Beware of Fake Credit Report Sites

by |

The links to third-party products and services on this page are affiliate links, meaning that BiggerPockets may earn a commission (at no additional cost to you) if you click through and make a purchase.

Our credit report is part of who we are. It details our financial history to lenders and mortgage companies, banks, and credit card companies. In order for most people to buy or lease a car, obtain a credit card, or purchase or refinance a home, they must be sure that their credit is as good as possible.

By obtaining a credit report, we can review what our credit history looks like to the world. We’ve all seen the commercials on television for Free Credit Reports, but can these companies be trusted? There are actually many scammers out there who are looking to take advantage of innocent people by setting up fake websites and stealing their financial information and committing identity theft. Actually, there are well over 100 websites designed to scam consumers with fake “free credit reports” sites. In order to protect the public, the Federal Trade Comission (FTC) has established a list of precautions to take whenever you respond to email offers for credit reports or websites that supposedly provide your report to you.

  • If you get an email offering a credit report, don’t reply or click on the link in the email. Instead, contact the company cited in the email using a telephone number or Web site address you know to be genuine.
  • Be skeptical of unsolicited email offering credit reports. Keep an eye out for email from an atypical address, like [email protected], or an email address ending in a top level domain other than .com, like .ru or .de.
  • Check whether the company has a working telephone number and legitimate address. You can check addresses at Web sites like, and phone numbers through reverse lookup search engines like
  • Check for misspellings and grammatical errors. Silly mistakes and sloppy copy – for example, an area code that doesn’t match an address – often are giveaways that the site is a scam. Look at the company’s Web address: is it a real company’s address or it is a misspelled version of a legitimate company’s Web address?
  • Check to see whether the email address matches the Web site address. That is, when you enter the company’s Web address into the browser, does it go to the sender’s site or re-direct you to a different Web address? If it re-directs you, that’s a red flag that you should cease the transaction.
  • Find out who owns the Web site by using a “Whois” search such as the search at or
  • Exit from any Web site that asks for unnecessary personal information, like a Personal Identification Number (PIN) for your bank account, the three-digit code on the back of your credit card, or your passport number and issuing country. Legitimate sites don’t ask for this information.
  • All legitimate sites will want to verify who you are, and will respond to an electronic request for a credit report by asking you for an additional piece of information. If a site does not ask a follow-up question, the site is almost certainly a fake.
  • Use only secure Web sites. Look for the “lock” icon on the browser’s status bar, and the phrase “https” in the URL address for a Web site, to be sure your information is secure during transmission. All real sites are secure.
  • Watch your mailbox and credit card statements: If you’ve responded to a bogus site, you may never receive the credit report they offered for free. If you paid one of these sites for a credit report, your credit card may never be charged. If you find that you have unauthorized charges, contact your financial institutions and credit card issuers immediately.
  • Report suspicious activity to the FTC and the U.S. Secret Service. Send the actual spam to the Los Angeles Electronic Crimes Task Force at [email protected] and to the FTC at [email protected] If you believe you’ve been scammed, file your complaint at, and then visit the FTC’s Identity Theft Web site ( to learn how to minimize your risk of damage from identity theft.

We’ve put together a page of resources on Credit Reports and FICO Scores.

Remember, under Federal Law, all U.S. citizens are entitled one Free Credit Report every 12 months, from all three nationwide credit reporting agencies: Equifax, Experian and TransUnion (to learn more about TransUnion, click here). To obtain that free report, you must go to This is the Only Official service authorized by the 3 agencies.

About Author

Joshua Dorkin

Joshua Dorkin is a serial entrepreneur, investor, podcaster, publisher, educator, and co-author of How to Invest in Real Estate. He started BiggerPockets to help democratize the real estate investing landscape for himself and others, aiming to make it accessible for everyone, regardless of income or education. Today, BiggerPockets is the premier real estate investing website online with over one million members and reaching over 70 million people with the message of financial freedom through real estate investing. Joshua, along with his wife and three daughters, make their home in Denver, Colorado, and spend any time they can traveling, exploring, and adventuring. Read more about Joshua’s story in 5280 and


  1. I would definitely look for some security certificates and seals then do research on the sites before giving anyone your social security number. I’m sure there are some phishing sites that look like the big 3 agencies, but aren’t just like we see with PayPal.

  2. I’ve found a new scam via Craigslist.

    These scammers will prey on those looking for jobs by offering lucrative job openings, but then telling them they must apply for a free credit report before pre-qualifying for the position. Of course, the “free” credit report ends up being $30 after a 2-hour trial. Hmp!
    .-= Zach @ Mid Mo Mortgage´s last blog ..Jan 29 – Market Growth Surging As GDP Reports Forthcoming =-.

Leave A Reply

Pair a profile with your post!

Create a Free Account


Log In Here