How to Report to Credit Bureaus as a Business: Metro 2 and FCRA Duties

To report to credit bureaus as a business, you apply to each bureau separately for credentialing, sign a data furnisher agreement, format your customer account data in the industry-standard Metro 2 layout, and transmit it on a regular cycle through a secure electronic channel. From that point on, federal law treats you as a “data furnisher” under the Fair Credit Reporting Act, which means you carry ongoing duties around accuracy, consumer notices, and dispute investigations. The full path from internal bookkeeping to live credit reporting typically takes several months.

Decide Which Bureaus Fit Your Accounts

The type of customer you extend credit to decides where you report. If your customers are individual consumers — credit cards, personal loans, rent, financed purchases — you report to the consumer bureaus: Equifax, Experian, and TransUnion. Those files are keyed to Social Security numbers and use the Metro 2 format.

Business-to-business trade credit is a separate world. Dun & Bradstreet is the dominant commercial bureau, and companies that supply payment data automatically are called Trade Tape Providers. Smaller sellers can submit trade references manually through D&B’s CreditBuilder products, with subscription tiers allowing anywhere from 4 to an unlimited number of references per year. Each reference carries variables like manner of payment, highest credit used, total owed, and total past due.¹²

A company that lends to individuals and also sells on net terms to other businesses may need both channels running in parallel.

Get Credentialed by Each Bureau

Before any bureau accepts a byte of your data, it runs a credentialing review of your company. TransUnion’s published checklist is representative of what to expect across the industry:

A formal application and letter of intent explaining what data you plan to report and why
A current business license showing you are authorized to operate
Third-party verification such as bank references, trade references, or proof of lender sponsorship
An on-site inspection to verify your physical location and data-handling practices

TransUnion frames the review as a check on compliance with its own policies and with applicable laws, including the FCRA and the financial privacy provisions of the Gramm-Leach-Bliley Act.³ Equifax and Experian follow similar patterns, with their own documentation and site-visit steps.

Minimum account volumes matter too. Equifax may require furnishers with fewer than 500 records per month to subscribe to its Automated Data View tool at $50 per month, with lower minimums often available to banks and credit unions.⁴ If you only have a handful of accounts, direct reporting may not be realistic and a third-party service is the practical route.

Sign the Agreement and Pass the Test File

Once credentialing clears, the bureau asks you to sign a Data Contributor Agreement or Service Level Agreement. These contracts spell out your obligations on data quality, reporting frequency, and FCRA compliance, and they give the bureau the right to reject or suspend your data if it fails quality checks. Expect upfront onboarding costs and recurring fees that scale with the number of accounts you report.

After signatures, there is a testing phase. TransUnion, for example, requires every new furnisher to submit a test credit file for approval before any live data loads.³ Only once your sample passes does the bureau turn on real reporting.

Build Your Data in Metro 2

All consumer credit data goes to the bureaus in Metro 2, the industry-standard format maintained by a task force of representatives from Equifax, Experian, Innovis, and TransUnion under the Consumer Data Industry Association.⁵ The point of the standard is uniformity: every furnisher’s file looks the same to the bureau regardless of what system produced it.

For each account, your file needs to carry at minimum:

Consumer’s full name
Social Security number
Current residential address
Account balance
Credit limit or highest credit amount
Payment history by month
Account status codes showing whether the account is current, delinquent, closed, transferred, or in default

Standard accounting or invoicing software does not usually output Metro 2 natively. Specialized credit-reporting software sits between your books and the bureau, mapping your records into the correct alphanumeric field structure. The format uses dozens of status codes for situations like transfers, repossession, and foreclosure, so the software you pick needs to support every code your business will actually use.⁵

Transmit the File and Clear the Rejections

Metro 2 files move to the bureau over a secure electronic connection, commonly SFTP or an HTTPS portal. TransUnion calls this “Electronic Data Transmission” and requires use of the most secure method available.³ Each upload is a point-in-time snapshot of your accounts, so the bureau refreshes its view every cycle.

After each transmission you get a confirmation of receipt and then a rejection report listing records that failed to process. Common culprits are mismatched Social Security numbers, invalid status codes, and formatting errors. Review the rejections every cycle and fix the records before the next submission. Rejected accounts simply do not show up on your customers’ credit files.

Meet Your FCRA Duties Once You’re Live

The moment you start reporting, you are a data furnisher under the Fair Credit Reporting Act at 15 U.S.C. § 1681 and the sections that follow.⁶ The core rule is simple: you cannot report information you know to be inaccurate, and you cannot keep reporting information after a consumer has shown you it is wrong. The statute pegs “reasonable cause to believe that the information is inaccurate” to specific knowledge, beyond a consumer’s allegation alone, that would give a reasonable person substantial doubts about the data.⁷

Notifying Consumers of Negative Information

If your business qualifies as a “financial institution” under the FCRA, Section 623(a)(7) requires you to notify the consumer either before or after you send negative data such as late payments, missed payments, or defaults. Federal regulations publish two safe-harbor model notices. Model Notice B-1 is used before reporting: “We may report information about your account to credit bureaus. Late payments, missed payments, or other defaults on your account may be reflected in your credit report.” Model Notice B-2 is used after: “We have told a credit bureau about a late payment, missed payment or other default on your account. This information may be reflected in your credit report.”⁸

You can draft your own wording, but using the model text protects you from claims that the notice was inadequate. Minor formatting changes are allowed; the substance, clarity, and sequence of the language must remain intact.⁸

Investigating Disputes

When a consumer disputes an item on their report, the bureau routes the dispute to you. Under 15 U.S.C. § 1681s-2(b) you must investigate against your own records, report the results back, and if you find an error, notify every bureau that received the inaccurate data.⁷

You generally have 30 days from the date the consumer filed the dispute with the bureau. That window can extend by 15 additional days if the consumer provides more relevant information during the original 30 days.⁹

Most dispute traffic between furnishers and bureaus flows through e-OSCAR, a Metro 2-compliant web system that lets you respond electronically by marking each disputed item verified, modified, or deleted.¹⁰ The FCRA does not mandate a specific platform, but e-OSCAR is the standard industry channel.

What It Costs if You Get It Wrong

A consumer who proves a willful FCRA violation can recover actual damages or statutory damages between $100 and $1,000 per violation, plus punitive damages at the court’s discretion, attorney fees, and costs.¹¹ A merely negligent violation still exposes you to actual damages and attorney fees.¹²

One important boundary: consumers generally cannot bring a private lawsuit over violations of the accuracy duty under subsection (a) of 15 U.S.C. § 1681s-2. That part is enforced by regulators like the CFPB and FTC. Consumers can, however, sue furnishers directly for failing to investigate a dispute properly under subsection (b).⁷ Dispute handling is where private litigation lives, which is why your investigation workflow deserves more care than almost anything else in your reporting operation.

When a Third-Party Reporting Service Makes Sense

Not every business should run the full credentialing gauntlet with every bureau. If your account volume is below the bureau’s minimums, or the compliance and software overhead is too heavy for your team, third-party reporting services are an alternative. These companies are themselves credentialed furnishers; they take your raw account data, convert it to Metro 2, and submit it to one or more bureaus in your name.

Pricing is usually per-record or a monthly subscription. The trade is convenience for control: you skip the credentialing project and the Metro 2 software build, but you remain legally responsible under the FCRA for the accuracy of what gets reported on your behalf. Before signing with a service, confirm which bureaus it actually reports to, how often it submits, and how it routes disputes that come back from the bureaus to you for investigation.

1
Dun & Bradstreet. Understanding Trade References
2
Federal Trade Commission. UNITED STATES OF AMERICA BEFORE THE FEDERAL TRADE COMMISSION – Dun and Bradstreet
3
TransUnion. Data Reporting – Getting Started
4
Equifax. Furnishing Consumer Data to Equifax
5
CDIA. Metro 2
6
Office of the Law Revision Counsel. 15 USC 1681 – Congressional Findings and Statement of Purpose
7
Office of the Law Revision Counsel. 15 USC 1681s-2 – Responsibilities of Furnishers of Information to Consumer Reporting Agencies
8
Consumer Financial Protection Bureau. Appendix B to Part 1022 – Model Notices of Furnishing Negative Information
9
Office of the Law Revision Counsel. 15 USC 1681i – Procedure in Case of Disputed Accuracy
10
e-OSCAR. e-OSCAR Home
11
Office of the Law Revision Counsel. 15 USC 1681n – Civil Liability for Willful Noncompliance
12
Office of the Law Revision Counsel. 15 USC 1681o – Civil Liability for Negligent Noncompliance