What did the FTC's Credit Karma case find?

The FTC charged that Credit Karma told consumers they were “pre-approved” or had “90% odds” for cards many didn't qualify for, while almost a third of applicants for some offers were denied after a hard inquiry. These are 2022 complaint allegations, resolved by the January 2023 final order.

Is a “pre-approved” credit card offer real approval?

No — read “pre-approved” as marketing. Real approval is never knowable before the issuer checks, and every application can mean a hard inquiry on your credit report, approval or not. The scores are free; treat every “pre-approved” as an ad.

Scam verdict · Educational pattern check

Scam Detective research desk · Updated October 2026

Real company — real FTC record

Is Credit Karma Legit? The Company Is Real — So Is Its $3 Million FTC Record

Q: Is Credit Karma legit?

Yes — it's a real credit-monitoring service, and a real, completed FTC case: the FTC charged that from 2018 to 2021 it told users they were “pre-approved” with “90% odds” for cards many didn't qualify for; the January 2023 final order required $3 million and a ban on the deceptive claims.

Credit Karma is a real credit-monitoring service — and a real, completed FTC case. The FTC charged that from 2018 to 2021 it told users they were “pre-approved” with “90% odds” for cards many didn't qualify for; almost a third of applicants for some offers were denied after a hard inquiry. The final order: $3 million to consumers and a ban on the deceptive claims. The scores are free; read “pre-approved” as marketing, and know an application can cost you a hard pull.

Educational verdict from documented scam patterns — not a live report. For a 0–100 risk score on the exact link in your hand, run the checker.

Check a URL free Read the full guide

Straight from the source

The verdict stands on the public record — the line below is quoted verbatim from the source named under it.

“Credit Karma's false claims of ‘pre-approval’ cost consumers time and subjected them to unnecessary credit checks.”

— Samuel Levine, Director of the FTC's Bureau of Consumer Protection, Sept. 1, 2022.

Why this question never goes away

The service is real: free credit scores and reports in exchange for your data — over 2,500 data points per consumer, per the FTC's complaint — which powers targeted card and loan offers. The FTC's case was about how those offers were dressed. From February 2018 to April 2021, the complaint alleged, Credit Karma told consumers they were “pre-approved” or had “90% odds” — claims the company's own A/B tests showed drove more clicks than honest odds — while for many offers almost a third of applicants were denied. Each application triggered a hard inquiry that could nick the consumer's score; the company's own customer-service materials, per the FTC, braced reps for “I was declined for a pre-approved credit card offer … How is that possible?!?!?!” The FTC called the design tricks “dark patterns.” The final order (January 2023, approved 4-0): $3 million for affected consumers, a stop to deceptive approval claims, and a duty to preserve testing records. Use the scores; treat every “pre-approved” as an ad.

Five red flags — any one is enough

“Pre-approved” and “90% odds” language on any offer — the FTC's exhibit A; real approval is never knowable before the issuer checks.

Applying just to see — every application can mean a hard inquiry on your credit report, approval or not.

A denial after a “pre-approved” pitch — the documented pattern, right down to the company's own call-center scripts.

Confusing “free scores” with “free everything” — the data you hand over is the business model; offers are the monetization.

Any lookalike “credit score” site charging a fee or harvesting an SSN outside the real app — check the URL before the SSN.

Your next three moves

Verify through a channel you open yourself — apply only from inside the real Credit Karma app or site, typed or opened by you, and read any offer's terms on the issuer's own page before you tap apply. Never through a lookalike “credit score” site a search ad or message handed you — check the URL before the SSN.

Refuse the specific ask: treat every “pre-approved” and “90% odds” as marketing, not approval — real approval is never knowable before the issuer checks — and don't apply just to see: every application can mean a hard inquiry on your credit report, approval or not.

Report deceptive credit offers to the FTC at reportfraud.ftc.gov and the CFPB at consumerfinance.gov/complaint — and paste any lookalike “credit score” link into the $2 instant check for a 0–100 scam risk score before you hand over your SSN.

Sixty seconds of checking beats a four-figure mistake.

Paste any URL for a free instant preview — the full 0–100 report is $2, one-time. No subscription.

Spot the scam before it spots you.

For businesses · $19, one-time

Is someone impersonating your brand?

The costume in these scams — a lookalike domain, a copied storefront, a spoofed sender — is exactly what the brand impersonation audit researches for your company: lookalike domains, typosquats, and copycat sites trading on your name, each with evidence and a risk rating, plus a ready-to-send takedown-request template.

Audit my brand — $19

Free brand scan first — you only pay for the full audit.