ToTo is right. You can send them a "standard" credit denial although, the Reg B portion (reasons, regulator's name and ECOA statement) are not necessary, or you can just give them the FCRA info.
The bank must provide the consumer with:
1. The name, address and telephone number of the credit bureau (including a toll-free telephone number established by the agency if the agency compiles and maintains files on consumers on a nationwide basis) that furnished the report to the bank;
2. A statement that the credit bureau did not make the decision to take the adverse action and is unable to provide the consumer the specific reasons why the adverse action was taken; and
3. A notice of the consumer’s right:
a) to obtain a free credit report within 60 days of the adverse action; and
b) to dispute the accuracy or completeness of any information in the consumer report with the credit bureau.