Who is allowed to pull your credit report

Most people assume their credit report is broadly available to anyone in business. It is not. The Fair Credit Reporting Act works from a closed list.

The list

15 U.S.C. § 1681b(a) permits a consumer reporting agency to furnish a consumer report only in the enumerated circumstances. In summary:

1. Court order or certain subpoenas — an order of a court with jurisdiction, or a subpoena issued in connection with proceedings before a federal grand jury.
2. Your written instructions — “[i]n accordance with the written instructions of the consumer to whom it relates.”
3. A listed business need — the large category. It covers a person the agency has reason to believe intends to use the information in connection with a credit transaction involving you, for employment purposes, in connection with underwriting insurance, in connection with a government license or benefit where financial responsibility is a consideration, as a potential investor or servicer in connection with valuing an existing credit obligation, or who “otherwise has a legitimate business need for the information” in connection with a business transaction initiated by you or to review an account to determine whether you continue to meet its terms.
4. Child support enforcement agencies, on stated certifications.
5. State agencies administering child support award programs under federal law.
6. Federal banking and credit union regulators in connection with conservatorship or liquidation of an institution.

Paragraph (3) is where the ordinary world lives, and the words to notice inside it are “in connection with a business transaction that is initiated by the consumer” and the account-review language. A legitimate business need is not a general curiosity; it is tied to a relationship or a transaction.

Why this matters even when your report is accurate

An impermissible pull is a distinct problem. It is not about what the report says. It is about whether the person who obtained it was entitled to.

That distinction is easy to lose. If you are focused on fixing an inaccurate item, an unexplained inquiry looks like noise. It is not necessarily noise.

How to find out who looked

You do not have to guess. 15 U.S.C. § 1681g(a)(3) requires the agency, on request, to identify each person that procured a consumer report about you — for employment purposes within the preceding two years, and for any other purpose within the preceding one year — including the name or trade name and, on request, the contact information.

That is broader than the inquiry list most people glance at, and it is the actual statutory entitlement. Request the full file disclosure rather than a summary product, and read the inquiry section carefully.

Reading your inquiry list

Two kinds of entry usually appear, and reports distinguish them:

• Inquiries tied to something you did — you applied for credit, you rented, you asked for a quote.
• Inquiries you did not initiate — account reviews by companies you already do business with, and promotional or prescreened offers.

Neither is automatically improper. Account review is expressly contemplated by § 1681b(a)(3). Prescreened offers operate under § 1681b(c), which has its own rules, including the opt-out most people have heard of and never used.

What is worth attention is an inquiry from a company you have no relationship with, did not apply to, and cannot account for. That is the one to ask about.

What to do with an inquiry you cannot explain

• Write it down with its date and the exact name shown. Trade names differ from corporate names, and the name on the report may not be the name on the door.
• Ask the agency for the identifying information § 1681g(a)(3) requires, including contact details.
• Ask the company directly what purpose it claims. A company with a permissible purpose can usually say so in a sentence.
• Keep the answers. See building a record that holds up.

We are not telling you whether any pull of your report was permissible. That turns on facts about the puller’s relationship to you and its stated purpose, and it is exactly the kind of question that depends on documents rather than on a general article. What we can tell you is that the list is closed, that you are entitled to know who looked, and that the question is separate from whether the report is accurate.