How To Legally Pull Someone’s Credit Report

Quick answer

• Legally pulling someone’s credit report requires their explicit written consent.
• Permissible purposes are strictly defined by law, such as for credit applications, employment screening, or insurance underwriting.
• Unauthorized access is illegal and carries severe penalties.
• You cannot “check up” on someone’s credit for personal curiosity.
• Consent forms must clearly state the purpose and what information will be accessed.

What to check first (before you act)

Legitimate Purpose

Before attempting to access anyone’s credit report, confirm you have a legally permissible reason. Federal laws, like the Fair Credit Reporting Act (FCRA), outline specific circumstances under which a credit report can be accessed. These include:

• Credit Transactions: When someone applies for credit, such as a loan, credit card, or mortgage.
• Employment: For hiring decisions, promotions, or reassignment where the job involves financial responsibility or access to sensitive information.
• Insurance: When underwriting insurance policies.
• Government Licenses and Benefits: For certain government applications.
• Tenant Screening: For rental applications.
• Business Transactions: When evaluating a business transaction initiated by the consumer.

If your reason doesn’t fall into these categories, you likely cannot legally pull someone’s credit report.

Written Consent

Obtain explicit, written consent from the individual whose credit report you wish to access. This consent must be freely given, informed, and specific. It should clearly state:

• Who is requesting the report.
• The purpose for which the report is being obtained.
• Which credit reporting agencies the report will be pulled from (e.g., Equifax, Experian, TransUnion).
• That the individual has the right to request a free copy of the report if adverse action is taken based on its contents.

A vague or verbal agreement is insufficient. The FCRA requires written authorization.

Your Business Relationship

Understand your existing or potential business relationship with the individual. For example, if you are a landlord, you can request a credit report as part of a tenant screening process, provided you have their written consent and a legitimate business need. If you are an employer, you can do so for hiring purposes, again with consent.

The Law

Familiarize yourself with the Fair Credit Reporting Act (FCRA). This federal law governs how consumer credit information is collected, used, and shared. It grants individuals rights regarding their credit reports and imposes obligations on those who access them. Ignorance of the law is not a defense against violations.

Step-by-step (credit improvement workflow)

• Step 1: Identify a Permissible Purpose.
• What to do: Clearly define why you need to access the credit report. Is it for a loan application, employment screening, or tenant evaluation?
• What “good” looks like: You have a clear, legally recognized reason that aligns with federal regulations.
• Common mistake: Assuming a general need is sufficient.
• Avoid it by: Consulting the FCRA or legal counsel if your purpose is unclear.

• Step 2: Obtain Written Consent.
• What to do: Create or use a consent form that clearly outlines the purpose, who is requesting the report, and which credit bureaus will be accessed.
• What “good” looks like: The individual signs and dates the form, indicating their understanding and agreement.
• Common mistake: Relying on verbal permission or a vague statement.
• Avoid it by: Ensuring the consent form is comprehensive and meets FCRA requirements.

• Step 3: Choose a Credit Reporting Agency (CRA).
• What to do: Select one or more of the major CRAs (Equifax, Experian, TransUnion) from which you will pull the report.
• What “good” looks like: You have a business relationship or are authorized to access reports from the chosen CRA.
• Common mistake: Attempting to access reports without authorization from a CRA.
• Avoid it by: Establishing a legitimate business account with a CRA or using a third-party service authorized to pull reports for permissible purposes.

• Step 4: Verify Identity (of the requestor).
• What to do: Ensure your own identity and business credentials are in order with the CRA.
• What “good” looks like: You have an established account and are authorized to request reports.
• Common mistake: Not having proper business verification.
• Avoid it by: Completing all necessary application and verification processes with the CRA.

• Step 5: Submit the Request.
• What to do: Use the CRA’s authorized portal or system to submit the request, providing the necessary identifying information for the individual (e.g., name, address, Social Security number, date of birth).
• What “good” looks like: The request is processed accurately and quickly.
• Common mistake: Incorrectly entering the individual’s information, leading to denial or an inaccurate report.
• Avoid it by: Double-checking all data entered for accuracy.

• Step 6: Receive and Review the Report.
• What to do: Obtain the credit report from the CRA.
• What “good” looks like: You have the full report and can see the relevant credit information.
• Common mistake: Not properly securing the report after receiving it.
• Avoid it by: Handling the report with the same care as other sensitive personal information.

• Step 7: Use Information Appropriately.
• What to do: Use the information solely for the stated permissible purpose.
• What “good” looks like: The decision made is based on the credit information and the permissible purpose.
• Common mistake: Using the information for a purpose other than what was consented to.
• Avoid it by: Sticking strictly to the agreed-upon reason for pulling the report.

• Step 8: Provide Adverse Action Notice (if applicable).
• What to do: If you take adverse action (e.g., deny credit, employment) based on the credit report, inform the individual.
• What “good” looks like: The individual receives a written notice explaining the adverse action and providing details about the CRA and their right to dispute.
• Common mistake: Failing to notify the individual of adverse action.
• Avoid it by: Understanding and implementing the FCRA’s adverse action requirements.

• Step 9: Secure and Dispose of the Report.
• What to do: Store the report securely and dispose of it properly when no longer needed, according to legal requirements.
• What “good” looks like: The report is protected from unauthorized access and is shredded or destroyed when its retention period expires.
• Common mistake: Leaving reports unsecured or disposing of them improperly.
• Avoid it by: Following data security and disposal best practices.

What affects your score (plain language)

• Payment History: Paying bills on time is the most significant factor. Late payments, defaults, and bankruptcies hurt your score.
• Amounts Owed (Credit Utilization): How much of your available credit you are using. Keeping balances low relative to credit limits is crucial.
• Length of Credit History: How long your accounts have been open. Longer histories generally benefit your score.
• Credit Mix: Having a variety of credit types (e.g., credit cards, installment loans) can be positive, but this is less impactful than other factors.
• New Credit: Opening multiple new accounts in a short period can lower your score.
• Public Records: Bankruptcies, liens, and judgments can severely damage your score.
• Information Accuracy: Errors on your credit report can unfairly lower your score.

What NOT to do while improving credit: Do not close old credit accounts unnecessarily, as this can shorten your credit history and increase your credit utilization ratio. Avoid applying for too much new credit at once, as this can lead to multiple hard inquiries. Do not co-sign for loans unless you are prepared to be fully responsible for the debt, as the account will appear on your credit report.

Common mistakes (and what happens if you ignore them)

| Mistake | What it causes | Fix