Credit Reports vs. Credit Scores: Getting All Three Reports Free, Legally

People say "check your credit" as if it were one thing you could look at. It's actually two very different things, made by different companies, governed by different rules — and only one of them is yours free by federal law. The report is the file; the score is a grade computed from the file. Confusing the two is how people end up paying $29.99 a month for something the law already gives them.

Here's the whole supply chain, from the raw file to the three-digit number, including the one government-authorized website that hands over all three of your reports at no cost, every week.

The supply chain: who makes what

Each bureau maintains its own file on you, built from whatever furnishers choose to send it. Not every lender reports to all three, so your Equifax file and your TransUnion file can genuinely differ — different accounts, different balances, occasionally different errors. A score is then computed from one bureau's file at one moment. That's why "your credit score" is really a family of numbers: a FICO score built on Experian data can easily sit 20 points away from a VantageScore built on TransUnion data, with nobody wrong. (What the models reward and punish — payment history, utilization, age, mix, new credit — is its own subject, covered in our credit score explainer.)

The free reports: one real website, weekly, all three bureaus

The Fair Credit Reporting Act (FCRA) entitles you to free copies of your credit reports from each nationwide bureau through one — and only one — federally authorized source: AnnualCreditReport.com. Despite the name, it's no longer annual: since 2023 the three bureaus have made the free reports available weekly, permanently. You can also request them by phone (1-877-322-8228) or by mail, as the CFPB explains.

Two warnings that keep this section honest. First, the many look-alike sites with "free" in the name are marketing funnels for paid monitoring products; the FTC's free credit reports guide is blunt about the only official source. Second, federal law also guarantees a free report outside the weekly schedule in specific situations: when a company takes "adverse action" against you (denies credit, insurance, or employment) based on the report, when you're unemployed and job-hunting, when you're on public assistance, or when you've placed a fraud alert.

What's actually inside a report — a worked read-through

Pull a report and you'll find four sections. Here's what a single account entry, or tradeline, really looks like once you strip the formatting:

Around the tradelines sit three more sections: identity data (names, addresses, employers you've been reported under), inquiries (who pulled your file — hard pulls from applications, soft pulls from prescreening and your own checks), and public records or collections. What's not in any report: your income, your rent (unless a service reports it), your bank balances, and — despite decades of folklore — your race, religion, or a list of who you've married. The timeline of how one missed bill travels through this file is mapped in the 30/60/90-day explainer.

So where do you get the score?

No federal law gives you a free credit score the way the FCRA gives you free reports. Scores reach you three main ways: many card issuers and banks show a free FICO or VantageScore on your statement or app as a perk; free websites show you a score (usually VantageScore) in exchange for marketing you credit offers; and lenders must disclose the score they used when they take adverse action or price your mortgage. All are legitimate — they're just different numbers from different models on different data, so a 12-point gap between your banking app and a lender's pull is noise, not error.

One habit checks both layers at once: the report tells you what's recorded, the score tells you how it's being graded. Errors live in reports — and they're not rare. Disputing one is a defined legal process: you file with the bureau (online, by mail, or by phone), the bureau generally has about 30 days to investigate with the furnisher, and information that can't be verified must be corrected or deleted, free. The CFPB's credit reports hub walks through the dispute machinery and sample letters.

A note on the score bands

Since scores refuse to be one number, lenders think in ranges instead, and knowing the ranges defuses a lot of point-anxiety. On the common 300–850 scale, the conventional FICO bands run roughly: below 580 "poor," 580–669 "fair," 670–739 "good," 740–799 "very good," 800+ "exceptional." Pricing tiers move by band, not by point — a 742 and a 768 usually see identical offers, while a 668 and a 672 can sit on opposite sides of a real price line. This is also why obsessing over a 9-point monthly wiggle is wasted attention: scores breathe with reported balances, and the wiggle only matters when it crosses a band boundary in the month a lender happens to look.

Freezes and fraud alerts: the file's own locks

Because the report is the raw material for every score and approval, the strongest identity-theft defenses operate on the file itself. A security freeze blocks most new-credit pulls until you lift it; since a 2018 federal law, placing, lifting, and removing freezes is free at all three bureaus. A fraud alert (free, one year, renewable) tells lenders to verify your identity before opening accounts. Both change nothing about your existing accounts and cost you nothing — a locked file still generates scores. A freeze at one bureau doesn't cover the other two; you place all three separately.

How long things stay in the file

The FCRA doesn't just govern access; it sets expiration dates on the record itself. Most negative information — late payments, charge-offs, collections, repossessions — can be reported for seven years from the original delinquency. Chapter 7 bankruptcy stays for ten years; Chapter 13, generally seven. Hard inquiries fall off after two years (and only dent scores for about one). And the clocks run from the original event: a collection agency buying an old debt doesn't restart the seven years, no matter what a phone call implies. Positive information is the long-lived kind — closed accounts in good standing can keep reporting for about ten years, quietly propping up the "age of credit" input the whole time.

The bureaus you've never heard of

The big three aren't the whole reporting industry. Dozens of specialty consumer reporting agencies keep single-purpose files: banking history (used when you open a checking account), tenant screening (pulled by landlords), utility and phone payment records, medical payment histories, even returned-check databases. Each is covered by the same FCRA — same free-annual-report right, same dispute machinery — and the CFPB publishes a directory of them with contact information. The practical reading: if you've ever been declined for something that isn't a loan — an apartment, a bank account — the file that did it probably wasn't any of the three you just learned to pull, and it has its own copy you're entitled to see.

The bottom line

Reports are the record; scores are commentary on the record. The record is yours, free, all three versions, every week, from one authorized website — and the legal machinery for fixing it is free too. The commentary, meanwhile, arrives from a dozen directions at slightly different values, and no single number is "the real one." Which of the five scoring inputs each number weighs hardest — and why your first card's credit limit quietly shapes one of them — is where the scoring story picks up.