Under the Fair Credit Reporting Act, any person who knowingly and willfully obtains credit information from a consumer reporting agency under false pretenses or violates any of the provisions of the FCRA may be liable for civil penalty of not more than $2,500 per violation.