How to Review an Unauthorized Hard Inquiry
What to verify: Ask the named company to identify the application or permissible purpose, and use identity-theft protections when no legitimate transaction explains the inquiry.
Identify the company, date, application, permissible purpose, and possible identity theft behind an unfamiliar credit inquiry.
Identify the company and possible permissible purpose
An unfamiliar inquiry can come from a forgotten application, shopping process, account review label, or fraud. The report name may differ from the consumer-facing brand, so identification comes before dispute.
Treat this as a record-matching problem before treating it as a payment or dispute problem. The first test is is it hard or soft? since only the report classification reveals how it is presented. The final test is is there a new account too? since that raises identity-theft urgency. Write the confirmed answer, the source of that answer, and the date checked. An unanswered field is a reason to pause, not a reason to guess.
Facts to establish
- Record the bureau, company name, date, and inquiry type.
- Dispute and activate fraud protections if it is unauthorized.
- Freeze reports and use IdentityTheft.
Application and identity records to check
Credit report inquiry section
Recent applications and consents
Dealer or lender paperwork
Company response
Identity-theft report when relevant
Label the file with source, event date, displayed status, expected status, and conflict. Keep the complete version of Identity-theft report when relevant, not only a screenshot or copied number. Screenshots can help show what appeared on a certain day, but they can omit the page, account field, delivery details, or terms needed later. Add a short note explaining what each record proves and what it does not prove.
Questions for the bureau, company, and your own records
- Is it hard or soft?
- Only the report classification reveals how it is presented.
- Does a parent company name explain it?
- Brand names can differ.
- Was credit shopping authorized?
- A dealer may send an application to lenders.
- Is there a new account too?
- That raises identity-theft urgency.
Investigate before labeling the inquiry fraud
Use this sequence as a working file, not a memory exercise. Begin with Record the bureau, company name, date, and inquiry type. Keep Credit report inquiry section, Recent applications and consents, and Dealer or lender paperwork together as you resolve conflicting facts before choosing a remedy. The sequence is complete only when you can dispute and activate fraud protections if it is unauthorized. and point to the confirmation that supports it. If a new record changes an earlier answer, return to that step before moving money or submitting another application.
- Record the bureau, company name, date, and inquiry type.
- Search your application, dealer, lender, and rate-shopping records.
- Contact the company through an independently verified channel.
- Request the application or purpose associated with the inquiry.
- Dispute and activate fraud protections if it is unauthorized.
A dealership inquiry has an unexpected lender name
A consumer sees an unfamiliar bank inquiry dated the day they applied through a dealership. The dealer paperwork shows authorization to shop financing and identifies the bank. The inquiry is explained; a truly unrelated inquiry would trigger a different path.
Why this example matters: The useful result is a confirmed cause and a matching remedy, not a fast assumption. It avoids disputing every inquiry after rate shopping and answers “Is it hard or soft?” with a record, not a guess. Only the report classification reveals how it is presented. A different fact can lead to a different choice, so copy the method rather than copying the example's dollar amount, date, or outcome.
Inquiry assumptions that weaken the complaint
Disputing every inquiry after rate shopping
Calling a number from an unsolicited message
Ignoring a related new account
Claiming identity theft without reviewing consent records
If one of these mistakes has already happened, preserve the current records before trying to undo it. Write what happened, when it happened, who was involved, and whether money or account access changed. Then return to the first unconfirmed step and work toward this control: Dispute and activate fraud protections if it is unauthorized. Reopen the diagnosis when the two source records still disagree.
Use identity-theft steps when no authorization exists
Working checklist
Your checks stay in this browser.
Primary sources
This is general education, not individualized financial or legal advice. Product terms, scoring models, and state law can change.