I am sure they have been previously trained and if so, make sure you show them this.
Sec. 616. Civil liability for willful noncompliance
(b) Civil liability for knowing noncompliance. Any person who obtains a consumer report from a consumer reporting agency under false pretenses or knowingly without a permissible purpose shall be liable to the consumer reporting agency for actual damages sustained by the consumer reporting agency or $1,000, whichever is greater.
and this:
Sec. 619. Obtaining information under false pretenses
Any person who knowingly and willfully obtains information on a consumer from a consumer reporting agency under false pretenses shall be fined under title 18, United States Code, imprisoned for not more than 2 years, or both.