A hard inquiry is recorded when a lender pulls your report to evaluate an application. Accurate inquiries can't be disputed away, but one you never authorized is a different story. It may be a mistake, a dealer or lender pulling more bureaus than you expected, or the first sign of identity theft.
Key takeaways
- Inquiries you authorized are accurate even if you didn't get the credit, and they fade on their own.
- Inquiries you didn't authorize can be disputed; a lender needs a permissible purpose to pull your report.
- Identify the company first; inquiries sometimes appear under a parent company or financing partner's name.
- If it's fraud, treat it as identity theft: fraud alert, freeze, FTC report, and an identity theft block.
- FICO scores generally count only the last 12 months of inquiries.
Step one: figure out who it is
Inquiry names can be cryptic. A car dealer may send your application to several lenders, each creating an inquiry. A store card may be issued by a bank with a different name. Before disputing, search the name, check your email for applications you started, and think back to any financing offers at checkout.
Rate shopping is normal: scoring models generally treat multiple mortgage, auto, or student loan inquiries within a short window as one for scoring, commonly 14 to 45 days depending on the model (FICO).
Inquiries that are real but surprising
Before treating an inquiry as fraud, rule out these common sources. Each one usually involves something you did start, even if you didn't expect a credit check:
| What you did | Why an inquiry may appear |
|---|---|
| Financed a car at a dealership | The dealer may send your application to several lenders, and each can pull your report. |
| Accepted a store's financing offer at checkout | The account is often issued by a bank whose name differs from the store's. |
| Opened a phone, utility, or internet account | Some providers check credit when you open an account. |
| Applied for an apartment | Landlords and screening companies may pull a report as part of the application. |
| Asked for a credit limit increase | Some issuers use a hard inquiry for increase requests. |
| Co-signed or applied jointly | Each applicant's report is usually pulled. |
If one of these fits and you did authorize it, the inquiry is accurate and will fade on its own. If none fits, keep going.
Why unauthorized inquiries are disputable
The FCRA allows a company to get your consumer report only for a permissible purpose, such as a credit transaction you initiated or reviewing an account you have (15 U.S.C. § 1681b). If you never applied and have no account, the inquiry may be inaccurate or the result of fraud.
How to dispute it
- 1Contact the company that made the inquiry. Ask whether an application was submitted in your name. If it was fraud, ask it to close any account and confirm in writing.
- 2Dispute with the bureau that shows the inquiry. Identify the inquiry (company name and date) and explain that you didn't authorize it. Note that furnishers aren't required to investigate direct disputes about inquiries, so the bureau is the key channel (Regulation V § 1022.43).
- 3If it's identity theft, report it at IdentityTheft.gov and use the Identity Theft Report to request a block (FCRA § 605B).
- 4Freeze your credit at all three bureaus to stop further applications. See the freeze guide.
- 5Check your reports again after the investigation and periodically afterward.
What to put in your dispute
Keep it short and specific. Identify yourself, the bureau report you're looking at, and the inquiry by company name and date. State plainly that you did not apply for credit with that company and did not authorize it to access your report, and ask the bureau to investigate and remove the inquiry if it can't be verified as authorized.
- Attach a copy of the report page showing the inquiry, with the line highlighted, plus proof of identity and address.
- If you contacted the company, note the date and what it told you, and attach any letter confirming there was no application.
- If it's identity theft, attach your FTC Identity Theft Report and ask for a block under FCRA § 605B rather than a regular dispute.
- Leave out anything unrelated. One inquiry per dispute item is easier to investigate than a long list.
If someone applied in your name
An inquiry you didn't authorize often means someone tried to open an account. Act on both fronts: the inquiry and any account that came from it.
- 1Place a fraud alert or freeze at all three bureaus so further applications are harder. See freeze vs. lock.
- 2Report it at [IdentityTheft.gov](https://www.identitytheft.gov) to get an Identity Theft Report.
- 3Ask for the application records. Identity theft victims can request copies of applications and business records for accounts opened in their name; the business generally must provide them within 30 days of a proper request (15 U.S.C. § 1681g(e)). Those records can show what information the thief used.
- 4Request a block of fraudulent information, including inquiries, with each bureau (§ 605B).
The full recovery checklist is in what to do after identity theft.
When a company pulled your report without a permissible purpose
The FCRA lets consumers sue for willful or negligent violations of the law, which can include obtaining a report without a permissible purpose (15 U.S.C. § 1681n; § 1681o). Those claims have deadlines: generally the earlier of two years after you discover the violation or five years after it occurred (§ 1681p). CreditGod isn't a law firm and doesn't give legal advice; if you believe a company deliberately pulled your report without a valid reason, a consumer attorney can tell you whether you have a claim. You can also file a CFPB complaint.
How much an inquiry matters
A single hard inquiry usually has a small, temporary effect. Inquiries typically remain on reports for about two years, and FICO scores generally consider only those from the last 12 months. The bigger concern with an unauthorized inquiry is what it may signal: someone trying to open credit in your name.
Prefer help with the legwork? CreditGod reads all three reports, flags items that may be inaccurate, and drafts disputes for your approval. You can always dispute for free on your own.
Frequently asked questions
Can I remove a hard inquiry I authorized?
Not through a dispute; it's accurate. Its impact on scores is usually small and fades, and FICO generally counts only the last 12 months of inquiries.
Why do I have several inquiries from one car purchase?
Dealers often send applications to multiple lenders. Scoring models generally count multiple auto inquiries within a short window as one for scoring purposes.
Is an unknown hard inquiry identity theft?
It can be. It can also be a lender under a different name. Contact the company first; if no one applied, follow the identity theft steps and freeze your credit.
How long do hard inquiries stay on my report?
Typically about two years.
What should a hard inquiry dispute letter say?
Name the bureau report, the company, and the inquiry date, state that you didn't apply or authorize access, and ask the bureau to investigate and remove it if it can't be verified. Attach the report page and proof of identity.
Can I get a copy of an application someone filed in my name?
Yes. Identity theft victims can request application and transaction records from the business, which generally must provide them within 30 days of a proper request that includes proof of identity and of the identity theft claim.
Should I freeze my credit after finding an inquiry I didn't authorize?
It's a sensible precaution, because an unauthorized inquiry can mean someone tried to open an account. A freeze is free at each bureau, doesn't affect your scores, and can be lifted when you need to apply.
Sources and further reading
- 15 U.S.C. § 1681b (FCRA § 604): Permissible purposes of consumer reports
- FICO: Credit checks and inquiries
- CFPB: Regulation V § 1022.43, direct disputes with furnishers
- 15 U.S.C. § 1681c-2 (FCRA § 605B): Block of information resulting from identity theft
- IdentityTheft.gov (FTC)
- FTC: Credit Freezes and Fraud Alerts
- 15 U.S.C. § 1681g (FCRA § 609): Disclosures to consumers, including information available to victims
- 15 U.S.C. § 1681n (FCRA § 616): Civil liability for willful noncompliance
- 15 U.S.C. § 1681o (FCRA § 617): Civil liability for negligent noncompliance
- 15 U.S.C. § 1681p (FCRA § 618): Jurisdiction of courts; limitation of actions
- CFPB: Submit a complaint
This guide is general educational information, not legal or financial advice, and CreditGod is not a law firm. You can dispute inaccurate information with the credit bureaus yourself, for free. Only inaccurate, incomplete, or unverifiable information can be disputed; results vary. Rules change, so check the CFPB, FTC, or a qualified professional about your situation. Read our editorial standards.