If you’ve ever been told there are “three major credit bureaus” and that’s all you need to worry about, you’ve been given an answer that’s incomplete in a way that costs people mortgages, rentals, bank accounts, and insurance approvals every day. The Consumer Financial Protection Bureau regulates more than 50 consumer reporting agencies in the United States. Twelve of them shape the practical outcomes of your financial life. This guide walks through each one, what they track, who pulls them, how they hurt you when they’re wrong, and exactly how to dispute errors on each.

Jump to a section:
– The 60-second answer
– Why the “3 bureau” framing falls short
– The 12 CRAs that shape your financial life
– Which CRAs matter for your specific goal
– Your rights under the FCRA, across all CRAs
– How to pull your reports
– How to dispute errors at each CRA
– State-law overlays
– Glossary
– FAQ

The 60-Second Answer

There are not three credit bureaus. There are more than 50 consumer reporting agencies regulated by the federal Fair Credit Reporting Act, and 12 of them have a direct, often invisible impact on whether you can rent, borrow, bank, get insurance, or buy a home. Equifax, Experian, and TransUnion are the three you’ve heard of. The other nine, Innovis, LexisNexis, ChexSystems, Early Warning Services, TeleCheck, CoreLogic Credco, NCTUE, DataX, and MIB, track everything from your check-writing history to your insurance applications to your evictions to the data your mortgage lender actually pulls when underwriting your loan. The same federal law that governs Equifax governs all of them. The same dispute rights apply to each. And most credit-repair services never look beyond the first three.

The Myth of “The 3 Major Bureaus”

Walk into almost any credit-repair conversation in America and you’ll hear a sentence that goes something like: “We dispute items on your reports with the three major credit bureaus, Equifax, Experian, and TransUnion.” That sentence is technically true. It is also strategically incomplete. When the CFPB publishes its annual list of consumer reporting companies, the number changes year over year, but it has never been three. The current list includes more than 50 specialized and nationwide consumer reporting agencies.

Why does the industry talk about “the three bureaus” then? Two reasons. First, those three are the dominant nationwide consumer reporting agencies for general credit data, and most lenders pull from them when you apply for credit cards or auto loans. Second, they are the easiest three to dispute through. The dispute infrastructure is built. The forms exist. Most repair shops stop there because that’s where the standard product ends.

The problem is that “where the standard product ends” is not the same as “where your credit life ends.” If you’ve been denied a checking account, the three bureaus aren’t the issue, ChexSystems is. If your mortgage lender ran your credit and got a different score than you saw on Credit Karma, the issue is that they pulled CoreLogic Credco, not the consumer-facing version. If you’ve been turned down for life insurance after a clean medical exam, the database doing the damage is MIB. Different CRA, different rights, different dispute process, same federal law underneath.

The 12 CRAs That Actually Shape Your Financial Life

What follows is a working knowledge of the 12 consumer reporting agencies a credit-repair process should actually consider, depending on the client’s goal. These are the agencies Credituity targets in our internal operations [reference: see the operations approach in our SOP], and the ones we walk every client through during intake.

1. Equifax

Equifax is one of the three nationwide general-credit bureaus. Founded in 1899 in Atlanta, it tracks credit accounts, payment history, public records, and identifying information across more than 200 million U.S. consumer files. When a lender, landlord, or employer pulls “your credit,” there is roughly a one-in-three chance they pulled Equifax. The FCRA governs Equifax in full, meaning you have the right to a free annual report, the right to dispute, and the right to investigation within 30 days of a dispute.

How Credituity targets it: part of every tri-merge audit; primary dispute target for general credit accounts.

2. Experian

Experian, headquartered in Costa Mesa, California (parent company in Dublin, Ireland), is the second of the nationwide three. Experian’s file structure differs slightly from Equifax, it tends to retain certain account histories slightly longer, and its specialty Experian Business division also tracks business credit. For most consumers, Experian is interchangeable with Equifax and TransUnion as a general-credit data source. For business owners pursuing SBA-backed or commercial credit, Experian Business is a separate file with its own dispute process.

How Credituity targets it: standard tri-merge target; Experian Business considered separately for business-funding clients.

3. TransUnion

The third of the nationwide three, based in Chicago. TransUnion’s file content overlaps with Equifax and Experian by roughly 70 to 80% in most consumer files, but the remaining 20 to 30%, the items that appear on one bureau but not another, is where most disputes originate. A creditor reporting an account to Equifax but not TransUnion (or vice versa) creates the kind of file inconsistency that triggers verification failures during a dispute.

How Credituity targets it: standard tri-merge target; cross-bureau inconsistencies often become the basis for round-two disputes.

4. Innovis, “The 4th Bureau”

Innovis is the nationwide CRA almost nobody has heard of, and that includes most credit-repair services. It is owned by CBC Companies and operates under the same FCRA rules as the big three. Many subprime lenders, mortgage underwriters performing fraud verification, and some pre-screened offer providers pull Innovis specifically, sometimes alongside the big three, sometimes as a standalone verification.

The problem is that because Innovis doesn’t appear on most consumer-facing reports (Credit Karma doesn’t show it; AnnualCreditReport.com doesn’t always include it), consumers often have no idea what’s on their Innovis file until they’re denied a loan and the rejection cites it. Errors on Innovis can sit on a file for years, undetected by every other dispute someone has filed.

How Credituity targets it: always pulled during initial intake when client’s goal involves any lender that may pull Innovis (subprime auto, certain mortgages, fraud verification). Disputes routed through Innovis’s own dispute channel, separate from the big three.

5. LexisNexis Risk Solutions

LexisNexis is the public-records and risk-assessment giant. Its consumer file pulls from court records, eviction filings, criminal records, civil judgments, and the CLUE database (Comprehensive Loss Underwriting Exchange) for insurance claims. When you apply for an apartment and the landlord runs a tenant screening, LexisNexis is usually behind it. When your auto insurer increases your premium after a claim, that claim was likely pulled from LexisNexis’s CLUE database.

Errors on a LexisNexis file are particularly damaging because the underlying data, court filings, public records, insurance claims, is harder to dispute than a standard credit account. The dispute is winnable, but the documentation burden is higher. You’re often arguing about whether a court record matches you correctly, whether an eviction was actually filed, or whether a claim was incorrectly attributed.

How Credituity targets it: pulled for any client whose goal involves renting, applying for insurance, or who has a civil judgment or eviction record.

6. ChexSystems

ChexSystems tracks banking history, specifically, account closures for cause, returned items, account-takeover fraud, and overdrafts that went unpaid. When you’ve been denied a checking or savings account, ChexSystems is almost always the reason. Records typically remain on file for five years before automatic removal.

For consumers who are “unbanked”, paying check-cashing fees, using prepaid cards, unable to access basic banking services, the ChexSystems file is often the single biggest barrier. Yet most credit-repair services don’t even mention it because it sits outside the standard tri-merge.

How Credituity targets it: pulled and disputed for any client who has been denied a bank account or has unresolved overdraft history. The dispute path is direct to ChexSystems under FCRA §611 rules, and surprisingly often successful when records were never properly substantiated.

7. Early Warning Services (EWS)

Early Warning Services is the banking-industry CRA that complements (and often duplicates) ChexSystems. Owned by a consortium of major U.S. banks (including JPMorgan Chase, Bank of America, Wells Fargo, and others), EWS tracks fraud flags, deposit fraud, Zelle-related disputes, and account-opening risk signals. Many banks pull both ChexSystems AND EWS before approving a new account.

How Credituity targets it: pulled in tandem with ChexSystems for any banking-denial client.

8. TeleCheck

TeleCheck tracks check-writing history at the point of sale. When you’ve written a check at a grocery store and the cashier got a “decline” message back, that decline most likely came from TeleCheck (now part of First Data). The agency maintains records of returned checks, account closures, and risk patterns associated with check-writing.

How Credituity targets it: less common, but pulled and disputed when a client has had retail check declines or merchant-side flagging that affects their ability to pay by check.

9. CoreLogic Credco

CoreLogic Credco is the mortgage industry’s preferred consumer reporting agency. It is a tri-merge product, meaning it pulls data from Equifax, Experian, and TransUnion and assembles it into a single mortgage-specific report, but the version it produces differs from the consumer-facing reports those bureaus provide. Mortgage underwriters use the Credco version specifically because of how it normalizes and presents the data.

This is why so many would-be homeowners are blindsided. They check their Credit Karma score, which uses VantageScore on TransUnion or Equifax data, and see 720. They walk into a mortgage broker, get pulled through Credco, and see 660. Same person, same accounts, different score. The Credco pull is what actually governs the mortgage decision.

How Credituity targets it: mandatory pull for any client whose stated goal is a mortgage. Disputes targeted at the underlying bureaus (because Credco pulls from them) but staged with the Credco-specific score impact in mind.

10. NCTUE

The National Consumer Telecom & Utilities Exchange tracks telecommunications and utility account history, cell phone contracts, cable accounts, electric and gas service. When a utility company places a collection on your file or when a cell carrier reports a contract default, NCTUE is often the database it lands in. Many landlords and apartment complexes pull NCTUE as part of tenant screening because telecom payment history is treated as a proxy for general financial responsibility.

How Credituity targets it: pulled for clients with telecom collections, utility defaults, or who are renting and getting screened.

11. DataX / Clarity Services

DataX (owned by Equifax) and Clarity Services are specialty CRAs that track subprime and alternative credit data, payday loans, installment loans, rent-to-own, and similar products. These files exist outside the mainstream credit bureaus and follow the borrower across products that mainstream credit doesn’t track. If you’ve taken out a payday loan in the past five years, there’s a high probability that loan appears on a DataX or Clarity file, even if it’s settled and never appeared on Equifax/Experian/TransUnion.

How Credituity targets it: pulled for clients with subprime borrowing history who are now trying to qualify for mainstream credit.

12. MIB (Medical Information Bureau)

MIB is the insurance industry’s consumer reporting agency. It tracks medical underwriting history, specifically, information shared between life and health insurance carriers about prior applications, medical exam results, and condition disclosures. When you apply for life insurance, MIB is pulled. When that application is denied or rated up, MIB data is usually a factor.

Errors on an MIB file can be especially damaging because they affect insurability for years and often follow a consumer across carriers. The FCRA gives you the right to dispute MIB data the same way you would dispute Equifax, but most consumers don’t know MIB exists.

How Credituity targets it: pulled for any client whose goal involves life or health insurance applications, or who has been previously denied insurance for unclear reasons.

Which CRAs Matter for Your Specific Goal

The point of mapping all 12 CRAs is not to dispute every record on every agency for every client, that would waste effort. The point is to match the right CRAs to your specific goal. Here’s the operational approach Credituity uses:

Your goal CRAs that matter
Buy a home (mortgage approval) Equifax · Experian · TransUnion · Innovis · CoreLogic Credco · LexisNexis (for any public-record items)
Open a checking or savings account ChexSystems · Early Warning Services · TeleCheck
Rent an apartment Equifax · Experian · TransUnion · LexisNexis (eviction & public records) · NCTUE
Refinance after divorce Equifax · Experian · TransUnion · LexisNexis (court records from divorce)
Get business funding (SBA / commercial) Equifax · Experian (Business) · TransUnion · Innovis
Buy life or health insurance MIB · LexisNexis (CLUE)
Get a cell phone or utility account NCTUE · Equifax · Experian · TransUnion
Recover from payday-loan history DataX · Clarity Services · Equifax · Experian · TransUnion
General credit improvement (no specific goal) Equifax · Experian · TransUnion · Innovis (baseline four-bureau audit)

Most credit-repair shops never ask the goal question. They run the standard three-bureau dispute and call it complete. If the underlying problem sits in ChexSystems, LexisNexis, or CoreLogic Credco, the work never touches it.

Your Rights Under the FCRA, Across All CRAs

Here’s the critical fact that the credit-repair industry rarely emphasizes: every right the FCRA gives you against Equifax, you have against all of these agencies. The same federal law. The same 30-day dispute window. The same right to a free annual disclosure.

Under 15 U.S.C. §1681i(a)(1)(A), when you dispute information on any of these CRAs, the agency must conduct a reasonable reinvestigation within 30 days, and that obligation applies to LexisNexis, ChexSystems, and MIB just as it applies to Equifax. Under FCRA §609, you have the right to know exactly what’s in your file at each of these agencies. Under FCRA §616 and §617, you have the right to sue for willful or negligent violations.

The reason most consumers never exercise these rights against the “hidden” CRAs is not legal, it’s informational. You can’t dispute a record on LexisNexis if you’ve never been told LexisNexis has a file on you. You can’t sue ChexSystems for failing to investigate if you’ve never been told ChexSystems exists.

Knowing the agency is the first step. The second step is pulling the report. The third is disputing what’s wrong.

You can do this yourself.

Everything in this guide is information you can act on without hiring anyone. The FCRA is built to be enforceable by the individual consumer. Most people, though, run into one of three problems: they don’t have time to manage disputes across multiple agencies, they don’t know which CRA matters for their specific goal, or they file disputes that get bounced as “frivolous” because the dispute language didn’t cite the right legal mechanism.

That’s what Credituity does. We pull the relevant CRAs based on your goal, draft mechanism-specific disputes that cite the right statute for each item, and manage the back-and-forth through the entire process. If your situation is straightforward, you can do this yourself with the templates and process below. If it’s complex, multiple CRAs, post-divorce damage, mortgage-time-pressure, that’s when most people call us.

Book a free 15-minute call with Eli →

No card. No pressure. If you don’t need credit repair, we’ll tell you.

How to Pull Reports From Each CRA

Every one of the 12 CRAs is required by federal law to provide you a free disclosure of your file under FCRA §612. Some make it easier than others.

CRA How to request your report
Equifax annualcreditreport.com (free weekly) or equifax.com/personal/credit-report-services
Experian annualcreditreport.com or experian.com
TransUnion annualcreditreport.com or transunion.com
Innovis innovis.com/personal/creditReport · phone: 800-540-2505
LexisNexis consumer.risk.lexisnexis.com · request a “Full File Disclosure”
ChexSystems chexsystems.com/web/chexsystems/consumerdebit · phone: 800-428-9623
Early Warning Services earlywarning.com/consumer-information
TeleCheck firstdata.com/telecheck · phone: 800-366-2425
CoreLogic Credco corelogic.com/consumer
NCTUE nctue.com · phone: 866-349-5185
DataX / Clarity consumeroffice.com (Clarity Services)
MIB mib.com/request_your_record.html

Identity verification varies, LexisNexis and ChexSystems in particular tend to require driver’s license uploads and Social Security verification before they’ll release the file. Plan for a 1 to 2 week turnaround on some of the specialty CRAs.

How to Dispute Errors at Each CRA

The dispute mechanism is the same across every CRA, but the specifics matter.

The core process under FCRA §611:

  1. Identify the specific item in error
  2. Write a dispute letter that names the item, explains the inaccuracy, and demands investigation under FCRA §611(a)(1)(A)
  3. Send by certified mail with return receipt requested (this is the operational rule we follow at Credituity, it creates the legal record you need if the dispute is ignored)
  4. The CRA has 30 days to conduct a reasonable reinvestigation
  5. The CRA must respond with the result: deleted, updated, verified, or no response
  6. If verified incorrectly or no response within 30 days, escalate, either with a Round 2 dispute citing more specific violations (Metro 2 format errors, debt validation failures, FDCPA violations on the underlying account) or by escalating to litigation prep

CRA-specific quirks worth knowing:

  • LexisNexis requires identity verification at a higher bar than Equifax/Experian/TransUnion, expect to provide additional documentation.
  • ChexSystems disputes are often successful on first round when the underlying overdraft was never properly substantiated by the bank. Many banks fail to retain the original documentation.
  • MIB disputes require you to specify the exact code or condition you’re disputing, MIB doesn’t accept generic “this is wrong” language.
  • CoreLogic Credco doesn’t accept direct disputes, you dispute the underlying data at Equifax/Experian/TransUnion, and Credco’s tri-merge updates after the source data is corrected.
  • DataX and Clarity disputes go to the Equifax dispute portal because both are Equifax-owned subsidiaries.

Each of these CRAs has a dedicated spoke article in this guide series, links below in the Related Reading section, with step-by-step instructions specific to that agency.

State-Law Overlays

Federal FCRA rights are the floor, not the ceiling. Several states have layered additional consumer protections on top of the federal law:

  • California, the California Consumer Credit Reporting Agencies Act (CCRAA) gives California consumers stronger rights to dispute, including expanded liability for CRAs that fail to investigate
  • Texas, Texas Business & Commerce Code Chapter 20 governs CRAs operating in Texas with additional disclosure requirements
  • New York, N.Y. General Business Law Article 25 provides additional protections, particularly around use of credit reports for employment screening
  • Massachusetts, Mass. Gen. Laws Ch. 93 §50 et seq. limits use of credit reports in certain contexts

If you live in one of these states (or several others, Vermont, Washington, Maine, Connecticut have additional state-level CRA laws), your dispute leverage is meaningfully stronger than federal law alone. Cite state law in addition to federal FCRA in your dispute letters.

When You Should Hire Help

There are situations where doing this yourself is the right call. There are situations where it isn’t.

You can probably handle it yourself if:
– You have 1 to 3 specific items you want disputed
– You have time to manage 30-day cycles and follow-up letters
– The items are on the standard three bureaus
– You’re patient with the process

You should probably hire help if:
– You have a specific time-pressured goal (mortgage application in 90 days, business loan application pending, divorce settlement requiring credit cleanup)
– The problem spans multiple CRAs and you don’t know which ones matter
– You’ve already tried disputing and gotten “verified” responses you suspect aren’t legitimate
– Your file is complex, multiple collections, charge-offs, mixed-file issues, post-divorce damage

When Credituity clients call us, they’re usually in the second category. They’ve tried it themselves, hit walls, and need someone who can run all 12 CRAs in coordination, draft mechanism-specific letters that cite the right legal lever for each item, and manage the back-and-forth across a 60 to 90 day timeline.

Book a free 15-minute call with Eli →

No card. No pressure. No high-pressure sales. If your situation doesn’t need professional help, we’ll tell you, and point you to whatever resource actually fits.

Glossary

Consumer Reporting Agency (CRA), Any organization that compiles consumer information and sells it to third parties for purposes covered under the FCRA: credit, employment, insurance, housing, banking. The CFPB regulates all CRAs uniformly under federal law.

Specialty Bureau, A CRA that focuses on a specific data domain (banking, insurance, telecom) rather than general credit. ChexSystems, LexisNexis, MIB, NCTUE, TeleCheck are specialty bureaus.

Tri-merge, A consolidated credit report that pulls data from Equifax, Experian, and TransUnion and presents it as a single document. CoreLogic Credco is the most common mortgage-industry tri-merge product.

Furnisher, Any entity that reports information to a CRA. Banks, credit-card issuers, collection agencies, and utility companies are all furnishers. The FCRA places obligations on furnishers under §623.

Metro 2 Format, The industry-standard data format used by furnishers when reporting to CRAs. Reporting errors that violate Metro 2 specifications create grounds for dispute even when the underlying account is technically owed.

Debt Validation, A consumer’s right under FDCPA §809 to demand that a debt collector produce proof of the debt before continuing collection efforts. Distinct from FCRA dispute, but often used in tandem.

Permissible Purpose, Under FCRA §604, a third party may only pull your consumer report for specific purposes (credit application, employment, insurance underwriting, etc.). Pulling without permissible purpose is itself a violation that can trigger damages.

Reasonable Investigation, The FCRA standard for what a CRA must do when you dispute an item. Failure to conduct a reasonable investigation is itself a separate violation.

FAQ

Are there really more than 3 credit bureaus?

Yes. The CFPB publishes an annual list of consumer reporting companies that has consistently included more than 50 agencies. The “three bureau” framing refers specifically to the dominant nationwide general-credit CRAs (Equifax, Experian, TransUnion), but the FCRA covers many more.

Who is Innovis and why don’t I see them on my credit report?

Innovis is a nationwide CRA operated by CBC Companies. Most consumer-facing credit-report tools (Credit Karma, AnnualCreditReport.com presentations, lender-provided reports) don’t include Innovis by default, which is why most consumers haven’t heard of it. Innovis has its own consumer-disclosure process, you can request your file at innovis.com, and FCRA dispute rights apply identically.

How do I get out of ChexSystems?

You don’t “get out” of ChexSystems automatically, entries typically age off after five years. But you can dispute entries that are inaccurate, were never properly substantiated by the bank that reported them, or that violate FCRA accuracy requirements. Many ChexSystems disputes succeed on first round because the underlying overdraft was never properly documented.

Can my LexisNexis report stop me from renting?

Yes, landlords and apartment complexes routinely pull LexisNexis as part of tenant screening, particularly to surface eviction records and civil judgments. An incorrect LexisNexis entry can block you from rentals across an entire market. The dispute process is available under the FCRA, but documentation requirements are higher than standard credit disputes.

Why does my mortgage lender pull a different score than my Credit Karma score?

Because Credit Karma typically uses VantageScore models on TransUnion or Equifax data, while mortgage lenders pull CoreLogic Credco (or a similar mortgage-specific tri-merge) and use FICO scores designed for mortgage underwriting. Same person, same accounts, different scoring model and different data normalization. The Credco-pulled FICO score is what actually governs the mortgage decision.

How long do items stay on each of these reports?

Federal FCRA caps most negative items at seven years from the date of first delinquency, with bankruptcies allowed up to ten years. Specialty bureau retention varies: ChexSystems typically five years, MIB typically seven years, NCTUE follows standard FCRA seven-year window.

Is it legal to dispute items I owe?

Yes. The FCRA gives every consumer the right to dispute the accuracy of any item, including items they owe, if the reporting itself is inaccurate, wrong balance, wrong date, wrong account number, wrong status. Disputing accuracy is not the same as denying the debt. You can owe a debt AND have it be incorrectly reported.

What’s the difference between credit repair and credit counseling?

Credit repair (like Credituity) focuses on legal-mechanism disputes, using the FCRA, FDCPA, and debt validation to challenge inaccurate or unsubstantiated items. Credit counseling focuses on debt management, helping consumers structure payments and negotiate with creditors. They are different services. If you owe debt you can’t afford to pay, credit counseling is the right fit. If your reports contain inaccuracies blocking specific goals, credit repair is the fit.

Does Credituity dispute to all 12 CRAs for every client?

No, we run a goal-specific audit during intake to determine which CRAs matter for your stated outcome (mortgage, banking, rental, insurance, etc.) and target those agencies. Running every CRA for every client would waste effort and budget. The point of knowing all 12 exist is to choose the right ones.

Can I sue a CRA for refusing to fix an error?

Under FCRA §616 (willful violations) and §617 (negligent violations), yes, consumers have a private right of action against CRAs that fail to investigate disputes reasonably or that continue to report verified-inaccurate information. Damages can include actual damages, statutory damages up to $1,000 per violation, and attorney’s fees. Credituity refers escalation cases to partner law firms that handle FCRA litigation.

What happens if a CRA doesn’t respond to my dispute within 30 days?

Under FCRA §611(a)(1)(A), if a CRA fails to complete the reinvestigation within 30 days (or 45 days when the dispute is filed during an annual disclosure pull), the disputed information must be deleted. This is a powerful but often-overlooked enforcement mechanism. Document your dispute date and the no-response, and follow up with a written demand for deletion.

Are AI-generated dispute letters effective?

Mixed evidence. CRAs increasingly use automated screening to flag disputes that appear systematized or templated, marking them as “frivolous” and refusing investigation. AI-assisted drafting can be helpful for initial structure, but disputes that succeed at scale cite the specific legal mechanism for each item, the specific FCRA violation, the specific Metro 2 reporting failure, the specific debt-validation deficiency. Generic AI letters often miss the mechanism and get bounced. Mechanism-specific letters get investigated.

Each of the “hidden” CRAs covered above has a dedicated deep-dive guide with step-by-step dispute instructions:

And the foundational legal-framework guides:

Ready to Find Out Which CRAs Are Blocking You?

If your story sounds anything like the ones I’ve helped before, divorce-driven damage, business-funding hurdles, mortgage-approval blocks, post-medical hardship, let’s talk. A 15-minute call is enough to know whether the 12-CRA approach fits your situation. We pull the reports, we tell you exactly what’s working against you, we tell you what we’d do about it.

Book a free 15-minute call →

No card. No pressure. If you don’t need credit repair, we’ll tell you and point you to whatever does fit., Eli Weldon
Founder, Credituity

Credituity is not a law firm and does not provide legal advice. Results vary by individual file. Money-back guarantee subject to written client agreement. Credituity operates in compliance with the Credit Repair Organizations Act (15 U.S.C. §1679 et seq.): the written client agreement is signed before service begins, the full credit-repair service fee is billed only after work has commenced, and clients have a 5-day right to cancel.

Related Credituity guides