You find out the way most people do: a denial letter for a loan you never applied for, a collection call about a card you never opened, or a line on your credit report you don't recognize. Someone has been using your identity. Now you have to clean it up.
The Fair Credit Reporting Act contains a set of tools built specifically for identity theft victims. They are more powerful than the general dispute process, and they operate on tighter timelines — but only if you know how to use them.
Step One: File an Identity Theft Report
Several of the FCRA's identity theft remedies require an "identity theft report." The easiest way to create one is through the Federal Trade Commission's site, identitytheft.gov, which generates an FTC Identity Theft Report and a personalized recovery plan. A police report can also serve this function. Get the report before you contact the bureaus; it unlocks the rest of the process.
Fraud Alerts
Under 15 U.S.C. § 1681c-1, you can place a fraud alert on your credit file by contacting any one of the three national bureaus, which must then notify the other two. There are two kinds:
- An initial fraud alert lasts one year and can be placed by anyone who has a good-faith suspicion they have been or may be a victim of fraud. It requires businesses that receive a credit application in your name to take reasonable steps to verify the applicant's identity.
- An extended fraud alert lasts seven years and requires an identity theft report. In addition to the identity verification requirement, it entitles you to two free credit reports from each bureau in the first twelve months, and it removes your name from prescreened credit offer lists for five years.
Fraud alerts are free and do not prevent you from applying for credit yourself.
Security Freezes
A security freeze, also called a credit freeze, is stronger than an alert. It prevents a bureau from releasing your credit report to a prospective lender at all, which blocks most new-account fraud before it starts. Under 15 U.S.C. § 1681c-1(i), placing, temporarily lifting, and removing a freeze is free at all three national bureaus, and the bureaus must act on your request within one business day if made online or by phone.
A freeze does not affect your existing accounts, your score, or your ability to get your own report. You do need to contact each bureau separately, and you will need to lift the freeze temporarily when you apply for credit yourself.
Blocking Fraudulent Information
This is the most important identity theft provision in the Act, and the least well known. Under 15 U.S.C. § 1681c-2, a bureau must block any information in your file that resulted from identity theft — not investigate it, not dispute it with the furnisher, but block it — within four business days after receiving:
- Appropriate proof of your identity
- A copy of your identity theft report
- Identification of the specific information that resulted from the theft
- A statement that the information does not relate to any transaction you made
Once the block is in place, the bureau must promptly notify the furnisher that the information may be the result of identity theft, that an identity theft report has been filed, and that a block has been requested. The furnisher may not then re-report that information.
The bureau may decline or rescind a block only in narrow circumstances — if it reasonably determines the block was requested in error, was based on a material misrepresentation, or that you actually obtained goods or services as a result of the transaction. A bureau that ignores a properly supported block request, or that reinserts blocked information without justification, has violated the Act.
Getting Records From the Business
Under 15 U.S.C. § 1681g(e), a business that opened an account or extended credit to an identity thief in your name must, upon your request, give you copies of the application and transaction records — free of charge, within thirty days. This is how you find out what the thief said, what address they used, and what documents they presented. Businesses often resist these requests, but the law is clear.
Stopping Collection
If a debt collector is pursuing you for a fraudulent account, 15 U.S.C. § 1681m(f) and (g) come into play. Once a collector is notified that the debt may be the result of identity theft, it must notify the creditor and provide you with certain information about the debt on request. Combined with the FDCPA's validation and dispute provisions, this gives you leverage to stop collection on accounts that were never yours.
What You Can Recover
The FCRA's remedies apply to identity theft violations the same as any other. A bureau that fails to block, a furnisher that re-reports blocked information, or a business that refuses to provide records can each be liable under 15 U.S.C. § 1681n for willful violations — actual or statutory damages of $100 to $1,000, punitive damages, and attorney's fees — or under § 1681o for negligent violations. In identity theft cases, actual damages frequently include substantial time lost, out-of-pocket costs, credit denials, and emotional distress.
A Practical Sequence
- File an FTC Identity Theft Report at identitytheft.gov and save the PDF.
- Place a security freeze at all three bureaus.
- Pull all three credit reports and mark every fraudulent item.
- Send each bureau a written block request under § 1681c-2 with the four required items, by certified mail.
- Send each business that opened a fraudulent account a written request for records under § 1681g(e).
- Keep a log of every letter, call, and response.
The Bottom Line
Identity theft cleanup is not a matter of asking politely and hoping. The FCRA gives you a four-day block right, free freezes, and a right to the thief's records. Bureaus and furnishers that ignore those rights are liable for the damage they cause. Document everything and get help if the fraudulent items don't come off.
Think You Have a Case?
Lavian, P.C. represents consumers and everyday people. If you believe your rights have been violated, we offer a free case review — and you pay nothing unless we win.
Get a Free Case ReviewOr call (213) 212-3036