What Is a CRA Notice? Types, Required Contents, and Deadlines

A CRA notice is a formal written communication required by the Fair Credit Reporting Act (FCRA) that tells you something significant has happened involving your credit information: a lender denied you, an employer is about to act on your report, a fraud alert went on your file, a dispute was resolved, or deleted information was put back. Each type carries its own required contents, its own deadline, and its own set of rights you can use if you move quickly.

Consumer Reporting Agencies (CRAs) like Equifax, Experian, and TransUnion sell your borrowing and payment history to lenders, employers, insurers, and landlords. When one of those parties uses your report against you, or when the CRA itself changes something in your file, federal law requires that you be told. The notice is how you find out, and it’s also how the clock starts on the rights that let you push back.

The Types of CRA Notices You Might Receive

Identifying which notice you have in front of you is the first thing to do, because your next move depends on it.

Adverse Action Notice

This is the most common one. When a lender, insurer, landlord, or employer denies you or gives you worse terms because of your credit report, they must send this notice. It must identify the CRA that supplied the report by name, address, and phone number, state that the CRA didn’t make the decision, tell you about your right to a free copy of the report within 60 days, and explain your right to dispute inaccuracies. If a credit score was used, the score must appear in the notice.1Federal Trade Commission. Using Consumer Reports for Credit Decisions: What to Know About Adverse Action and Risk-Based Pricing Notices

Adverse action covers more than outright denials. Revoking existing credit, refusing the amount or terms you asked for, and worsening your account terms after an unfavorable review all qualify.1Federal Trade Commission. Using Consumer Reports for Credit Decisions: What to Know About Adverse Action and Risk-Based Pricing Notices

Pre-Adverse Action Notice from an Employer

Employers face a stricter two-step process. Before using your credit report to make a final hiring, promotion, or termination decision, the employer must first send you a pre-adverse action notice that includes a copy of the report and a written summary of your FCRA rights. This gives you a chance to flag errors before the decision becomes final.2Federal Trade Commission. Using Consumer Reports: What Employers Need to Know The FCRA requires a “reasonable” waiting period between the pre-adverse notice and the final action; five business days is a widely followed federal baseline.

Risk-Based Pricing Notice

Sometimes a lender approves you but on worse terms than their best-qualified borrowers get. When your credit report is the reason, the lender must send a risk-based pricing notice.3eCFR. Subpart H Duties of Users Regarding Risk-Based Pricing If the same lender already sent an adverse action notice for the same transaction, this one isn’t required. When credit scores are used, the notice must include your score, the range of possible scores under the model, the key factors that hurt your score, and the name of the CRA or scoring company behind it.1Federal Trade Commission. Using Consumer Reports for Credit Decisions: What to Know About Adverse Action and Risk-Based Pricing Notices

Fraud Alert Confirmation

When you request a fraud alert, the CRA must confirm it was placed. An initial fraud alert lasts at least one year and tells creditors to take extra steps to verify your identity before opening new accounts. If you’re an identity theft victim and file an identity theft report, you can get an extended alert lasting seven years.4Office of the Law Revision Counsel. 15 USC 1681c-1 Identity Theft Prevention Fraud Alerts and Active Duty Alerts Placing an alert with one of the three major CRAs also triggers that agency’s duty to notify the other two.

Dispute Outcome Notice

After you dispute something on your report, the CRA must investigate and send you the results. The investigation generally must finish within 30 days of the CRA receiving your dispute, with up to 15 more days if you provide additional information during the window.5Federal Trade Commission. Consumer Reports: What Information Furnishers Need to Know The notice tells you whether the item was corrected, deleted, or verified as accurate.

Reinsertion Notice

If a CRA deletes information after your dispute but later puts it back, the agency must notify you in writing within five business days. The notice must say the item was reinserted, identify the furnisher who certified its accuracy, and remind you of your right to add a statement to your file disputing the item.6Office of the Law Revision Counsel. 15 US Code 1681i – Procedure in Case of Disputed Accuracy The furnisher has to certify the information is complete and accurate before reinsertion.

Notice of Negative Information

A financial institution that reports negative information about you to a nationwide CRA must notify you either before or shortly after doing so. This notice is separate from any collection letter or late-payment warning, and the FCRA provides model language institutions can use to comply.7Legal Information Institute. 12 CFR Appendix B to Part 1022 – Model Notices of Furnishing Negative Information

What a Valid Notice Must Contain

Contents vary by type, but most CRA notices share a required core:

Many notices must also come with the CFPB’s “Summary of Your Rights Under the Fair Credit Reporting Act,” a standardized document listing your major FCRA rights.8Consumer Financial Protection Bureau. A Summary of Your Rights Under the Fair Credit Reporting Act If your notice is missing any of these required pieces, that’s itself a potential FCRA violation.

Deadlines That Run Against You

Almost every CRA notice has a clock attached. Miss the deadline and you lose the right.

What to Do When You Get One

Read the notice carefully and figure out which type it is. An adverse action notice after a credit application calls for a different response than a reinsertion notice after a dispute, and your next step depends on knowing which you’re holding.

Check the details against your own records. If the notice refers to an account you don’t recognize, treat that as a possible identity theft signal.

If it’s an adverse action notice, use the 60-day window to request your free report from the CRA the notice names. Review it line by line. If the denial was based on an error, file a dispute with the CRA right away. You can also pull free weekly reports from all three major bureaus at AnnualCreditReport.com without waiting for a denial to trigger the right.11FTC: Consumer Advice. You Now Have Permanent Access to Free Weekly Credit Reports

If you suspect fraud, place a fraud alert or a security freeze. The alert lasts one year and requires creditors to verify your identity. A freeze blocks access to your report entirely until you lift it, and under federal law both placing and lifting a freeze are free.12FTC: Consumer Advice. Free Credit Freezes Are Here The freeze is the stronger protection, with the trade-off that you have to lift it temporarily when you apply for new credit.

If a dispute outcome notice says the information was verified but you still believe it’s wrong, you can add a personal statement to your file explaining your position. You can also file a complaint with the Consumer Financial Protection Bureau or send a direct dispute to the furnisher.13eCFR. 16 CFR Part 660 – Duties of Furnishers of Information to Consumer Reporting Agencies – Section: 660.4 Direct Disputes

When a Required Notice Never Shows Up

If a company was supposed to send you a notice and didn’t, or sent one that was incomplete, you have legal options. The FCRA splits liability into two tiers.

For willful violations, you can recover your actual damages or statutory damages between $100 and $1,000 per violation, whichever is greater, plus punitive damages and attorney’s fees.14Office of the Law Revision Counsel. 15 US Code 1681n – Civil Liability for Willful Noncompliance For negligent violations, your recovery is limited to actual damages plus fees, with no statutory floor, so you have to show real financial harm.15Office of the Law Revision Counsel. 15 USC 1681o Civil Liability for Negligent Noncompliance

The deadline to sue is the earlier of two years from when you discovered the violation or five years from when it occurred.16Federal Trade Commission. Fair Credit Reporting Act The discovery rule matters here: if a lender quietly denied you without ever sending the required notice, the two-year clock doesn’t start until you learn the notice was missing.

Notices from Specialty CRAs

Equifax, Experian, and TransUnion get most of the attention, but the FCRA’s notice rules apply equally to dozens of specialty CRAs. If a bank declines your checking account application based on ChexSystems, or a landlord rejects your rental application using a tenant screening company, you still get an adverse action notice and the same rights.

Specialty CRAs include deposit account screeners (ChexSystems, Early Warning Services), insurance claim databases (LexisNexis C.L.U.E., Verisk’s A-PLUS), employment screeners (Checkr, HireRight), and tenant screeners (TransUnion SmartMove, Contemporary Information Corp.).17Consumer Financial Protection Bureau. List of Consumer Reporting Companies If an adverse action notice names a company you’ve never heard of, that’s the signal to request your file from that specialty agency. The problem is often sitting in a niche database rather than in your traditional credit report.