When you apply for a loan and the lender approves you at a higher rate than you expected, federal law may require that lender to hand you a written notice explaining why. That notice should include the actual numerical credit score the lender used to make its decision. Many borrowers glance at the number, fold up the paper, and move on. But the document contains more than a score, and knowing what should be in it helps you catch a gap before it becomes a problem.
Which rules require the disclosure
The Fair Credit Reporting Act, as amended by section 1100F of the Dodd-Frank Act, requires a creditor that uses a credit score to disclose that score and certain related information whenever it sends an adverse action notice or a risk-based pricing notice. The requirement is specific: the lender must disclose the score it actually relied on, not a general description of how scoring works.
The mechanics of risk-based pricing notices are spelled out in Subpart H of Regulation V, which implements the Fair Credit Reporting Act. That subpart covers scope under section 1022.70, general requirements under 1022.72, content, form, and timing under 1022.73, and exceptions under 1022.74. The Consumer Financial Protection Bureau also publishes model forms for risk-based pricing and credit score disclosure exception notices as Appendix H to 12 CFR Part 1022. Those model forms are available in both English and Spanish as PDF and DOC files, and the CFPB's model forms and disclosures page was last updated December 12, 2024. If you want to see what a compliant notice looks like, those forms are your clearest reference point.
Two compliance dates are worth knowing. Adverse action notices had to include the new credit score disclosure starting July 21, 2011. Revised risk-based pricing notice rules had to be followed starting August 15, 2011. Those dates explain why notices printed before and after that period can look different from each other, even when they come from the same type of lender.
When a risk-based pricing notice applies
A risk-based pricing notice generally applies when an approved borrower receives a higher interest rate than the one advertised, or a higher rate than other borrowers might get for the same product. The idea behind the notice is straightforward: if your credit information pushed your price up, you have a right to know that.
Not every lender sends a document labeled as a risk-based pricing notice. Some send a different document that is designed to satisfy the same legal obligation. According to guidance on how the two notice types differ, borrowers should check whether the document they received is the standard form or an alternative. If it is an alternative, comparing it against the CFPB model forms gives you a solid baseline for judging whether the alternative covers the required ground.
One additional wrinkle: the Credit Score Exception Notices that existed under the Risk-Based Pricing Rule were not changed when the 2011 requirements took effect. That means lenders could keep using the older exception format. As a result, the notice in front of you might follow the older exception layout or a newer one, depending on when and how the lender built its compliance process.
What to check when a notice arrives
Start with the most basic question: does the notice show a specific numerical credit score? The statute requires the actual number the lender used. A notice that describes credit scoring in general terms but leaves the number blank may not meet the disclosure requirement described in the final credit score disclosure rules published by the Federal Reserve and FTC.
Next, look at the rate you were offered. Does it differ from the rate advertised, or from what the lender's materials suggest a typical borrower would receive? If so, the notice should explain the connection between your credit information and that pricing difference. A notice that approves you at a higher rate but says nothing about why the rate is higher may fall short of what the rule requires.
Then check for reason codes. Regulation B sample adverse action notices were revised to allow up to nine reason codes. These codes are short explanations of the factors that most affected the score or the decision. A notice that lists more than nine codes, or that lists codes so vague they communicate nothing, is worth a second look. Comparing the codes in your notice against the CFPB model forms can help you decide whether what you received matches the expected format.
Finally, ask whether the document is a traditional risk-based pricing notice or an alternative format meant to satisfy the same obligation. The sources available do not spell out how an alternative format must be structured internally, so the safest comparison is against the Appendix H model forms. If the alternative omits fields that appear in the model, that is a gap worth noting.
Your rights to the underlying report
Under 15 U.S. Code section 1681g, a consumer reporting agency must disclose the contents of your file on request. That is a separate right from anything in the loan notice itself. However, the law does not require the agency to include credit score information in that file disclosure. If you want the actual score, you need to ask for it through a different channel, and the process for doing that is covered in CFPB and FTC guidance rather than in the file disclosure rules.
The same statute allows a consumer reporting agency to truncate the first five digits of your Social Security number on a file disclosure, as long as you ask and provide proof of identity. The agency is not required to show your full Social Security number in the disclosure document, and many will omit most of it by default.
One more detail on report access: users of consumer reports, meaning businesses that pull your report, must be able to identify who requested the report. For employment-related requests, that identification covers the two years before your request. For other purposes, it covers the one year before your request. That window matters if you are trying to trace who has looked at your credit file and when.
What the available sources do not cover is equally important to acknowledge. They do not explain how to request a free copy of a report, how to dispute an error on a report, or what steps to take after receiving any of these notices. They also do not define what a credit score is, what numerical range a score uses, or which factors move a score up or down. For those questions, the CFPB and FTC publish separate guides that go into that detail directly. Treat the loan disclosure notice as a starting point, not a complete picture of your credit standing.
Please seek a professional. This article is general information, not financial, tax or insurance advice. Please seek a licensed financial, tax or insurance professional about your own situation.
