Credit Reports and Monitoring Guide: Check Your Credit for Fraud for Free

Your credit report is often the first place identity fraud shows up, and in both the UK and the US you can check it for free without paying for a monitoring subscription. A credit report is the record a credit reference agency (UK) or credit bureau (US) keeps about your borrowing, payments and addresses; lenders read it before they say yes to an application in your name. Checking it lets you spot accounts, searches and addresses that are not yours, and correct mistakes before they cost you. This guide explains where to get your report free, how to read it for signs of fraud, how to dispute errors step by step, and when paid monitoring is or is not worth having. It is written for individuals, families and the people who support fraud victims, and goes deeper than the Credit Freezes and Fraud Alerts Guide, which covers locking your file.

Key takeaways

• It is free in both countries. In the US the three nationwide bureaus let you check each report weekly for free at AnnualCreditReport.com; in the UK every credit reference agency must give you a free statutory report.
• Use only official routes. The FTC says AnnualCreditReport.com is the only authorised source for free annual reports and warns about lookalike sites and unsolicited messages claiming to be from it.
• Look for what is not yours. Unknown accounts, credit searches you did not make and addresses you never lived at are the main signs of identity fraud.
• Dispute with both sides. Raise errors with the agency or bureau and with the lender that supplied the data. In the US the bureau has 30 days to investigate.
• Monitoring alerts you; it does not prevent. The FTC notes paid credit monitoring usually charges a fee and will not alert you to bank withdrawals or tax refund fraud. A credit freeze is free and actually blocks new credit.

What it is

A credit report, called a credit file in the UK, is a record of how you have managed credit and certain other accounts. The FTC describes US reports as holding identifying details such as your address and date of birth, plus credit history such as payment behaviour and any bankruptcy filings. The ICO describes UK files as holding repayment history on credit, utility and service accounts, previous addresses, and public records such as electoral roll data, county court judgments and insolvency information.

A credit score is different: it is a number calculated from the report. The free reports described here are about the report, and checking your own report does not affect your score. The UK government-backed MoneyHelper service explains that checking your own report is a soft search, so you can check as often as you like.

Who holds your report

Agencies can hold different information, because not every lender reports to every agency, so check each one rather than only one.

How it works

Getting your report

• US: request through AnnualCreditReport.com, by phone or by post. You may also be entitled to extra free reports, for example within 60 days of being turned down for credit, a job, insurance or housing because of your report, if you are unemployed and plan to apply for work within 60 days, if you receive public assistance, if fraud made your report inaccurate, or if you have a fraud alert on your file.
• UK: look for the statutory report on the agency's own website; the ICO is clear you do not need a paid monthly subscription. For a written request, include your full name, any other names used in the last six years, your addresses from the last six years and your date of birth. The agency may ask for proof of identity and address.
• Free score and report services: MoneyHelper notes some agencies offer free score and report access through partner websites. These are commercial services; read what data they use before signing up.

Reading it for signs of fraud

Other signs outside the report are worth watching too. The FTC lists bills that stop arriving (someone may have changed your billing address), unfamiliar charges and unexpected bills as warning signs.

Disputing errors step by step

1. Gather evidence: keep a copy of the report with each error marked, and copies (not originals) of supporting documents such as statements or a police or identity theft report.
2. Dispute with the agency or bureau: online, by post or by phone. In the US the FTC advises including your full name and address, each error and why it is wrong, supporting documents and a marked copy of the report, sent by certified mail with a return receipt if posting. In the UK the ICO says to raise the error with the agency that gave you the file.
3. Dispute with the lender too: both the FTC and the ICO point out that the organisation that supplied the data is usually responsible for its own entries. The CFPB says US furnishers generally must investigate and respond within 30 days.
4. Know the US timeline: the FTC says the bureau has 30 days to investigate, must give you results in writing and, if the report changes, a free updated copy. On request it must tell anyone who received your report in the past six months, or for employment in the past two years, about the correction.
5. If the entry stays: in the US, ask for a statement of dispute to be added to your file. In the UK, you can add a Notice of Correction to explain your circumstances, which anyone viewing that entry will see.
6. Escalate: in the UK, if the agency and lender will not fix an obvious inaccuracy, complain to the ICO (which does not decide financial disputes). In the US, submit a complaint to the CFPB.
7. Check again: confirm the change on a fresh report a month or two later.

Accurate negative information generally stays on a US report for seven years, and bankruptcy information for 10 years, according to the FTC. Disputes are for errors and fraud, not for removing accurate history.

Why it matters

Identity fraud usually aims at credit: criminals open accounts, phone contracts or loans in your name and leave the debt behind. Victims often find out only when a debt collector calls or an application is refused. Regular checks shorten that gap, which matters because the longer a fraudulent account runs, the more damage it does to your record and the harder it is to unwind. Errors that are not fraud also matter: a wrong default can raise the cost of a mortgage or stop a rental application.

Reports are also used beyond lending. The FTC notes bureaus sell report information to businesses deciding on credit, insurance or rentals, and some employers use reports in hiring. MoneyHelper notes UK employers and landlords usually see only public record information.

Monitoring options at a glance

Before paying for monitoring, the FTC suggests asking how often the service checks for changes, which bureaus it covers, whether report reviews are limited or charged, and what extras are included. You may already have monitoring through a bank, card provider, employer or insurer. For the full buying decision see the Identity Theft Protection Services buyer's guide.

Common misconceptions

• "Checking my report lowers my score." Checking your own report is a soft search and does not affect your score.
• "I need to pay to see my report." Free routes exist in both countries. The ICO says UK consumers do not need a paid subscription.
• "One agency is enough." Agencies can hold different data. Check each.
• "Monitoring will stop fraud." It tells you after something happens. A freeze blocks new credit before it is opened.
• "A message from the credit bureau is genuine." The FTC warns that unsolicited emails, texts, pop-ups and calls claiming to be from AnnualCreditReport.com or a bureau are likely scams.
• "Disputing will remove anything negative." Accurate information can stay for years; disputes fix errors and fraud.

Related concepts

• Credit freezes and fraud alerts: how to lock your file. See the Credit Freezes and Fraud Alerts Guide.
• Identity theft recovery: what to do once you find a fraudulent account. See the Identity Theft Recovery Guide.
• Child identity theft: children can have reports opened in their name. See the Child Identity Theft Guide.
• Tax identity theft: not shown by credit monitoring. See the Tax Identity Theft and Tax Scams Guide.
• Account opening fraud: how lenders detect applications made with stolen identities. See the Account Opening and Application Fraud Guide.

Practitioner checklist

• Get your free report from each agency or bureau through the official route only.
• Set a routine: for example, check one report every few months in rotation, and all of them after a data breach notice or a lost wallet.
• Read every account, search, address and linked person, and mark anything you do not recognise.
• Dispute errors with both the agency and the lender, in writing, keeping copies and proof of delivery.
• Follow up on the 30-day US investigation window and the one-month UK response period.
• Add a statement of dispute (US) or Notice of Correction (UK) where an entry stays but needs context.
• Escalate unresolved problems to the CFPB (US) or the ICO (UK).
• Before paying for monitoring, check what you already get free and consider a freeze instead.
• Ignore unsolicited messages claiming to be from a credit bureau or AnnualCreditReport.com.

Standards and references

• Federal Trade Commission: Free credit reports
• Federal Trade Commission: Disputing errors on your credit reports
• Consumer Financial Protection Bureau: How do I dispute an error on my credit report?
• Federal Trade Commission: What to know about identity theft
• Federal Trade Commission: What to know about credit freezes and fraud alerts
• Information Commissioner's Office: Credit
• MoneyHelper: How to check your credit report

Related NHI Mgmt Group resources: Credit Freezes and Fraud Alerts Guide · Identity Theft Recovery Guide · Identity Theft Protection Services · What to Do If You Have Been Scammed Guide