The Credit Reporting Agencies — Why They Are the Problem
Equifax, Experian, and TransUnion are three publicly traded companies with a combined annual revenue near $20 billion. They are not government agencies. They sell consumer reports to lenders, employers, landlords, and insurers — and they sell consumers products to monitor those reports.
What "the credit bureau" actually is
Each bureau holds a database of trillions of records assembled from approximately 10,000 furnishers. The data goes into your "tradelines," "public records," "inquiries," and identifying-information sections. Your file is matched and assembled using algorithms that try to associate incoming data with the right consumer based on partial matches of name, Social Security number, date of birth, and address.
Those partial-match algorithms are why "mixed files" happen — another person's data ends up in your file because your names or SSNs share enough characters.
Most "identity theft" on a credit report is really a mixed-file problem
Identity thieves almost never use the consumer's full identifiers. The thief uses a Social Security number and maybe a first name — with a different last name, a different address, and different contact information. The CRA's loose matching algorithm then merges the thief's tradelines into the victim's file anyway. Don't accept a CRA's argument that the account "isn't in your name" or "isn't at your address." The CRA put it on your file. The CRA can take it off.
How your dispute really gets handled
Almost every consumer dispute the bureaus receive is processed through a system called e-OSCAR(Online Solution for Complete and Accurate Reporting). When the CRA receives your dispute letter or online submission, an employee or contractor reduces your story to a two- or three-digit dispute code (an Automated Consumer Dispute Verification, or "ACDV") and sends it to the furnisher. The furnisher sees the code — not your letter, not your documents — and checks its own (often wrong) record. The furnisher sends back a one-byte verification. The CRA reports the dispute "verified" back to you.
In January 2025 the CFPB sued Experian based, in part, on exactly that mechanism — alleging that Experian was "distorting, truncating, and mischaracterizing" disputes by failing to convey them accurately to furnishers.
The Documented Failure: Automated Injustice Redux
In 2019, the National Consumer Law Center published Automated Injustice Redux: Ten Years After a Key Report, Consumers Are Still Frustrated Trying to Fix Credit Reporting Errors. The report documented systemic failures in how credit bureaus handle consumer disputes:
- •Disputes reduced to codes. The CRAs reduce detailed consumer disputes — often multi-page letters with supporting documentation — into brief two- or three-digit codes. The coded summary transmitted to the furnisher may bear no resemblance to the consumer's actual complaint.
- •Documents not forwarded. Supporting evidence submitted by consumers — police reports, identity theft affidavits, account records proving errors — is frequently not sent to furnishers at all. The furnisher "investigates" without seeing the consumer's proof.
- •Rubber-stamp verifications. Furnishers respond to ACDV codes by checking their own records — the same records that contained the error in the first place. Without reviewing consumer evidence, they simply "verify" the disputed information in seconds.
- •No meaningful investigation. The system was designed for speed and efficiency, not accuracy. The entire process — from receiving a detailed dispute to reporting it "verified" — can take place without any human meaningfully reviewing the consumer's evidence or reasoning.
— National Consumer Law Center, Automated Injustice Redux (2019)
The 2025 Equifax consent order
Two weeks earlier, the CFPB entered a consent order against Equifax requiring it to pay a $15 million civil penalty and overhaul its dispute-handling system through 2030. The order found Equifax was ignoring documents consumers submitted with their disputes, mishandling identity-theft reports, and producing inaccurate "reinvestigation" results.
The "frivolous" problem
FCRA § 611(a)(3) lets the CRA refuse to investigate a dispute that is "frivolous or irrelevant." The bureaus have used that provision to reject sincere consumer letters because the writing patterns "looked" like credit-repair-company submissions.
- •Write your dispute in your own words. Don't use boilerplate.
- •Don't send dozens of separate letters about the same item with form language.
- •If the bureau labels your dispute "frivolous," that determination triggers separate procedural rights — and is often the foundation of a willful-violation claim.
Specialty CRAs are not better — they are worse
ChexSystems, Early Warning Services, LexisNexis Risk Solutions, the tenant-screening industry (CoreLogic, RealPage, TransUnion SmartMove), and the employment-screening industry (Sterling, HireRight, Checkr) are all consumer reporting agencies subject to the FCRA. They typically have smaller staffs, larger error rates, and less mature dispute systems than the Big 3.
What this means for you
- •Assume the CRA's first response will be a mechanical "verified." Plan accordingly.
- •Document everything: certified-mail receipts, exact dates, the bureau's own dispute confirmation.
- •Don't use the bureaus' own websites or apps to dispute.
- •The CRAs settle FCRA class actions and individual suits regularly. The threat of litigation is the consumer's leverage.