When to dispute a credit report entry
A credit dispute letter is the formal written notice you send to a credit reporting agency — or to the lender that furnished the data — demanding the correction or deletion of inaccurate, incomplete, or unverifiable information on your credit file. An incorrect entry can deny you a mortgage, raise the rate on a car loan, block a tenancy, or cost you a job in financial services. The legal frameworks in the US and UK both give you a clear, time-bound right to challenge bad data — you just have to use it correctly.
One in five US consumers has at least one error on a credit report serious enough to affect a credit decision (FTC report to Congress, 2012; reaffirmed by CFPB 2024 supervisory data). UK figures from MoneySavingExpert and the ICO show that the most frequent issues are: closed accounts still showing open, identity confusion between household members, defaults that pre-date the legal six-year retention window, and fraudulent accounts opened by identity thieves.
The reporting agencies you write to
United States — the three nationwide consumer reporting agencies:
- Experian — P.O. Box 4500, Allen, TX 75013
- Equifax — P.O. Box 740256, Atlanta, GA 30374
- TransUnion — P.O. Box 2000, Chester, PA 19016
Smaller specialty consumer reporting agencies (ChexSystems for banking, LexisNexis for insurance, MIB for medical underwriting) are also covered by the FCRA but use separate dispute addresses.
United Kingdom — the three credit reference agencies (CRAs):
- Experian UK — Customer Support Centre, PO Box 9000, Nottingham, NG80 7WF
- Equifax UK — Customer Service Centre, PO Box 10036, Leicester, LE3 4FS
- TransUnion UK (formerly Callcredit) — Consumer Services, PO Box 491, Leeds, LS3 1WZ
The US legal framework: Fair Credit Reporting Act
The Fair Credit Reporting Act, 15 USC § 1681 et seq., is the controlling federal statute. The key provisions for consumers are:
- 15 USC § 1681i — Procedure in case of disputed accuracy. The CRA must conduct a reasonable reinvestigation within 30 days (45 days if you submit additional information during the period) and either correct or delete the disputed item, or confirm its accuracy after contacting the furnisher.
- 15 USC § 1681s-2(b) — Furnisher duties. When a CRA notifies a furnisher of a dispute, the furnisher must investigate and report back; failure to do so is actionable.
- 15 USC § 1681n & 1681o — Civil liability. Wilful violations carry actual damages, statutory damages of US$100–$1,000, punitive damages, and attorney's fees. Negligent violations carry actual damages and fees.
- CFPB Regulation V (12 CFR Part 1022) implements the FCRA and is enforced by the Consumer Financial Protection Bureau. File a complaint at consumerfinance.gov/complaint — the CFPB forwards complaints to the company and tracks responses publicly.
Most adverse information must be removed from the report after seven years (10 years for Chapter 7 bankruptcies) under 15 USC § 1681c.
The UK legal framework
- Consumer Credit Act 1974, section 159 — statutory right to challenge inaccurate credit data held by a CRA. The agency has 28 days to confirm, correct, or remove the entry, or notify you of the action it has taken. If unsatisfied, you may serve a notice of correction (up to 200 words) which the CRA must show with the disputed entry.
- UK GDPR, Article 16 — right to rectification of inaccurate personal data, with an obligation to respond within one month (extendable by two months for complex requests).
- UK GDPR, Article 17 — right to erasure where data are no longer necessary or processing is unlawful.
- Data Protection Act 2018 implements the UK GDPR domestically.
- Information Commissioner's Office (ICO) — supervisory authority. Complaints free of charge at ico.org.uk; the ICO can issue enforcement notices and fines up to £17.5m or 4% of global turnover.
- Financial Ombudsman Service — for disputes with FCA-regulated lenders that furnish CRA data; binding awards up to £430,000 (claims referred from 1 April 2024).
UK adverse information — defaults, CCJs, IVAs, bankruptcies — is generally retained for six years from the date of default or judgment.
Step-by-step procedure
- Get your report. US: free annual report from each bureau at AnnualCreditReport.com (now weekly under the post-pandemic CFPB extension). UK: statutory credit report free from each CRA, plus free monthly versions via ClearScore (Equifax data), Credit Karma (TransUnion data), Experian directly.
- Identify the error precisely. Note account number, furnisher name, type of error, date.
- Gather evidence. Proof of payment, account statements, settlement letters, identity documents, police report or Action Fraud reference for fraud cases.
- Send the dispute to the CRA in writing, by USPS Certified Mail (US) or Royal Mail Signed For (UK). Disputes by mail trigger the strongest statutory protections; online disputes can waive certain rights under some bureau terms of service.
- Send a parallel dispute to the furnisher (the lender that supplied the data). The FCRA permits direct disputes to furnishers under 15 USC § 1681s-2(a)(8) and CFPB Reg V.
- Wait for the response. US: 30 days from receipt. UK: 28 days under s.159 / one month under UK GDPR Art. 16.
- If unsatisfied: US — file a CFPB complaint and consider suit under FCRA. UK — serve a notice of correction, complain to the ICO, and refer to the Financial Ombudsman Service if the lender is FCA-regulated.
- Identity theft cases (US): file an FTC Identity Theft Report at IdentityTheft.gov, place an extended fraud alert with the bureaus, and use FCRA § 1681c-2 to block fraudulent items.
Required content of the letter
- Your full identity — legal name, current address, previous addresses for the past two years, date of birth, last four digits of SSN (US) or full date of birth and current address (UK)
- Account or reference identifiers — furnisher name, account number, date of the entry being disputed
- Precise description of the error — what the entry says, why it is wrong
- Citation of legal basis — FCRA 15 USC § 1681i (US); Consumer Credit Act 1974 s.159 and UK GDPR Article 16 (UK)
- Specific demand — correction or deletion, plus written confirmation
- Statutory deadline — 30 days (US) or 28 days / one month (UK)
- Numbered list of enclosures
- Notice of next steps — CFPB complaint, ICO complaint, Ombudsman referral, civil action
Special situation: identity theft
If the disputed entry results from identity theft, the procedure is enhanced. US: file at IdentityTheft.gov to obtain an FTC Identity Theft Report; under FCRA § 1681c-2 the bureau must block the fraudulent information within four business days of receipt. Place an initial fraud alert (one year, free) or extended alert (seven years, requires the FTC report). UK: report to Action Fraud (0300 123 2040), get a CRN (Crime Reference Number), notify Cifas to register protective registration (£25 for two years), then dispute with each CRA citing identity theft and attaching the Action Fraud report.
Mistakes to avoid
- Disputing without documentary evidence — the bureau will mark the dispute “verified” almost automatically
- Disputing online when the dispute is high-value — some bureau terms purport to limit your rights; written disputes preserve them
- Writing only to the bureau, not to the furnisher — both have separate duties
- Failing to enclose ID — the dispute will not be processed
- Aggressive or threatening tone — weakens credibility
- Disputing accurate adverse information — risks being treated as frivolous; focus on demonstrable errors
What Lettrio generates for you in 30 seconds
Our AI drafts a credit dispute letter targeting the right reporting agency or furnisher (Experian/Equifax/TransUnion in the US or UK), citing the correct statute (FCRA 15 USC § 1681i; Consumer Credit Act 1974 s.159; UK GDPR Art. 16), with a precise description of the disputed entry, supporting evidence list, statutory deadline, and escalation notice. Format ready to send by USPS Certified Mail or Royal Mail Signed For — first letter free, no account required.