The file your lender's vendor reads that you've never seen

Every family has a story about the relative with the same name. The cousin who gets your mail. The uncle whose parking tickets found their way to your father because the DMV had two men named the same thing in the same county and a clerk in 1987 made a choice. Mine is a great-aunt in Lyon whose bakery debts, according to family legend, followed my grandmother across an ocean.

It's a funny story at dinner. It is not funny when the relative with the same name has a judgment against him, and the judgment is now attached to you, and you found out on the day your loan officer said the word condition.

This is the first in a series about the eight files we review — the three everyone knows and the five almost nobody does. I'm starting with the one that isn't a credit bureau at all, because it's the one most likely to be standing between you and a closing without anyone having mentioned it.

What LexisNexis has on you

LexisNexis Risk Solutions is on the Consumer Financial Protection Bureau's list of consumer reporting companies under "supplementary reports" — the companies that sell data to lenders to manage credit and fraud risk alongside the traditional bureau file. That's an accurate description and also a polite one.

In practice, LexisNexis holds the kind of file a private investigator would build: every address you've been associated with, every name variation and misspelling that's ever been attached to your Social Security number, phone numbers, property records, liens, judgments, bankruptcies, professional licenses, sometimes evictions. Much of it is public record. The rest comes from the same furnishers who feed the credit bureaus, and from data brokers who feed them.

Lenders and their verification vendors use it to answer a question the credit bureaus can't: is this person who they say they are, and does the story hang together? If your application says you've lived at one address for five years and the file shows four addresses in that window — one of them in a state you've never visited — that's a flag. If the file carries a name you've never used, that's a flag. If there's a judgment, a lien, or a bankruptcy that the tri-merge didn't show because the bureaus stopped reporting most civil judgments years ago, that's not a flag. That's a condition on your loan, or a denial, and it arrives from a file you didn't know existed.

How someone else ends up in your file

The mechanism is called a mixed file, and it's one of the most common serious errors in consumer reporting. It happens when a reporting company's matching logic decides that two people are one. Same name, same birth year, an address in common at some point, a Social Security number that differs by one digit. Any of these can be enough, and the more data a company holds, the more chances it has to match wrong.

The three credit bureaus mix files. LexisNexis, holding far more identity data than they do, has more surface area for it. And because LexisNexis is often the source the bureaus and the verification vendors check against, a mixed file there can propagate: an alias gets created, the alias attracts an account, the account lands on a bureau file under your name, and now you're disputing a tradeline at Equifax that was born in a database you've never heard of.

The law is on your side here, at least on paper. The Fair Credit Reporting Act requires every consumer reporting agency, not just the big three, to follow reasonable procedures to assure the maximum possible accuracy of what it reports, and to reinvestigate anything you dispute within thirty days. LexisNexis is a consumer reporting agency. Those obligations attach.

What to actually do

Request your file. The CFPB entry linked below carries the current request path; LexisNexis calls the document a consumer disclosure report, and it's free. It comes by mail and it's long. Read it the way you'd read a stranger's biography looking for the places it accidentally became yours: every address, every name variant, every public record. Anything you don't recognize gets circled.

Dispute in writing, with the specific item identified and the reason stated plainly. this address has never been mine; this name is not an alias I have used; this judgment concerns a different person, and here is my identification. Send it certified. The thirty-day clock starts when they receive it.

Then check the three bureaus for the same alias or address, because if it's at LexisNexis there's a fair chance it's leaked. Dispute those separately; each company investigates its own file.

And when you're clean, consider the freeze. It's free, it's yours under state law, and it stops a lender's vendor from pulling the file without you lifting it, which also means it stops the next mixed-file error from being acted on before you've seen it. One caution the portal itself makes: a freeze at LexisNexis covers LexisNexis and its SageStream subsidiary, nothing else. It does nothing at Innovis or the bureaus, and you'll need to lift it before a mortgage application, because the vendor will try to pull it.

Why we review it

When a file has something on it that stops an approval and the tri-merge looks fine, this is where we look next. It's the file that decides whether the story of you hangs together, and it's assembled by a company that has never met you, from records that were never checked against each other. Most of the time it's right. The times it isn't are the times you find out at the closing table.

Next in the series: Innovis, the fourth bureau, and why lenders pull it when they don't trust the first three.