This guide is general legal information, not legal advice, and does not create an attorney–client relationship. Rules change and vary by state — verify current requirements with official sources or a licensed attorney.
The moment a lender, card issuer, servicer, or fintech platform sends account data to a credit bureau, it becomes a "furnisher" and takes on a distinct set of federal duties. Those duties are not about credit decisions — they are about data quality and about what happens when a consumer says the data is wrong. They live mainly in 15 U.S.C. § 1681s-2 of the Fair Credit Reporting Act, with implementing detail in Regulation V.
Two structural features surprise newcomers. First, the most consequential obligation is triggered not by the consumer but by the credit reporting agency: when a bureau forwards a dispute, a statutory investigation clock starts. Second, the accuracy duty and the investigation duty carry very different liability consequences, which shapes where compliance attention pays off.
Key takeaways
- Section 1681s-2(a) requires furnishers not to report information they know or have reasonable cause to believe is inaccurate, and to correct and update information they have already reported.
- Section 1681s-2(b) is triggered when a consumer reporting agency notifies the furnisher of a dispute: the furnisher must investigate, review all relevant information the agency supplied, report results back, and correct or delete inaccurate items with the nationwide agencies.
- The investigation must be completed within the period the agency itself faces — generally 30 days from the consumer's dispute, extendable to 45 days when the consumer supplies additional information during that window.
- Private lawsuits generally lie for (b) violations after a bureau-forwarded dispute, while (a) duties are enforced mainly by federal and state authorities — a distinction that drives most FCRA furnisher litigation.
- Regulation V adds written policies-and-procedures requirements on accuracy and integrity, plus a direct-dispute process with defined exceptions.
Who counts as a furnisher
The statute does not define furnisher by industry. Anyone who regularly and in the ordinary course of business supplies information about consumers to a consumer reporting agency falls within the concept. That sweeps in banks, credit unions, card issuers, auto and student lenders, debt buyers, collection agencies, mortgage servicers, utilities and telecoms that report, landlords using tenant-screening pipelines, and fintech lenders reporting instalment or buy-now-pay-later accounts.
Reporting is voluntary in the sense that no statute compels a creditor to report at all. Once a company chooses to report, however, the duties attach in full, and they continue for as long as the tradeline is being reported or disputed. A platform that stops reporting does not shed responsibility for the accuracy of what it already sent.
The accuracy duty under subsection (a)
Subsection (a) sets the baseline: do not furnish information you know or have reasonable cause to believe is inaccurate. The statute defines reasonable cause narrowly — specific knowledge, other than a consumer's allegation alone, that would cause a reasonable person to substantially doubt the accuracy of the information. A furnisher that has been notified by a consumer at a designated address, and then determines the information is in fact incorrect, must stop reporting it.
Several more specific duties sit alongside the general one:
- Correct and update. A furnisher that has reported information later found incomplete or inaccurate must promptly notify the agency and provide the corrections.
- Flag disputes. When a consumer disputes an item directly with the furnisher and the furnisher continues reporting it, the reporting must indicate the dispute.
- Report the delinquency date. For accounts placed for collection, charged off, or similar, the furnisher must give the agency the month and year of the delinquency that began the sequence — the date that controls how long the item may remain on a report.
- Notice of negative information. Financial institutions that furnish negative information about a consumer to a nationwide agency must send the consumer a notice, which may be given in a prescribed form alongside other communications.
- Closed accounts and identity theft. Furnishers must notify agencies when an account is voluntarily closed and must not re-report information that has been blocked as the product of identity theft.
The dispute pipeline: how subsection (b) works
Most FCRA furnisher exposure runs through the indirect dispute channel. The sequence is procedural and unforgiving on timing.
- Consumer disputes with a bureau. The consumer contacts a consumer reporting agency and identifies the item believed to be wrong, usually with supporting documents.
- Bureau forwards the dispute. The agency transmits the dispute to the furnisher, along with all relevant information the consumer supplied. In practice this happens through an industry system that carries a dispute code and any attached documents.
- Furnisher investigates. The furnisher must conduct an investigation of the disputed information and review all relevant information provided by the agency. Courts have consistently held the investigation must be reasonable in the circumstances, not merely a re-check that the data matches the furnisher's own file.
- Furnisher reports results. Findings go back to the agency that forwarded the dispute.
- Furnisher corrects broadly. If the information is found incomplete or inaccurate, the furnisher must notify every nationwide agency to which it reported, and must modify, delete, or permanently block the item as appropriate.
- Clock. All of this must be finished before the agency's own deadline expires — generally 30 days from receipt of the consumer's dispute, extended to 45 days when the consumer provides additional relevant information within the first 30.
Watch the deadline: The furnisher's clock is derived from the agency's clock, not from when the dispute reaches the furnisher's inbox. Internal routing delays consume the statutory period. Build the queue so that a dispute received on day four still leaves time for a documented investigation.
What "reasonable investigation" tends to require
Litigation in this area rarely turns on whether an investigation happened; it turns on whether it was reasonable. Patterns that draw adverse findings include comparing the dispute only against the same internal record that produced the disputed tradeline, ignoring documents the consumer attached, applying a template response regardless of dispute content, and failing to escalate obvious indicators of identity theft or of a mixed file. Depth expected generally scales with the seriousness of the allegation and the quality of the evidence submitted.
Direct disputes and Regulation V
Consumers may also dispute directly with the furnisher. Regulation V sets out when a furnisher must investigate a direct dispute, what the consumer must include, and which disputes may be declined — including disputes that are frivolous or irrelevant, and certain categories the rule excludes. The regulation also requires furnishers to establish and implement reasonable written policies and procedures on the accuracy and integrity of information they report, with interagency guidelines supplying the substantive expectations.
Those guidelines point to concrete controls: identifying the specific accounts and data elements furnished, maintaining records long enough to substantiate what was reported, conducting periodic accuracy testing, updating for corrections, and training staff who handle disputes. Fintech lenders that use third-party servicers should note that furnishing responsibility does not transfer with the servicing function — supervise the vendor as you would any other regulated dependency, using the diligence approach described in our guide to vendor and supplier contracts.
Liability, enforcement, and the (a)/(b) divide
| Feature | Subsection (a) — accuracy | Subsection (b) — post-dispute investigation |
|---|---|---|
| Trigger | Furnishing information at all | Notice of dispute from a consumer reporting agency |
| Core obligation | Do not report known or reasonably doubted inaccuracies; correct and update | Investigate, review agency-supplied material, report results, correct across nationwide agencies |
| Private lawsuits | Generally unavailable — the statute limits private enforcement of these duties | Generally available, and the main source of furnisher litigation |
| Public enforcement | Federal regulators including the CFPB and the FTC, plus state officials | |
The practical implication is blunt: an accuracy problem that no one disputes is largely a supervisory risk, while the same problem after a forwarded dispute becomes a litigation risk with statutory damages and fee-shifting available for wilful violations. Systematic dispute-handling failures also attract examination attention and can compound into unfair or deceptive practice theories of the kind described in our article on UDAAP and CFPB enforcement.
State law adds another layer. Some states have their own credit reporting statutes and consumer protection acts reaching furnishing conduct, and preemption analysis under the FCRA is genuinely complicated. Do not assume a single national answer; check the states where your borrowers live.
Building a furnisher compliance programme
- Inventory every data element furnished, for every product, including through servicers and partners.
- Document the mapping from your system of record to the reporting format, and re-test it after every product change.
- Route disputes into a queue with day-count tracking keyed to the bureau's receipt date, not yours.
- Require investigators to open and consider attached consumer documents, and record what was reviewed.
- Escalate identity-theft indicators, mixed-file signals, and repeat disputes on the same tradeline.
- Push corrections to every nationwide agency that received the item, not only to the one that forwarded the dispute.
- Sample-test outcomes periodically and feed findings back into product and servicing design.
Firms standing up a lending product for the first time should build the furnishing pipeline alongside the licensing and disclosure work rather than after launch; the broader map appears in our overview of U.S. fintech regulation, and collections-side obligations are covered in debt collection licensing for lenders and servicing platforms.
Frequently asked questions
Must we investigate a dispute sent straight to us by a consumer?
Often yes, under the direct dispute rules in Regulation V, provided the consumer supplies enough identifying information and the dispute falls inside the rule's coverage. Certain categories may be excluded and frivolous or duplicative disputes may be declined. Even where the rule does not apply, continuing to report an item you have been told is wrong carries its own risk.
Is matching the dispute against our own records enough?
Rarely. If the consumer's allegation is precisely that your record is wrong, confirming that your record says what it says answers nothing. A reasonable investigation looks at the substance of the allegation and at the material the bureau forwarded, with depth proportionate to what is being claimed.
How long may accurate negative information stay on a report?
The FCRA sets outer limits measured from the date of the delinquency that led to the item, which is why furnishers must report that date correctly. Some categories have different periods. Because these limits are statutory and occasionally amended, confirm current periods against the statute rather than relying on rules of thumb.
Does using a third-party servicer transfer furnisher liability?
No. Contracts can allocate cost between the parties, but the furnisher remains responsible under the statute for what is reported in its name. Oversight rights, audit access, dispute service levels, and indemnities should all appear in the servicing agreement.
Can we report an account while a dispute is unresolved?
Yes, but the reporting must indicate that the item is disputed once the consumer has raised it with you. Continuing to report the item as undisputed while an investigation is open is one of the more commonly litigated furnisher failures.
Practical next steps
Furnisher compliance rewards process design over legal argument. The companies that avoid trouble treat credit reporting as a data-quality function with a legal deadline attached: clear ownership, tested mappings, a dispute queue that assumes documents will be attached and read, and periodic sampling to catch systematic errors before a regulator or a plaintiff does. Review the programme whenever a product changes, a servicer changes, or the reporting format changes. Further coverage of adjacent obligations is collected in the fintech law topic hub. This article is general information, not legal advice; confirm specific duties with counsel against current federal and state law.
