A bank can check your credit without asking you each time, but only when the Fair Credit Reporting Act gives it a permissible purpose to do so. Applying for a loan or credit card, opening a deposit account, or being an existing cardholder all count. Outside those defined purposes, a bank that pulls your file is breaking federal law and owes you money for it.
When the Law Lets a Bank Pull Your Credit Without Fresh Consent
The FCRA doesn’t give banks open-ended access to your credit file. It gives credit bureaus a closed list of situations in which they’re allowed to release your report, and a bank has to fit one of them before a bureau will hand anything over.1Office of the Law Revision Counsel. 15 USC 1681b – Permissible Purposes of Consumer Reports
The purposes that cover most everyday banking are these: a credit decision on an application you submitted, review of an account you already have, a transaction you initiated with the bank, your written authorization, or a court order. The practical point is that you often give permission without a separate signature. Submitting a credit card application is permission. Opening a checking account is permission. Keeping a credit card active is standing permission for the issuer to look again later.
The clause that catches people off guard is the “legitimate business need” provision. It lets a bank access your report when you initiate a transaction, or when the bank wants to confirm you still meet the terms of an existing account. That’s why a credit limit increase request, a new checking account, and a routine review of your current card can all trigger a pull even though none of them involves a brand-new loan application.1Office of the Law Revision Counsel. 15 USC 1681b – Permissible Purposes of Consumer Reports
Opening an Account or Applying for Credit
When you apply for a mortgage, auto loan, credit card, or personal line of credit, the application itself is your authorization. The bank reviews payment history, outstanding balances, how long your accounts have been open, and your mix of credit types to decide whether to approve you and at what rate.
Deposit accounts work the same way on the consent question, even though you aren’t borrowing anything. Opening a checking or savings account is a transaction you initiated, so the bank can run a screening check. Most use specialized agencies like ChexSystems2Consumer Financial Protection Bureau. Chex Systems, Inc. or Early Warning Services3Consumer Financial Protection Bureau. Early Warning Services, LLC rather than the three major credit bureaus, and some also run a soft pull on your standard credit report for identity verification.
Account Reviews After You’re Already a Customer
Your relationship with the bank doesn’t reset the consent question each time it wants another look. If a bank has issued you a credit card or line of credit, the FCRA specifically permits it to review your report to decide whether to raise or lower your limit, change a variable rate, or offer you other products.1Office of the Law Revision Counsel. 15 USC 1681b – Permissible Purposes of Consumer Reports
These account reviews are soft inquiries. They show up on the version of the report only you can see, other lenders can’t view them, and they don’t affect your score. If you watch your credit file closely, you’ll likely see them appear on a regular cadence from every bank you have a credit account with. That’s normal and legal.
Hard Pulls vs. Soft Pulls
Whether a bank’s check actually matters to your score comes down to the type of inquiry. A hard inquiry happens when you formally apply for credit and the lender reviews your report to decide. Mortgage, auto loan, credit card, and personal loan applications all generate hard pulls. They’re visible to other lenders, they stay on your report for two years, and most scoring models count them for about twelve months. One hard inquiry usually moves a score only a few points, but several in a short span can add up.4Consumer Financial Protection Bureau. What Is a Credit Inquiry?
Soft inquiries cover everything else: account reviews on your existing cards, pre-screened offers, your own checks on yourself, and most identity verification pulls when you open a deposit account. Soft inquiries don’t affect your score and aren’t visible to other lenders.4Consumer Financial Protection Bureau. What Is a Credit Inquiry?
One wrinkle worth knowing when you’re shopping around. Pre-qualification is usually a soft pull based on limited information. Pre-approval generally involves a full application and a hard pull. If you want to compare offers without touching your score, stay on the pre-qualification side until you’re ready to commit.
How to Check Whether a Bank Looked Without a Permissible Purpose
The way to find out who has pulled your credit is to read your credit reports. Federal law entitles you to one free report every twelve months from each of the three major bureaus, Equifax, Experian, and TransUnion, through AnnualCreditReport.com, the only authorized source.5AnnualCreditReport.com. Your Rights to Your Free Annual Credit Reports
On each report, look at the inquiries section. Hard inquiries will be listed with the name of the company that pulled your file and the date. If you see a hard pull from a bank you never applied to, and you didn’t authorize the check in writing, that’s a potential FCRA violation worth running down.
Disputing a Pull You Didn’t Authorize
If you find an inquiry you didn’t authorize, dispute it with the credit bureau that’s reporting it. Put the dispute in writing, identify the specific inquiry, attach anything that supports you, and send it by certified mail so you have proof of delivery.6Federal Trade Commission. Disputing Errors on Your Credit Reports
Also contact the company that made the pull. Tell them you’re disputing the inquiry and ask them to request its removal from your report. If the bureau and the company don’t resolve it, file a complaint with the Consumer Financial Protection Bureau online or at (855) 411-2372. The CFPB sends the complaint to the company, which generally has to respond within 15 days.7Consumer Financial Protection Bureau. Learn How the Complaint Process Works
What the Bank Owes You for an Unauthorized Pull
The FCRA has real teeth when a bank pulls your report without a permissible purpose. A willful violation makes the bank liable for actual damages or statutory damages between $100 and $1,000 per violation, plus punitive damages at the court’s discretion, plus attorney’s fees and costs. If the bank obtained the report under false pretenses or knowingly without a permissible purpose, the floor is $1,000 or your actual damages, whichever is higher.8Office of the Law Revision Counsel. 15 USC 1681n – Civil Liability for Willful Noncompliance
Negligent violations carry a lower but still meaningful penalty. A bank that carelessly accesses your report without proper authorization owes you any actual damages you can prove, plus attorney’s fees and costs.9Office of the Law Revision Counsel. 15 USC 1681o – Civil Liability for Negligent Noncompliance The statutory damages provision is what makes individual lawsuits practical: you don’t have to prove you lost money to recover something.
Blocking Access Before It Happens: Security Freezes
If you want to shut off new credit pulls entirely, place a security freeze with each of the three major bureaus. A freeze blocks prospective creditors from viewing your report, which stops new accounts from being opened in your name.10Consumer Financial Protection Bureau. What Is a Credit Freeze or Security Freeze on My Credit Report?
Placing and removing a freeze is free under federal law. Requested online or by phone, the bureau must place it within one business day, and lift it on the same timeline.11Office of the Law Revision Counsel. 15 USC 1681c-1 – Identity Theft Prevention; Fraud Alerts and Security Freezes
A freeze doesn’t lock out everyone. Banks where you already have accounts can still review your file for account management, certain government agencies keep access, and you can still check your own reports. When you want new credit, you lift the freeze with whichever bureau the lender will use, then refreeze afterward.10Consumer Financial Protection Bureau. What Is a Credit Freeze or Security Freeze on My Credit Report? For anyone worried about pulls they didn’t ask for, that’s the strongest preventive step available.