If you spot a hard inquiry or newly opened account on your credit report that you don’t recognize, act quickly. It might be a simple mix‑up — or it could be the first sign of identity theft. This guide gives you a clear, beginner‑friendly workflow to verify the item, contact the right parties, protect your credit file, dispute inaccurate information, and continue monitoring for anything new.
First, Confirm What You’re Looking At
Not every alert signals fraud. Start by verifying the details so you take the right next steps without missing anything important.
- Check all three reports: Review Equifax, Experian, and TransUnion. An item may appear on one bureau and not the others. Consistency across bureaus can hint at whether it’s legitimate or an error.
- Identify the type of item: Is it a hard inquiry (usually requires your authorization for new credit) or a soft inquiry (doesn’t affect your score)? Is it a new account (credit card, loan, retail line) or a collection? Hard inquiries and new accounts deserve immediate attention.
- Decode unfamiliar names: Lenders often report under parent or partner names. Search the creditor name plus “credit report” to see if it’s a known alias for a store or card you recognize.
- Check recent activity: Did you apply for a card, auto loan, mortgage preapproval, or store financing recently? Car dealerships and mortgage brokers can trigger multiple legitimate inquiries in a short window.
- Ask authorized users and family: If you share finances or are an authorized user, confirm whether someone else requested credit using your information with your permission.
Immediate Protection Steps (Do These Right Away)
If you still don’t recognize the item after a quick check, take protective action before you dig deeper.
- Freeze your credit at all three bureaus. A freeze is free and blocks new creditors from pulling your file without your temporary lift, stopping most new-account fraud. Place a freeze online with Equifax, Experian, and TransUnion. Keep your PINs or passwords somewhere secure.
- Enable account alerts everywhere. Turn on alerts from your banks, credit cards, and credit monitoring tools for new accounts, hard inquiries, and balance or transaction spikes. Early alerts reduce damage.
- Secure your email and financial logins. Change passwords, enable multi-factor authentication (MFA), and review security questions. Compromised email often enables account takeovers and fraudulent applications.
Contact the Creditor to Verify the Application
Before disputing with the bureaus, go directly to the source. This often gives you the fastest answer about what actually happened.
- Find the right number: Use the creditor contact info listed on your credit report or on the official website (not in a random email or text). Avoid numbers found in unsolicited messages.
- Ask for application details: Date, application channel (online, in‑store, phone), address used, phone number, email, IP address if available, and the identity documents provided. Note everything.
- If it’s fraud: Tell the creditor to close or deny the account as fraudulent and to remove associated hard inquiries. Request their fraud packet or affidavit process, and ask for written confirmation.
- If it’s legitimate but mislabeled: For example, a lender’s parent company name appears unfamiliar. Ask them to confirm the relationship and provide a letter you can keep with your records.
File the Right Alerts and Reports
When the creditor confirms (or strongly suggests) fraud, use these tools to protect yourself and create a paper trail.
- Place an initial or extended fraud alert: A fraud alert asks creditors to take extra steps to verify your identity before opening new credit. You can place one with any bureau, and it will relay to the others. An extended alert (after identity theft is confirmed) lasts longer.
- File an FTC identity theft report (U.S.): Submit an Identity Theft Report at IdentityTheft.gov. It provides you with a personalized recovery plan and a report you can use to support disputes.
- Consider a police report: Some creditors request one. Call your non‑emergency line to ask if they take identity theft reports and what documentation you need.
Dispute Inaccurate Information with the Bureaus
Dispute any fraudulent or erroneous inquiries and accounts with each bureau where they appear. Provide documentation to speed up the process.
- Gather your evidence: Copies of your ID (redact sensitive numbers when appropriate), a utility bill for address proof, the creditor’s fraud letter or case number, and your FTC Identity Theft Report.
- File disputes online, by mail, or phone: Online is fastest. Clearly state: “This hard inquiry/account was opened without my authorization. Please remove it and suppress related data.” Include dates, creditor names, and supporting files.
- Track responses: Bureaus typically have 30 days to investigate. Set reminders. If they need more information, respond quickly.
- Escalate if needed: If removal is denied and you have solid evidence, re‑submit with additional documentation, ask the creditor to update the bureaus directly, and consider filing complaints with your state AG or the CFPB.
Clean Up and Lock Down Related Accounts
Fraud rarely stops with a single application. Use this moment to tighten your broader security.
- Audit your financial accounts and statements: Look for unfamiliar charges, new payees, or address changes. Dispute unauthorized transactions immediately.
- Secure your mobile number and email: Contact your carrier to add a port‑out/PIN lock. Review email forwarding rules and app passwords.
- Change passwords where reused: If a password tied to your financial identity is reused elsewhere, change it everywhere. Prefer a password manager and turn on MFA wherever possible.
- Remove exposed personal data online: Reduce the publicly available information that criminals use to pass verification. Opt‑out of people‑search sites and limit public profile details.
How to Tell If It’s a False Alarm vs. Real Fraud
Use these signs to decide whether to keep investigating or escalate to full remediation.
- Likely benign: A single hard inquiry from a lender you recently engaged (e.g., auto dealer cluster), a known lender under a different reporting name, or a soft inquiry from account reviews or pre‑qualification.
- Potential fraud: A new account you never applied for, multiple hard inquiries in a short window from lenders you don’t recognize, or changes to your personal information on file (address, phone, email).
- Escalate immediately if: You also see suspicious bank transactions, password reset emails you didn’t request, or delivery notices for items you didn’t buy.
For additional context on red flags, see Warning Signs of Identity Theft and Financial Fraud You Shouldn't Ignore.
Document Everything You Do
Detailed records make disputes smoother and help if you need to escalate.
- Create a simple log: Note dates, times, who you spoke with, phone numbers, case IDs, and action items.
- Keep copies: Save letters, emails, screenshots of your report, and dispute confirmations in a secure folder.
- Set reminders: Investigation deadlines, freeze PIN storage, and follow‑up dates with creditors and bureaus.
When and How Hard Inquiries Can Be Removed
Hard inquiries can be removed if they were unauthorized or reported in error. They usually fall off after two years, but you don’t need to wait if they are fraudulent.
- Ask the creditor first: If they confirm fraud or a mistaken pull, request they instruct the bureaus to delete the inquiry.
- Dispute with the bureaus: Provide your FTC report, creditor letter, and any proof you were not the applicant (e.g., you were out of state, different address used).
- Don’t dispute legitimate inquiries: Disputing authorized inquiries could slow your own approvals and generally won’t be removed.
If a Fraudulent Account Is Already Open
Move quickly to limit damage and get it off your reports.
- Contact the creditor’s fraud department: Request immediate closure, a fraud affidavit, and written confirmation they will update all bureaus to remove the account and any late payments or balances.
- Change any overlapping credentials: If the account uses your email or phone, strengthen security for those channels.
- Monitor your mail: Watch for unexpected cards, statements, or collection letters — they can reveal other fraudulent accounts.
- Dispute with the bureaus: Submit your documentation packet and request deletion of the fraudulent tradeline and related inquiries.
Continue Monitoring for New Activity
Fraud attempts may come in waves. After you fix the immediate issue, keep a closer eye on your credit for the next 6–12 months.
- Check reports regularly: Confirm removals are processed and no new items appear. For a guide on which changes to jump on quickly, read Which Credit Report Changes Should You Investigate Right Away?
- Use ongoing credit monitoring: Automate alerts for new inquiries, accounts, and key identity changes so you don’t miss a surprise. Learn what effective monitoring actually covers in What Is Credit Monitoring and What Does It Actually Watch?
- Consider a consolidated monitoring dashboard: If you want an easier way to track changes and spot suspicious activity quickly, see our overview of SmartCredit in SmartCredit for privacy, credit monitoring, and identity protection.
Privacy Habits That Reduce Future Risk
You can’t eliminate all risk, but you can lower your exposure and make fraud harder.
- Limit public data: Remove or minimize your address, phone, and birthdate on public profiles. Opt‑out from people‑search sites that publish your full identity profile.
- Use email aliases and unique phone numbers: Mask your primary email and phone on signups with alias tools. This reduces targeted phishing and verification abuse.
- Practice password hygiene: Unique passwords everywhere, stored in a password manager, with MFA on key accounts (email, mobile carrier, bank, cloud storage).
- Watch for breach notices: If your data appears in a breach, change passwords immediately and consider placing a precautionary freeze if sensitive identifiers were exposed.
- Shred and secure: Lock your mailbox, shred sensitive mail, and opt for e‑statements when safe to reduce physical theft of identity documents.
Quick Reference: Your Response Workflow
- Verify the item on all three bureaus and confirm the type (hard inquiry vs. new account).
- Freeze your credit at Equifax, Experian, and TransUnion to block new fraud.
- Contact the creditor’s fraud team for application details; request closure and inquiry removal if fraudulent.
- File fraud alerts and an FTC Identity Theft Report; consider a police report if requested.
- Dispute inaccurate items with the bureaus using supporting documents.
- Secure your email, phone, and financial logins; audit accounts for other issues.
- Document every step; keep copies of letters, case numbers, and confirmations.
- Monitor for new activity and confirm deletions were completed.
Frequently Asked Questions
Will a fraud alert or credit freeze hurt my credit score?
No. Fraud alerts and freezes don’t affect your credit score. A freeze only limits new creditors from accessing your file until you lift it.
How fast can I get a fraudulent inquiry or account removed?
It varies. Some creditors update bureaus within days after confirming fraud; bureau disputes typically take up to 30 days.
Should I keep my freeze after everything is fixed?
If you don’t need new credit often, keeping your freeze in place is a strong, set‑and‑forget protection. You can lift it temporarily whenever you apply for credit.
Do I need credit monitoring if I have a freeze?
Freezes block many new‑account fraud attempts, but monitoring helps you spot other changes (e.g., account updates, collections, and personal data changes) and ensures you see issues quickly.
Conclusion
When you see a credit inquiry or account you don’t recognize, time and documentation are your allies. Verify the item, freeze your credit, contact the creditor for details, and dispute any inaccurate information with the bureaus. Keep thorough records, secure your key accounts, and continue monitoring so you catch and stop any follow‑on attempts early. With a clear workflow and a few privacy habits, you can limit damage and regain control of your financial identity.