Looks like they state it pretty clearly in their User Agreement: (https://www.coinbase.com/legal/user_agreement https://www.coinbase.com/legal/user_agreement)

Looks like they state it pretty clearly in their User Agreement: (https://www.coinbase.com/legal/user_agreement https://www.coinbase.com/legal/user_agreement) "(e) Authorize Coinbase to, directly or through third parties, (i) make any inquiries we consider necessary to verify your identity and/or account information, and (ii) request and obtain any consumer report, credit report or similar information relating to you and to take action we reasonably deem necessary based on the results of such inquiries and reports, and hereby authorize any and all third parties to which such inquiries or requests may be directed to fully respond to such inquiries or requests." ... I'm not saying that they're awesome for doing this; but I don't think it's accurate to portray their running a credit check as "unauthorized". You definitely authorized it.