A credit report is pulled far more often than most consumers realize, by lenders, insurers, employers and the consumer themselves. Only a subset of those requests is visible to future lenders.
Permissible purpose governs who may look
Federal law restricts access to credit reports to parties with a defined permissible purpose. Extending credit, reviewing an existing account, collecting a debt, and certain employment and insurance uses qualify.
Access outside those purposes is prohibited, and the bureaus require subscribers to certify their purpose. That framework is the reason a report cannot simply be looked up.
The distinction between hard and soft is a consequence of purpose rather than a separate decision the requester makes.
A hard inquiry follows a consumer's own application
When a consumer applies for credit and the lender pulls a report to make that decision, the request is recorded as an inquiry visible to other lenders reviewing the file.
These entries remain on the report for a defined period and are among the inputs scoring models consider. Their weight is generally the smallest of the model's categories.
The rationale is behavioral: a cluster of applications in a short window can signal financial pressure that other data has not yet reflected.
Soft pulls are recorded but not shared
A consumer checking their own report, a lender reviewing an existing account, and a prescreened offer generated from bureau criteria all create soft entries.
Soft entries appear on the copy the consumer receives but not on the version supplied to lenders, and scoring models do not count them.
This is why checking one's own report has no effect on a score, a point widely misunderstood and rooted in the difference between the consumer and lender versions of the file.
Rate shopping is handled by deduplication windows
Applying to several mortgage or auto lenders would otherwise generate multiple inquiries for a single borrowing decision. Scoring models group similar inquiries made within a defined window and treat them as one.
The window length and which loan types qualify vary by model version, and the inquiries still appear individually on the report even when scored together.
Credit card applications are generally not grouped this way, since each represents a separate potential line rather than one loan being priced.
Disputes and freezes address unauthorized access
A consumer who sees an inquiry they do not recognize can dispute it with the bureau, which must investigate and remove entries that lack a permissible purpose.
A security freeze blocks new lenders from accessing the file entirely, which prevents most new-account fraud because a lender that cannot pull a report generally will not extend credit.
Freezes are free to place and lift under federal law, and existing creditors retain access for account review, which is why a freeze does not disrupt current accounts.