Yes, a consumer can sue a credit bureau. The Fair Credit Reporting Act creates a private right of action against bureaus and furnishers that violate its requirements, with actual damages for negligent violations and statutory damages of 100 to 1,000 dollars, plus possible punitive damages, for willful ones. Attorney fees are recoverable, which is why many FCRA attorneys work on contingency.
The two liability sections divide by state of mind: 15 U.S.C. § 1681n covers willful noncompliance, including the statutory and punitive damages, while § 1681o covers negligent noncompliance and limits recovery to actual damages and fees. The deadline in § 1681p runs two years from discovery of the violation, capped at five years from the violation itself.
This article covers when a lawsuit is available, what the common claims look like, and the groundwork that decides these cases. It is general legal information rather than advice; whether any particular situation supports a claim is a question for a licensed attorney reviewing the actual documents.
Key takeaways
- The FCRA gives consumers a private right of action against bureaus and, in defined cases, furnishers.
- Willful violations carry statutory damages of 100 to 1,000 dollars plus possible punitive damages.
- Negligent violations require proof of actual damages, such as a credit denial or higher pricing.
- Claims against furnishers generally require a bureau dispute first; suing skips no steps.
- The clock runs two years from discovery, with an outer limit of five years from the violation.
- Attorney fees shift to the defendant on a win, which makes contingency representation common.
What violations support a lawsuit against a bureau?
The viable claims cluster around a handful of statutory duties, each with its own proof pattern. The table below maps the common ones.
| Claim | Statute | What must be shown |
|---|---|---|
| Failure to reinvestigate a dispute | § 1681i | A dispute was filed and the bureau missed the deadline or did a sham review |
| Unreasonable procedures for accuracy | § 1681e(b) | An inaccuracy plus procedures that failed to assure maximum possible accuracy |
| Reporting obsolete information | § 1681c | A negative item reported beyond its seven or ten year limit |
| Impermissible access to the file | § 1681b | A pull without a permissible purpose, such as no account or application |
| Failure to block identity theft items | § 1681c-2 | A qualifying block request the bureau ignored or mishandled |
| Improper reinsertion of deleted items | § 1681i(a)(5) | A deleted item returned without certification and the five-day notice |
The reinvestigation claim is the workhorse, because the duty is concrete and the deadlines are documented, as detailed in the guide on what happens after a dispute. An accuracy claim under § 1681e(b) does not technically require a prior dispute, but in practice the dispute record is what proves the bureau knew and failed.
What is the difference between willful and negligent violations?
Willfulness means the bureau knowingly or recklessly disregarded its obligations, and it unlocks statutory damages without proof of harm, plus the possibility of punitive damages. Negligence means the bureau failed to exercise reasonable care, and it pays only the actual damages the consumer can prove. Recklessness counts as willful under the case law, so a bureau need not have intended the violation; running a process it knew was unreliable can be enough.
The practical difference is enormous. A consumer with no provable monetary loss has a case only if the conduct was willful, while a consumer with a documented credit denial, a higher rate, or out-of-pocket costs can proceed on either theory. Repeated verified disputes of an obviously wrong item are the classic fact pattern that pushes a case toward willfulness.
What counts as actual damages in an FCRA case?
Concrete financial harm leads the list: a denied mortgage or refinance, a higher interest rate traceable to the error, a lost job offer after an employment screen, or a denied apartment. Courts also recognize emotional distress and reputational harm in FCRA cases, though documentation expectations rise with the size of the claim.
The traceability is what wins or loses the category. A denial letter naming the bureau and the item, dated inside the violation window, is worth more than any narrative, which is why preserving every adverse action notice during a reporting fight matters as much as the dispute letters themselves. Emotional distress claims follow the same logic: contemporaneous records, medical visits, and third-party corroboration carry the claim, while an unsupported description rarely does.
Does a consumer have to dispute before suing?
For claims against furnishers, yes: the furnisher's statutory duty to investigate under § 1681s-2(b) is triggered only when the dispute arrives through a bureau, a sequencing explained in the guide on direct furnisher disputes under Section 623. A consumer who never disputed has no furnisher claim at all.
Against bureaus, the dispute is technically optional for some claims but strategically essential for all of them. The dispute record establishes notice, starts the deadlines whose breach is the claim, and generates the paper trail that distinguishes a provable case from an assertion. Suing without ever disputing is procedurally possible and practically weak.
How long does a consumer have to file?
Under 15 U.S.C. § 1681p, the suit must be filed within two years of discovering the violation, and no later than five years after the violation occurred. Discovery matters: a consumer who learns this year about an impermissible pull from three years ago is generally still inside the window.
The deadline arithmetic is one more reason dated records matter. The dispute letters, the bureau's responses, and the adverse action notices fix the discovery date and the violation date, which together determine whether the courthouse door is still open.
Skip the paperwork. Lock in your spot.
CreditRefresh files the dispute, tracks the 30-day clock, and escalates to the CFPB automatically if the bureau misses the deadline.
What should be done before contacting a lawyer?
FCRA cases are won on paper assembled before the lawyer ever appears, and the assembly is within any consumer's reach.
- Pull all three reports and identify each inaccurate or improperly handled item.
- Dispute in writing with documentation, sent by a method that proves the delivery date.
- Preserve every response, updated report, and adverse action notice in one file.
- Dispute a wrongly verified item once more with stronger evidence, building the willfulness record.
- File a CFPB complaint, which forces a documented company response, then consult an FCRA attorney.
The regulator complaint is both an escalation and a discovery tool, as described in the guide on filing a CFPB complaint, because the company's written response often commits it to a version of events before litigation begins.
Is small claims court an option for FCRA cases?
Often yes, within the state's damages cap, and it suits the consumer with a clear violation and modest harm who cannot attract contingency counsel. Bureaus respond to small claims suits with real lawyers, but the filing itself frequently prompts the correction or a settlement that years of disputes did not.
The tradeoffs are the cap and the absence of discovery, which weakens complex claims. A case with substantial actual damages or a strong willfulness record generally belongs in federal court with counsel, where the fee-shifting provision does its work; the small claims path is the pragmatic floor, not the ceiling.
What outcomes are realistic?
Most FCRA disputes that reach demand letters or filings settle, typically combining the correction the consumer originally wanted with a payment that reflects the documented harm and the litigation risk. The headline verdicts in the case law are real but rare, anchored by egregious facts and long willfulness records.
The realistic framing is that the lawsuit is the enforcement layer behind the dispute process, not a lottery ticket. Its availability is what makes the 30-day deadline and the reasonable-investigation standard mean something, and the consumers who benefit most are the ones whose records make the violation undeniable.
What defenses do bureaus typically raise?
The standard defenses track the statute's qualifiers: the information was accurate, the procedures were reasonable, the reinvestigation was adequate, the consumer suffered no concrete harm, or the dispute was never properly received. Each defense targets an element the consumer must prove, which is why the documentation does the heavy lifting.
Recent standing doctrine adds a federal-court wrinkle, since plaintiffs must show concrete injury rather than a bare statutory violation. A consumer whose inaccurate report was actually transmitted to a lender, or who can document a denial or rate impact, clears that bar comfortably; one whose error sat unviewed in a file may face an earlier fight about injury itself.
How do FCRA class actions differ from individual suits?
Class actions aggregate statutory damages across thousands of consumers subjected to the same willful practice, such as a defective matching procedure or an unlawful disclosure format, and they are how systemic practices get repriced. Individual suits remain the right vehicle for fact-specific harms like a mishandled dispute.
For an individual consumer, the distinction is mostly procedural awareness: receiving a class notice involving a bureau does not bar a separate individual claim for different conduct, and the existence of class litigation over a practice can signal that an individual's experience was not an isolated accident.
Frequently asked questions about suing credit bureaus
Can someone sue a credit bureau for a wrong credit report?
Yes, if the inaccuracy reflects a statutory violation, most commonly a failed reinvestigation under § 1681i or unreasonable accuracy procedures under § 1681e(b). The strongest cases pair the inaccuracy with a documented dispute the bureau mishandled and concrete harm such as a credit denial.
How much can be recovered in an FCRA lawsuit?
Negligent violations pay proven actual damages plus attorney fees. Willful violations pay actual damages or statutory damages of 100 to 1,000 dollars, possible punitive damages, and fees. The documented facts, especially repeated mishandled disputes, are what move a case between those categories.
How long do FCRA lawsuits take?
Many resolve at the demand or early-settlement stage within months, since the correction plus a payment is often cheaper for the defendant than litigation. Contested cases run longer, a year or more, which is another reason the dispute-and-document phase that precedes filing is worth doing thoroughly.
Does filing a CFPB complaint prevent a lawsuit?
No. The complaint and the lawsuit are independent tracks, and the complaint often strengthens the eventual case by forcing a written company response. Nothing about the regulator process waives the private right of action or pauses the § 1681p deadlines, which keep running regardless.
Can a furnisher be sued along with the bureau?
Yes, if the consumer disputed through the bureau first, which triggers the furnisher's investigation duty under § 1681s-2(b). Suits naming both the bureau that verified and the furnisher that confirmed are common, since the failed reinvestigation usually involved both parties' conduct.
Last reviewed: June 2026
This article is for educational purposes only and does not constitute legal or financial advice. The Fair Credit Reporting Act and related regulations are complex, and outcomes depend on individual circumstances. Consumers with specific questions about their credit reports or rights under federal law should consult a licensed attorney or contact the Consumer Financial Protection Bureau directly.
