Short answer: If identity theft placed an account, collection, inquiry, or other information on your credit report, you can ask the credit reporting companies to block it. A complete identity-theft blocking request generally includes an FTC Identity Theft Report, proof of identity, and a letter identifying each fraudulent item. Under the Fair Credit Reporting Act (FCRA), a credit reporting company generally must block properly identified identity-theft information within four business days after receiving the required materials.
This guide explains the practical steps, the difference between a block and an ordinary dispute, and when continued reporting may support an FCRA claim.
Contents
What should I do first after finding identity theft on my credit report?
- Get all three credit reports. Review Equifax, Experian, and TransUnion through AnnualCreditReport.com. The same fraudulent account may not appear on every report.
- List every suspicious item separately. Record the creditor or collector, partial account number, balance, dates, and which bureau reports it.
- Report the theft at IdentityTheft.gov. Save the FTC Identity Theft Report and recovery plan.
- Contact the affected creditor or financial institution. Ask it to close or restrict the account and preserve account-opening and transaction records.
- Protect against new fraud. Consider a free credit freeze with each nationwide bureau. A freeze helps stop new-account fraud, but it does not correct existing accounts or prevent takeover of an existing account.
How do I request an identity-theft block?
Send each credit reporting company that is reporting the fraudulent information:
- a copy of your FTC Identity Theft Report;
- proof of your identity;
- a clear written request to block the identity-theft information; and
- a precise list of the accounts, collections, inquiries, addresses, or other entries caused by the theft.
Attach the relevant credit-report pages and mark the disputed items. Keep the originals. Send copies through a method that creates reliable proof of submission and delivery, and save screenshots or confirmation numbers for online submissions.
A police report may be helpful in some cases, but the core federal materials identified by the Consumer Financial Protection Bureau are the identity-theft report, proof of identity, and a letter identifying the fraudulent information.
Identity-theft block versus ordinary credit dispute
| Issue | Identity-theft block | Ordinary dispute |
|---|---|---|
| Best used for | Information caused by identity theft | Other inaccurate or incomplete information |
| Key documentation | Identity Theft Report, identity proof, and identified fraudulent items | Explanation and records showing why the information is inaccurate |
| General timing | Block generally required within four business days after receipt of a complete request | Reinvestigation is commonly completed within 30 days, subject to statutory exceptions |
| Legal focus | FCRA identity-theft blocking rights | FCRA dispute and reasonable-reinvestigation duties |
Use the identity-theft procedure only for information actually caused by identity theft. For a payment-history error, mixed file, bankruptcy reporting problem, or another non-theft inaccuracy, follow the regular dispute process described in our credit report dispute guide.
What if the bureau refuses, delays, or reverses the block?
A credit reporting company may decline or rescind a block in limited circumstances, including when it reasonably concludes that the request resulted from a material misrepresentation or that the consumer received goods, services, or money from the transaction. It should not simply treat a documented identity-theft request as an ordinary automated dispute without applying the relevant blocking rights.
If information remains, review the bureau’s response carefully. Confirm that the request included every required document and precisely identified each item. Then preserve:
- every version of the credit reports;
- the FTC report and supporting records;
- dispute and block letters;
- certified-mail receipts, upload confirmations, and bureau results;
- communications with the creditor, collector, or furnisher; and
- evidence of harm, such as a credit denial, higher interest rate, housing problem, lost time, or out-of-pocket expense.
When can identity-theft reporting become an FCRA case?
An FCRA claim depends on the facts. Potential issues may arise when a consumer reporting company or information furnisher receives adequate notice yet fails to follow the duties that apply to the dispute or identity-theft block. Continued reporting alone does not automatically prove a lawsuit, and the responsible party, notice, investigation, accuracy, causation, and damages all matter.
Legal review is especially useful when:
- a complete identity-theft blocking request was rejected or ignored;
- fraudulent information remains after repeated documented disputes;
- an account returns after it was removed;
- the creditor or collector continues verifying an account that is not yours;
- the false reporting caused a credit, housing, or employment problem; or
- you need help preserving evidence and identifying the correct defendants.
For more detail, see our Florida identity theft credit report lawyer page and our FCRA lawsuit guide.
Frequently asked questions
Will a credit freeze remove fraudulent accounts?
No. A freeze limits access to your credit file and can make new-account fraud harder. It does not remove information already appearing on the report. You must separately request a block or dispute the inaccurate information.
Do I contact only one credit bureau?
For an initial fraud alert, contacting one nationwide bureau generally causes it to notify the others. For a credit freeze or a request to remove information, contact each bureau that needs to act.
Can I block accurate debts that I simply cannot pay?
No. Identity-theft blocking rights apply to information resulting from identity theft, not accurate debts belonging to the consumer.
How long does an extended fraud alert last?
An extended fraud alert for an identity-theft victim lasts seven years. It is different from a credit freeze, which remains until you lift or remove it.
Speak with a Florida FCRA lawyer
Fowkes & Hasanbasic represents consumers in credit reporting matters, including identity-theft accounts that remain after proper notice. A consultation can help determine whether the problem is still in the recovery stage or may support a claim under the FCRA. Call (727) 500-1010 or use our contact page.
About the author: Paul R. Fowkes is a Florida attorney whose practice includes Fair Credit Reporting Act matters and consumer claims involving inaccurate credit reporting.
This article provides general information and is not legal advice. Results depend on the facts and law applicable to each matter.