How to Obtain Someone’s Credit Report

Quick answer

• You generally cannot obtain someone else’s credit report without their explicit, written consent.
• Legitimate reasons for accessing a credit report include co-signing a loan, renting a property, or employment screening where legally permitted.
• Individuals can obtain their own credit reports for free annually from each of the three major credit bureaus.
• Authorized users on a credit card account may see the account’s activity reflected on their own credit report.
• There are strict legal penalties for unlawfully accessing someone’s credit information.

What to check first (before you act)

Your Legal Right to Access

Before attempting to obtain another person’s credit report, it’s crucial to understand if you have a legally permissible reason. Federal laws, such as the Fair Credit Reporting Act (FCRA), restrict access to credit reports to specific “permissible purposes.” These typically include:

• Credit Transactions: When extending credit, collecting on debt, or for credit monitoring.
• Employment: For screening prospective employees (with their written consent).
• Insurance: For underwriting insurance policies.
• Rental Agreements: For evaluating potential tenants.
• Legal Proceedings: As required by court order or subpoena.
• Government Licensing: For certain government-issued licenses.

If your reason doesn’t fall into one of these categories, you likely cannot legally obtain the report. Attempting to do so can result in severe penalties.

The Individual’s Consent

In most scenarios where a permissible purpose exists but isn’t inherently a transaction between you and the individual (like a landlord-tenant relationship), you will need the individual’s explicit, written consent. This consent form should clearly state what information will be accessed, why, and by whom. Without this documented permission, accessing their report is a violation of their privacy and federal law.

Your Relationship to the Individual

Your relationship with the person whose credit report you wish to access is a key factor. For instance, a spouse might have easier access to shared financial information, but this doesn’t automatically grant the right to pull a separate credit report without consent. Lenders, landlords, and employers have established processes for obtaining consent as part of their application or screening procedures.

Step-by-step (how to legally pull a credit report on someone)

1. Determine if you have a Permissible Purpose:

• What to do: Review the FCRA’s list of permissible purposes to see if your reason for needing the report is valid. Common examples include extending credit, employment screening, or renting property.
• What “good” looks like: You have a clear, documented reason that aligns with federal regulations.
• Common mistake: Assuming you have a valid reason when you don’t (e.g., curiosity, helping a friend without a formal agreement). Avoid this by thoroughly researching the FCRA or consulting legal counsel.

2. Obtain Written Consent:

• What to do: If your permissible purpose requires it, create a clear and comprehensive consent form that the individual must sign. This form should detail who is accessing the report, why, and what information will be viewed.
• What “good” looks like: A signed, dated consent form that meets all legal requirements for clarity and specificity.
• Common mistake: Relying on verbal consent or a vague written agreement. Avoid this by using a legally reviewed consent form that leaves no room for ambiguity.

3. Choose a Credit Reporting Agency (CRA):

• What to do: Identify which of the three major CRAs (Equifax, Experian, TransUnion) you will use, or a specialized agency if applicable for employment screening. You’ll need to establish a business relationship with them.
• What “good” looks like: You have a legitimate business need and have been approved by a CRA to access reports.
• Common mistake: Trying to access reports directly from a CRA without proper business credentials or permissible purpose approval. Avoid this by following the official application processes for CRAs.

4. Complete the CRA Application Process:

• What to do: Fill out the application provided by the CRA, providing documentation of your business identity, permissible purpose, and compliance with FCRA.
• What “good” looks like: Your application is approved, and you are granted access to the CRA’s services.
• Common mistake: Submitting incomplete or inaccurate information on the application. Avoid this by carefully reviewing all requirements and providing thorough, truthful details.

5. Initiate the Credit Report Request:

• What to do: Using the CRA’s portal or system, input the individual’s identifying information (name, address, Social Security number, etc.) and your authorized reason.
• What “good” looks like: The system accurately retrieves the requested credit report.
• Common mistake: Incorrectly entering the individual’s data, leading to a failed lookup or an incorrect report. Avoid this by double-checking all entered information for accuracy.

6. Review the Credit Report:

• What to do: Examine the report for accuracy, completeness, and relevance to your permissible purpose.
• What “good” looks like: You have a clear understanding of the individual’s creditworthiness as it pertains to your decision.
• Common mistake: Misinterpreting the information or making decisions based on incomplete data. Avoid this by understanding what each section of a credit report means and focusing only on factors relevant to your purpose.

7. Use the Information Responsibly:

• What to do: Use the credit report information solely for the stated permissible purpose and in compliance with all applicable laws.
• What “good” looks like: Your decision-making process is fair, legal, and based on the credit information obtained.
• Common mistake: Using the information for purposes other than what was consented to or legally allowed. Avoid this by adhering strictly to the permissible purpose and FCRA guidelines.

8. Secure and Dispose of the Report:

• What to do: Store the credit report securely to prevent unauthorized access and dispose of it properly (e.g., shredding) when it’s no longer needed.
• What “good” looks like: The report is protected from breaches and disposed of confidentially.
• Common mistake: Leaving reports in unsecured locations or discarding them in a way that allows unauthorized viewing. Avoid this by implementing robust data security and destruction policies.

What affects your score (plain language)

When you pull your own credit report, you’ll see information that directly impacts your credit score. Understanding these factors is key to improving your financial health.

• Payment History: This is the most significant factor. Consistently paying bills on time builds a positive history. Late payments, defaults, and bankruptcies severely damage your score.
• Amounts Owed (Credit Utilization): This looks at how much of your available credit you’re using. Keeping credit card balances low relative to their limits (ideally below 30%, and even better below 10%) is crucial.
• Length of Credit History: The longer you’ve had credit accounts open and in good standing, the better. This shows lenders you have a track record of managing credit over time.
• Credit Mix: Having a variety of credit types (e.g., credit cards, installment loans like mortgages or car loans) can be beneficial, as it demonstrates you can manage different kinds of debt responsibly.
• New Credit (Inquiries): When you apply for new credit, lenders often “pull” your credit report, resulting in a hard inquiry. Too many hard inquiries in a short period can indicate higher risk and lower your score.
• Public Records: Information like bankruptcies, tax liens, and civil judgments can appear here and significantly lower your score.

What NOT to do while improving credit:

While working on improving your credit score, avoid actions that could inadvertently harm it. Do not close old, unused credit accounts, as this can reduce your overall available credit and shorten your credit history length. Do not co-sign for loans unless you are fully prepared to be responsible for the debt, as the loan activity will appear on your report. Avoid applying for multiple new credit accounts simultaneously; space out applications over time.

Common mistakes (and what happens if you ignore them)

Mistake	What it causes	Fix
Unlawful Access to a Credit Report	Fines, lawsuits, and criminal charges.	Ensure you have a legitimate permissible purpose and written consent where required. Adhere strictly to FCRA guidelines.
Misinterpreting Credit Report Data	Incorrect decisions, unfair treatment of individuals.	Educate yourself on credit report components or consult with a credit professional. Focus only on data relevant to your permissible purpose.
Failing to Securely Store Credit Reports	Data breaches, identity theft for the individual.	Implement strong digital security measures and physical document shredding protocols. Limit access to authorized personnel only.
Using Information for Non-Permissible Purposes	Legal penalties, loss of access to credit reporting services.	Stick strictly to the stated and legally defined permissible purpose for which consent was obtained.
Not Verifying Identity Properly	Accessing the wrong report, potential for identity fraud.	Implement robust identity verification procedures when requesting a report, ensuring you have the correct individual’s details.
Ignoring Discrepancies on a Report	Allowing inaccurate information to persist, affecting future decisions.	Establish a process for reviewing reports for accuracy and disputing any errors with the relevant credit bureau.
Sharing Access to a CRA Account	Violation of terms of service, potential for misuse, loss of account access.	Never share your login credentials or allow unauthorized individuals to use your business’s access to credit reports.
Not Renewing Business Agreements with CRAs	Interruption of legitimate access to credit reports.	Keep track of renewal dates for your business agreements with credit reporting agencies and ensure all compliance requirements are met.
Assuming Consent is Permanent	Using outdated or revoked consent for new requests.	Re-verify consent periodically, especially if there’s a significant time lapse between requests or if the individual revokes permission.
Failure to Dispose of Reports Properly	Risk of sensitive information falling into the wrong hands.	Implement a clear policy for secure disposal of credit reports once they are no longer needed, such as cross-cut shredding.

Decision rules (simple if/then)

• If you are a landlord seeking to rent a property to a new tenant, then you likely have a permissible purpose to pull their credit report, because tenant screening is a recognized reason under the FCRA.
• If you are a friend wanting to help another friend get a loan, then you cannot pull their credit report without their explicit written consent, because personal curiosity or informal assistance is not a permissible purpose.
• If an individual applies for a credit card with you, then you can pull their credit report as part of the application process, because evaluating creditworthiness for a new account is a permissible purpose.
• If you have obtained a court order or subpoena for a credit report, then you can legally access it, because legal proceedings are a permissible purpose.
• If an individual has given you written consent to pull their credit report for a specific purpose (e.g., to co-sign a loan), then you can proceed, because you have documented permission.
• If you are an employer considering a candidate for a position that requires financial responsibility, then you may pull their credit report with their written consent, because employment screening is a permissible purpose.
• If you are an insurance company underwriting a policy, then you may access a credit report, because insurance underwriting is a permissible purpose.
• If you wish to access a credit report for someone you are married to, then you still need their consent unless you are jointly applying for credit or have other specific legal arrangements, because marital status alone does not grant automatic access to separate credit reports.
• If you are collecting a debt, then you have a permissible purpose to access the debtor’s credit report, because debt collection is a recognized reason under the FCRA.
• If you are a mortgage lender, then you can pull a credit report to assess your ability to lend, because extending credit is a primary permissible purpose.
• If you are unsure if your reason is a permissible purpose, then consult with legal counsel or the Consumer Financial Protection Bureau (CFPB), because misinterpreting the FCRA can lead to severe penalties.

FAQ

Can I get my spouse’s credit report without their permission?

Generally, no. Even in marriage, you typically need explicit written consent from your spouse to pull their individual credit report, unless you are jointly applying for credit or there’s a legal order.

What if I want to check the credit of someone I’m dating?

You cannot legally check someone’s credit report simply because you are dating them. This is not a permissible purpose under federal law.

Can a parent check their adult child’s credit report?

Not without the adult child’s explicit written consent. Once an individual is an adult, their credit report is private information.

How do I get a copy of my own credit report?

You can get a free copy of your credit report annually from each of the three major credit bureaus (Equifax, Experian, and TransUnion) by visiting AnnualCreditReport.com.

What happens if I access a credit report without a valid reason?

Accessing a credit report without a permissible purpose and proper authorization can lead to significant legal penalties, including fines and civil lawsuits.

Can a landlord deny me based on their review of my credit report?

Yes, landlords can use credit reports as part of their tenant screening process. However, they must follow specific rules regarding how they use this information and must notify you if adverse action is taken based on the report.

What is a “permissible purpose”?

A permissible purpose is a legally defined reason, under the Fair Credit Reporting Act (FCRA), that allows a business or individual to access someone’s credit report. Examples include credit transactions, employment screening, and insurance underwriting.

What this page does NOT cover (and where to go next)

• Detailed legal advice on specific state laws regarding credit reporting.
• Where to go next: Consult with a legal professional specializing in consumer law or your state’s bar association.
• How to dispute errors on your own credit report.
• Where to go next: Visit the websites of the three major credit bureaus or the Consumer Financial Protection Bureau (CFPB) for guidance on the dispute process.
• Specifics of credit scoring models (e.g., FICO, VantageScore).
• Where to go next: Research resources from the credit scoring agencies themselves or financial education websites.
• How to improve your own credit score.
• Where to go next: Explore guides on budgeting, debt management, and responsible credit use from consumer finance organizations.
• The process for individuals to grant authorized user status on their credit cards.
• Where to go next: Contact your credit card issuer directly to understand their policies on authorized users.