You pull your credit report and spot a hard inquiry from a company you have never heard of. Maybe you applied for a card six months ago and completely forgot. Or maybe someone used your name and Social Security number to apply for credit without your knowledge. Both explanations are possible, and the difference matters. The good news is that federal rules give you a clear path for checking what happened and correcting any mistake you find.
What a hard inquiry is and why it matters
A credit inquiry is a request to look at your credit report, usually to judge whether to offer you credit, housing, employment, or insurance. Not all inquiries are created equal, and the distinction between hard and soft is worth understanding before you do anything else.
Hard inquiries happen when you apply for a credit card, a loan, or a similar account. The lender pulls your report, that pull gets recorded, and it is visible to anyone who later buys your report from the credit reporting company. Because most scoring models consider how recently and how often you have applied for credit, hard inquiries can affect your score. The CFPB notes that the sources do not specify exactly how much a single inquiry moves a score, and the effect will differ from person to person, so no specific number can be promised here.
Soft inquiries work differently. They include lender account reviews, prescreened offers, employment screenings, and your own requests to see your reports. Soft inquiries are shown only to you when you review your file, and they do not affect your scores at all. Checking your own credit report is a soft inquiry, so there is no reason to avoid pulling your file to investigate.
When a company is legally allowed to pull your report
The Fair Credit Reporting Act, or FCRA, limits who can look at your credit report and under what circumstances. For credit card companies specifically, the CFPB explains that a card issuer can pull your report if you are already its customer, or if you filled out an application with it. That second condition is the key one: when you submit an application, you are generally giving your permission for the pull.
If you are not a customer of the company and you never submitted an application, the company pulling your report is outside the permitted purposes the FCRA describes. That does not automatically mean something criminal happened. You may have forgotten a brief application you started online, or a business may operate under a parent company name that looks unfamiliar. But it is a concrete reason to investigate further, not something to ignore.
Start by comparing the inquiry against your own records. Note the date and the exact company name shown on your report, then check your email for application confirmations, your bank statements for account-opening fees, and any paper mail from lenders around that period. A specific date and name give you something to search against.
How to tell whether the inquiry points to identity theft
An unrecognized hard inquiry is one symptom of identity theft, where someone applies for credit using your personal information. But the inquiry itself is rarely the whole picture. The CFPB points out that identity theft can also produce incorrect accounts on your report, so when you investigate an unfamiliar inquiry, review the full report, not just the inquiries section.
Look for accounts you did not open, balances you do not recognize, or personal information like an address you have never lived at. Any of those details alongside an unfamiliar hard inquiry raises the concern from a minor puzzle to something that needs prompt action.
You are entitled to free credit reports from all three nationwide credit reporting companies, Experian, Equifax, and TransUnion. The CFPB notes that since the COVID-19 pandemic, these companies have made reports available every week on request, not just once per year. Pulling all three lets you see whether the inquiry shows up on one file, two files, or all three, which can help you understand how widespread the problem might be.
If you suspect identity theft after reviewing your reports, the CFPB points to IdentityTheft.gov as the federal government's dedicated resource for reporting it and working through recovery steps. The FTC runs that site, and it walks you through a personalized recovery plan based on your situation.
How to dispute an inquiry or any error you find
Federal rules give you the right to dispute information on your credit report that you believe is inaccurate. The process starts with a written dispute to the credit reporting company that shows the problem. The CFPB outlines exactly what your letter should include:
- Your full name, address, and phone number
- The report confirmation number, if you have one
- Each disputed item, along with any associated account number
- A clear explanation of what is wrong and why
- A request that the item be removed or corrected
- A copy of your report with the disputed items circled or highlighted
Include copies of any supporting documents, not originals, and keep the originals for your own records. Send the letter by certified mail with a return receipt so you have written proof of when it arrived. That record matters if you need to follow up later.
You should also contact the company that furnished the information, meaning the lender or other business that reported the inquiry or account to the bureau. That company has its own legal obligations to correct data it reports inaccurately. The CFPB has stated in a court filing that under federal law, companies must delete disputed information they cannot verify. Contacting both the reporting company and the furnisher gives you the strongest position.
The sources available here do not specify whether an inquiry itself can be disputed as a standalone error or exactly how long a dispute investigation takes. For those details, check the current guidance directly from the CFPB and the FTC, both of which maintain up-to-date pages on the dispute process.
Four questions to work through before you act
Before sending any letters or making any calls, it helps to slow down and answer a short set of questions. The answers will shape what you do next and keep you from skipping a step that matters.
Did you apply for credit with this company, or are you already its customer? If the answer is yes to either, the inquiry is likely routine, even if the company name looks slightly different from what you expected. Many lenders operate under a parent company or a trade name that does not match what you signed up for.
Does your report label this as a hard or soft inquiry? Soft inquiries do not affect your scores and are not visible to outside lenders. If the entry you spotted is actually a soft inquiry, the urgency level drops considerably, though you may still want to understand where it came from.
Does the same inquiry appear on all three reports? Pulling reports from Experian, Equifax, and TransUnion separately lets you compare. An inquiry that shows on one bureau but not the others can sometimes narrow down where an application was submitted.
Does your report show any accounts you do not recognize? As the CFPB notes, the CFPB has cited estimates suggesting one in five Americans has an error on at least one credit report. An unfamiliar account alongside an unfamiliar inquiry should be treated as a priority, not a footnote.
Working through these questions in order keeps the process organized and helps you decide whether you are dealing with a forgotten application, a reporting mistake, or something more serious. None of those outcomes is obvious from the inquiry line alone, and the difference between them determines what your next step should be.
Please seek a professional. This article is general information, not financial, tax or insurance advice. Please seek a licensed financial, tax or insurance professional about your own situation.
