A consumer reporting agency may lawfully furnish a consumer report only to a user it has reason to believe: