# Skip tracing: finding the right person > How skip tracing works at a collections firm: the FDCPA location-information rules, the major data vendors (TransUnion TLOxp, LexisNexis Accurint, Experian, idiCORE, Thomson Reuters CLEAR), waterfall scrubs, and the FCRA permissible-purpose constraint. - Source: https://ottoforfirms.com/academy/collections-101/skip-tracing/ - Publisher: Otto — https://ottoforfirms.com - Updated: 2026-09-01 What skip tracing is, the data vendors firms actually run — TLOxp, Accurint, Experian, idiCORE, CLEAR — the waterfall, and the FCRA line that decides what permission a lookup needs. Lesson 7 of 11 in [Collections 101](https://ottoforfirms.com/academy/collections-101/) · 14 min ## Why accounts go dark The contact data on a charged-off account is old almost by definition. The consumer stopped engaging with the creditor months before charge-off; the phone number may have been reassigned, the address may be two moves stale, mail comes back undeliverable, and the outbound lesson's gap between attempts and right-party contacts widens until the account cannot be worked at all. Skip tracing is the industry's word for closing that gap: locating a consumer — the skip — or verifying their current address, phone, and employer when the placement data has gone stale. It matters at three moments. Before dialing, because calling a reassigned number is how firms end up calling strangers. Before suit, because a complaint served at a bad address produces cost with no outcome — or worse, a judgment a court later vacates. And after judgment, because enforcement needs an employer or a bank, not just a name. ## The rules run ahead of the search Skip tracing is one of the few operations the FDCPA scripts almost line by line, because it is the one context where a collector is allowed to contact somebody other than the consumer. The location-information rules say what that conversation may be: the collector identifies themself, says they are confirming or correcting location information, names their employer only if expressly asked, never says or implies that a debt exists, contacts that person once absent a reason to believe the first answer was wrong, and sends nothing — no postcard, no envelope marking — that reveals the collection business. Once the collector knows an attorney represents the consumer, location questions go to the attorney and nowhere else. The glossary entry linked below carries the statute. The data a trace returns is also graded, not just gathered. Federal rulemaking on debt collection communications treats contact points obtained through skip tracing as less reliable than ones the consumer gave the creditor — which is why a well-run shop records the provenance of every number and address, and treats a vendor-sourced number as a lead to verify rather than a line to dial hard. ## The vendors, and the waterfall A handful of data vendors sit behind nearly every trace in the industry, and it is worth knowing their names because collectors and paralegals use them as verbs. TLOxp, sold by TransUnion, is the one practitioners most often mean when they say "run a TLO" — marketed for its address and phone history, relatives and associates, vehicle and property records, and batch processing. Accurint, from LexisNexis Risk Solutions, is the other name used generically, drawing on tens of billions of public records. Experian sells collections products that pair credit-file data with skip-trace contact data. idiCORE and Thomson Reuters CLEAR round out the set most firms have seen — the latter more common on the investigations side. What these products return, per their own marketing, is the locate layer: identity, address history, phones with carrier data, employers, relatives, and assets. All of them credential their customers and gate access by permitted use before turning an account on. At batch scale, firms run a waterfall: a portfolio goes through vendors in sequence, each tier seeing only the accounts the earlier tiers failed to hit. Trade descriptions of the practice describe ordering tuned by hit rate, data quality, and price — often cheapest-first, refined by testing vendors against each other — rather than loyalty to any one source. The same batch machinery runs the standard scrubs from the placement lesson: bankruptcy against court-records services, deceased against the Social Security Administration's death file through certified resellers, military status against the Defense Department's database, and — a practice worth knowing exists — screening against databases of consumers who frequently sue collectors. ## The FCRA line One legal distinction organizes everything a firm may do with these products. Some of what the vendors sell is a consumer report under the Fair Credit Reporting Act — information bearing on creditworthiness, furnished by a consumer reporting agency — and pulling one requires a permissible purpose. For a collections firm the operative purpose is written into the statute: use in connection with the review or collection of an account of the consumer. Collecting the consumer's own account qualifies; the practical obligations are making sure the account you are collecting is the account you are pulling on, and documenting the purpose at the account level, because credit-file pulls leave footprints and consumers dispute them. The other thing vendors sell is locate data built on identifying information — the so-called credit header: name, aliases, addresses, phones — which the vendors market as outside the FCRA and therefore not requiring a permissible purpose. The boundary is the vendor's product design, not the firm's intent, so the honest operational rule is: confirm with the vendor which regime each product sits under, and never use a non-FCRA locate product for any decision about a consumer's eligibility for anything — the vendors' own terms forbid it. The glossary entry on permissible purpose linked below carries the statutory text and the caveats. ## What this looks like in practice Illustrative, on this site's standing fictional account. A validation notice to Robert Martinez comes back undeliverable. The returned mail is scanned, the address is flagged bad, and the account enters the skip queue rather than the calling queue — dialing a consumer whose notice never arrived is work in the wrong order. A batch trace returns a new address and a new mobile number, and the report lands in the account's files with its vendor and date. The address goes out for re-mailing of the notice. The number is recorded with its provenance — vendor-sourced, unverified — and stays out of heavy rotation until a right-party contact confirms it. The trail now shows why the firm believed the consumer lived where it mailed, which is exactly the question a court or an auditor asks when service or notice is later challenged. ## What to carry out of this lesson - Skip tracing is a regulated conversation, not detective work: the location-information rules script what a third party may hear. - Vendors sell two different things — FCRA consumer reports and non-FCRA locate data — and the difference decides what permission a lookup needs. - Collection of the consumer's own account is a permissible purpose; using locate data for an eligibility decision never is. - A skip-traced number is a lead, not a verified contact — provenance is part of the number. ## Key terms - [Skip trace](https://ottoforfirms.com/glossary/skip-trace/) — Skip tracing is the process of locating a consumer or verifying current contact information — address, telephone number, employer — when the information supplied at placement is stale or wrong. - [Permissible purpose](https://ottoforfirms.com/glossary/permissible-purpose/) — Permissible purpose is the statutory justification a user must have before obtaining a consumer report, and for collections the operative one is the extension of credit to, or review or collection of an account of, the consumer. - [Right-party contact](https://ottoforfirms.com/glossary/right-party-contact/) — A right-party contact, or RPC, is a live conversation with the consumer actually obligated on the account, as opposed to a wrong number, a third party, or an unanswered attempt. ## Where the rules are written down - [What Is the FDCPA (15 U.S.C. 1692), and Who Does It Actually Cover?](https://ottoforfirms.com/compliance/fdcpa/) — The FDCPA's scope, the 15 U.S.C. - [What Is Regulation F (12 CFR Part 1006), and What Did It Add to the FDCPA?](https://ottoforfirms.com/compliance/regulation-f/) — Regulation F, 12 CFR part 1006, took effect November 30, 2021. - [GLBA Safeguards Rule: What Are the Required Elements of an Information Security Program Under 16 CFR 314?](https://ottoforfirms.com/compliance/glba-safeguards/) — Verified against eCFR: the ten lettered elements of 16 CFR 314.4 — Qualified Individual, written risk assessment, encryption, MFA, testing, FTC breach notice. ## About Otto Otto publishes this reference and builds the software underneath it: case management for US creditor-side collections law firms, where a client's written rules run before an action is taken rather than in next month's report. - [Talk to us](https://ottoforfirms.com/contact/) - [See what it costs](https://ottoforfirms.com/pricing/) --- This is an informational reference, not legal advice, and using it creates no attorney-client relationship. Limitations periods turn on facts this page cannot know — which state's law governs, the contract type, when the claim accrued, and whether anything tolled or revived it. Confirm against the primary source and your own counsel before acting.