts must be:

  • Blocked within 4 business days (FCRA § 1681c-2(a))
  • Fully investigated and removed within 30-45 days

You don't have to wait years for fraudulent items to age off your report. The law requires IMMEDIATE action.

Action Steps

  1. File a police report (get case #)
  2. File FTC identity theft report (IdentityTheft.gov)
  3. Contact all three bureaus (Equifax, Experian, TransUnion)
  4. Send identity theft affidavit
  5. Request removal of fraudulent accounts

Right #7: Medical Debt Protections

Bureau policy, not statute

This one is not an FCRA right, and it matters that you know the difference. Since 2022–2023 the three bureaus have voluntarily agreed not to report paid medical collections, unpaid medical collections under $500, or any medical debt less than 365 days old.

The CFPB finalized a rule in January 2025 that would have removed medical debt from credit reports as a matter of law. A federal court vacated that rule on July 11, 2025. So the protections you have today rest on an industry policy the bureaus could revisit, not on a regulation.

What to do with that: if a medical collection on your report is paid, under $500, or newer than a year, dispute it—it should not be there under current bureau policy. Do not assume it will come off on its own; removal depends on the collection agency reporting correctly.


Right #8: Sue for FCRA Violations

The Law (FCRA § 1681p)

If a credit bureau or creditor violates the FCRA, you have the right to sue them in court.

What Violations You Can Sue For

  • Inaccurate reporting — Reporting false information
  • Failure to investigate disputes — Not responding to your dispute within 30 days
  • Failure to correct — Keeping inaccurate info after investigation
  • Willful violations — Knowingly violating FCRA (higher damages)

Your Damages

Courts can award:

  • Actual damages — Any financial harm (usually $1,000-$5,000+)
  • Statutory damages — $100-$1,000 per violation (even without proof of harm)
  • Punitive damages — Available for willful violations, in an amount the court decides. There is no fixed cap
  • Attorney fees — A prevailing consumer can recover costs and reasonable attorney fees, which is why many FCRA attorneys work on contingency

Real Example

If a bureau fails to remove an item within 30 days of your dispute, they violated FCRA § 1681i. You can sue for statutory damages ($100-$1,000) plus attorney fees. Many attorneys take these cases on contingency (free unless you win).


How to Enforce Your Rights

Step 1: Understand the Violation

Your rights are only valuable if you know when they're broken. Common violations:

  • Bureau doesn't respond to dispute within 45 days
  • Inaccurate information remains after dispute
  • Unauthorized hard inquiries
  • Failure to remove identity theft accounts quickly

Step 2: Document Everything

Keep records of:

  • Dispute letters sent (with return receipts)
  • Bureau responses
  • Dates and timelines
  • Evidence of inaccuracy
  • Any correspondence

Step 3: Follow Up in Writing

If a bureau misses a deadline, send a second letter citing FCRA § 1681i violation and warning of legal action.

Step 4: File CFPB Complaint

The Consumer Financial Protection Bureau (CFPB) accepts complaints for free:

  • Website: ConsumerFinance.gov/complaint
  • Phone: 1-855-411-CFPB
  • Timeline: The company generally responds within 15 days, with a final response expected within 60
  • New in 2026: For credit-reporting complaints the CFPB now requires you to dispute with the credit reporting agency first, wait 45 days, and confirm the dispute is no longer pending. File your dispute before you file the complaint

Step 5: Consult an Attorney

Many FCRA attorneys offer free consultations and take cases on contingency. If you've documented violations, an attorney may recover damages and fees.


Final Takeaway

The FCRA is one of the strongest consumer protection laws in America. Credit bureaus count on most people not knowing their rights. Now you do.

Use these 7 rights to:

  • ✓ Monitor your credit
  • ✓ Dispute inaccuracies
  • ✓ Protect against theft
  • ✓ Hold bureaus accountable
  • ✓ Rebuild your financial life

Next step: Pull your free weekly credit reports today and identify any inaccuracies. If you need help disputing them, We Not Me Financial Group can guide you through the process.

Your credit is too important to ignore.


Sources & further reading

This article is general education, not legal or financial advice. We Not Me Financial Group is not a law firm. Any point figures, timelines, or outcomes described are illustrative — individual results vary depending on your report, and no outcome is guaranteed. Accurate, verifiable information generally cannot be removed from a credit report. See our CROA disclosures.

Keep reading

Disputes
How to Dispute Credit Errors
Building Credit
How to Build Credit Fast
Free Consultation Free Letter Templates