Red Flags and Warning Signs to Watch For
Eight things to check every time you pull a report
In this lesson you will learn to
- Run an eight-point scan on any credit report.
- Tell sloppy reporting from likely identity theft.
- Match each red flag to the right dispute letter.
- Spot a re-aged date and explain why it breaks the 7-year rule.
Banks and bureaus do not catch most credit report errors. Regular people do, by reading their own reports. This lesson gives you a short checklist to run every time you pull a report, what each red flag usually means, and which letter in the /tools generator handles it.
Why Errors Slip Through
The bureaus process more than a billion account updates every month through automated data feeds from lenders and collectors. No human checks whether a given account belongs to you. Debt sales make it worse: when a debt changes hands, the buyer reports it fresh, and dates or balances often get garbled in the handoff. You are the only person who knows which accounts are really yours. That makes you the system's best error detector.
The Eight-Point Scan
Try it: tap each of the eight flags to see where it hides in the sample report, what it usually means, and the first step.
0 of 8 flags checked.
0 of 8 checked
Sample report, pulled August 2026
Personal information
- Name: SAM RIVERA. Also reported as: SAM RIVERS
- Addresses: 14 Oak St, Lansing, MI. 902 Palm Ave, Tampa, FL
Accounts
- Northway Bank card. Opened 2019. Limit $500. Balance $450. Current
- Horizon card. Opened 11/2025. Balance $3,100. Charged off
- Metro Card. Charged off 2021. Balance $1,200
Collections
- Apex Recovery. Balance $1,200. Original creditor: Metro Card
- Delta Portfolio (medical). $640. First delinquency: 04/2025
- City Utility. $210. First delinquency: 01/2018. Still reporting
Inquiries
- Sunrise Auto Finance, 06/2026. Lakeview Motors Credit, 06/2026
Pick a flag to start the scan. Each one hides somewhere in the sample above.
Notice that one wrong detail on a real account usually means sloppy reporting. A whole account you never opened, next to inquiries you never made, is the fraud pattern.
Illustrative sample report. The name, creditors, and numbers are made up.
Run this checklist on every report, every time:
- Accounts you don't recognize
- Wrong open dates, balances, or credit limits on accounts that are yours
- The same debt listed twice, often after a debt sale
- Delinquency dates that look newer than your original missed payment (re-aging)
- Addresses you never lived at
- Name spellings or variants that aren't yours
- Hard inquiries you don't remember authorizing
- Negative items past their removal date (7 years for most items, 10 for Chapter 7 bankruptcy)
What Each Flag Usually Means
Match the flag to the letter in /tools:
- Unknown account: either a mixed file or fraud. Template: Account Not Mine / Identity Theft.
- Wrong balance, limit, status, or open date on a real account: sloppy furnisher reporting. Template: Incorrect Balance or Account Status.
- Duplicate tradeline: the original charge-off and the debt buyer both reporting a balance on the same debt. Template: Duplicate Account.
- Re-aged delinquency date: under FCRA 605(c), the 7-year clock starts 180 days after the original delinquency, and a debt sale never resets it. Template: Outdated Negative Item (Beyond 7 Years).
- Strange address or name variant: a possible mixed file, where someone else's data landed in yours. Template: Incorrect Personal Information.
- Debt you paid or settled still showing a balance due. Template: Paid/Settled Debt Still Showing Unpaid.
- Unfamiliar hard inquiry: every pull needs a permissible purpose under FCRA 604. If you never applied, treat it as a possible fraud signal.
- Obsolete negative still reporting past the FCRA 605(a) limit. Template: Outdated Negative Item (Beyond 7 Years).
Flag to letter, at a glance
| Red flag | Usually means | Letter template |
|---|---|---|
| Account you do not recognize | Mixed file or fraud | Account Not Mine / Identity Theft |
| Wrong balance, limit, status, or open date | Sloppy furnisher reporting | Incorrect Balance or Account Status |
| Same debt listed twice | Charge-off and debt buyer both reporting | Duplicate Account |
| Delinquency date newer than your first missed payment | Re-aging after a debt sale | Outdated Negative Item (Beyond 7 Years) |
| Address or name variant not yours | Possible mixed file | Incorrect Personal Information |
| Paid or settled debt still shows a balance | Sloppy reporting | Paid/Settled Debt Still Showing Unpaid |
| Hard inquiry you never authorized | Possible fraud signal | Unauthorized Hard Inquiry |
| Negative item past its removal date | Obsolete under FCRA 605(a) | Outdated Negative Item (Beyond 7 Years) |
- • One wrong date or balance on an account you do have
- • A name misspelling next to otherwise-correct info
- • A duplicate entry after a known debt sale
- • A paid account still showing the old balance
- • An old address off by a unit number
- • A whole account you never opened
- • Hard inquiries from lenders you never contacted
- • An address in a state you have never lived in
- • Collection notices for debts you don't recognize
- • Several of these flags appearing at once
Quick check
Which points more toward identity theft? A paid account still showing its old balance, or a whole account you never opened next to inquiries from lenders you never contacted?
consumers found an error on at least one report (2012 FTC study)
limit for most negative items (FCRA 605(a))
limit for Chapter 7 bankruptcy (FCRA 605(a)(1))
how long hard inquiries stay on your report
Watch for Re-Aged Dates
When a collector buys a debt, some report the purchase date as if the delinquency just happened. That is not how the law works. Under FCRA 605(c), the 7-year reporting clock starts 180 days after the original delinquency that led to the charge-off or collection, and no sale or transfer resets it. Write down the original delinquency date from the oldest copy of the account you can find. If the current entry shows a newer date, that alone is worth a dispute.
The 7-year clock under FCRA 605(c)
- First missed payment (caution)
The original delinquency. Write this date down from the oldest copy of the account you have.
- 180 days later
Under FCRA 605(c), the 7-year reporting clock starts here: 180 days after the original delinquency that led to the charge-off or collection.
- Debt sold to a collector
A new name reports the account. The sale does not reset the clock. The original delinquency date still controls.
- A re-aged entry (the red flag) (problem)
Some collectors list the purchase date as the delinquency date, so the removal date looks years later than it should. That alone is worth a dispute.
- 7 years after the clock starts (good)
The item must come off, about 7 and a half years after the first missed payment. Your saved copies prove the original date.
Quick check
A collection shows a delinquency date from two years ago, but you first fell behind six years ago. What is this called, and does the debt sale reset the clock?
When It Points to Identity Theft
If you find an account you never opened, or inquiries from lenders you never contacted, act the same day. Start at IdentityTheft.gov and file a report. It is free and takes about 20 minutes. Then freeze your credit at all three bureaus. A freeze is free, and it blocks lenders from pulling your report, which stops most new accounts before they open. Add a fraud alert, which the bureau you contact must pass to the other two. With the IdentityTheft.gov report, proof of your identity, and a letter naming the fraudulent items, you can ask each bureau to block them under FCRA 605B. The law requires the block within 4 business days of receiving a complete request. Module 8 covers the full identity theft playbook.
Try it: check the six steps off in order. Tap a locked step to see why it waits.
0 of 6 done
The FTC identity theft report is free and takes about 20 minutes. It is the key that opens most doors after this.
First, because the extended fraud alert and the 605B block both depend on it.
Notice that the FTC report comes first. The extended fraud alert and the 605B block both depend on it.
Quick check
You find two hard inquiries from auto lenders you never contacted. What should you do the same day?
Real-World Examples
Real-World Example
Denise, 41, and the file that wasn't hers
The Situation
Denise pulls her Experian report and sees a name variant she never uses, an address in a city she has never visited, and a $3,100 charged-off card she never opened. A relative with a similar name has an SSN one digit off from hers.
What Happened
It was a mixed file, not fraud. She mailed the Incorrect Personal Information letter plus an Account Not Mine dispute, with a copy of her ID and a utility bill. The bureau separated the stray data from her file within the 30-day reinvestigation window.
Key Takeaway
A wrong name variant plus a strange address often signals a mixed file. Cleaning up the personal information section can pull the wrong accounts out with it.
Real-World Example
Marcus, 29, and the inquiry he didn't make
The Situation
Marcus spots two hard inquiries from auto lenders he never contacted. A month later, a new card account he never opened shows up too.
What Happened
He filed at IdentityTheft.gov the same day, froze all three files, added a fraud alert, and mailed 605B block requests with the report attached. The bureaus blocked the account and the inquiries, and the freeze stopped a third application cold.
Key Takeaway
Unfamiliar inquiries are often the first visible sign of fraud, because they appear before the new account does. Treat them as an early alarm, not a cosmetic problem.
Make the Scan a Habit
You can pull each bureau report free at AnnualCreditReport.com, currently as often as weekly. Stagger them, one bureau every few months, so something is always fresh. Save a PDF of every report you pull. Old copies are how you prove re-aged dates and catch reinserted items later.
What to remember
- Run the eight-point scan on every report: unknown accounts, wrong numbers, duplicates, re-aged dates, strange addresses, name variants, unfamiliar inquiries, and items past their removal date. Save a PDF of every report; old copies are your proof.
- One wrong detail on a real account is usually sloppy reporting. A whole account you never opened is a fraud signal.
- Under FCRA 605(c), the 7-year clock starts 180 days after the original delinquency. A debt sale never resets it.
- If you see signs of identity theft, act the same day in this order: IdentityTheft.gov report, freeze and fraud alert, then a 605B block request with the report attached. Module 8 walks through all six steps.
- Each flag points to a template in the Dispute Letter Writer: account not mine (or a 605B block), incorrect balance or status, duplicate account, outdated negative item, incorrect personal information, unauthorized inquiry.
Do this today
Open the report you saved and run the eight-point scan on it, top to bottom. Write down the original delinquency date for any collection or charge-off you find, and keep that note with the PDF.
Nice work
You just learned a checklist that turns a long report into eight quick questions, and you know which letter each answer points to. That is the heart of protecting your own file, and it wraps up Module 7. Take the module quiz, then open the Dispute Letter Writer on the Tools page when you are ready to act on anything you found.
Write the single step you will take from this lesson. It saves to My plan on your dashboard.