What Credit Reports Your Lender Will Pull
When you apply for a mortgage, your lender doesn't just pull one credit report and call it done. Fannie Mae requires lenders to gather comprehensive credit information from multiple sources to get the complete picture of your credit history.
Your lender will typically start with an automated merged credit report. This combines information from all three major credit bureaus — Experian, Equifax, and TransUnion — into a single document. Think of it as a master file that shows everything these bureaus know about your credit accounts, payment history, and public records.
Say you have a credit card that only reports to Experian and a car loan that only reports to TransUnion. The merged report captures both, giving your lender the full scope of your credit obligations.
When Two Credit Bureaus Are Enough
Sometimes your lender can work with information from just two credit bureaus instead of three. This happens in two specific situations: either that's genuinely all the credit data available for you, or you've frozen your credit at one of the bureaus.
If you're a first-time credit user or someone who's been out of the credit system for years, you might not have files at all three bureaus. That's acceptable as long as your lender can document they requested information from all three.
Credit freezes are more common. If you've frozen your credit at one bureau for security reasons, your lender can proceed with the two available reports. Just remember that you'll need to lift any freezes before your lender pulls credit, or they'll hit this limitation.
The Three Types of Credit Reports Lenders Use
Fannie Mae recognizes three distinct types of credit reports, each serving different purposes in the underwriting process.
In-file credit reports are the most basic. These pull whatever information the credit bureau has on file without any updates or verification. The data might be weeks or months old, showing the last time creditors reported to the bureau.
Automated merged credit reports combine in-file data from multiple bureaus. These reports eliminate duplicate information but must include the most negative version when accounts appear differently across bureaus. For example, if one bureau shows a late payment and another doesn't, the merged report includes the late payment.
Residential mortgage credit reports are the most comprehensive. These involve active verification of your employment, income, and residency history. The credit reporting agency contacts your employer, verifies your income, and researches your living situation for the past two years.
What Happens When Your Credit Report Is Incomplete
Credit reports aren't perfect. Sometimes they miss debts you listed on your loan application, or they show accounts that haven't been updated recently.
If your credit report doesn't include a significant debt you disclosed on your application, your lender must get separate written verification for that debt. This might mean contacting the creditor directly for a current balance and payment history.
For accounts that haven't been verified with the creditor within 90 days of the credit report date, your lender needs either an updated credit report or fresh verification of those specific accounts. This prevents decisions based on stale information.
Let's say your credit report shows a credit card with a $5,000 balance, but that information is four months old. Your lender would need to verify the current balance directly with the credit card company, since you might have paid it down or charged it up since then.
Employment and Income Verification Requirements
When your lender orders a residential mortgage credit report, the credit reporting agency becomes an extension of the underwriting team. They must verify your current employment and income independently, not just rely on what you've told them.
The agency contacts your employer directly to confirm you work there, verify your income, and establish how long you've been employed. If you've changed jobs in the past two years, they'll also verify your previous employment.
The credit report must include a positive statement that employment was verified, the date of verification, and the name of the person who confirmed the information. If the agency couldn't reach your employer directly, they must explain why.
This employment verification through the credit report is separate from the employment verification your lender will do independently. It's an additional layer of confirmation that helps catch any discrepancies early in the process.
Why Fannie Mae Requires Multiple Credit Sources
The multiple-repository requirement exists because credit reporting isn't uniform across the industry. Different creditors report to different bureaus, and the timing of their reports varies.
Your mortgage payment might report to all three bureaus, but your department store credit card might only report to one. A medical collection could appear on two bureaus but not the third. Without pulling from multiple sources, your lender might miss significant credit obligations or positive payment history.
The requirement also helps catch identity theft or credit file mixing. If two bureaus show clean credit but the third shows accounts you don't recognize, that's a red flag worth investigating before you close on your home.
Common Issues That Complicate Credit Reporting
Several situations can make the credit reporting process more complex and potentially delay your loan approval.
Credit freezes are increasingly common but can slow things down. If you've frozen your credit for security, you'll need to lift the freeze at all three bureaus before your lender can pull reports. Some borrowers forget they've frozen their credit, leading to delays when the lender can't access their files.
Thin credit files present another challenge. If you're new to credit or have been out of the credit system, you might not have enough information for a standard credit report. Your lender might need to use alternative credit documentation or nontraditional credit sources.
Mixed credit files happen when the credit bureaus confuse you with someone else, often a family member with a similar name. This can result in accounts appearing on your report that aren't yours, requiring time-consuming disputes and corrections.
Recent account activity can also cause problems. If you've recently paid off debts, opened new accounts, or had changes to existing accounts, the credit report might not reflect these changes. Your lender may need additional documentation to verify the current status of these accounts.
The key is to check your credit reports from all three bureaus before you start shopping for a mortgage. This gives you time to address any errors or issues without delaying your loan approval.
References
For the official guidelines, see B3-5.2-02: Types of Credit Reports in the Fannie Mae Selling Guide.
Mortgage guidelines change. Stay current.
Fannie Mae and Freddie Mac update their rules several times a year. Get notified when changes affect your mortgage eligibility, required documents, or loan terms.
No spam · Unsubscribe anytime
Original Fannie Mae Guideline Text
B3-5.2-02, Types of Credit Reports (11/05/2025)
In-File Credit Reports
An in-file credit report provides credit and public record information obtained from one or more credit repositories. The report contains “as is” information, which typically has not been updated or re-verified as a result of the credit inquiry.
The report must meet the following requirements:
The report should include all information from three different credit repositories, or two repositories, if:
that is the extent of the data available for the borrower, or
the borrower’s credit information is frozen at one credit repository.
If only one in-file credit report is available for a borrower, this is acceptable provided the lender requested information from three credit repositories.
If the report does not include a reference for each significant debt reported by the borrower on the loan application, the lender must obtain a separate written verification for each unreported (or unrated) debt.
If the report lists accounts that were not checked with the creditor within 90 days of the date of the in-file report, the lender must obtain an updated credit report or a separate written verification for those accounts.
Automated Merged Credit Reports
An automated merged credit report combines the in-file credit reports from multiple repositories into a single report. A joint merged credit report includes all credit repository credit data on more than one individual applicant.
The report must meet the following requirements:
The report must include all information from three different credit repositories, or two repositories, if:
that is the extent of the data available for the borrower, or
the borrower’s credit information is frozen at one credit repository.
If information from only one credit repository is available, this is acceptable provided the lender requested information from three different credit repositories.
The report cannot be provided by a credit reporting agency that is affiliated with the lender in any way.
The report must include all information reported for the borrower from the in-file credit reports.
The report must identify the repositories that were used for the in-file credit reports.
The report does not have to repeat duplicate information that is in in-file credit reports. However, if duplicate information is not exactly the same on each report, the automated merged report must either repeat the information or include the most derogatory of the duplicate information that pertains to payment history and/or current payment status.
Residential Mortgage Credit Reports
A residential mortgage credit report is a detailed account of the borrower’s credit, employment, and residency history, as well as public records information.
The report must meet the following requirements:
The credit reporting agency must contact at least two national repositories of accumulated credit records for each locality in which the borrower has lived during the most recent two-year period.
All information must be obtained from, or verified by, sources other than the borrower. When co-borrowers have individually obtained credit, separate repository inquiries are necessary, although the results of both reports may be combined in one report, as long as the report clearly indicates that this has been done.
The credit reporting agency must verify, either in writing or by telephone, the borrower’s current employment and income (if it can be obtained). If the borrower has changed jobs in the past two years, the credit report also must mention the borrower’s previous employment and income.
The report must include a positive statement that the employment was verified, the date of the verification, and the name of the individual who confirmed the employment. If this information was not obtained by an employer interview, the credit reporting agency must indicate why that was not done.
The report must include the name of the party who ordered the report. If another party paid for the report, the credit report must provide that party’s name, unless the lender ordered the report and the billed party has a documented agent or corporate relationship with the lender.
The original report must be delivered to the office of the party who requested it, using any means acceptable under the Fair Credit Reporting Act or other similar regulations, such as sending it through the U.S. postal system, by messenger, over a fax machine, or through other automated means.
The report must include a certification that it meets the standards for a residential mortgage credit report.
When the credit reporting agency has incomplete information, discovers that the borrower might not have disclosed all information that should be found in the public records, or obtains other information that indicates the possible existence of undisclosed credit records, the credit reporting agency must interview the borrower(s) to obtain additional information that is needed to provide an accurate report or perform additional research to verify whether the purported undisclosed records actually exist.

