Credit Report Error Dispute
Identity Theft and Your Credit Report: Protecting and Recovering Your Credit
Identity theft can devastate your credit in days. Learn how to place fraud alerts, initiate credit freezes, dispute fraudulent accounts, and restore your credit under federal law.
Identity theft affects approximately 15 million Americans annually, according to the Bureau of Justice Statistics. The credit damage can be severe and lasting — fraudulent accounts, collections, and bankruptcies filed in your name that take years to unravel. But federal law provides specific, powerful protections for identity theft victims: free fraud alerts, free credit freezes, the right to block fraudulent information, and free copies of your reports. Acting quickly and systematically is the key to minimizing damage and restoring your credit.
At a Glance
Sections
5
FAQs answered
5
Reading time
6 min
Tool available
$44.99
Immediate Steps: The First 48 Hours
Step 1 — Place a fraud alert (free, immediate): Call ONE of the three major bureaus — they must notify the others. A standard fraud alert lasts one year and requires lenders to take extra steps to verify identity before extending credit.
- Equifax: 1-800-525-6285 - Experian: 1-888-397-3742 - TransUnion: 1-800-680-7289 Or go to each bureau's website.
Step 2 — Get free copies of all three reports: Identity theft victims are entitled to free reports from all three bureaus. Review each for accounts you don't recognize, addresses you've never lived at, or employers you've never worked for.
Step 3 — Report to the FTC: Go to IdentityTheft.gov (the FTC's official identity theft resource site). File your identity theft report and get a personalized recovery plan. The site generates an FTC Identity Theft Report, which is a legal document you'll use in the recovery process.
Step 4 — File a police report (for most cases): A police report is required by many creditors to remove fraudulent accounts. Include: your FTC Identity Theft Report, a list of fraudulent accounts, and any evidence of the theft. Ask for a copy of the police report — you'll need it repeatedly.
Credit Freezes vs. Fraud Alerts: Which to Use
Fraud Alert:
- Free at all three bureaus
- Standard: 1 year; Extended (identity theft victims): 7 years
- Requires lenders to verify your identity before extending credit
- You can still apply for new credit (lenders must verify you more carefully)
- Useful if you think your information was exposed
Credit Freeze (Security Freeze):
- Free at all three bureaus since 2018
- Prevents the bureau from releasing your credit file to new creditors
- Most effective protection against new fraudulent accounts
- Must be lifted when you want to apply for new credit (free and instant online)
- Does NOT affect existing accounts or prescreened offers
Which to choose: For active identity theft where fraudulent accounts are being opened, a credit freeze at all three bureaus is the most protective option. Fraud alerts are appropriate when your information may have been exposed but you haven't seen fraudulent activity yet.
PLUS: Place freezes at specialty bureaus:
- ChexSystems: 1-800-428-9623 (banking)
- LexisNexis Risk Solutions: 1-800-456-1244 (insurance, background checks)
- Innovis: 1-800-540-2505
Extended fraud alert (7 years) is available only to documented identity theft victims who file a FTC Identity Theft Report. It entitles you to additional free credit reports and requires lenders to verify identity before extending credit.
Blocking Fraudulent Information: The Strongest Legal Remedy
FCRA § 1681c-2 allows identity theft victims to block fraudulent information from their credit reports. This is stronger than a dispute — a block requires the bureau to prevent the furnisher from reporting the fraudulent item at all.
Requirements for a block:
- Proof of identity
- Copy of FTC Identity Theft Report
- Statement identifying which information is fraudulent
- Statement that the information resulted from identity theft
How to submit a block request:
- Write to each bureau
- Include your identity theft report
- Identify each specific account or item you're requesting to be blocked
- Send certified mail
What happens after a block:
- The bureau must block the information within 4 business days of receiving your request
- The bureau must notify the furnisher that the information was blocked
- The furnisher cannot continue reporting the blocked information
When bureaus can reject or rescind blocks:
- If they believe the information is not the result of identity theft
- If you are the person who benefited from the fraudulent transactions (difficult to establish)
- If the identity theft report was obtained through fraud
Block + dispute together: File both a § 1681c-2 block (identity theft specific) and a regular § 1681i dispute for the same fraudulent items. This provides maximum procedural protection.
Removing Fraudulent Accounts from Your Credit Report
Once you have your FTC Identity Theft Report and police report:
Write to each creditor:
- Explain that the account was opened fraudulently
- Attach your FTC Identity Theft Report and police report copy
- Request the account be closed and removed from your credit report
- Request confirmation in writing
FCRA rights for identity theft victims (15 U.S.C. § 1681s-2(a)(6)):
- Creditors must correct fraudulent information upon receipt of documented notice of identity theft
- Must notify credit bureaus of the correction
Timeline:
- Creditors must complete investigation within 30 days
- Bureaus must be notified within 90 days of receiving your theft notice
- Bureau block requests must be processed within 4 business days
If the creditor refuses:
- File a CFPB complaint
- File an FTC complaint
- Consult a consumer protection attorney — identity theft victims who have been forced to pursue legal action to clear fraudulent accounts have recovered significant damages plus attorneys' fees
Ongoing monitoring after identity theft:
- Continue monitoring all three reports monthly for new fraudulent activity
- The same criminal may continue attempting to use your information
- Consider placing a credit freeze rather than just a fraud alert for long-term protection
The Identity Theft Recovery Plan
IdentityTheft.gov provides a personalized, step-by-step recovery plan. The FTC's automated system generates:
- A pre-filled FTC Identity Theft Report
- A customized recovery plan based on what type of identity theft occurred
- Pre-filled dispute letters for specific accounts
- Specific next steps based on the type of fraud
Common identity theft scenarios and specific responses:
Fraudulent credit card accounts:
- Contact the card issuer's fraud department
- File dispute under 15 U.S.C. § 1666 (Fair Credit Billing Act) within 60 days
- The issuer must investigate and remove your liability within 90 days
Fraudulent loans (auto, personal):
- More complex — lenders may have physical documents with forged signatures
- Document the forgery and file a police report identifying it as fraud
- May require notarized affidavit
Tax identity theft (someone filed a return in your name):
- File IRS Form 14039 (Identity Theft Affidavit)
- Call IRS at 1-800-908-4490
- Get an IRS Identity Protection PIN (IP PIN) for future returns
Government benefit identity theft (fraudulent claims for unemployment, Social Security, etc.):
- Contact the specific agency immediately
- Each agency has specific identity theft procedures
Frequently Asked Questions
Quick answers to the most common questions on this topic.
How quickly does identity theft affect my credit score?
+
A fraudulent account can appear on your credit report within days of being opened. If the thief maxes out the account and misses payments, the negative impact on your score can occur within 30–60 days. This is why regular monitoring (weekly through AnnualCreditReport.com since the COVID policy) and alerts from credit monitoring services are valuable.
Can I sue the identity thief directly?
+
Yes, in theory. In practice, identity thieves are often difficult to identify, located abroad, or judgment-proof. More practical are claims against the businesses that failed to verify identity before opening fraudulent accounts. If a creditor's negligent identity verification made the fraud possible, they may bear some liability.
Will placing a credit freeze stop all new credit applications?
+
Nearly all. A credit freeze prevents new credit from being opened using your Social Security number because lenders can't access your file. However, some things aren't stopped: existing account activity, employment background checks, insurance applications, and government agencies can still access your file for specific purposes.
How do I unfreeze my credit when I need to apply for a loan?
+
Go to each bureau's website, log in to your freeze account, and select 'Lift Freeze.' You can lift it temporarily (for a specified period or for a specific creditor) or permanently. Temporary lifts for specific lenders are the most protective option. The process is free and typically instant online.
What is synthetic identity theft?
+
Synthetic identity theft occurs when a thief creates a new identity by combining real information (your Social Security number) with false information (a different name and birthdate). This creates a new credit file associated with your SSN under a different name. It can take years to discover because none of your accounts show the fraud — it appears as a separate identity. Warning sign: credit file associated with your SSN for a person with a different name.