A Company Pulled Your Credit Without Permission. That Is a Federal Law Violation — and Those Inquiries Can Be Removed.
The Fair Credit Reporting Act does not allow any company to access your credit report as a hard inquiry without a legally recognized permissible purpose. If you found a hard inquiry on your Experian, Equifax, or TransUnion report from a company you never authorized — a dealership that sent your application to lenders without your approval, a creditor who pulled your report without your knowledge, or a company you've never heard of at all — that pull violated federal law. You have the right to dispute it. We know exactly how.
Free consultation. No credit card required. One flat fee starting at $199 — no monthly charges, ever.
Trust indicators
ForbesBloombergCNBCBusiness InsiderMarketWatchNerdWallet
Someone Accessed Your Private Financial Information Without Your Permission. Here Is What That Means — and What You Can Do About It.
Your credit report is not a public document. It is private financial information that federal law — specifically the Fair Credit Reporting Act, codified at 15 U.S.C. § 1681 — regulates with precision. Every company that accesses your credit report as a hard inquiry must have a specific, legally recognized reason for doing so. That reason is called a permissible purpose, and without it, the pull is a violation of federal law.
When you find a hard inquiry on your Experian, Equifax, or TransUnion report from a company you never authorized, one of three things happened. The company pulled your credit for a transaction you didn't initiate and never agreed to. The company pulled your credit in excess of what you actually authorized — a dealership sending your application to fifteen lenders when you approved one, for example. Or the company pulled your credit as a direct result of identity theft, using your stolen information to access a report you had no knowledge of.
All three scenarios share the same legal foundation. The company lacked a permissible purpose. The pull was unauthorized. And under the FCRA, unauthorized hard inquiries are disputable and removable — not after two years, not eventually, but through a legally grounded dispute process that we have been executing successfully for over a decade.
Pain Card 1 — The Mystery Company:
There is a hard inquiry on your report from a company you have never heard of.
You pull your credit and find an inquiry from a business name you don't recognize. You've never applied there. You've never called them. You've never visited their location. You have no idea how they accessed your credit report. This is the most common scenario we see for identity theft victims — but it also happens when companies use subsidiaries, parent entities, or third-party processors that appear under different names than the lender you may have interacted with. Whether the source is identity theft or a pull under a name you don't recognize, the dispute starts from the same place: this company had no permissible purpose to access your report.
Pain Card 2 — The Dealership Submission:
You authorized one lender. The dealership sent your application to twenty.
You filled out a credit application at a car dealership. You may have specifically asked them to limit where they sent it. They submitted it to every lender in their network simultaneously — each of whom pulled your Experian, Equifax, and TransUnion report independently. You authorized one pull. You received twenty. The nineteen pulls you didn't authorize each lacked a permissible purpose for your specific authorization — and each one is individually disputable.
Pain Card 3 — The Pre-Authorization Pull:
A company ran your credit before you formally applied for anything.
You inquired about a product or service. You browsed a website. You asked for a quote. You had a preliminary conversation. And then you found a hard inquiry on your credit report from that company — pulled before you ever submitted a formal application or gave explicit authorization for a credit check. A hard inquiry requires a specific permissible purpose at the time of the pull. "The customer seemed interested" is not one of them. Neither is "we were checking to see if they'd qualify." These pre-authorization pulls are among the most clearly actionable unauthorized inquiries we handle.
Pain Card 4 — The Identity Theft Pull:
Your information was stolen. Now there are hard inquiries you had no part in creating.
Someone used your name, Social Security number, and identifying information to apply for credit without your knowledge. Every lender they applied to pulled your credit report — creating hard inquiries from transactions you never initiated, for accounts you never opened, with companies you never contacted. These are not just unauthorized. They are fraudulent. And they carry the strongest legal grounds for removal of any category we handle — because the permissible purpose argument is not just weak, it is nonexistent.
Section Closing Transition:
Here is the federal law that governs exactly what happened to you — and why it gives you the legal right to have every unauthorized inquiry removed.
The Fair Credit Reporting Act Is Specific About This — and It Is on Your Side
The Fair Credit Reporting Act — Section 604, codified at 15 U.S.C. § 1681b — establishes a defined list of permissible purposes that allow a company to access your credit report as a hard inquiry. The list is not vague. The law is not open to broad interpretation. Every company that pulls your credit must fit one of these categories at the time of the pull:
You initiated a credit transaction with them — a loan application, a credit card application, a lease application — and you authorized the pull as part of that transaction
A court order or federal grand jury subpoena requires the pull
A government agency is conducting an investigation under specific federal statutes
You authorized the pull in writing for employment screening, and you are in a position specifically permitted under state and federal law
A creditor you already have a relationship with is conducting a review of that existing account
That is the list. It is closed. If the company that pulled your credit does not fit one of those categories at the moment of the pull — if you had not initiated a transaction, had not authorized the specific pull, or had not given informed consent to a hard inquiry — the pull was made without a permissible purpose. That is an FCRA violation. And it is the legal foundation for a dispute that demands removal.The word "unauthorized" in the context of hard inquiries does not mean "I don't remember agreeing to this." It has a specific legal meaning: the company lacked a statutory basis for accessing your private financial information. When that is true, the FCRA gives you the right to dispute the inquiry and require the credit bureau to investigate whether the permissible purpose actually existed.
The Most Common Sources of Unauthorized Hard Inquiries — and Why Each One Is Legally Challengeable
Car dealerships submitting to multiple lenders.
The most common source of unauthorized hard inquiries in the United States. You authorize one application. The dealership submits it to ten, fifteen, or twenty lenders. Each lender pulls your credit independently. Every pull beyond what you specifically authorized lacks permissible purpose.
Lenders and brokers who pulled before you applied.
Some lenders and mortgage brokers pull credit during preliminary conversations — before a formal application is submitted and before explicit authorization is given. A hard pull requires authorization at the time of the pull, not the hope that an application will follow.
Companies using your information from an identity theft incident.
A stolen Social Security number and date of birth are enough for a fraudulent application to trigger a hard inquiry. Every pull that resulted from someone else using your information had no permissible purpose — you did not initiate the transaction and you did not authorize the pull.
Creditors pulling your report for unauthorized account reviews.
Creditors have the right to review your credit report for existing account management — but that review right is not unlimited. Pulls outside the permitted scope of account review, or pulls for accounts that do not exist, may lack permissible purpose.
Online services and subscription platforms.
Some online services pull hard inquiries as part of sign-up processes without making the nature of the pull clear to the consumer. A hard pull that was not explicitly disclosed and authorized as a hard pull — as opposed to a soft pull — may lack the informed consent required for permissible purpose.
Employers in states or industries where credit checks are restricted.
Some states and cities — including New York City — restrict employer credit checks significantly. An employer credit pull that falls outside the permitted exceptions lacks permissible purpose and may violate both federal and local law simultaneously.
This Service Is Built for You If:
You found a hard inquiry on your Experian, Equifax, or TransUnion report from a company you never authorized to pull your credit
A car dealership submitted your application to multiple lenders beyond what you specifically approved
A lender or broker pulled your credit before you formally applied or gave explicit authorization
You are a victim of identity theft and fraudulent hard pulls are appearing on your report from accounts you never opened
You found an inquiry from a company name you don't recognize and have no relationship with
A creditor, landlord, or employer pulled your credit in a situation where you believe they lacked the legal right to do so
You have already disputed the unauthorized inquiry and received a "verified" response from the bureau — but the legal argument around permissible purpose was never made
This Is NOT for You If:
You authorized every hard inquiry on your report — you genuinely applied for credit with each company and gave explicit, informed consent to each pull. We are transparent about this in the free consultation: if the legal grounds for dispute don't exist, we tell you before you spend anything
You are looking to remove hard inquiries that were legitimately authorized but that you simply wish hadn't happened
You want to remove collections, late payments, charge-offs, or other negative items — we remove hard inquiries exclusively
How to Tell If a Hard Inquiry on Your Report Was Unauthorized — and What Happens in the Free Consultation
Not every unfamiliar hard inquiry is necessarily unauthorized. Some authorized inquiries appear under names that don't match the lender you applied with — subsidiary names, parent company names, or third-party processor names. The free consultation is where we work through this together.
What we look at in the consultation:
The name and type of the company that pulled your credit, compared against your actual application history. The date of the pull and whether any credit transaction, inquiry, or contact with that company occurred around the same time. Whether the pull appeared across one bureau or all three — because identity theft pulls often appear on all three simultaneously while legitimate single-lender pulls may only appear on the bureau that lender uses. Whether you were in a period of active dealership shopping, home buying, or credit application activity that might explain authorized pulls under unfamiliar names.
By the end of the consultation, you know exactly which inquiries on your report were unauthorized, which have the strongest legal grounds for dispute, and what the realistic removal outcome looks like for your specific situation. There is no obligation to proceed after the consultation. The information is yours regardless of what you decide.
How We Remove Unauthorized Hard Inquiries — The Complete Process
Step 1 — Free Unauthorized Inquiry Analysis (15 Minutes):
We pull up your Experian, Equifax, and TransUnion reports together and identify every hard inquiry that appears on each bureau. We assess each one against the permissible purpose standard — determining which pulls were unauthorized, which had no legal basis for accessing your report, and which have the strongest grounds for removal. If you've already received a "verified" response from a bureau after a prior dispute, we assess that response specifically and explain what the next step looks like.
Step 2 — Custom FCRA Dispute Letters Built for Unauthorized Pulls:
The legal argument for removing an unauthorized inquiry is fundamentally different from a standard "I don't recognize this" dispute. Every letter we build cites 15 U.S.C. § 1681b specifically — the FCRA's permissible purpose provision — and frames the dispute around the absence of lawful authorization at the time of the pull. This is the argument that requires the bureau to investigate whether the company had a legal right to access your report — not just confirm that the pull happened. These letters are submitted to every bureau carrying the unauthorized inquiry within 24 hours of your signup.
Step 3 — Bureau Response Monitoring and Escalation:
Credit bureaus have 30 days under the FCRA to investigate and respond. We monitor every response. When the bureau removes the inquiry, we document the result. When the bureau returns a "verified" response, we assess whether the response reflects a genuine investigation of the permissible purpose question — and escalate with a targeted follow-up built around that specific legal distinction. "Verified" from a bureau means the pull happened. It does not mean the pull was legal. Those are two different questions and we push until both are answered correctly.
Step 4 — Unauthorized Inquiries Removed. Score Recovers. Your Report Reflects the Truth.
As unauthorized inquiries are deleted from your Experian, Equifax, and TransUnion reports, your credit score recovers. More importantly, your credit report begins to reflect your actual credit behavior — not the activity of companies that accessed your private financial information without legal justification. Most clients see their first removals within 14 to 30 days, with full results delivered within 30 to 90 days.
How It Works Page]
→ See the complete process
Clients Who Had Unauthorized Inquiries — and What Happened When We Disputed Them
Case Study — Diana R. | Houston, TX | Elite Plan — $499:
Diana found 34 hard inquiries on her Equifax, Experian, and TransUnion reports from a period of several months — inquiries from companies in states she had never visited, for products she had never applied for, under names she had never encountered. The pattern was clear: her personal information had been used in an identity theft incident of significant scope. Every one of those 34 pulls had been made without her authorization, using her information, without any permissible purpose under the FCRA.We built dispute letters for every one of the 34 fraudulent inquiries, citing the permissible purpose violation specifically, and submitted to all three bureaus simultaneously. The identity theft documentation — an FTC identity theft report — was included as supporting evidence. Within 61 days, all 34 inquiries had been permanently removed from all three bureaus. Her score climbed from 574 to 686 — a 112-point recovery. The report that once showed 34 unauthorized pulls now reflects a credit history that actually belongs to her.
"Someone used my information everywhere. Thirty-four hard inquiries from companies I'd never heard of, in states I'd never been to. Inquiry Removal built legal disputes around the absence of permissible purpose for every single one and had all 34 removed in 61 days. My score went up 112 points. I finally feel like my credit is mine again."
— Diana R. | Houston, TX ⭐⭐⭐⭐⭐
Individual results vary based on each client's specific credit report, inquiry type, and bureau response.
Case Study — Thomas R. | Charlotte, NC | Standard Plan — $299:
Thomas had 14 hard inquiries on his credit report from a car dealership visit during which the finance manager submitted his application to lenders he had specifically asked not to receive it. The dealership had 14 lenders in their network. Thomas authorized one. Equifax returned "verified" on all 14 when Thomas filed his own dispute — because Equifax confirmed that the pulls had happened, not that they had been authorized. Thomas came to us after those two failed disputes, believing his options had been exhausted.We built follow-up disputes framed entirely around the permissible purpose standard — specifically that authorization for one lender does not constitute authorization for fourteen — and submitted to all three bureaus. All 14 inquiries were removed from Thomas's Equifax, Experian, and TransUnion reports within 52 days. His score climbed 68 points.
"Equifax said verified twice. I thought it was over. Inquiry Removal explained that verified means the pull happened — not that it was authorized. Those are two different things legally. All 14 gone in 52 days. The thing I needed to know is that a verified response is not the end of the road."
— Thomas R. | Charlotte, NC ⭐⭐⭐⭐⭐
Individual results vary based on each client's specific credit report, inquiry type, and bureau response.
Additional Testimonial — Mystery Company Inquiry:
"I found a hard inquiry from a company I had never heard of. I had no idea who they were or why they had my credit report. Inquiry Removal pulled up my report with me, looked at the inquiry date, looked at the company type, and immediately identified it as a pull without any legitimate permissible purpose. One dispute letter citing Section 604 of the FCRA. The inquiry was removed from all three bureaus in 28 days. I didn't even know I had that right."
— Patricia M. | Seattle, WA ⭐⭐⭐⭐⭐
Individual results vary based on each client's specific credit report, inquiry type, and bureau response.
Unauthorized Hard Inquiry Questions We Answer Every Day
Can unauthorized hard inquiries be removed from my credit report?+
Yes — unauthorized hard inquiries can be disputed and removed from your Experian, Equifax, and TransUnion credit reports under Section 604 of the Fair Credit Reporting Act, 15 U.S.C. § 1681b. The legal basis for removal is the absence of permissible purpose — the statutory requirement that any company accessing your credit as a hard inquiry must have a specific, legally recognized reason for doing so. When that reason doesn't exist, the inquiry is legally challengeable and removal is the appropriate outcome when the dispute is correctly constructed around that permissible purpose argument.
What is permissible purpose and how does it apply to my unauthorized inquiry?+
Permissible purpose is the legal standard under Section 604 of the FCRA that governs when a company may access your credit report as a hard inquiry. The law provides a defined list of circumstances — initiated credit transactions, court orders, existing account reviews, and a few others — that constitute valid permissible purpose. A company that pulls your credit outside these circumstances has violated the FCRA. The permissible purpose argument is the legal foundation of every unauthorized inquiry dispute we build — because it shifts the dispute from "I don't recognize this" to "this company had no legal right to access my credit report."
What should I do if I find a hard inquiry from a company I don't recognize?+
If you find a hard inquiry from a company you don't recognize, the first step is pulling your full Experian, Equifax, and TransUnion reports to confirm the inquiry appears across all three or just one bureau — identity theft pulls often appear on all three simultaneously. Then check your application history around the date of the pull for any credit transaction, inquiry, or contact with a company that might appear under a different name. If no authorized transaction matches the pull, the inquiry likely lacks permissible purpose and qualifies for dispute. Our free consultation walks through this process for your specific report and tells you which inquiries have the strongest legal grounds before you spend anything.
What does "verified" from a credit bureau mean when I dispute an unauthorized inquiry?+
A "verified" response from Experian, Equifax, or TransUnion means the bureau confirmed that the credit pull occurred — not that the pull was legally authorized. These are two distinct legal questions, and the bureau's initial dispute process primarily answers the first one. When a bureau verifies that a pull happened without investigating whether the pulling company had a permissible purpose for accessing your report, that response is legally incomplete. The correct escalation is a follow-up dispute specifically challenging the permissible purpose of the pull — which is a different legal argument than the one most initial disputes make, and one that bureaus cannot resolve with the same automated verification response.
Is it illegal for a company to pull your credit without permission?+
Yes — pulling a credit report as a hard inquiry without a permissible purpose as defined under 15 U.S.C. § 1681b is a violation of the Fair Credit Reporting Act. The FCRA provides both individual consumers and the Federal Trade Commission with enforcement tools against companies that access credit reports without lawful purpose. Consumers whose credit was pulled without permissible purpose may have the right to dispute the inquiry and seek its removal, and in some cases may have additional legal remedies under the FCRA's civil liability provisions. We focus on the dispute and removal process — any additional legal remedies should be discussed with an attorney specializing in consumer protection law.
Can a company pull your credit without you knowing?+
Yes — hard inquiries can be placed on your credit report without your knowledge when a company accesses your report without your authorization. This is how most identity theft-related hard inquiries appear — the person whose information was stolen has no knowledge of the pull until they review their credit report. It is also how some dealership submissions appear — you authorized one lender and the dealership submitted to fifteen without telling you the scope of what they were doing. Reviewing your credit reports regularly at AnnualCreditReport.com is the most reliable way to identify unauthorized pulls as they appear.
How long do unauthorized hard inquiries stay on my credit report?+
Unauthorized hard inquiries, like all hard inquiries, remain on your credit report for two years if they are not successfully disputed and removed. The critical distinction is that unauthorized inquiries — those lacking permissible purpose under the FCRA — do not have to remain for two years. They can be disputed and removed before that window closes when the dispute correctly establishes the absence of lawful authorization. Legitimate authorized inquiries, by contrast, generally cannot be removed before the two-year window regardless of any dispute filed.
What is the difference between an unauthorized hard inquiry and an inaccurate hard inquiry?+
An unauthorized hard inquiry is one that was pulled without a legally permissible purpose — the company had no legal right to access your credit at all. An inaccurate hard inquiry is one that appears on your report due to a data error — the pull may have been legitimate but is being incorrectly attributed to you rather than the person who actually authorized it. Both types are disputable under the FCRA, but the legal argument differs. An unauthorized inquiry dispute challenges the permissible purpose of the pull. An inaccuracy dispute challenges the attribution of the pull. Both can result in removal when the dispute is correctly constructed — our free consultation identifies which argument applies to each inquiry on your specific report.
Can I dispute an unauthorized inquiry that a credit bureau already verified?+
Yes — a "verified" response from a credit bureau is not legally final and does not exhaust your dispute rights. The FCRA requires bureaus to conduct a reasonable investigation of each dispute, which includes investigating the permissible purpose of the pull — not just confirming that the pull happened. When an initial dispute does not frame the permissible purpose argument specifically, the bureau's automated system processes it as a verification of the inquiry's existence rather than an investigation of its legality. A follow-up dispute built around the permissible purpose standard triggers a different reinvestigation and frequently produces a different result.
What FCRA rights do I have against a company that pulled my credit without authorization?+
Under the Fair Credit Reporting Act, consumers have the right to dispute any inaccurate or impermissible item on their credit report, including unauthorized hard inquiries. The FCRA also provides civil liability provisions — 15 U.S.C. § 1681n and § 1681o — that allow consumers to seek actual damages, statutory damages, and attorney's fees from companies that willfully or negligently violate the Act, including by pulling credit without a permissible purpose. The dispute and removal process we provide addresses the inquiry on your credit report. If you believe you may have additional legal claims against a company that pulled your credit without authorization, we recommend consulting with a consumer protection attorney to evaluate those options separately.
A Company Violated Federal Law by Accessing Your Credit Without Permission. You Have the Right to Have That Inquiry Removed.
This is not a gray area. The Fair Credit Reporting Act is specific about when a company may access your credit report and what happens when they don't meet that standard. An unauthorized hard inquiry — from a dealership that exceeded your authorization, a company you've never heard of, an identity thief using your information, or any other source that lacked a legally permissible purpose — is disputable, challengeable, and removable.
The free consultation is fifteen minutes. We review your Experian, Equifax, and TransUnion reports together, identify every inquiry that lacks a permissible purpose, and tell you exactly what the dispute process looks like for your specific situation — before you spend a single dollar. If a bureau has already returned a "verified" response, we tell you what the escalation looks like and whether the permissible purpose argument was made correctly the first time.
Get My Free Unauthorized Inquiry Analysis
Download the Unauthorized Inquiry Dispute Letter Template →
No credit card required. No obligation. One flat fee starting at $199 — paid once, never again. 100% money-back guarantee if no inquiries are removed within 90 days.
Supporting Testimonial:
"I found an inquiry from a company I had absolutely no relationship with. Inquiry Removal pulled up the report with me, identified the date, matched it to nothing in my application history, and built a dispute letter citing the exact FCRA provision that applied. Gone in 28 days. I had no idea that 'I didn't authorize this' was a legally specific argument that bureaus are required to investigate. Now I do."
— Patricia M. | Seattle, WA ⭐⭐⭐⭐⭐