This article is provided for educational and informational purposes only. It does not constitute legal, financial, or tax advice, and no attorney-client relationship is formed by reading it. Laws, regulations, official guidance, and related information vary by jurisdiction, change frequently, and may have changed or become outdated since the publication date. Always verify current information with authoritative sources and consult a qualified professional about your specific circumstances. The author and publisher assume no liability for actions taken based on this information.
Key Facts
- Federal level: Equifax, Experian, and TransUnion are the three nationwide consumer reporting companies, but they are not the only companies that compile consumer reports.
- Federal level: The Fair Credit Reporting Act requires a consumer reporting agency to conduct a free reasonable reinvestigation after receiving a qualifying dispute about information in a consumer’s file.
- Federal level: The ordinary statutory reinvestigation period is 30 days, with a limited extension of up to 15 days when relevant additional information arrives during that period.
- Federal level: A security freeze is free and generally blocks prospective creditors from accessing a credit file until the freeze is lifted.
The three credit bureaus are only part of the market
Equifax, Experian, and TransUnion maintain nationwide credit-reporting databases used in lending and other eligibility decisions.
Specialty consumer reporting companies may instead focus on employment screening, tenant screening, checking accounts, insurance, utilities, or other particular markets.
A separate credit-check explainer provides more context about how consumer reports are used.
Federal law creates access and accuracy rights
The FCRA gives consumers rights to obtain report information and dispute incomplete or inaccurate entries.
When a consumer reporting agency receives a qualifying dispute, it generally must conduct a reasonable reinvestigation without charge and delete or update information that is inaccurate, incomplete, or unverifiable.
The agency must notify the furnisher of the disputed information and pass along the relevant information received with the dispute.
The 30-day rule has important qualifications
The ordinary reinvestigation deadline runs 30 days from the agency’s receipt of the dispute.
An extension of up to 15 days can apply if the consumer provides relevant additional information during the initial period, but the statute limits that extension when the item is found inaccurate, incomplete, or unverifiable.
A practical overview of how to dispute a credit report is distinct from the legal question whether a particular submission satisfies the statute.
Freezes and fraud alerts serve different functions
A credit freeze restricts access to a file and can make it harder for an identity thief to open a new account.
A fraud alert does not block access; it tells a prospective creditor to take identity-verification steps before extending new credit.
Freezes must generally be placed separately with each nationwide company, while a company receiving a fraud-alert request must notify the other two.
Recent enforcement illustrates that procedure matters
In January 2025, the CFPB issued an order against Equifax concerning its handling of consumer disputes.
The order required Equifax to pay a $15 million civil penalty and address identified failures in its dispute-processing systems.
An agency enforcement order concerns the conduct and period described in that record; it does not prove that every report from the company contains an error.
