Hard inquiries get more blame than they deserve — but that doesn't mean you should ignore them. When one shows up that you never authorized, that's a federal violation you can and should fight.

In our practice at McCray & Associates, we pull credit reports for new clients every week, and one of the first things we scan is the inquiry section. Most of the time, authorized inquiries are just part of someone's credit history — small dents that fade on their own. But occasionally we find a pull the client has absolutely no memory of, and that changes the conversation entirely. This guide will walk you through the difference, the law behind it, and exactly what to do depending on which situation you're in.

What a Hard Inquiry Actually Is

When you apply for credit — a credit card, an auto loan, a mortgage, a personal loan, even some apartment rentals — the lender pulls your credit file to make a lending decision. That pull is called a hard inquiry (also written "hard pull"). The bureau records it, and it stays on your report for two years.

Hard inquiries do lower your credit score, but the impact is modest. FICO typically deducts fewer than five points per inquiry, and the effect on your score fades well before the inquiry disappears from your report. After about 12 months, most scoring models stop factoring the inquiry into your score at all, even though it stays visible on your report for another year.

The reason scoring models care at all is that applying for multiple new credit lines in a short period can signal financial stress. That logic is reasonable, but it shouldn't be overstated — a handful of inquiries over a year rarely makes the difference in whether you qualify for something.

Hard vs. Soft Inquiries: What Counts Against You

Not every credit check is a hard inquiry. Knowing the difference prevents unnecessary worry.

Type Who triggers it Does it affect your score? Visible to lenders?
Hard inquiry You apply for new credit; landlord or employer may trigger a variation Yes — typically under 5 points per inquiry Yes
Soft inquiry You check your own credit; pre-approval screenings; existing creditor account reviews; background checks No No (only you can see them)

Checking your own credit at annualcreditreport.com or through a monitoring service is always a soft pull. It will never hurt your score. Pull your reports as often as you need to — there is no downside.

The Rate-Shopping Exception

Here is a detail that matters if you are shopping for a mortgage, auto loan, or student loan: the credit scoring models have a built-in protection for rate comparison.

Under FICO scoring, multiple hard inquiries for the same loan type made within a 14-day window are grouped and counted as a single inquiry. Newer FICO versions extend that window to 45 days. VantageScore uses a similar 14-day rolling window. The idea is that shopping five lenders for the best mortgage rate is responsible behavior, not a sign of desperation — so you should not be penalized for it.

The deduplication only applies to installment-style credit (mortgage, auto, student loans). Applying for five credit cards in a month does not get the same treatment. If you are planning a major purchase, shop your financing within a tight window and let the scoring models work in your favor.

When a Hard Inquiry Can Legitimately Be Removed

This is where I need to be direct with you, because there is a lot of misleading information online: you cannot remove a hard inquiry just because you don't like it. If you authorized the pull — meaning you signed an application or gave explicit consent for a credit check — that inquiry is accurate. Disputing an accurate, authorized inquiry is not a legitimate strategy, and any company telling you otherwise is misleading you.

That said, there are two genuine grounds for removal:

1. You did not authorize the pull (no permissible purpose)

The Fair Credit Reporting Act, specifically 15 U.S.C. §1681b (Section 604), defines the limited circumstances under which a creditor may pull your credit report. This is called "permissible purpose." If a company pulled your report without your authorization and without a legally recognized permissible purpose, that is a federal violation. The inquiry must be removed.

Common examples we see in practice:

  • A creditor pulls your report after you declined an offer or withdrew an application
  • A company you have no relationship with runs your credit without your knowledge
  • A former employer or landlord pulls your credit without the legally required written consent
  • A lender runs your report multiple times after an initial authorized pull, without new authorization

2. The inquiry is connected to identity theft

If someone opened an account in your name, there will almost certainly be a hard inquiry attached to that fraudulent application. In this case, removing the inquiry is part of a broader identity theft recovery process that also involves disputing the fraudulent account itself. We cover the full recovery process in our guide on credit freeze vs fraud alert.

Step-by-Step: How to Dispute an Unauthorized Hard Inquiry

If you find an inquiry you don't recognize, here is the process.

Step 1: Pull all three reports

Get your free reports from annualcreditreport.com. The same unauthorized inquiry may appear on one bureau's report, two, or all three — and you will need to dispute with each bureau where it appears.

Step 2: Try to identify the creditor

The inquiry entry will list the creditor's name and the date of the pull. Sometimes an unfamiliar name is just a parent company or a subsidiary. Do a quick search before concluding you have no connection to the company. If you genuinely cannot identify it and you have no account with them, proceed with the dispute.

Step 3: Send a dispute letter to the bureau

Send a written dispute by certified mail with return receipt to each bureau reporting the inquiry. Written disputes create a paper trail that online disputes sometimes do not. Bureau addresses:

  • Experian — P.O. Box 4500, Allen, TX 75013
  • Equifax — P.O. Box 740256, Atlanta, GA 30374
  • TransUnion — P.O. Box 2000, Chester, PA 19016

Under the FCRA Section 1681i, the bureau has 30 days to investigate and respond (21 days for disputes initiated after receiving a free annual report in some situations). If the creditor cannot verify that it had a permissible purpose for the pull, the inquiry must be deleted.

Step 4: Notify the creditor directly

At the same time, send a separate dispute letter to the creditor's compliance or legal department. This creates a second pressure point and establishes that you formally challenged the inquiry on both ends.

Here is a sample dispute letter you can adapt:

[Your Full Name]
[Your Address]
[City, State, ZIP]
[Date]

[Bureau Name]
[Bureau Address]

Re: Dispute of Unauthorized Hard Inquiry — [Your Full Name], DOB [XX/XX/XXXX], SSN Last 4 Digits: XXXX

To Whom It May Concern,

I am writing to dispute an unauthorized hard inquiry appearing on my credit report. Under the Fair Credit Reporting Act, 15 U.S.C. §1681b, a person may only access a consumer's credit report if there is a permissible purpose. I did not authorize the pull described below, nor do I have any existing or prospective credit relationship with the creditor listed.

Inquiry to Dispute:
  Creditor Name: [Name as shown on report]
  Date of Inquiry: [Date as shown on report]

I request that you investigate this inquiry and remove it from my credit report if the creditor cannot provide documentation demonstrating my authorization and a valid permissible purpose.

Please confirm receipt of this dispute and provide me with the results of your investigation in writing within the timeframe required by the FCRA.

Sincerely,
[Your Signature]
[Your Printed Name]

Enclosures:
  - Copy of credit report with inquiry circled
  - Copy of government-issued ID
  - Copy of proof of address

Keep copies of everything. If the bureau fails to investigate and respond within 30 days, or reinserts the inquiry without proper notice, those are additional FCRA violations.

Hard Inquiries and Identity Theft: Don't Skip This Step

An unauthorized hard inquiry is not always just a billing error or a data mix-up. It can be an early sign that someone is attempting to open credit accounts in your name. In our experience, clients who discover one unauthorized inquiry often find a fraudulent account or additional unauthorized inquiries once they look more carefully.

If you suspect identity theft, file a report at the FTC's identity theft portal at identitytheft.gov. That report generates a personalized recovery plan and gives you documentation that strengthens your FCRA disputes. You should also consider placing a credit freeze at all three bureaus, which prevents any new hard pulls until you lift it. A freeze is free, immediate, and does not hurt your score. See our breakdown of credit freeze vs fraud alert for when each tool is appropriate.

Why "Inquiry Removal Services" Are Usually a Scam

Every few months, someone comes into a consultation after paying a company anywhere from $50 to $200 per inquiry for "guaranteed removal." I am going to be plain with you: if those were authorized inquiries, that money was wasted.

No company can legally remove an accurate, authorized hard inquiry. The FCRA does not give you the right to dispute accurate information simply because it is negative. A company that promises to remove all your inquiries for a fee is either:

  1. Charging you to do what you could do yourself for free (dispute unauthorized ones), or
  2. Using dispute tactics that involve submitting false claims — which is fraud on your part and theirs

The Credit Repair Organizations Act (CROA) requires credit repair companies to be honest about what they can and cannot do. Promising to remove authorized inquiries is a violation of that law. If you have paid for this type of service, you may have recourse under CROA.

For more on how to handle the dispute process yourself without paying inflated fees, read our guide on how to dispute credit report errors.

What to Do About Authorized Inquiries

If an inquiry is authorized — you applied for credit, you consented to the pull — the honest answer is: leave it alone. There is no legitimate dispute to file, and your energy is better spent elsewhere.

What you can do:

  • Stop applying for credit you don't need. Every application is a new inquiry. If you're preparing for a major purchase like a home, avoid new applications for at least six months beforehand.
  • Let them age. Authorized inquiries stop affecting your score after 12 months and disappear from your report after 24 months. That clock is already running.
  • Focus on the factors that move the needle more. Payment history and credit utilization together account for roughly two-thirds of your FICO score. Getting those right matters far more than worrying about a few inquiries. See our detailed guide on how to raise your credit score 100 points for where to focus your effort.

If you're not sure how to read the inquiry section of your report or want to understand the full picture of what lenders see, our guide on how to read your credit report walks through the structure of all three bureaus' reports.

The Bottom Line

Hard inquiries are one of the smaller factors in your credit score, but an unauthorized one is a federal violation — not a minor annoyance. If you find a pull you never authorized, dispute it with the bureau and the creditor in writing, cite the permissible-purpose requirements under 15 U.S.C. §1681b, and check your full reports for signs of identity theft. If the inquiry was authorized, let it age and put your attention on the factors that actually move your score.

If you're not sure which category your inquiries fall into, or you want a second set of eyes on your full credit report, book a free 30-minute consultation with our team. We'll tell you exactly what's worth fighting and what isn't — no upsell, no inflated promises.