A hard inquiry comes off a credit report in one situation: the pull behind it had no permissible purpose. If you applied, the inquiry is accurate, and no letter, dispute or service removes accurate information early. Regret does not qualify, and neither does a denial. What does qualify is a pull you never authorized, whether an identity thief applied in your name or a company read your file without a legal basis to do it.
The hard part is telling the two apart, because the name on the report is often not the name you dealt with. A card you applied for can appear under the issuing bank’s corporate name, and one afternoon at a car dealership can leave inquiries from lenders you never spoke to. The FTC’s congressionally mandated accuracy study found one in five consumers had an error on at least one of their three credit reports (FTC, 2013), and in 2024 the CFPB reported that consumers complaining about the three nationwide bureaus most often described inaccuracies in credit inquiries, account and payment status, and personal information (CFPB, 2024).
An authorized inquiry has one remedy, which is time. Equifax, Experian and TransUnion display it for two years, and FICO Scores count it for the first twelve months only (FICO, 2026). An unauthorized one has three: a request to the company that pulled the report, a dispute with each bureau that shows it, and, where fraud is involved, an identity theft block.
FCRA Section 604 Decides Which Hard Inquiries Can Come Off
A bureau may release your report only for a purpose the statute lists. 15 U.S.C. § 1681b, which is FCRA Section 604, lets a bureau furnish a report “under the following circumstances and no other,” and the one behind nearly every hard inquiry is a credit transaction involving you. Others on the list are your own written instructions, employment screening with your written authorization, insurance underwriting and certain government benefit decisions. Section 604(f) then bars anyone from using or obtaining a report for any purpose the section does not authorize.
| Inquiry | Removable? | Why |
|---|---|---|
| An application you made and later regretted | No | You initiated a credit transaction, which is a permissible purpose |
| An application that was denied | No | The pull was authorized whatever the lender decided |
| A card or loan opened in your name by someone else | Yes | You never initiated the transaction, so no permissible purpose existed |
| A pre-approval converted into an application you never completed | Possibly | Turns on whether the lender can show you authorized the hard pull |
| A pull under your Social Security number by a lender you never contacted, from a clerical error | Yes | The report was obtained for a transaction that did not involve you |
| An existing creditor reviewing an account you already hold | Not a hard inquiry | Account review is its own basis under Section 604 and shows as a soft inquiry |
A pull made without a permissible purpose carries liability. Under 15 U.S.C. § 1681n, anyone who willfully fails to comply with the FCRA is liable to the consumer for actual damages or statutory damages of $100 to $1,000, plus punitive damages the court allows and attorney’s fees. Where a natural person obtained a report under false pretenses or knowingly without a permissible purpose, the figure is actual damages or $1,000, whichever is greater. The statute sets that range for willful violations; a negligent one carries actual damages plus costs and attorney’s fees under Section 617, with no statutory range. Who may lawfully read your file, and for what, is set out in our guide to who can pull your credit report under the FCRA.
Pull All Three Reports and Match Every Inquiry to an Application
Each bureau keeps its own file, so an inquiry can sit on one report and not the other two. Pull Equifax, Experian and TransUnion, then read the hard inquiry section of each. Every entry shows the date of the pull and the name of the company that requested it. Match each one to an application you remember making.
An unfamiliar name is not automatically fraud. Check these explanations before you dispute anything, because a dispute that simply asserts you do not recognize a company can be verified in minutes by a lender holding your signed application.
| What you see | The usual explanation | What to do |
|---|---|---|
| A bank name you have never dealt with | The issuer behind a store card or a co-branded card you did apply for | Search the name; match the date to your card applications |
| Several auto lenders on the same day | A dealership sent one financing application to several lenders | Match the date to the vehicle purchase or test-drive visit |
| A lender you know only from a pre-approval offer | The offer was accepted through an online portal and became an application | Find the offer email or portal record before disputing |
| A lender tied to a joint application | A spouse or co-borrower applied for shared financing with your details | Ask the co-applicant before you dispute |
| A lender you have never heard of, with no application anywhere | Identity theft, or a lender that mistyped a Social Security number | Contact the lender, then dispute it and place a fraud alert |
The basics of the two pull types, including which everyday checks are soft, are in our guide to soft vs hard credit inquiries.
Write to the Lender That Pulled the Report and Ask It to Withdraw the Inquiry
The company that made the pull is the only party that knows why it made it. In parallel with a bureau dispute, or before one, write to it directly. This route is most useful when you can name the specific reason the pull was unauthorized: an application a roommate filed with your information, an identity theft incident, or a pre-approval the lender converted without your authorization. A lender that finds no authorization in its own records can ask Equifax, Experian and TransUnion to delete the inquiry itself.
Send the letter in writing, by certified mail, to the address the lender designates for credit reporting matters. Identify the inquiry by name and date, state why it was unauthorized, and ask the lender to instruct each bureau to delete it. Keep a copy of the letter and the certified-mail receipt, because both become documentation if you escalate to a bureau dispute. Some lenders take the request by phone; get the outcome confirmed in writing either way.
Section 611 Gives the Bureau 30 Days to Verify the Pull
A bureau dispute is filed separately with each bureau that shows the inquiry. Under 15 U.S.C. § 1681i, FCRA Section 611, the bureau must conduct a reasonable reinvestigation and in general complete it within 30 days, extendable by up to 15 days when you send relevant information during that period. Within 5 business days of receiving the dispute it must notify the company that supplied the disputed information and pass along the relevant information you sent. Section 611(a)(5)(A) then requires the bureau to delete or modify any item found inaccurate or incomplete, or that cannot be verified.
- Identify the inquiry. Name the company and the date exactly as the report shows them.
- State the basis. Say you did not authorize the pull and made no application to that company on that date.
- Attach the evidence. An identity theft report, the lender’s own reply to your letter, or anything showing you never completed an application.
- Send it to each bureau showing it. Online, by phone or by mail; by mail, keep the certified receipt.
- Read the result. The bureau must send you the results and a copy of your report as revised by the reinvestigation.
The outcome turns on what the lender can produce. A lender that cannot show a signed application, a recorded authorization or a portal acceptance has nothing to verify the pull with. A lender that produces one leaves the inquiry verified as authorized, and your next move is to challenge the specific evidence it produced, if you have grounds to.
Investigations do not always go the way the law describes. Of the 1,065,699 complaints recorded in the CFPB’s public Consumer Complaint Database between July 2025 and June 2026 under “Problem with a company’s investigation into an existing problem,” 50.5% said the investigation did not fix an error on the report and 43.4% of the same 1,065,699 said it took more than 30 days, by our own analysis of that database. The CFPB attributes much of the recent surge in credit-reporting complaints to credit repair organizations and automated filing, so the count measures filing volume as well as harm. These are unverified consumer allegations, and a large count tracks how much business a company does as well as how it behaves.
Section 605B Blocks an Identity Theft Inquiry Within 4 Business Days
Identity theft has its own remedy, and it is faster than a standard dispute. Under 15 U.S.C. § 1681c-2, FCRA Section 605B, a bureau must block information that resulted from identity theft no later than 4 business days after it receives four things: proof of your identity, a copy of an identity theft report, your identification of the information, and a statement that it does not relate to any transaction by you. File the identity theft report at IdentityTheft.gov and list the fraudulent inquiry in it. The FTC took more than 1.1 million identity theft reports through that site in 2024 (FTC, 2025).
The block is not unconditional. A bureau may decline or rescind it where it reasonably determines the block was made in error, rested on a material misrepresentation, or where you received goods, services or money from the blocked transaction.
Stop the next application at the same time. An initial fraud alert needs no police report and lasts at least one year under Section 605A; an extended alert, which requires an identity theft report, lasts seven years. A security freeze is free, and the FCRA requires each bureau to place one within 1 business day of a request made online or by phone and to lift it within 1 hour of a request made the same way. A freeze blocks release of your file to a new creditor, which prevents further unauthorized inquiries while it is in place. The full recovery sequence is in our guide to identity theft and credit reports.
A Pre-Approval Click Can Authorize a Hard Pull
Pre-approvals run on soft pulls; formal applications run on hard pulls. The trouble sits in between. Some online portals treat a click-through acceptance of a pre-approved offer as your authorization for the hard pull, and you may not have realized the click did that. You can dispute the resulting inquiry on the ground that no application was ever made.
The outcome depends on the lender’s records. If it has logs of you accepting an offer that disclosed the hard pull, the inquiry will be verified as authorized. If the portal never disclosed the pull, or you never clicked through, the lender has nothing to verify with. Save the offer email and screenshot the portal before you dispute, because the lender’s log is the evidence you are arguing against.
Authorized Inquiries Stay Two Years, and FICO Counts Them for One
An inquiry you authorized cannot be removed through a dispute. An application you regret, a loan that ended in a denial, a card you applied for on impulse: the lender will verify each of them and the inquiry stays on the report.
The two-year figure is not a deadline in the statute. 15 U.S.C. § 1681g, FCRA Section 609(a)(3), requires a bureau to identify on your own copy everyone who pulled your report for a credit purpose in the prior year, and for employment in the prior two. Displaying credit inquiries for a second year is the bureaus’ own practice on top of that duty.
The scoring window is shorter still. FICO states that a hard inquiry typically remains on a report for up to two years and that FICO Scores only consider inquiries from the last 12 months (FICO, 2026). An authorized inquiry stops counting toward a FICO Score at month 12 and stays visible to a lender reading the file for another year. The full fall-off timeline is in our guide to how long hard inquiries stay on your credit report.
Specialty Reports Keep Their Own Inquiry Records
Innovis, ChexSystems, LexisNexis and the National Consumer Telecom & Utilities Exchange keep their own inquiry records, separate from Equifax, Experian and TransUnion. The CFPB lists NCTUE as a consortium file holding telecom, pay TV and utility account histories, managed by Equifax as servicer, that provides one free report every 12 months and will freeze your file on request (CFPB, 2025). If you have been turned down for a bank account, an apartment, an insurance policy or a phone plan, check the relevant specialty report for inquiries you did not authorize.
The same statute applies. Section 604 limits who may obtain a specialty report, Section 611 lets you dispute what is in it, and Section 609(a)(2) requires the agency to disclose the sources of the information in your file. Specialty inquiries do not appear on the three main files and do not feed FICO or VantageScore. They do feed the screening decisions behind bank accounts, insurance pricing and rentals.
Documentation Decides Whether the Lender Can Verify the Pull
A dispute backed by documents is harder to verify away. Without them, the bureau can confirm the inquiry against the lender’s records and keep it; with documents that contradict those records, it has something to weigh.
| Situation | Evidence that supports the dispute |
|---|---|
| Identity theft | The FTC identity theft report from IdentityTheft.gov, proof of identity, and your statement that the transaction was not yours |
| Pre-approval converted without authorization | The offer email, portal screenshots, and any correspondence showing no application was completed |
| A lender you never contacted | The lender’s written reply saying it holds no application from you |
| A dealership that sent your application further than you agreed | The dealership paperwork showing which lenders you authorized |
| A clerical error on a Social Security number | The lender’s confirmation that the application belonged to another person |
A dispute without documents is not automatically frivolous. It is simply easier to close, because the lender only has to confirm that the inquiry was tied to an application or an accepted offer.
FICO Publishes Two Figures for One Hard Inquiry, Under 5 and 5 to 10 Points
FICO publishes two figures for the same thing on two of its own pages. One says “for most people, one additional credit inquiry will take less than five points off their FICO Scores”; the other says hard inquiries can lower a score on average 5 to 10 points (FICO, 2026). Both are averages across files, not a price your file will pay, and neither page publishes what a deletion returns.
What the model does publish is where an inquiry stops mattering. FICO Scores only consider inquiries from the last 12 months, so an inquiry older than that costs nothing on FICO and deleting it changes nothing there. Rate shopping is pooled on purpose: on recent FICO versions, several mortgage, auto or student loan inquiries inside a 45-day window count as one, against 14 days on older versions, and FICO ignores those inquiries in the 30 days before scoring. VantageScore treats all hard inquiries inside a 14-day period as a single inquiry, with no loan-type restriction (VantageScore, 2026). Card applications get no pooling under FICO. How much inquiries weigh against the rest of a score is covered in our guide to whether hard inquiries hurt your credit score.
Disputing an Inquiry You Authorized Wastes the Dispute
The most expensive mistake is disputing an inquiry you made and regret. The lender produces the application, the bureau verifies it, and the inquiry stays. Section 611(a)(3) also lets a bureau end a reinvestigation it reasonably determines is frivolous or irrelevant, including one submitted without supporting information, provided it tells you why within 5 business days. Repeating the same dispute without new evidence invites exactly that.
The second is a template letter that demands removal without naming why the pull was unauthorized. It is still processed as a Section 611 dispute and routed to the lender for verification, and the lender only has to confirm the application exists. A dated dispute that names the unauthorized basis and attaches evidence gives the bureau something to weigh against the lender’s record.
What Removes a Hard Inquiry, and What Only Time Does
A hard inquiry comes off when the pull lacked a permissible purpose under Section 604: identity theft, a clerical error, or a lender that pulled without your authorization. Ask the lender to withdraw it, dispute it with each bureau under Section 611, and use the Section 605B block where fraud is involved, with a fraud alert or a freeze to stop the next one.
An inquiry you authorized stays. It displays for two years by bureau practice, counts toward FICO Scores for the first twelve months, and then stops mattering to FICO, whatever anyone offers to do about it sooner.
Which Tool Can Challenge an Unauthorized Inquiry at Every Bureau That Shows It
An unauthorized inquiry has to be disputed at each bureau reporting it, and the lender behind it answers each dispute from its own records. The choice here turns on two things: whether the tool reaches all three bureaus, and whether you see the dispute that goes out in your name.
| Tool | What you pay | What that buys for an unauthorized inquiry | Bureaus | Trustpilot |
|---|---|---|---|---|
| CreditRefresh | $49.99/mo, no setup fee, cancel anytime. Mail letters yourself free, or pay RushMail per letter | Scans all three reports and drafts an FCRA letter for each item you choose to challenge, at each bureau reporting it. You read and sign every letter | All three | 4.3 (9 reviews) |
| Dispute Beast | From $49.99/mo for required monitoring. Mail letters yourself free, or pay Sprint Mail per letter | One-click multi-bureau disputes, available only while the paid monitoring runs | All three | 4.2 (2,067 reviews) |
| DisputeBee | $49/mo personal, $129/mo business | Letter templates and a suggester; you import the report, spot the inquiry, then print and mail yourself | All three | 3.2 (68 reviews) |
| The Credit People | $99/mo standard, $119/mo premium, or $599 for 6 months | The firm challenges items for you across all three bureaus; you do not see or approve the letters | All three | 1.7 (17 reviews) |
| Lexington Law | $139.95/mo, invoiced at the end of each service period | A law firm challenges items for you; no self-serve tool if you want to write your own | All three | 3.2 (624 reviews) |
| Credit Karma | Free, paid for by lender referrals | Shows the inquiry for free; its Direct Dispute reaches TransUnion only and drafts nothing for the other two | TransUnion | 1.1 (912 reviews) |
Every price is that company’s own published rate, read off that company’s own site on September 15, 2026. Trustpilot scores and review counts as published on September 24, 2026.
A free app can show you an inquiry, and the offers beside it can create one. Viacheslav K., 1 star, July 27, 2026, on Credit Karma: “Based on that, I expected that if I wasn’t approved, I would at least receive the promised $25 Guarantee payment. Instead, my application was denied immediately. I received a hard inquiry on my credit report, which lowered my credit score by 3 points…” That inquiry came from an application he made, so it is accurate and stays. The tools above earn their price on the other kind, the pull nobody authorized.
How CreditRefresh Handles an Inquiry You Did Not Authorize
An inquiry you cannot place sits on the same report as every other item. CreditRefresh pulls all three bureau reports, flags items that look inaccurate, incomplete, unverifiable or too old to report, and drafts a tailored FCRA dispute letter for each item you choose to challenge, an inquiry included. Mail the letters yourself, or hand the round to RushMail for a small per-letter fee, and track each one against the roughly 30-day investigation window.
Follow-up is where the evidence sits. In CreditRefresh’s September 18, 2026 member-data extract, 2.3% of disputed bureau-level items in mailed rounds had a recorded outcome. Within that subset, 47.9% were no longer reported on a newer pull of the same bureau, while 52.1% remained reported with a changed balance, status or negative flag.
CreditRefresh is included with Refresh Monitoring at $49.99 a month, with no setup fee, no per-dispute charge and no contract. The bureaus decide every dispute, and an accurate inquiry is not something any letter can remove. You choose the items, and nothing is sent until you have reviewed and signed each letter.
It is backed by our 100% money-back guarantee: members who work the full program and see no bureau score rise above where they started can claim back every Refresh Monitoring payment. It is a refund promise, never a score promise.
Frequently Asked Questions
Can I get hard inquiries taken off my credit report?
Only inquiries that are inaccurate, unauthorized or the result of fraud. An inquiry from an application you made is accurate information, and it stays for the two years the bureaus display it. FICO Scores stop counting it after 12 months.
What is the fastest way to remove hard inquiries from my credit reports?
For identity theft, the Section 605B block: a bureau must block the fraudulent inquiry within 4 business days of receiving your identity theft report, proof of identity and supporting statement. For any other unauthorized pull, write to the lender and dispute with each bureau at once; the bureau has 30 days, extendable to 45, to reinvestigate.
Can a creditor do a hard inquiry without permission?
Not lawfully. Section 604 permits a hard pull for a credit transaction you initiate, and Section 604(f) bars obtaining a report for any purpose the section does not authorize. A willful violation exposes the company to actual or statutory damages of $100 to $1,000, punitive damages and attorney’s fees under Section 616.
How many points will my credit go up when a hard inquiry is removed?
No primary source publishes a figure for what a deletion returns. FICO puts the cost of one inquiry at under 5 points on one of its pages and 5 to 10 points on average on another, and FICO Scores ignore inquiries older than 12 months. An inquiry past that point costs nothing on FICO, so deleting it changes nothing there.
How bad is 2 hard inquiries?
Each is priced on its own by FICO unless both are mortgage, auto or student loan inquiries inside the rate-shopping window, which count as one. VantageScore counts any hard inquiries inside 14 days as one. Card applications get no pooling under FICO.
Is it worth disputing a hard inquiry?
Worth it for a pull you never authorized, especially one under 12 months old that FICO is still counting, and essential where it signals identity theft. Not worth it for an application you made: the lender will verify it and the inquiry stays.
Why do I have several inquiries from one car purchase?
A dealership can send one financing application to several lenders, and each lender’s pull is its own inquiry. FICO counts auto inquiries inside its 45-day window as one on recent versions, so the score effect is usually one inquiry even when the report lists several.
Results may vary. No specific outcome is guaranteed. This article is general information about hard inquiry removal under the FCRA, not legal advice. CreditRefresh helps consumers identify potential FCRA issues and generate dispute letters, but does not provide attorney review of any letter or claim. Consumers facing identity theft, permissible-purpose violations, or significant damages from unauthorized credit pulls should consult a licensed consumer protection attorney.
CreditRefresh drafts the bureau letter for a hard inquiry you never authorized, at each bureau that reports it, and nothing is mailed until you have read and signed it. Backed by a 100% money-back guarantee.
