Yes. The Fair Credit Reporting Act has carried a private right of action since 1970, and it runs against the credit bureaus and, in defined cases, against the companies that furnish them data. Willful noncompliance under 15 U.S.C. § 1681n carries statutory damages of $100 to $1,000 with no proof of loss, plus punitive damages a court may add. Negligent noncompliance under § 1681o pays only the actual damages you can document. Either way, a win shifts your attorney fees onto the bureau.
What the statute does not hand you is a case. Most claims run on a duty a written dispute creates: Section 1681i’s reinvestigation duty begins when the dispute reaches Equifax, Experian or TransUnion, and the claim is the bureau’s failure to meet it. A few claims need no dispute at all, including an impermissible pull under Section 1681b. Section 1681p then gives you two years from the day you discover the violation, with an outer limit of five years from the violation itself.
Here is what a claim requires, which duties the common claims are built on, and the paperwork that decides them. It is general legal information. Whether one situation supports a claim is a question for a licensed attorney reading the actual documents.
A written dispute starts the Section 1681i duty you sue over
Put the dispute in writing before anything else, because the § 1681i duty most claims enforce does not exist until the dispute lands. Section 611 of the FCRA, at 15 U.S.C. § 1681i, requires a reasonable reinvestigation once a bureau receives one, generally inside 30 days and up to 45 in some cases, and requires the bureau to delete or correct anything it cannot verify.
Send it by a method that dates the delivery. An online form is faster and leaves you holding a confirmation number. Certified mail leaves you holding a signed receipt with a date on it, and that date fixes both the 30-day breach and the discovery clock in § 1681p.
A dispute also has to say what is wrong and show it. Under § 1681i(a)(3) a bureau can mark a dispute frivolous and stop investigating when it arrives with no new information, which our guide to frivolous dispute classification sets out. Name the field that is wrong, state the correct value, and attach the statement or letter that proves it.
Section 1681e(b) covers accuracy, Section 1681i covers the dispute
Every workable claim against a bureau names one statutory duty and one failure to meet it. Section 1681e(b) is the accuracy duty, which asks whether the bureau followed reasonable procedures to assure maximum possible accuracy. Section 1681i is the dispute duty, which asks whether the reinvestigation was reasonable and finished on time. The remaining claims cluster around file access, obsolete data, identity theft and reinsertion.
| Claim | Statute | What must be shown |
|---|---|---|
| Failure to reinvestigate a dispute | § 1681i | A dispute was filed and the bureau missed the deadline or ran a sham review |
| Unreasonable procedures for accuracy | § 1681e(b) | An inaccuracy plus procedures that failed to assure maximum possible accuracy |
| Reporting obsolete information | § 1681c | A negative item reported past its seven-year limit, or ten years for Chapter 7 |
| Impermissible access to the file | § 1681b | A pull with no permissible purpose, such as no account and no application |
| Failure to block identity theft items | § 1681c-2 | A qualifying block request the bureau ignored or mishandled |
| Improper reinsertion of a deleted item | § 1681i(a)(5) | A deleted item returned without certification and the five-day notice |
The reinvestigation claim does the most work, because the duty is concrete and the dates are documented, which our guide to what happens after a dispute walks through. An accuracy claim under § 1681e(b) does not formally require a prior dispute, and in practice the dispute record is what proves the bureau knew.
The largest single category is somebody else’s information sitting on your file. Of the 3,482,718 complaints recorded in the CFPB’s public Consumer Complaint Database about incorrect information on a credit report between July 2025 and June 2026, 66.9% said the information belongs to someone else, in our own analysis of that database. These are unverified consumer allegations, and a mixed file is the fact pattern § 1681e(b) was written for, as our guide to mixed credit files explains.
e-OSCAR condenses your evidence into a dispute code
Your documents stop traveling before the furnisher ever sees them. Disputes route through e-OSCAR, the industry’s automated exchange, as an Automated Credit Dispute Verification code, so the company that reported the item gets a category where you sent a bank statement, and the CFPB says an investigation that only parrots the furnisher can violate the FCRA (Consumer Financial Protection Bureau, 2022).
The regulator has taken that position in court. In a complaint filed January 7, 2025, the CFPB alleged Experian conducted sham reinvestigations of disputed items, which is the same failure a private § 1681i claim describes (Consumer Financial Protection Bureau, 2025).
It is also what consumers describe. Of the 1,065,699 complaints recorded in the CFPB’s public Consumer Complaint Database between July 2025 and June 2026 about a company’s investigation into an existing problem, 50.5% said the investigation did not fix the error and 43.4% said it took longer than the 30 days the law allows, in our own analysis of that database. Those are unverified consumer allegations, and they name the two facts a § 1681i claim is made of.
Disputing through a bureau’s web portal is the fastest way into that machinery and the way that leaves you least to show afterwards, which our guide to e-OSCAR sets out.
Section 1681n pays $100 to $1,000 without proof of loss
Willfulness is what lets you recover with nothing to show. Section 1681n awards statutory damages of $100 to $1,000 for a willful violation whether or not you lost a dollar, and it lets a court add punitive damages on top. Section 1681o, for negligence, pays only what you can prove you lost. Recklessness counts as willful in the case law, so the bureau need not have meant it.
- Willful. The bureau knew its conduct breached the FCRA, or ran a process it knew was unreliable. Opens statutory damages, punitive damages and fees.
- Negligent. The bureau failed to use reasonable care. Pays proven actual damages and fees, and nothing beyond that.
- Fee shifting. Both sections put your attorney fees on the losing bureau, which is what makes a modest case worth taking on contingency.
That split decides who has a case at all. Someone with no provable loss has a claim only if the conduct was willful, while someone holding a dated denial letter can proceed on either theory. Disputing an obviously wrong item twice and having it verified twice is the record that pushes a case toward willfulness, and our guide to disputing the same item twice covers how to run the second round so it counts.
Adverse action notices are the strongest proof of actual damages
Actual damages are whatever the error cost you, and the proof is the notice the lender sent when it said no. A denied mortgage, a rate priced off a wrong file, a withdrawn job offer after an employment screen and a rejected rental application each produce a dated adverse action notice under § 1681m naming the bureau and the reason.
The Federal Trade Commission’s congressionally mandated accuracy study found that 1 in 5 consumers had an error on at least one of their three credit reports, and that for 5% of consumers the error was serious enough to raise the price they pay for credit or insurance (Federal Trade Commission, 2013). That second group is the one with a damages case, because the harm arrives with a number attached.
What the number looks like depends on the loan. Average auto-loan APRs ran from 4.55% for superprime borrowers at 781 and up to about 16% for deep-subprime borrowers at 300 to 500 on new cars in the first quarter of 2026 (Experian, 2026). A file that puts you one tier below where you belong is priced that way every month for the life of the loan.
Courts also recognize emotional distress and reputational harm in FCRA cases, and the documentation expected rises with the size of the claim. Keep every adverse action notice that arrives during a reporting fight, as our guide to the adverse action notice under Section 615 explains.
Section 1681s-2(b) opens the furnisher claim only through a bureau
A furnisher owes you an investigation only after a bureau tells it you disputed. The duty at § 1681s-2(b) attaches when the bureau forwards the dispute, so a consumer who wrote straight to the collector and never filed with Equifax, Experian or TransUnion has no furnisher claim to bring at all.
The sequencing is also why suits routinely name both parties. The bureau verified and the furnisher confirmed, and one failed reinvestigation usually contains the conduct of both. Our guide to direct furnisher disputes under Section 623 sets out what a direct dispute does and does not give you.
Against a bureau the dispute is formally optional for an accuracy claim and practically essential for every claim, because it establishes notice, starts the deadline whose breach is the claim, and produces the paper that separates a provable case from an assertion.
Section 1681p runs two years from the day you find out
The clock starts at discovery. Under 15 U.S.C. § 1681p a suit has to be filed within two years of the date you discovered the violation, and in no event later than five years after the violation occurred. Someone who learns this year about an impermissible pull from three years ago is generally still inside the window.
Dated records set both ends of it. The dispute letters, the bureau’s responses and the adverse action notices fix the discovery date and the violation date, and between them they decide whether the courthouse door is open.
A reinserted item restarts the arithmetic. Under Section 611(a)(5)(B) a deleted item put back without the certification and the five-day notice is its own violation carrying its own date, which our guide to an item that reappears after deletion explains.
Five documents decide the case before a lawyer sees it
FCRA cases are won on paper assembled before a lawyer is involved, and every piece of it is within reach of the person whose report it is. The file that matters is small, and five documents carry it.
| Document | What it proves | Where it comes from |
|---|---|---|
| All three credit reports | The item as reported, on the date you pulled it | Equifax, Experian and TransUnion |
| Your written dispute | What you told the bureau was wrong, and with what evidence | Your own copy, kept before mailing |
| Certified mail receipt | The delivery date that starts the 30-day investigation window | The post office, at mailing and on return |
| The bureau’s written result | Whether it verified the item, corrected it, or went silent | Mailed result of the reinvestigation |
| Adverse action notices | The denial or the pricing, attributed to a named bureau | The lender, landlord or employer |
- Pull all three reports and mark every item that is inaccurate or was mishandled.
- Dispute in writing with the documents attached, by a method that dates the delivery.
- Keep every response, updated report and adverse action notice in one file.
- Dispute a wrongly verified item again with stronger evidence, which builds the willfulness record.
- File a CFPB complaint, which forces a written company response, then talk to an FCRA attorney.
Step 2 is the one people skip, and it is the one that ends cases. Charles W., 2 star, September 6, 2026, on Dispute Beast: “I was told too often that in 90 days I would see major results. Instead I get letters from the credit beaurus saying they never got the disputes!!!! And the results show that!!!!!You have taken over $300 from me and it seems that I have waisted my money!” A bureau that says it never received the dispute is asserting there was no duty and no breach. A signed, dated receipt answers that, and it costs a few dollars at the counter.
The regulator complaint is an escalation and a discovery tool at once, because the company’s written answer commits it to a version of events before anything is filed. Our guide to filing a CFPB complaint covers the form itself.
The paperwork is also what moves a score, long before any of it reaches a court. The Federal Trade Commission tracked consumers through the dispute process and found that more than 1 in 10 who filed a dispute saw their credit score change as a result (Federal Trade Commission, 2013).
Skip the paperwork. Start your dispute.
CreditRefresh drafts your FCRA dispute letter and tracks the 30-day investigation window. You review, approve, and send. You stay in control.
Get StartedSmall claims court trades discovery for a damages cap
Small claims works when the violation is clean and the harm is modest. Each state caps what you can recover there, the filing costs a fraction of federal court, and it fits the consumer no contingency lawyer will take. Bureaus answer small claims suits with real counsel, and once they do, the cost of appearing is what can make a correction cheaper than a hearing.
What you give up is discovery, which is what a complicated claim runs on. A case with substantial actual damages or a long willfulness record belongs in federal court with counsel, where the fee-shifting provision does its work. Small claims is the floor of this process.
Bureaus defend on accuracy, procedure and concrete injury
The defenses track the statute’s own qualifiers. The information was accurate, the procedures were reasonable, the reinvestigation was adequate, the dispute never properly arrived, or the consumer suffered no concrete injury. Each defense attacks an element you have to prove, which is why the documents carry the case.
Concrete injury is the live fight in federal court. A plaintiff has to show real harm, and a bare statutory violation may not clear that bar on its own. An inaccurate report a lender actually pulled, or a denial or rate change you can date, clears it comfortably. An error sitting unread in a file invites an early argument about injury itself.
The volume behind all of this is not small. The CFPB reported that complaints about the three largest nationwide credit reporting agencies rose almost 3,000% since January 1, 2020, and that of more than 5.6 million complaints it logged from January 1, 2024 to June 30, 2025, about 3.9 million named Equifax, Experian or TransUnion (Consumer Financial Protection Bureau, 2025).
Class actions reprice a practice; an individual suit fixes your file
Class actions aggregate statutory damages across thousands of consumers hit by the same willful practice, a defective matching procedure or an unlawful disclosure format, and that is how a systemic habit gets repriced. An individual suit is the vehicle for a fact-specific harm like one mishandled dispute, and it is the one that gets your own report corrected.
For you the distinction is procedural. A class notice naming a bureau does not bar a separate individual claim over different conduct, and it changes nothing about the dispute record you are building.
The suit is why the 30-day deadline means anything
The right to dispute a credit-report error has been federal law since 1970, and the right was never the hard part. What makes § 1681i’s 30 days and its reasonable-investigation standard more than words on a page is that a consumer can enforce them in court, with the bureau paying the fees if the consumer wins.
Almost all of the work happens before that. Pull the three reports, dispute in writing with evidence attached, keep the receipt, and keep everything that comes back. A case built on that file is legible to an attorney in ten minutes; without it, a real violation is still only an assertion.
Which tool leaves you the record a lawsuit needs
If a dispute may lead to a lawsuit, you need to keep the letter and follow what happens next. Our September 18, 2026 data found that 35.1% of paying CreditRefresh members had a negative entry already marked as disputed by the consumer. That mark alone does not tell you who filed it or what happened. Compare who drafts the letters, which reports they cover, and what you can keep for your own records.
| Tool | What you pay | What that buys | Bureaus | Trustpilot |
|---|---|---|---|---|
| CreditRefresh | $49.99/mo, no setup fee, cancel anytime. Mail letters yourself free, or pay RushMail per letter | A letter for each item you choose to challenge, based on a three-bureau scan. You read, sign and keep a copy; monitoring lets you check later reports | All three | 4.3 (9 reviews) |
| Dispute Beast | From $49.99/mo for required monitoring. Mail letters yourself free, or pay Sprint Mail per letter | You draft and mail the letter yourself, so you keep the copy and the mailing date a claim runs on; the monitoring that unlocks the tool is not optional | All three | 4.2 (2,067 reviews) |
| DisputeBee | $49/mo personal, $129/mo business | Templates you fill in and mail yourself, so every letter, its date, and each bureau reply stay in your own file | All three | 3.2 (68 reviews) |
| The Credit People | $99/mo standard, $119/mo premium, or $599 for 6 months | Challenges run in your name, but the letters and the bureau’s replies stay in their file, not yours | All three | 1.7 (17 reviews) |
| Lexington Law | $139.95/mo, invoiced at the end of each service period | A firm disputes for you; the letters and the dates behind the case are the firm’s record, not something you hold | All three | 3.2 (624 reviews) |
| Credit Karma | Free, paid for by lender referrals | Flags a problem but drafts no letter and reaches only TransUnion, so there is no dated dispute of your own to build a case on | TransUnion | 1.1 (912 reviews) |
Published prices are from each company’s own site, checked September 15, 2026. Trustpilot scores and review counts as published on September 24, 2026.
A lawyer may need more than a screen that says a dispute is closed. Keep your own copy of each letter, mailing receipt and bureau reply, whichever tool you choose.
Build your dispute record while you work on your credit with CreditRefresh
When a report error stands in the way of rebuilding credit, a clear letter gives you a place to start. CreditRefresh scans all three reports and drafts a dispute for each item you choose to challenge. You read and sign each letter and can keep a copy with your mailing receipt and the bureau’s reply. If the error is still there and you need help with a claim, you have records to take to a lawyer.
The later report is part of that record too. In our data from paying members, 47.9% of disputed items with a recorded outcome no longer appeared on a later report from the same bureau. In our September 18, 2026 data, outcomes covered 2.3% of items in mailed rounds, across all dispute types. Keep the later report with your letters so you can show a lawyer what changed.
Becca, 5 star, July 25, 2026, on Trustpilot: “…it instantly pulled up my reports and flagged the things that were bringing down my credit score so that I could review and address those problem areas…” Jean L., 5 star, August 24, 2026, on Trustpilot, on our support: “The response time to my questions were very rapid and filled with complete/specific detailed instructions (not coined nor ‘auto-reply’)…”
For $49.99 a month, Refresh Monitoring includes CreditRefresh’s scans, draft letters and ongoing monitoring. There is no setup fee, per-dispute charge or contract, and you can cancel any time. You choose what to challenge and keep control of each letter.
It is backed by our 100% money-back guarantee: members who work the full program and see no bureau score rise above where they started can claim back every Refresh Monitoring payment. It is a refund promise, never a score promise.
Frequently asked questions
Can you sue a credit bureau if the information is accurate?
No. The dispute machinery exists to correct inaccurate, incomplete or unverifiable information, and a bureau that declines to delete a legitimate late payment or a valid collection has done nothing wrong. For accurate items the only clock that matters is the reporting limit in § 1681c, seven years for most negatives and ten for a Chapter 7 bankruptcy.
Does a credit bureau have to tell you who verified an item?
Yes, on request. Section 1681i(a)(6)(B)(iii) requires a bureau to give you the business name, address and, where available, the telephone number of the furnisher it contacted during the reinvestigation. Asking for it is the method of verification request our guide to a method of verification request walks through, and the name it returns tells you which company was actually asked.
Can you sue over a credit pull you never authorized?
Yes. Section 1681b limits who may access your file and why, so a pull with no permissible purpose, meaning no account, no application and no court order, is its own violation and needs no prior dispute. The discovery rule in § 1681p matters here, because an impermissible pull can surface long after it happened.
Can you sue Equifax, Experian and TransUnion in the same lawsuit?
Yes, when the same error sits on more than one file, because each bureau keeps its own file and owes its own duty. The dispute has to have gone to each bureau you name, since the § 1681i duty attaches per bureau, and an item corrected at one is still a live claim at the other two.
How long does an FCRA lawsuit take?
It depends where it ends. A demand letter that produces a correction and a payment can close in weeks, while a contested case filed in federal court runs a year or more. The dispute-and-document phase that comes first is what decides which one you are in.
Does filing a CFPB complaint prevent a lawsuit?
No. The complaint and the suit are independent tracks, and the complaint strengthens the case by forcing a written company response. Nothing in the regulator process waives the private right of action or pauses the § 1681p deadlines, which keep running either way.
Which credit bureau is the hardest to dispute?
None of the three is measurably hardest, and they do not behave alike. In the CFPB’s FCRA Section 611(e) report, of the consumers who complained to the regulator about one of the three bureaus, the share saying they had already disputed the problem directly with that bureau stayed near 90% since 2020, while the agencies’ own confirmation rates diverged, Equifax around 37% and TransUnion near 30% through mid-2025, with Experian’s climbing past the consumer rate (Consumer Financial Protection Bureau, 2025).
Last reviewed: September 2026
This article is for educational purposes only and does not constitute legal or financial advice. The Fair Credit Reporting Act and related regulations are complex, and outcomes depend on individual circumstances. Consumers with specific questions about their credit reports or rights under federal law should consult a licensed attorney or contact the Consumer Financial Protection Bureau directly.
CreditRefresh turns a pile of bureau replies into a dated dispute record, which is what an FCRA claim stands or falls on. Connecting your three reports takes a few minutes, and the first scan is ready the same day. Backed by a 100% money-back guarantee.
