Identity Theft and Your Credit Report

Act quickly

1. Report it at IdentityTheft.gov. The FTC’s site creates an Identity Theft Report and a personalized recovery plan.
2. Place a fraud alert. Contact one bureau; it must notify the other two. An initial alert lasts one year. With an Identity Theft Report you can get an extended alert that lasts seven years (FCRA § 605A).
3. Freeze your credit. Security freezes are free at all three bureaus and stop most new accounts from being opened in your name.
4. Contact the companies where the fraudulent accounts were opened and tell them in writing.

Blocking fraudulent information: FCRA § 605B

This is one of the most powerful sections of the FCRA. When you send a bureau proof of your identity, a copy of your Identity Theft Report, the specific information that resulted from identity theft, and a statement that it isn’t yours, the bureau generally must block that information within 4 business days and notify the company that furnished it. A furnisher notified of the block may not keep reporting the blocked information.

Getting records of the fraud

Under FCRA § 609(e), you have the right to request copies of the application and business records for accounts opened in your name by an identity thief — free of charge. Those records often reveal how the fraud happened.

Collectors and identity theft

If a collector contacts you about a fraudulent debt, tell it in writing that the debt resulted from identity theft. A collector notified of that must tell the creditor, and furnishers have duties not to report information they know resulted from identity theft.

Protect yourself going forward

• Keep your freezes in place and lift them temporarily only when you apply for credit.
• Review your reports regularly at AnnualCreditReport.com.
• Use strong, unique passwords and turn on two-factor sign-in for your financial accounts.

Sources: Fair Credit Reporting Act, 15 U.S.C. §§ 1681c-1, 1681c-2, 1681g(e), 1681m(g), 1681s-2(a)(6).