You pull your credit report and there it is: a debt you never incurred, a late payment that isn't yours, or a collection account under your Social Security number but with someone else's name attached. Your pulse quickens. You know this isn't yours. But how do you prove it? And what happens if the credit bureau doesn't believe you?
This scenario plays out thousands of times a year. Identity theft, data breaches, sold-off debts, merged databases, simple human error. The reasons vary. But the legal framework doesn't. The Fair Credit Reporting Act (FCRA) lays down hard rules about what credit bureaus and debt furnishers must do when they get your dispute, and what happens when they don't.
Here's what you need to know.
How do credit report errors happen?
The credit reporting system runs on a simple principle: data flows in from furnishers (banks, credit card companies, collection agencies), and the three major bureaus (Equifax, Experian, TransUnion) compile it into reports and sell access to lenders.
That system works only if the data is accurate. It usually isn't.
Credit bureaus don't actually verify most of the information they receive. They match data using algorithms that look for name, Social Security number, date of birth, and address. A close enough match counts. Typos, common names, similar addresses, and outdated information don't trigger a second look. Someone with your name in your old zip code can end up on your report. This is called a mixed file, and it's one of the most damaging types of credit report error. A typo in your SSN during data entry can create a permanent record you never signed up for.
Furnishers (the companies that report the debt) have their own problems. They merge accounts, sell debt, create new entries in new systems, and often have no incentive to get it right. A collection agency buying debt in bulk may not have proper documentation. A bank's old account data may linger in a system long after you've paid it off. These records get reported to bureaus, who accept them at face value.
Add data breaches, fraud, and simple human incompetence, and the result is predictable: millions of Americans have errors on their credit reports right now.
What the FCRA requires from credit bureaus
The FCRA is nearly 50 years old, passed in 1970. It's the only federal law that regulates credit reporting. And while it doesn't guarantee accuracy, it does require two critical things.
First, credit bureaus must use reasonable procedures to ensure accuracy. That's the standard in 15 U.S.C. § 1681e(b). "Reasonable procedures" is deliberately vague, which is why lawsuits happen. Courts have interpreted it to mean: if a piece of information is inherently questionable (a debt listed twice, an account with a different address), the bureau should verify it before reporting it. Many bureaus ignore this obligation.
Second, when you dispute an error, the bureau must investigate it within 30 days. That's 15 U.S.C. § 1681i. Investigation means contacting the furnisher, asking them to verify the information, and examining their response. If the furnisher can't verify it, the bureau must delete it. If the furnisher says it's accurate and provides documentation, the bureau can reinstate it. The key: verification must actually happen. A rubber stamp doesn't count.
Furnishers have their own obligation under 15 U.S.C. § 1681s-2(b). When a bureau asks them to verify disputed information, furnishers must respond promptly and conduct a reasonable investigation. If they can't verify it, they must tell the bureau. If they know the information is inaccurate, they must tell the bureau and all other reporting agencies.
In theory, this system protects you. In practice, it often fails.
What happens when you dispute an error?
You have the right to dispute any inaccuracy in your credit report, in writing. You send a letter (or use the bureau's online dispute portal) describing the error and asking for removal. The law requires the bureau to investigate within 30 days.
What "investigation" actually means is where things fall apart.
A real investigation would involve the bureau contacting the furnisher, asking for documentation of the debt, reviewing loan agreements or payment records, and comparing them to what's being reported. If the furnisher can't produce proof, the debt comes off.
What actually happens is often different. The bureau sends a form letter to the furnisher asking them to verify. The furnisher, usually an automated system, checks its own database and says "verified." No documents are reviewed. No judgment is made. The bureau accepts this and tells you the information is accurate. Thirty days pass. You get a letter saying your dispute was denied. End of story.
This streamlined process happens millions of times per year. It's efficient for bureaus. It's terrible for accuracy.
If you dispute and the bureau actually removes the error, congratulations. If they don't, you have options.
When does a credit report error become a legal claim?
A credit report error becomes a legal claim when two things happen: (1) you dispute it in writing, and (2) the bureau fails to correct it. At that point, you may have a lawsuit under the FCRA.
The claim isn't based on "having a mistake on your report." Courts understand that errors happen. The claim is based on negligence or recklessness in the investigation process.
Under 15 U.S.C. § 1681i, a bureau is liable if it fails to conduct a reasonable reinvestigation of a disputed item. Reasonable means what a diligent bureau actually does. If a bureau denies your dispute without contacting the furnisher, that's unreasonable. If it contacts the furnisher only once and accepts their response without asking for documentation, that's unreasonable. If it ignores obvious red flags (like a debt listed twice, or an amount that doesn't match your records), that's unreasonable.
The case doesn't require you to prove the debt is fake. You only have to show the bureau didn't investigate properly.
Some cases are stronger than others. Identity theft cases are strong (you have police reports, credit monitoring alerts, no connection to the creditor). Cases involving duplicate listings or clear data errors are strong (the debt appears twice, or the balance is clearly wrong). Cases involving minor discrepancies are weaker (a misspelled street name, an old address you used years ago).
If your case is strong and the bureau denies your dispute without a reasonable investigation, you have grounds to sue.
What can you recover in an FCRA lawsuit?
This is where the FCRA gets powerful. You can recover several types of damages.
Actual damages. This is real money you lost because of the error. A denied mortgage application due to a false collection account. Higher interest rates on a car loan because your credit score was damaged. Denied credit card approval. Out-of-pocket costs like credit monitoring you bought after discovering the error. You have to prove the connection between the error and your financial harm, but courts understand that credit report errors cause real damage.
Statutory damages. Even if you can't prove actual damages (maybe you haven't tried to get credit since the error appeared), you can still recover up to $1,000 per violation. This is set by statute, not by what you can prove. A single error investigated improperly is one violation. Multiply that across three bureaus or if the error persisted through multiple dispute cycles, and the number grows.
Punitive damages. If the bureau's conduct was reckless or intentional, you can ask the court for extra damages to punish them. Courts rarely grant this, but repeated failures to correct errors, or evidence that a bureau knowingly used unreasonable procedures, can support a punitive award.
Attorney's fees and costs. This is the provision that makes FCRA lawsuits possible for consumers. If you win, the defendant pays your attorney's fees. If you lose, you pay nothing. This is called fee-shifting, and it's built into the FCRA. It exists because Congress recognized that individuals can't afford to sue credit bureaus on their own dime, so the law shifts the financial burden to the wrongdoer.
In practice, this means a consumer with a wrongly reported collection account and modest actual damages (say, $5,000 in higher interest rates) can still have a valuable case. Add statutory damages, and the case becomes worth settling or litigating.
Do I need to pay an FCRA lawyer?
No. Reputable FCRA attorneys work on contingency. You pay nothing upfront. You pay nothing if you lose. If you win or settle, the defendant pays your attorney's fees.
This is how the FCRA is supposed to work. The statute's fee-shifting provision exists precisely so that people who can't afford a lawyer can still enforce their rights.
Be skeptical of any attorney who asks for money upfront or who quotes you a percentage of recovery. The FCRA allows for attorney's fees to be paid by the defendant, and that's how ethical FCRA firms structure their work.
When you contact a firm, ask directly: Do I pay anything upfront? Do I pay anything if we lose? The answer should be no to both. If it isn't, look elsewhere.
What should I do right now?
If you have a credit report error, follow these steps.
Pull your reports. Get copies from all three bureaus (Equifax, Experian, TransUnion). You're entitled to one free copy per year at annualcreditreport.com. Review them carefully. Look for accounts you don't recognize, balances that don't match your records, duplicate listings, and old accounts that should have fallen off.
Dispute in writing. Don't call. Don't use an online portal (though you can also do that). Send a written letter to the bureau describing the error specifically. Say what the error is, why it's wrong, and ask for removal. Keep a copy. This creates a paper trail and shows the bureau you're serious.
Document everything. Save copies of your dispute letters, the bureau's responses, any documentation you have about the account (emails, account statements, payment confirmations), and anything showing the error (like a police report if it's identity theft). If you dispute multiple times and the error persists, each dispute and denial creates a record that strengthens your case.
Wait 30 days. The bureau has 30 days to investigate and respond. If they don't, that's another violation. If they do respond but deny your dispute without a real investigation, move to the next step.
Contact an attorney if denied. If the bureau denies your dispute and you believe the error is legitimate, reach out to an FCRA attorney. Many offer free consultations. Bring your documentation. They'll review your case and tell you whether you have grounds to sue. If you do, they'll take your case on contingency. If you don't, they'll tell you that too.
Don't assume a denied dispute means you're stuck. Bureaucratic denials aren't the same as accurate investigations. A lawyer can tell the difference.
Credit report errors are more common than people realize. Data systems fail. People make mistakes. Fraud happens. The FCRA exists because Congress recognized that credit reports shape access to credit, housing, and financial life itself. If bureaus get them wrong, there have to be consequences.
If you have an error that the bureau won't fix, you have legal rights. The question isn't whether the law protects you. It does. The question is whether you'll enforce those rights.
