15 U.S.C. § 1681 et seq.
FCRA: suing over an inaccurate credit report
A federal claim in United States district courts · Last verified August 26, 2026
The Fair Credit Reporting Act is the oldest federal privacy statute in the United States, and the claim it creates has two gates that stop most people before they reach the merits.
The first is procedural: you cannot sue the bank that reported wrong information until you have disputed it through the credit bureau. Complaining to the bank does nothing for your claim.
The second is constitutional: since 2021, an inaccurate report that was never shown to anyone may not be a concrete injury at all.
What the claim is
Someone in the credit-reporting system got your information wrong, or handled it improperly. In practice:
- A credit bureau — Equifax, Experian, TransUnion — reported an account that is not yours, a balance that is wrong, or a debt discharged in bankruptcy.
- A furnisher — the bank, card issuer, or debt buyer that feeds data to the bureaus — failed to investigate properly after you disputed.
- Someone pulled your report without a permissible purpose.
- A user of the report took adverse action without the required notice.
The consequences are concrete: a denied mortgage, a higher rate, a lost job offer.
Where the right comes from
Two express private rights of action, split by the defendant's state of mind. One covers willful noncompliance and unlocks statutory and punitive damages. The other covers negligent noncompliance and reaches actual damages only.
Underneath sit the substantive duties: bureaus must follow reasonable procedures to assure maximum possible accuracy, must reinvestigate disputes, and furnishers have duties that arise once a dispute reaches them.
What a plaintiff has to prove
Against a credit bureau for an inaccurate report, four elements:
- The bureau prepared a report containing inaccurate information.
- The inaccuracy resulted from the bureau's failure to follow reasonable procedures to assure maximum possible accuracy.
- The consumer suffered injury.
- The injury was caused by the inaccurate entry.
Element two matters more than it looks. This is not strict liability. A bureau that made an error despite reasonable procedures does not lose.
Against a furnisher, the claim is not that it reported something false. It is that after receiving notice of a dispute from a bureau, it failed to conduct a reasonable investigation.
Willfulness for the statutory-damages route includes reckless disregard of a statutory duty, not only knowing violation — the standard set in Safeco Insurance Co. of America v. Burr.
How long you have to file
The statute sets two clocks and you get whichever expires first:
not later than the earlier of— (1) 2 years after the date of discovery by the plaintiff of the violation that is the basis for such liability; or (2) 5 years after the date on which the violation that is the basis for such liability occurs.
So: two years from discovery, capped at five years from the violation. The two-year prong is a statutory discovery rule, which is unusual — most federal consumer statutes run from the violation itself. The five-year prong is a repose period and it cuts off claims you never discovered.
What has to happen before you file
To sue a furnisher, dispute through a credit bureau first.
This is the structural feature of the statute that catches people. The accuracy duties furnishers owe when they first report information are not privately enforceable — only regulators can act on those. What a consumer can sue over is a furnisher's failure to investigate properly after a bureau forwards a dispute.
Which means the sequence is fixed. Dispute with Equifax, Experian, or TransUnion. The bureau notifies the furnisher. The furnisher investigates. If it does that badly, you have a claim.
Writing directly to the bank instead generally does not trigger the duty and generally does not create the claim. Missing this step is not a technicality that can be cured later — it is a failure to state a claim.
There is no other administrative exhaustion.
Who can be sued — and who cannot
Credit reporting agencies, for inaccurate reporting and failed reinvestigation.
Furnishers, but only for the post-dispute investigation duty.
Users of consumer reports, for impermissible access and for failing to give required notices.
Federal agencies can be sued. The Supreme Court held in Department of Agriculture Rural Development Rural Housing Service v. Kirtz (2024) that the FCRA waives the sovereign immunity of the United States, which opened federal student-loan servicers and other agencies to damages claims as furnishers.
Standing is the gate. Under TransUnion LLC v. Ramirez (2021), a plaintiff must show concrete harm. Class members whose files contained a damaging inaccuracy that was never disseminated to a third party lacked Article III standing — the risk of future dissemination was not enough. A statutory violation alone does not automatically get you into federal court.
Common defenses
No concrete injury, raised as a motion to dismiss for lack of jurisdiction and now the first move in most of these cases.
The report was accurate. Truth ends the claim.
Reasonable procedures were followed despite the error.
Not willful — which does not defeat the case but strips statutory and punitive damages, leaving the plaintiff to prove actual harm.
No private right of action, where the plaintiff sued a furnisher over the initial reporting rather than the post-dispute investigation.
What the claim pays
For a willful violation: actual damages or statutory damages of $100 to $1,000, plus punitive damages, plus costs and reasonable attorney's fees.
For a negligent violation: actual damages, plus costs and fees. No statutory damages, no punitive damages.
Actual damages can include emotional distress and the concrete financial consequences — the higher interest rate, the denied loan, the lost opportunity.
Fee-shifting runs to the prevailing consumer. A defendant can recover fees only where the pleading was filed in bad faith or for harassment.
What people get wrong
"The bank reported wrong information, so I'll sue the bank." Not yet. Dispute through a credit bureau first. The furnisher's privately enforceable duty only arises after that.
"I disputed it with the lender, that counts." Generally not. The dispute has to go through a bureau to trigger the duty you can sue over.
"Any FCRA violation gets me into federal court." Not since TransUnion. You need concrete harm, and for an inaccurate file that usually means it was shown to someone.
"The bureau is liable for any error." No. The standard is reasonable procedures, not perfection.
"Statutory damages are automatic." Only for willful violations. Negligent violations pay actual damages alone.
"I have to prove they meant to do it." No. Reckless disregard is enough for willfulness.
Where it came from
Congress passed the FCRA in 1970, the first federal statute to regulate how private companies collect and share personal information. The bargain it struck has not changed: the credit system gets to exist and function, and in exchange consumers get accuracy obligations, access to their own files, and a way to dispute.
The Fair and Accurate Credit Transactions Act of 2003 added the identity-theft provisions, the two-year and five-year limitations structure, and the furnisher dispute duties this claim depends on.
The FCRA's real influence now runs well beyond credit. The standing doctrine built in Spokeo and TransUnion — that a bare statutory violation is not automatically an injury — came out of this statute and now governs consumer litigation generally, including debt collection and telephone privacy claims.
Common questions
Can I sue a bank for reporting wrong information to a credit bureau?
Not for the initial report. You must first dispute the information through a credit bureau. The bureau notifies the furnisher, and if the furnisher then fails to investigate reasonably, you have a claim against it.
How long do I have to sue under the FCRA?
Two years from when you discovered the violation, but never more than five years from when it occurred — whichever comes first.
How much can I recover?
For a willful violation, actual damages or statutory damages of $100 to $1,000, plus punitive damages and attorney's fees. For a negligent violation, actual damages and fees only.
Do I have to show the error cost me something?
For practical purposes, usually yes. Since TransUnion LLC v. Ramirez, a plaintiff needs concrete harm for Article III standing, and an inaccurate file never disclosed to a third party may not qualify.
Can I sue a federal agency under the FCRA?
Yes. The Supreme Court held in 2024 that the FCRA waives federal sovereign immunity, so federal agencies acting as furnishers can be sued for damages.