FCRA Violations: The Complete Guide
The Fair Credit Reporting Act grants consumers rights against bureaus and furnishers that outlast most corporate memory. This guide maps the 8 most weaponizable violations, what they pay in statutory damages, and how to prove them forensically.
What the FCRA actually protects
Enacted in 1970, the Fair Credit Reporting Act (15 U.S.C. §1681 et seq.) regulates every consumer reporting agency (CRA) and every entity that furnishes data to them. It is strict-liability for negligent violations and statute-damages for willful ones.
Most consumers believe the FCRA is about disputing errors. It is far larger: it governs accuracy, reinvestigation, inquiries, identity, retention periods, notice, and third-party furnishing. Each obligation has its own section — and its own statutory damage amount.
The 8 most provable violations
- Obsolete information reporting — negative items older than 7 years (10 for bankruptcies) under §1681c(a). The CRA knows the date of first delinquency (DOFD) and still reports.
- Re-aging of DOFD — §1681c(c). Furnishers reset the "fell behind" date to keep accounts in reports longer. Easy to prove with chronological statement pulls.
- Failure to investigate disputes — §1681i(a). When you dispute, the CRA has 30 days to investigate and respond. A boilerplate "verified" without real investigation is a willful violation.
- Post-bankruptcy debt reporting — §1681c(a)(1). A debt discharged in Chapter 7 that is still shown as owed is a per-se violation.
- Unauthorized hard inquiries — §1681b. Inquiries require "permissible purpose." Anything pulled without written authorization or a valid business reason is a §1681b(f) claim.
- Reinsertion without notice — §1681i(a)(5)(B)(ii). When an item is removed after dispute and later reinserted, the CRA must give 5-day written notice. Most don't.
- Duplicate tradelines — §1681e(b). The same account reported twice inflates your utilization and debt-to-income. Accuracy obligation.
- Mixed file / identity confusion — §1681e(b). Data from another consumer attached to your file. TransUnion v. Ramirez (2021) affirmed these are actionable in federal court.
15 U.S.C. §1681c, §1681e(b), §1681i, §1681b · FCRA
What violations pay
Section 1681n governs willful non-compliance: between $100 and $1,000 per violation in statutory damages, plus actual damages, plus punitive damages, plus attorney fees.
The willfulness standard was set by Safeco Ins. Co. of America v. Burr, 551 U.S. 47 (2007) — a defendant is willful when they act in reckless disregard of FCRA requirements, not just when they know they violate.
Section 1681o covers negligent violations: actual damages + attorney fees. No statutory floor, but no willfulness required either.
15 U.S.C. §1681n, §1681o · Safeco v. Burr, 551 U.S. 47 (2007)
How forensic proof changes the game
The difference between a letter-writer dispute and a legal claim is evidentiary integrity. Courts accept disputes; they reward evidence.
Credit Truth produces a triple-SHA-3 Merkle-chained audit of every tradeline, inquiry, and entry on your three-bureau file. Every anomaly is mapped to its exact statute, time-stamped, and cryptographically sealed so that at trial, the chain of custody is mathematically irrefutable.
This matters because bureaus rely on consumers being unable to prove what was shown to them on which date. Hash-sealed extracts make that defense collapse.
Next steps
If you spot even one of the above on your credit file, you likely have a claim. The hard part is proving it in a form a federal court accepts. That is the Credit Truth product.