Hard inquiries from companies you never approached

What the problem looks like on the report

The inquiries section lists who obtained the file and when. Hard inquiries, the kind associated with an application, are visible to other lenders and generally remain for two years. Soft inquiries, such as your own review or an account monitoring pull by an existing creditor, are shown only to you.

Trouble appears as hard inquiries from lenders you never contacted, from dealerships you never visited, or from a single dealership submitted to eight or ten banks on one visit after you authorized one application. Clusters dated within a few days of each other often accompany identity theft. Repeat pulls by a collection agency, a former landlord, or an employer's screening vendor after the relationship ended are a different category and turn on whether a permissible purpose still existed at the time of access.

Common causes

• Identity theft, where a fraudster applied for credit in your name.
• Dealership shotgunning, in which one signed authorization is used to submit many applications.
• Account review pulls coded as hard inquiries in error.
• Debt collectors accessing a file to locate assets rather than in connection with an account.
• A duplicate application submitted by a broker or a loan officer without renewed consent.

Documents to gather first

Start with the inquiry sections of all three reports, since a given pull may appear at only one bureau. Write down the exact name shown, the date, and the type. Then reconstruct what you were doing around each date, because the calendar frequently answers the question by itself. Keep any application you did sign, along with the authorization language, since a narrow authorization used broadly is a common source of dispute. Add any adverse action notice received, which identifies the bureau consulted, and preserve emails or texts from a dealership, broker, or lender that describe what they intended to submit.

How the dispute and escalation process generally works

Inquiries are handled differently from tradelines. Bureaus commonly take the position that an inquiry is a record of access rather than a statement of fact about the consumer, so the productive route is usually to write to the party that pulled the file and ask it to identify the permissible purpose on which it relied and to produce the authorization it claims to hold. Many inquiries are withdrawn at that stage. In parallel a dispute is filed with the bureau so the record shows the inquiry was challenged, and where the pull is connected to fraud it is documented alongside the identity theft materials.

Escalation follows the usual path: written notice, a complaint to the Consumer Financial Protection Bureau, and where a party cannot articulate a permissible purpose, the private remedies the statute provides for negligent or willful noncompliance. It is worth being realistic that a single inquiry rarely justifies litigation on its own; patterns and refusals to respond are what change that calculus.

When legal representation becomes appropriate

Consider representation when a company will not identify the basis for its access, when a cluster of pulls accompanies fraudulent accounts, when a collector or former counterparty keeps accessing the file after any relationship ended, or when the inquiries have materially affected a mortgage application already in progress.

No result can be promised. What is realistic is a documented demand that each party either justify its access or remove the record of it.