How Credit Bureaus Make Money, and Whose Side That Puts Them On.

Equifax, Experian and TransUnion sell credit reports, scores, risk models and identity checks to the businesses that want to know about you. Equifax reported revenue of $6,074.5 million for 2025 and TransUnion reported $4,576 million for the same year, while Experian reported $8,445 million for its year ended 31 March 2026, about $19.1 billion between the three. The two that break out a consumer line report $2.8 billion of that between them, roughly one dollar in seven.

So the answer to how credit bureaus make money is also the answer to the harder question, the one people reach only after a dispute comes back verified. The data arrives free from lenders, collectors and public records, the money arrives from whoever buys access, and the Fair Credit Reporting Act is the only thing standing between those two facts and your report.

Lenders, Landlords and Insurers Buy a File You Never Opened

Most of that $19.1 billion arrives from somebody checking on somebody else. Banks and card issuers pay to pull a report before they price a loan. Landlords, insurers, utilities and employers pay for their own versions of the same file. The bureaus also package the file into analytics products and prescreened marketing lists, so a company can buy a set of people who look like its customers. You buy back the small consumer slice below; you cannot take your file elsewhere, because you never put it there.

The marketing-list stream is the one place the statute hands you a switch. Section 1681b(e) lets you tell the bureaus you do not consent to your report being used for a credit or insurance offer you did not initiate: a call or an online request blocks prescreened offers for five years, and a signed election form blocks them for good. It takes you out of one buyer’s list. It does not take you out of the file, and every other stream above carries on.

That is an unusual arrangement and it is worth saying plainly what it does to you. In an ordinary market a customer who is treated badly leaves. You have no account to close, no bureau to switch to, and no way to stop a furnisher sending your payment history in. The only thing you can do is correct what is in there, and the only reason that works is that Congress said it must.

Equifax’s Biggest Segment in 2025 Was Employment and Income Verification

Workforce Solutions, which sells employment and income verification to lenders, employers and government agencies, brought Equifax $2,582.3 million in 2025 against $2,078.5 million for U.S. Information Solutions, its American credit reporting business. The largest thing the oldest of the three bureaus sells is a record of where you work and what you are paid.

Payroll data reaches that database the same way credit data reaches the other one. An employer or a payroll processor sends it. No consumer signs up for it. The people reading it are mortgage underwriters, prospective employers and agencies verifying a benefit claim.

The point for a dispute is that the file is wider than the credit report you are looking at. Equifax, Experian and TransUnion each sell into hiring, leasing, insurance pricing and collections, and each of those buyers is reading a record you did not compile and cannot leave.

The Consumer Line Is the Smallest Thing Two of the Three Report

TransUnion’s Consumer Interactive line, reported inside its U.S. Markets segment, brought in $575.3 million of its $4,576 million total for 2025. Experian reported $2,257 million of Consumer Services against $6,168 million of business-to-business revenue for its year to 31 March 2026. That is $2,832.3 million between them, about one dollar in seven of the $19.1 billion the three reported, and better than a quarter of Experian’s own revenue. Equifax does not break out a consumer line at all, so whatever it sells consumers sits inside the three segments above rather than outside them.

What that line sells is monitoring, alerts, locks and identity products. The CFPB defines a credit monitoring service as one that charges a fee to watch your reports and tell you when they change, notes that some cost over $15 a month, and says most of them do not protect your information from being stolen and only alert you afterwards (Consumer Financial Protection Bureau, 2025). Section 1681j(a) of the FCRA already entitles you to your own file from each bureau free, once in any 12-month period, which is the part a paid alert does not add.

The 2017 Equifax breach shows the loop closing. The FTC says the personal information of 147 million people was exposed and that the settlement ran up to $425 million, with free credit monitoring and free Equifax reports for consumers as part of the remedy (Federal Trade Commission, 2019). The compensation for a data exposure was a subscription to the product that watches for data exposure.

The free consumer products have their own paymaster. Credit Karma is free because lenders pay for the referral, so the app is built to move you toward an application. Eduardo F., 1 star, September 14, 2026, reviewing Credit Karma on Trustpilot: “Credit Karma gets people to apply for loans or credit cards with outstanding approval odds which I believe to be a complete lie. So they make me hurt your credit score with hard inquiries, when in actuality you have 0 approval odds, not outstanding.” Whoever pays shapes what the product pushes you to do, which is the same lesson the monitoring question turns on.

Your Dispute Asks a Bureau to Overrule the Customer That Pays It

A dispute puts two parties in front of the bureau and only one of them is a customer. You say the item is wrong. The furnisher, a bank or a collector, says it is right, and the furnisher is the one with a data contract. Of the 1,065,699 complaints recorded in the CFPB’s public Consumer Complaint Database between July 2025 and June 2026 about a company’s investigation into an existing problem, 50.5% said the investigation did not fix the error and 43.4% said it took more than the 30 days the law allows, in our own analysis of that database. Those are unverified consumer allegations.

The routing explains a good deal of it. Disputes travel through e-OSCAR, the industry’s automated exchange, as a coded Automated Credit Dispute Verification rather than as the letter and the bank statement you sent, so the company that reported the item answers a category. The regulator has taken that to court: in a complaint filed January 7, 2025 the CFPB alleged Experian conducted sham reinvestigations of disputed items (Consumer Financial Protection Bureau, 2025).

None of that requires anyone to act in bad faith. A bureau processing millions of disputes a year against a standard of reasonableness will spend what reasonableness costs and no more, and what comes back reflects that budget.

The FCRA Is Why a Dispute Gets Investigated at All

Four statutory duties do the work that a paying relationship would normally do. They bind whether or not the bureau wants the business, and they are the reason a letter from a person with no account and no invoice gets answered.

Section 611, at 15 U.S.C. § 1681i, also requires the bureau to delete or correct anything it cannot verify, which is the clause that makes a missed 30-day deadline worth writing about. Section 1681i(a)(6)(B) and (a)(7) are the pair people use least and should use most: asking for the method of verification makes the bureau name the company it actually contacted, and it owes that description within 15 days of the request.

Section 605, at 15 U.S.C. § 1681c, runs a separate clock. Most negative items may be reported for seven years and title 11 cases for ten from the order for relief, after which the item is obsolete and can be disputed on that ground alone, which is how the fall-off actually works.

Furnishers Report to Collect, and That Is Why Errors Lean One Way

The bureaus buy none of their raw data, so the party choosing what gets reported is the party trying to get paid. A collector that bought a charged-off account has a reason to report a later date of first delinquency, because that keeps the item on the file longer. It has a reason to report the balance high, because that is what the next lender reads. Section 1681c(c)(1) fixes the first clock against it: the seven years run from 180 days after the delinquency that led to the charge-off or the collection, so the item falls off about seven and a half years after the original miss, and a later date reported by a later owner does not restart it.

The Federal Trade Commission’s congressionally mandated accuracy study found that 1 in 5 consumers had an error on at least one of their three credit reports, and that for 5% of consumers the error was serious enough to raise the price they pay for credit or insurance (Federal Trade Commission, 2013). Our guide to what that study did and did not find sets out the difference between the two figures.

What consumers themselves file follows the same shape. Of the 3,482,718 complaints recorded in the CFPB’s public Consumer Complaint Database between July 2025 and June 2026 about incorrect information on a credit report, 66.9% said the information belongs to someone else, in our own analysis of that database. These are unverified consumer allegations, and the largest single thing people say about a credit report is that it describes a different person, which is the mixed-file problem.

A furnisher owes its own duty here. Section 623 of the FCRA bars a furnisher from reporting information it knows or has reasonable cause to believe is inaccurate, and it can be disputed directly as well as through the bureau. The three words that carry a bureau dispute, inaccurate, outdated and unverifiable, are the same three the furnisher has to answer for.

Equifax and TransUnion Each Draw 5.4% of Debt-Collection Complaints

Among the 333,590 debt-collection complaints recorded in the CFPB’s public Consumer Complaint Database between July 2025 and June 2026, the most-named companies were CL Holdings at 6.1%, Resurgent Capital Services at 5.6% and Encore Capital Group at 5.5%, then Equifax at 5.4% and TransUnion at 5.4%, then Portfolio Recovery Associates at 5.0% and Experian at 4.4%, in our own analysis of that database. Two credit bureaus sit inside the top five of a debt-collection list.

The three names above the bureaus are filing entities, not the names that appear on the collection letters behind them. Complaints about LVNV Funding file under Resurgent Capital Services, complaints about Midland Credit Management file under Encore Capital Group, and complaints about Jefferson Capital Systems file under CL Holdings, so a consumer who searches the database for the company that wrote to him gets nothing back. Portfolio Recovery Associates is the one large buyer that files under its own name.

Handle that with its size caveat attached. These are unverified consumer allegations, and a complaint count tracks how much business a company does as well as how it behaves. The three bureaus touch nearly every collection account in the country, so volume alone says little about conduct.

What it does say is where people go. A collection item is something the collector created and the bureau displays, and a large share of consumers take the problem to the company showing it. That is the correct instinct under the FCRA, and it is also why suing a bureau is a live option in a way that suing over a bad customer-service call is not.

Experian Priced New-Car Loans From 4.55% to 16% by Score Band

The system does real work for people whose files are right. A lender with no history on a borrower prices the unknown, and that price lands on everyone. Average new-car APRs ran from 4.55% for superprime borrowers at 781 and up to about 16% for deep-subprime borrowers at 300 to 500 in the first quarter of 2026 (Experian, 2026). That spread is the price of a score band, and the thing that mostly separates the bands is repayment history a dispute cannot touch. What an error costs is the Federal Trade Commission’s other figure from the same study: for 5% of consumers the mistake on the file was serious enough to raise the price they pay for credit or insurance, which is what being carried across a band like that one looks like.

Credit reporting also sits inside a set of consumer rights that most data industries never granted. You can see your own file, dispute what is in it, demand to know who verified an item, and complain to a federal regulator with supervisory authority over the companies holding it. That is more than a data broker owes you, and it is the honest half of the argument.

The criticism is narrower than the bureaus being villains. Their economic interest points at the institutions that pay them, dispute work is a cost against that interest, and a consumer who expects a neutral referee is expecting something nobody is paying for.

An Item-Specific Dispute Names the Field, the Value and the Statute

A dispute that names one field, one correct value and one duty is harder to answer with a code than a letter saying the account is wrong. The e-OSCAR path condenses whatever you send into a category, so the more of your claim you can put into the category itself, the more of it survives the trip.

1. Name the item and the field. The account, the furnisher, the account number as shown, and the exact line that is wrong: balance, status, date of first delinquency, or the fact that the account is not yours.
2. State the correct value. Say what the field should read. A dispute with no proposed correction gives the furnisher nothing to check against.
3. Attach the document. The statement, the payoff letter, the police report. Section 1681i(a)(3) lets a bureau stop a reinvestigation it reasonably finds frivolous or irrelevant, including where you have not given it enough information to investigate, and a document is the cheapest way to clear that bar. If it does stop, it has 5 business days to tell you and to name what it needs.
4. Cite the duty. Section 1681i for the reinvestigation, § 1681c(a) for an item past its window, § 1681c(c)(1) for a collection re-aged past its window, and § 1681i(a)(6)(B) when you want the verifier named.
5. Date the delivery. An online form leaves you a confirmation number and certified mail leaves you a signed receipt. Either one fixes the day the 30 days started.

Run each bureau separately. Each keeps its own file, owes its own duty, and can reach a different answer on the same account, which is why a template sent to all three usually underperforms three item-specific letters. Our guide to filing the dispute itself walks the form.

A CFPB Complaint Puts the Bureau in Front of Its Own Regulator

The CFPB supervises the three nationwide bureaus directly, so a complaint filed there is not a customer-service ticket. The complaint is sent to the company, and it is published only after the company responds or 15 days pass, which means a written answer on the record either way.

The regulator is already reading a great deal of this. The CFPB reported that complaints about the three largest nationwide credit reporting agencies rose almost 3,000% since January 1, 2020, and that of more than 5.6 million complaints it logged from January 1, 2024 to June 30, 2025, about 3.9 million named Equifax, Experian or TransUnion (Consumer Financial Protection Bureau, 2025).

Use it after the bureau has answered you, not instead of asking. The complaint works because it arrives with a dispute record behind it: the letter, the delivery date, the response that verified an item you can show is wrong. Our guide to filing a CFPB complaint covers the form.

The Business Model Is Public, and So Are the Duties It Runs Under

Nothing here is hidden. Three public companies publish their segment revenue, and the split says the same thing every year: the buyers are lenders, employers, landlords and insurers, and the people in the files are the inventory. You cannot change who pays them.

What you can change is how expensive the duty is to ignore. The data still arrives free and the money still arrives from the buyers, but § 1681i sits between those two facts and your report, and it answers to whoever writes the better dispute. Name the field, state the value, attach the proof, date the delivery, and keep everything that comes back.

Who helps you put a report error in writing to the bureau

A bureau builds the file, but the wrong entry can become your problem to sort out. In our September 18, 2026 data, 35.1% of paying CreditRefresh members had a negative entry already marked as disputed by the consumer. That mark records a dispute, not its result. Compare who helps you read the file, prepare the letter and check what comes back.

Every price here is that company’s own published rate, read off that company’s own site on September 15, 2026. Trustpilot scores and review counts as published on September 24, 2026.

Free monitoring and a paid dispute tool cover different parts of the job. One helps you watch the report. The other helps you put a specific error into a letter you can send.

Put the report error in a letter you control with CreditRefresh

You should not have to learn the credit bureau’s whole business just to challenge a wrong entry. CreditRefresh scans all three reports and drafts an FCRA letter for each item you choose to dispute. You can read what it says about the error and check it against your records before you sign.

We also help you follow the report after the letter goes out. In our September 18, 2026 member data, 47.9% of disputed items with a recorded outcome no longer appeared on a later report from the same bureau. Outcomes were recorded for 2.3% of items in mailed rounds, across all dispute types. Monitoring gives you a way to check those changes on your own reports.

Becca, 5 star, July 25, 2026, on Trustpilot: “…it instantly pulled up my reports and flagged the things that were bringing down my credit score so that I could review and address those problem areas…” Jean L., 5 star, August 24, 2026, on Trustpilot, on our support: “The response time to my questions were very rapid and filled with complete/specific detailed instructions (not coined nor ‘auto-reply’)…”

CreditRefresh comes with Refresh Monitoring at $49.99 a month, with no setup fee, no charge per dispute and no contract. You can cancel any time. We help prepare the letter and log when the round goes out; you review and sign every letter first.

It is backed by our 100% money-back guarantee: members who work the full program and see no bureau score rise above where they started can claim back every Refresh Monitoring payment. It is a refund promise, never a score promise.

Frequently asked questions

Do banks check all three credit bureaus?

Many lenders pull one, and mortgage lenders generally pull all three. Each bureau keeps its own file from its own furnishers, so an item can sit on one report and not the others, which is why a dispute has to go to each bureau separately.

What cannot be removed from your credit report?

Accurate, current, verifiable information stays. Section 1681c(a) sets the outer limits instead: most negative items come off at seven years and title 11 cases at ten, and an item past its window is disputable on that basis.

Is 550 a poor credit score?

Yes, on FICO’s own published bands. FICO divides the 300 to 850 scale into five bands and puts Poor below 580, Fair at 580 to 669, Good at 670 to 739, Very Good at 740 to 799, and Exceptional at 800 and up (FICO, 2026).

Do you have to pay to see your own credit report?

No. Section 1681j(a) of the FCRA entitles you to one free copy of your file from each nationwide bureau in any 12-month period. The three bureaus currently supply more than that minimum through annualcreditreport.com, which is their practice rather than the statutory duty. A paid monitoring subscription buys alerts and extra pulls on top of both.

Can you stop the credit bureaus from sharing your report?

You can freeze it. Section 1681c-1 requires a nationwide bureau to place a security freeze free of charge no later than one business day after a request made by phone or secure electronic means, and to lift it within one hour. A freeze blocks new creditors from seeing the file; it does not change what is in it.

Who regulates the credit bureaus?

The Consumer Financial Protection Bureau supervises the three nationwide bureaus and can examine them, and the Federal Trade Commission enforces the FCRA alongside it. Consumers also hold a private right of action under the statute, so enforcement does not depend on a regulator acting.

Do the credit bureaus make money when you dispute an error?

No, and that is the point of the duty. A bureau may not charge you to file a dispute or to receive the result, so a reinvestigation is a cost it carries under § 1681i rather than a service it sells.

Last reviewed: September 2026

This article is for educational purposes only and does not constitute legal or financial advice. CreditRefresh disputes information that is inaccurate, incomplete, unverifiable or too old to be reported, and accurate items stay. Consumers with questions about their own rights should consult a licensed attorney or contact the Consumer Financial Protection Bureau directly.

CreditRefresh is built for the part of this you can actually change, the dispute record the FCRA makes a bureau answer. Connecting your three reports takes a few minutes, and the first scan is ready the same day. Backed by a 100% money-back guarantee.

Start your three-bureau scan with CreditRefresh →