How to Dispute Unauthorized Credit Inquiry and Protect Your Credit Score

Why That Hard Inquiry Might Not Be Yours

You pull your credit report expecting to see the usual accounts and payment history. Instead, you spot a hard inquiry from a lender you have never contacted. Your first thought might be confusion, then concern. An unauthorized credit inquiry can drag down your credit score by a few points, and if it signals fraud or identity theft, the damage could go deeper. The good news is that you have the right under the Fair Credit Reporting Act to dispute unauthorized credit inquiry entries and have them removed if they are not legitimate. This guide walks through the practical steps, the legal backing, and the trade-offs involved so you can act quickly without making things worse.

What Counts as an Unauthorized Inquiry?

Not every inquiry you did not personally initiate is unauthorized. A lender might check your credit as part of a pre-approved offer, which is a soft inquiry and does not affect your score. The trouble comes with hard inquiries that appear without your permission. These can happen when a debt collector runs a credit check without a valid purpose, when someone applies for credit using your personal information, or when a creditor makes a mistake. Hard inquiries stay on your credit report for two years and can lower your FICO Score by a few points each. If several appear at once, the cumulative hit can matter, especially before a mortgage application.

Your Rights Under the Fair Credit Reporting Act

The Fair Credit Reporting Act, or FCRA, sets strict rules for who can pull your credit report and for what reason. A permissible purpose must exist, such as a credit application you signed, an employment background check you authorized, or an existing account review. If a lender or debt collector runs a hard inquiry without a permissible purpose, they violate the law. You have the right to dispute that inquiry with the credit bureaus and, if necessary, file a complaint with the Consumer Financial Protection Bureau. The FCRA also requires the bureaus to investigate your dispute within 30 days, though real life can be messier than the statute suggests.

Step-by-Step: How to Dispute Unauthorized Credit Inquiry

The process starts with gathering evidence. You need a copy of your credit report showing the disputed inquiry. You can get a free report from each of the three major credit bureaus - Equifax, Experian, and TransUnion - once a week at AnnualCreditReport.com. Look at all three because an unauthorized inquiry might appear on only one bureau's file. Once you have the report, identify the inquiry: note the company name, the date, and the bureau that reported it.

Next, prepare your dispute letter. You do not need a lawyer or a fancy template. Write a clear statement that you did not authorize this inquiry, include your full name, address, date of birth, and the report confirmation number if available. Attach a copy of the inquiry page from your credit report, but never send originals. The key phrase to include in your letter is "I dispute unauthorized credit inquiry from [company name] on [date] because I never applied for credit or authorized a credit check with this company." That exact language helps the bureau understand your claim.

Mail the dispute to the bureau that lists the inquiry. Certified mail with return receipt costs a few dollars but gives you proof the bureau received it. The bureaus have an online dispute system, but for unauthorized inquiries, a written letter often gets more careful attention because the online forms can be too generic. After the bureau receives your dispute, they must forward the details to the company that placed the inquiry. That company then has to verify that they had permissible purpose. If they cannot, the inquiry must be removed.

When the Dispute Stalls

Sometimes the bureau responds that the inquiry is verified and stays on your report. This can happen if the company claims you gave permission, even if you did not. At this point, you have options. You can send a second dispute with stronger evidence, like a statement from the lender that you never applied. You can also file a complaint with the Consumer Financial Protection Bureau, which often prompts a faster response from both the bureau and the company. If the inquiry is truly fraudulent, consider placing a fraud alert on your credit file. A fraud alert tells lenders to verify your identity before opening new accounts, which adds a layer of protection. For even stronger security, a credit freeze blocks all new credit applications unless you lift it temporarily. A credit freeze is free and does not affect your credit score.

Real-World Example: The Debt Collector Inquiry

Imagine a debt collector buys an old debt from a creditor you may or may not owe. Without contacting you, the collector runs a hard inquiry on your credit report to decide whether to pursue collection. That inquiry is almost certainly unauthorized because the collector lacks a permissible purpose unless you have a prior relationship or signed something. You can dispute unauthorized credit inquiry from that collector directly with the credit bureau. If the collector cannot prove you authorized the check, the inquiry comes off. This scenario is common and worth watching for, especially if you have old debts that change hands often.

How Long Does It Take?

The FCRA requires the credit bureaus to complete their investigation within 30 days of receiving your dispute. In practice, many disputes resolve in two to three weeks. If the inquiry is clearly invalid, the bureau might remove it even faster. But if the company pushes back, the process can stretch to 45 days if you send additional documentation. During that time, your credit score might still show the inquiry. That is frustrating, especially if you are shopping for a mortgage or car loan. A good workaround is to explain the situation to your lender and show proof that you disputed the inquiry. Some lenders will ignore a disputed inquiry when calculating your creditworthiness if you provide documentation.

Preventing Unauthorized Inquiries Before They Happen

You cannot stop every unauthorized inquiry, but a few habits reduce the risk. First, check your credit report regularly. The three major bureaus each offer free weekly access through AnnualCreditReport.com, and many credit monitoring services give you alerts when a new inquiry appears. Second, place a fraud alert on your credit file if you suspect identity theft. The alert lasts one year and can be renewed. Third, consider a credit freeze if you are not actively applying for credit. A freeze prevents anyone from pulling your credit report unless you lift it, which stops most unauthorized inquiries cold. The trade-off is that you have to remember to lift the freeze before applying for credit yourself, but the extra security is worth the inconvenience for many people.

When to Involve the Consumer Financial Protection Bureau

If the credit bureau or the company that placed the inquiry ignores your dispute or refuses to remove an obviously unauthorized inquiry, the Consumer Financial Protection Bureau can step in. File a complaint online at the CFPB's website. The CFPB forwards your complaint to the company and gives them a deadline to respond. In many cases, this pressure alone gets the inquiry removed. The CFPB also tracks patterns of complaints, so your report might help others. If the inquiry caused financial harm, such as a higher interest rate on a loan, you might have grounds to sue the company under the FCRA. Consult an attorney who specializes in credit reporting issues if the amount is significant.

The Bottom Line

An unauthorized credit inquiry is not the end of the world, but it is not something to ignore. A few points on your credit score can cost you hundreds of dollars in extra interest over the life of a loan. The process to dispute unauthorized credit inquiry is straightforward: get your report, write a clear dispute, and send it to the right bureau. Use the FCRA as your shield, and do not hesitate to escalate to the CFPB or a lawyer if the bureaus or the company push back. Regular credit monitoring, fraud alerts, and credit freezes give you proactive defenses. The time you spend cleaning up a single unauthorized inquiry is time well spent if it protects your credit health for the years ahead.