You can fix an SSN error on your background check by requesting a copy of the report, sending a written dispute with supporting documents to the background check company, and letting the Fair Credit Reporting Act’s investigation clock run. The company must complete a reinvestigation within 30 days and send you written results within five business days after that.1Office of the Law Revision Counsel. United States Code Title 15 – Section 1681i The order you do things in matters. Contact the wrong organization first, or send a dispute without proof, and you can burn weeks while a job offer or a lease sits on hold.
Step One: Get a Copy of the Report
You can’t dispute what you haven’t seen. Under federal law, any consumer reporting agency must disclose everything in your file when you request it, including the sources of the information and a list of everyone who received a copy.2Office of the Law Revision Counsel. United States Code Title 15 – Section 1681g If an employer already took adverse action against you based on a background check, you’re entitled to a free copy within 60 days of that action.3Office of the Law Revision Counsel. United States Code Title 15 – Section 1681m
The harder question is which company ran the report. Larger firms include Checkr, Sterling, First Advantage, and HireRight, but hundreds of smaller operators exist. If a job or apartment fell through, the adverse action notice you received should name the company and give its address and phone number. If you never got that notice, that gap may itself be an FCRA violation, and you should ask the employer or landlord directly which company they used.
Step Two: File a Written Dispute With the Background Check Company
Once you know who to contact, dispute the error in writing. Describe the SSN mistake plainly, state the correct information, and attach proof: a copy of your Social Security card, a government-issued ID, and any letter from the SSA that confirms your correct number and identifying details. Send everything by certified mail with a return receipt so you have proof of the date the company took delivery.
The company must run a free reinvestigation and finish it within 30 days of receiving your dispute. If you send additional supporting information during that window, the company can extend the deadline by up to 15 days, but only if the added material hasn’t already been found inaccurate or unverifiable.1Office of the Law Revision Counsel. United States Code Title 15 – Section 1681i If the disputed information turns out to be inaccurate or can’t be verified, the company must promptly delete or correct it and notify whoever originally supplied the bad data.
Within five business days after the reinvestigation ends, you’re entitled to written results and a revised copy of your report showing any changes.1Office of the Law Revision Counsel. United States Code Title 15 – Section 1681i Read the updated report closely. If the error is still there, you have the right to add a brief statement of dispute to your file explaining your position, and that statement must appear in future reports.
One boundary worth knowing. The federal rule that lets you dispute errors directly with the entity that supplied the data does not cover disputes about identifying information like an SSN. It applies to account terms, liability, and payment history. So for an SSN error, the reinvestigation through the background check company is your effective path, not a direct dispute with the original source.4Office of the Law Revision Counsel. United States Code Title 15 – Section 1681s-2
Step Three: Fix the SSA Record if That’s the Source
Sometimes the mistake sits inside the Social Security Administration’s own files. If your name, date of birth, or citizenship status is wrong there, that error can keep showing up on every background check that pulls from your SSN. The Privacy Act of 1974 gives you the right to access and correct records held by federal agencies.5U.S. Department of Justice. Privacy Act of 1974
Two forms handle the two situations. To fix personal information tied to your SSN, file Form SS-5, the Application for a Social Security Card. The SSA requires original documents or copies certified by the issuing agency; notarized photocopies won’t do. For a name correction, the supporting document has to show both your old and new names and be relatively recent.6Social Security Administration. Application for a Social Security Card – Form SS-5
To correct errors in your earnings record, which affects both benefit calculations and employment verification, use Form SSA-7008, the Request for Correction of Earnings Record. List the specific periods you believe are wrong and attach W-2s or tax returns as proof. If you can’t produce the documents, explain why in the remarks section.7Social Security Administration. Request for Correction of Earnings Record – Form SSA-7008 You can submit either form at a local SSA field office or by mail.
If the Error Surfaced Through E-Verify
An SSN mismatch can also come up through E-Verify, the federal system employers use to confirm work authorization. When E-Verify can’t match your information against SSA or DHS records, it issues a Tentative Non-Confirmation. This doesn’t mean you’re unauthorized to work. It usually means a data entry mistake or an outdated SSA record.
You have 10 federal government working days from the date the mismatch is issued to tell your employer whether you’ll take action to resolve it. If you contest, your employer refers the case and you then have eight federal government working days to visit an SSA field office (for SSA-related mismatches) or contact DHS to begin resolution.8E-Verify. Tentative Nonconfirmations (Mismatches)
Throughout resolution, your employer cannot fire you, suspend you, withhold pay, or take any other adverse action because of the mismatch. Those protections last until E-Verify issues a final result. If you miss the deadlines or choose not to contest, the employer can treat the mismatch as a Final Non-Confirmation and terminate employment without liability.8E-Verify. Tentative Nonconfirmations (Mismatches)
If Identity Theft Is Behind the Error
When someone else has used your SSN, cleaning up the background check is only half the job. You’ll also want to keep new fraudulent activity from stacking on top.
Start by filing a report at IdentityTheft.gov, which produces an Identity Theft Affidavit. Combine that with a police report to create a full Identity Theft Report, which unlocks stronger dispute rights and longer fraud alerts.9Federal Trade Commission. Identity Theft – What To Do Right Away
A fraud alert tells businesses to verify your identity before opening new accounts. An initial fraud alert lasts one year and is available to anyone who suspects fraud. An extended fraud alert lasts seven years but requires an Identity Theft Report.10Office of the Law Revision Counsel. United States Code Title 15 – Section 1681c-1 Contact only one of the three major credit bureaus; that bureau has to notify the other two. Both alerts are free.11Federal Trade Commission. Credit Freezes and Fraud Alerts
A security freeze is stronger. It blocks the credit bureau from releasing your report at all, which stops new accounts from being opened in your name. Placing or lifting a freeze is free. Requests made by phone or online must be honored within one hour; by mail, within three business days.12Office of the Law Revision Counsel. United States Code Title 15 – Section 1681c-1 A freeze doesn’t block background check companies from pulling criminal records or employment history, so treat it as a companion to the dispute process rather than a replacement.
What the Employer Has to Do While You Sort This Out
An employer can’t quietly drop you because of a bad background check. Before running the report, they must give you a clear written disclosure in a standalone document and get your written authorization. An employer who buries this notice inside a job application or bundles it with a liability waiver violates the FCRA.13Office of the Law Revision Counsel. United States Code Title 15 – Section 1681b
If something in the report makes them consider rejecting you, they have to send a pre-adverse action notice with a copy of the report and a written summary of your FCRA rights, then wait a reasonable period before deciding. The FCRA doesn’t set an exact number of days. Industry practice generally treats about seven calendar days as adequate, though some employers wait longer.14Federal Trade Commission. Using Consumer Reports What Employers Need to Know Use that window to dispute the error.
If the employer ultimately denies you, the final adverse action notice must name the background check company (address and phone number included), state that the company didn’t make the decision and can’t explain it, and inform you of your right to a free copy of the report within 60 days and to dispute anything inaccurate.3Office of the Law Revision Counsel. United States Code Title 15 – Section 1681m
Deadlines for Legal Action
The FCRA sets a hard statute of limitations. You must sue within two years of discovering the violation or five years from the date the violation actually occurred, whichever runs out first.15Office of the Law Revision Counsel. United States Code Title 15 – Section 1681p The five-year cap is absolute. Even if you had no way to know about the error, you lose the right to sue once five years have passed since it happened. If you find an old SSN error and the background check company or employer isn’t cooperating, get a legal opinion before assuming you have time to spare.
When the Dispute Goes Nowhere
If the company misses the 30-day deadline, ignores your dispute, or “corrects” the error only to let it come back, you have two options.
File a CFPB Complaint
The Consumer Financial Protection Bureau accepts complaints against background check companies and other consumer reporting agencies. Submit one at consumerfinance.gov/complaint with a description of the problem and up to 50 pages of supporting documents. The CFPB forwards the complaint to the company, which generally responds within 15 days, though the response can take up to 60 days.16Consumer Financial Protection Bureau. Submit a Complaint A complaint isn’t a lawsuit, but it creates a formal record and often prods companies to act when informal disputes have stalled.
Sue Under the FCRA
The FCRA gives you a private right of action against the background check company or the entity that furnished the wrong information. What you can recover depends on whether the violation was negligent or willful.
- For negligent violations, you can recover actual damages (the real financial harm, such as lost wages from a job you didn’t get), plus court costs and attorney’s fees.17Office of the Law Revision Counsel. United States Code Title 15 – Section 1681o
- For willful violations, you can recover either actual damages or statutory damages between $100 and $1,000 per violation (whichever is greater), plus punitive damages at the court’s discretion and attorney’s fees.18Office of the Law Revision Counsel. United States Code Title 15 – Section 1681n
A company that uses sloppy matching criteria and puts a stranger’s records in your file may be negligent. One that ignores a documented dispute or keeps reporting information it can’t verify starts to look willful. Because the FCRA allows recovery of attorney’s fees in successful cases, many consumer protection attorneys handle these matters on contingency, so you don’t pay upfront. If your dispute is going nowhere, talk to one before the two-year clock runs down.