A Hard Inquiry You Don't Recognize Is on Your Credit Report. Here's What to Do
A company needs a legal reason to pull your report. Find out who pulled it, dispute it for investigation, and check for identity theft, all for free.
You pull your credit report and there’s a name in the inquiries section you’ve never heard of. A lender, maybe a finance company, pulling your credit on a date you can’t place. You didn’t apply for anything. Or you don’t think you did. Either way, you have real rights here, and none of them cost a dime.
This post contains an affiliate link. I’ll always tell you the free option first.
What a hard inquiry is, and why it matters
An inquiry is a record that somebody looked at your credit report. There are two kinds.
A soft inquiry happens when you check your own report, when a company screens you for a pre-approved offer, or when an employer runs a background check. The Consumer Financial Protection Bureau (CFPB) says soft inquiries “will not affect your credit scores,” and only you see them.
A hard inquiry usually happens after you apply for credit. Other lenders can see it, and it can affect your score. According to myFICO, hard inquiries “typically remain on your credit report for up to two years,” but “FICO Scores only consider inquiries from the last 12 months.” myFICO describes the effect as small.
Do that math. An inquiry sits on your report for about 24 months, and FICO scores count it for about 12 of them. So half of its life on your report, it isn’t being counted in your FICO score at all. That’s worth knowing before anybody tries to sell you on how urgent it is.
Still, an inquiry you didn’t authorize is a problem for a bigger reason than points. It can be the first sign that someone is using your name to apply for credit.
What the law says
The Fair Credit Reporting Act (FCRA) doesn’t let just anyone pull your report.
A company needs a “permissible purpose.” Under 15 U.S.C. § 1681b(a), a credit bureau can furnish your report “under the following circumstances and no other.” The common ones: you gave written permission (§ 1681b(a)(2)), the company plans to use it “in connection with a credit transaction involving the consumer” (§ 1681b(a)(3)(A)), or it has a “legitimate business need” tied to a transaction you started or an account you already have (§ 1681b(a)(3)(F)). Section 1681b(f) says no one may obtain a report for any other purpose, and the user has to certify its purpose.
You have the right to know who looked. Under § 1681g(a)(3), when you ask for your file, the bureau must identify each company that pulled your report in the past year, or the past two years for employment. If you ask, it must give you that company’s address and phone number.
You can dispute it. Under § 1681i(a)(1)(A), a bureau must reinvestigate a disputed item within 30 days, with up to 15 more days if you send new information during that window (§ 1681i(a)(1)(B)). If it can’t be verified, § 1681i(a)(5)(A) says the bureau must “promptly delete” or fix it. You get written results within 5 business days after it finishes, under § 1681i(a)(6)(A).
Pulling a report without a reason has consequences. Under § 1681n(a)(1)(B), a person who gets your report “under false pretenses or knowingly without a permissible purpose” owes you your actual damages or $1,000, whichever is greater, plus possible punitive damages and attorney’s fees. Under § 1681q, anyone who “knowingly and willfully” gets your information from a bureau under false pretenses can be fined, imprisoned for up to 2 years, or both.
The honest part: many “mystery” inquiries were authorized
Before you fire off a dispute, check one thing. Did you shop for a car in the last two years?
Capital One’s own help page says it plainly: “an auto dealer will likely submit your financing application to multiple lenders.” Each of those lenders pulls your report. So you might see four or five lender names you never talked to, all on the same day. When you signed the dealer’s credit application, you most likely gave permission for that.
Those aren’t errors. FICO’s newer scoring versions treat mortgage, auto and student loan inquiries made within 45 days as one inquiry, according to myFICO. Older versions use a 14-day window. A dispute of an inquiry you actually authorized won’t go anywhere. Experian says it directly: “You can’t remove a legitimate hard inquiry from your credit report.”
So match dates first. A cluster of lenders on the day you bought a car is probably the dealer. A single finance company on a random Tuesday when you were home watching TV is a different story.
Exactly what to do
- Pull all three reports for free. Go to AnnualCreditReport.com. Federal law guarantees a free report from each bureau every 12 months, and the FTC says the three bureaus have permanently extended free weekly reports. Each bureau keeps its own file, so check all three.
- Write down the company name and date for every hard inquiry you don’t recognize.
- Ask the bureau for contact details under § 1681g(a)(3)(B), or look the company up yourself. Call or write and ask what application they have on file and what permissible purpose they relied on. Keep notes with names and dates.
- If it was a real application you forgot, let it go. It’ll stop counting in your FICO score after 12 months.
- If nobody can show you authorized it, dispute it for investigation with each bureau that shows it. Say you didn’t apply for credit with that company on that date and didn’t authorize the pull. Send it by certified mail or keep a screenshot of an online dispute.
- If it looks like identity theft, go further. Check for new accounts you didn’t open. Place a free credit freeze at each bureau; the FTC says that while a freeze is in place, “nobody can open a new credit account.” File a report at IdentityTheft.gov to get a free recovery plan. If a fraudulent account did get opened, § 1681c-2(a) requires the bureau to block that information within 4 business days after it gets your identity theft report, proof of identity, the items you’re disputing and your statement that they aren’t yours.
If you want to watch all three reports: For daily alerts and your FICO scores from all three bureaus while you dispute, the service I point people to is IDIQ’s 3-bureau monitoring. You don’t need it to dispute; the free reports work. It just saves you from checking by hand. Affiliate disclosure: that’s an affiliate link. If you sign up, I earn a commission at no extra cost to you.
What to watch out for
“Inquiry removal” sellers. Some outfits promise to wipe every inquiry off your report. Nobody can promise that. The law only requires the bureau to investigate, and a legitimate inquiry stays. Paying someone to dispute an inquiry you authorized is paying for something you can do yourself, on an item that stops counting in your FICO score after a year anyway.
Ignoring a real red flag. One stray inquiry from a lender you never contacted is cheap to check and expensive to ignore. If it’s fraud, the inquiry is the least of your worries. The account that comes next is the real damage.
A dead end with the bureau. If a bureau or company won’t give you a straight answer, you can file a complaint with the CFPB at consumerfinance.gov/complaint.
My own position, plainly: CreditShield is a free do-it-yourself credit app with a one-time $47 Full Access upgrade. It helps you read your reports and write your own disputes. It can’t promise any result, and results vary. If you get stuck, bring it to the free CreditShield community on Skool.
This is educational information, not legal advice.
Sources
- 15 U.S. Code § 1681b, Permissible purposes of consumer reports — Legal Information Institute, Cornell Law School, accessed 2026-10-29
- 15 U.S. Code § 1681g, Disclosures to consumers — Legal Information Institute, Cornell Law School, accessed 2026-10-29
- 15 U.S. Code § 1681i, Procedure in case of disputed accuracy — Legal Information Institute, Cornell Law School, accessed 2026-10-29
- 15 U.S. Code § 1681n, Civil liability for willful noncompliance and § 1681q, Obtaining information under false pretenses — Legal Information Institute, Cornell Law School, accessed 2026-10-29
- 15 U.S. Code § 1681c-2, Block of information resulting from identity theft — Legal Information Institute, Cornell Law School, accessed 2026-10-29
- What is a credit inquiry? — Consumer Financial Protection Bureau, last reviewed 2025-09-05
- How long do hard inquiries stay on your credit report? — myFICO, accessed 2026-10-29
- Can You Remove Hard Inquiries From Your Credit Report? — Ben Luthi, Experian, 2026-02-25
- Why multiple lenders are on your credit report — Capital One, accessed 2026-10-29
- Free credit reports — Federal Trade Commission, updated June 2026
- What to know about identity theft — Federal Trade Commission, updated September 2024
