Consumer complaint received 2025-11-16 00:00:00
Product: Credit reporting or other personal consumer reports — Credit reporting
Issue: Incorrect information on your report — Information belongs to someone else
Company: EQUIFAX, INC.
State: NV

Complaint narrative:
I am filing this complaint because my identity was stolen, and a fraudulent personal loan and hard inquiry from XXXX were placed on my credit reports without my consent, authorization, or benefit. These fraudulent items are documented in my official FTC Identity Theft Report XXXX XXXX XXXX XXXX 

The fraudulent loan appears under XXXX, account number XXXX, reporting a balance of approximately {$16000.00}, and a corresponding unauthorized hard inquiry dated XXXXXX/XX/XXXX. I never applied for, opened, authorized, or benefited from this loan or inquiry in any way. This is a clear identity-theft event, and its presence has severely damaged my credit, caused financial stress, impacted my borrowing power, and created significant emotional and economic harm. 

I discovered the fraud in XX/XX/XXXX and immediately took all legally required steps : Filed an official FTC Identity Theft Report ( submitted to law enforcement ) Notified each credit bureau Requested a block under FCRA 605B Disputed the unauthorized inquiry Took steps to secure my personal information Despite providing proper identity-theft documentation, the credit bureaus and Upstart/DRBank failed to block, delete, or cease reporting this fraudulent account and inquiry, as required by federal law.

This constitutes multiple FCRA violations, including failure to block identity-theft information within 4 business days, failure to conduct a lawful reinvestigation, and continued reporting of known fraudulent data. 

This situation has caused ongoing credit score damage, higher interest costs, loan denials, emotional distress, and significant disruption to my financial stability.

LAWS VIOLATED FCRA 605B ( 15 U.S.C. 1681c-2 ) The bureaus are required to block identity-theft-related information within 4 business days after receiving my FTC Report and identity documentation. They did not comply.

FCRA 611 ( 15 U.S.C. 1681i ) The bureaus must conduct a reasonable reinvestigation of disputed information, including fraud accounts. Their failure to remove this item demonstrates a lack of reasonable procedures.

FCRA 623 ( a ) ( 6 ), 623 ( b ) Upstart/DRBank, as a furnisher, is prohibited from reporting information they know or should know is inaccurate, especially after receiving my FTC report and dispute notice. They continued reporting the fraudulent account.

FCRA 604 ( Permissible Purpose ) The unauthorized hard inquiry violates permissible-purpose requirements, as I never applied for credit with Upstart/DRBank.

FACTA Identity Theft Protections Continued reporting after an identity-theft filing violates FACTAs mandatory fraud protections. 

XXXX ( XXXX XXXX ) The fraud strongly suggests a failure to protect consumer data under GLBA security standards. 

Privacy Act of 1974 ( improper handling of personal data ) The mishandling and continued publication of unauthorized personal data implicates federal privacy protections.

METRO-2 VIOLATION SUMMARY Account reporting despite identity theft XXXX  Compliance Condition Code error XXXX XXXX identity-theft investigation code applied No fraud block XXXX XXXX  procedural violation Inquiry coded without permissible purpose XXXX XXXXCode violation

Company response to consumer: Closed with explanation