Someone can run your credit report without your knowledge in certain situations, but usually only under legal limits defined by the Fair Credit Reporting Act (FCRA). A key distinction is between "soft" and "hard" credit inquiries:
- Soft inquiries do not require your permission and can be done without your knowledge by entities such as potential landlords, employers (with consent), debt collectors verifying debts, companies sending preapproved offers, or during background checks. These do not affect your credit score.
- Hard inquiries generally require your explicit permission because they impact your credit score. They happen when you apply for a loan, credit card, insurance, or an apartment. However, some legal exceptions allow hard inquiries without permission, such as court orders, child support enforcement, or debt collections under government agency certification.
Unauthorized credit checks are against the law under the FCRA, and you can sue for damages if someone accesses your credit report without "permissible purpose." Credit bureaus must also use more than just name matching to avoid giving your credit report to the wrong person. In summary, while most credit reports require your approval to be checked, some soft checks and specific legal cases allow access without informing you, but unauthorized access is a legal violation with recourse for you.
