A Loan You Never Took Is on Your Credit Report: How to Find It and Get It Removed

The usual way people discover it is a rejection. A home loan application declines on obligations, and the report shows a personal loan of Rs.3 lakh from a lender they have never dealt with, running past due for eleven months. Having worked inside lending institutions, we can tell you these entries are more common than the industry likes to acknowledge, they arise from several different causes, and the removal process works reliably when you follow it precisely and very poorly when you approach it as a phone conversation.

How an account you never opened ends up on your file

Four distinct causes, and identifying which one applies changes your approach.

Identity fraud is the one people assume. Someone used your PAN, Aadhaar, and forged or stolen documents to obtain credit. This has become harder with digital verification but has not disappeared, particularly where onboarding relied on documents rather than live verification.

Data errors are more common than outright fraud. A lender reports an account against the wrong PAN, or two customers with similar names and dates of birth get merged in a bureau’s matching logic. The account is genuine; the attribution is not.

Guarantor and co-applicant entries surprise people who did sign something. If you guaranteed a friend’s loan or signed as a co-applicant on a relative’s borrowing, the account appears on your report and its defaults affect you. A guarantee is not a character reference. It is a commitment to repay, and it sits on your credit file as a live obligation for as long as the underlying loan runs.

Loan app harvesting is a growing category. Applications that collected your documents during an aborted application, or unregulated apps that captured KYC data, have in some cases been used to originate credit elsewhere. Our guide to the RBI-verified digital lending app directory covers how to avoid exposing documents in the first place.

Finding it before it finds you

The detection problem is that nothing alerts you. The fraudulent account services normally for a few months in many cases, and only surfaces when it defaults.

Pull your report from all four bureaus, not one. CIBIL, Experian, Equifax, and CRIF High Mark each hold separate records, and a lender reports to some but not necessarily all. An account absent from your CIBIL report may be sitting on your CRIF file. Each bureau is required to provide one free full report per calendar year.

Read three sections rather than looking at the score. The accounts section, listing every credit facility attributed to you. The enquiries section, showing every lender who pulled your report and when. And the personal information section, showing addresses, employers, and phone numbers linked to your identity.

That third section is the most useful early warning and the one nobody reads. An address you have never lived at, or a phone number that is not yours, appearing in your bureau personal information is frequently the first trace of an account opened using your identity, and it often appears before the account itself defaults.

The dispute process, step by step

The process is defined and it works, provided you use the formal channel and document everything.

Raise the dispute with the bureau first, online through its dispute portal. You will identify the specific account, state the nature of the error, and attach supporting documents. The bureau forwards the dispute to the lender that reported the entry.

The lender must investigate and respond within 30 days under the applicable regulations. If the lender confirms the error, the bureau updates the record. If the lender does not respond within the period, the disputed information is generally required to be resolved in your favour.

Raise the dispute with the lender in parallel, in writing. The bureau is a record keeper; the lender is the party that reported the data and the only one that can correct it at source. Writing to both simultaneously shortens the cycle materially, and it gives you a paper trail with the institution that actually holds the account.

File a police complaint where fraud is involved, not merely a data error. A First Information Report or an online complaint through the national cybercrime portal converts your assertion into an official record. Lenders treat a documented fraud complaint very differently from an unsupported claim, and where the account is large or the lender is resistant, the FIR is what moves the file.

Escalate if the response is inadequate. The bureau’s grievance officer comes first, then the RBI Integrated Ombudsman, which covers credit information companies as well as banks and NBFCs. Complaints at this level are handled on documents, so the quality of your record matters more than the strength of your argument.

Reducing the chance of it happening again

Prevention here is mostly about controlling where your identity documents travel, because that is the raw material.

Mask your Aadhaar wherever a full number is not legally required. The masked variant available through the UIDAI portal displays only the last four digits and is accepted for most verification purposes.

Never send KYC documents over messaging apps or to an email address you cannot verify belongs to a regulated institution. Documents shared with an aborted loan application do not come back, and you have no visibility into where they are stored.

Lock your credit report where you are not actively borrowing. Bureaus offer subscription services that alert you to enquiries and account changes, and some offer a report lock. Whether the subscription is worth the annual fee depends on your situation, but the free quarterly checks described above cover most of the benefit at no cost.

Be careful with document copies given for non-credit purposes. Rental agreements, gym memberships, and mobile connections all collect the same identity set, and these are frequently stored far less carefully than a bank would.

Finally, treat an unexplained OTP as a signal rather than a nuisance. An OTP for a credit application you did not initiate means someone is attempting origination in your name at that moment, and it is worth checking your report within the week rather than dismissing it.

Containing the damage while the dispute runs

Three practical measures during what can be a two to three month process.

Stop applying for credit until it is resolved. Each new application is assessed against a report showing an obligation you dispute, and each rejection adds an enquiry that compounds the problem. Our guide on how lenders size an unsecured loan covers why enquiries in the last 90 days work against your next application.

Where a genuine borrowing need exists in the interim, understand what your file supports without the disputed entry. Working it out on our Eligibility Checker tells you whether the disputed account is actually the binding constraint or whether other obligations are.

Keep every document in one place, chronologically. Dispute reference numbers, acknowledgement emails, the FIR copy, and dated screenshots of the report showing the entry. If this reaches the Ombudsman, the case is decided on this file.

Once resolved, pull a fresh report from every bureau and confirm the entry has been removed everywhere rather than only where you disputed. Corrections do not propagate automatically between bureaus, and an entry removed from CIBIL can remain live on Experian for months.

The practical next step is to pull one free report today and read the personal information section first, before the score. If there is an address you have never lived at or a phone number that is not yours, that is worth investigating this week, because it usually appears well before the account that follows it.