How to Remove Identity-Theft Accounts From Your Credit Report

An account opened by an identity thief can damage your credit before you even know it exists. The good news is that identity-theft accounts may qualify for a special FCRA block, which is different from a normal credit report dispute.

Start by confirming what is fraudulent

Pull your credit reports from Equifax, Experian, and TransUnion and review them separately. An account may appear on only one or two reports, and the information can differ between bureaus.

Look for accounts, collection records, hard inquiries, addresses, and personal details you do not recognize. A creditor name may look unfamiliar even when the account is legitimate, so check account-opening dates, balances, payment history, and the original creditor before labeling something as fraud.

Make a list of every item that appears to result from identity theft. Include the account number, furnisher or creditor name, bureau reporting it, date opened, balance, and the reason you believe it is fraudulent. Save copies of the reports showing the items. This record can help you send complete requests and track responses.

If your wallet, Social Security number, login credentials, or other personal information was stolen, secure those accounts as well. Change passwords, enable multifactor authentication, contact financial institutions, and consider placing a fraud alert or security freeze. A fraud alert asks businesses to take additional steps to verify your identity before extending credit. A security freeze restricts access to your report for most new-credit applications until you lift it.

Create an identity theft report

For an FCRA identity-theft block, you generally need an identity theft report, proof of identity, and information identifying the fraudulent accounts. You can begin at IdentityTheft.gov, the Federal Trade Commission’s reporting site. The resulting report can help document what happened and provide a consistent explanation for the bureaus and businesses involved.

In some situations, a police report or other official report may also be relevant. Keep the report number and a complete copy of everything you submit. If the theft involved a specific lender, ask that lender what documentation it requires to investigate the account and close or correct it.

Your proof of identity might include a copy of a government-issued identification document or another document accepted by the bureau. Avoid sending unnecessary sensitive information. Redact details that are not needed, such as an unrelated account number, while leaving enough information for the bureau to match the request to your file.

An identity theft report should be specific. State which accounts are not yours, when you noticed them, and that they resulted from identity theft. If only one part of an account is fraudulent, explain that clearly rather than making a broader statement that could be misunderstood.

Request an FCRA block from each bureau

The FCRA allows a consumer to ask a nationwide consumer reporting agency to block information that resulted from identity theft. Send the request to every bureau displaying the fraudulent item: Equifax, Experian, and/or TransUnion. You do not need to wait for all three reports if the problem appears on only one.

Include:

• A clear request for an identity-theft block under the FCRA
• Your name, current mailing address, and contact information
• Proof of identity
• A copy of your identity theft report
• The account names and numbers, if available
• The portions of your credit report showing the fraudulent information
• A short explanation connecting each item to the identity theft

Use the bureau’s current instructions for submitting identity theft or fraud requests. A trackable delivery method can help you document when the bureau received your materials. Keep the mailing receipt, uploaded files, confirmation numbers, and copies of every letter.

A bureau generally must block information identified as resulting from identity theft within four business days after receiving a proper request and the required supporting documents. However, the bureau may decline or remove a block in certain circumstances, such as when the request is incomplete, the information does not appear to result from identity theft, or the bureau reasonably determines that the request involves a material misrepresentation.

A block is not the same as a standard investigation. If you do not have the documentation needed for an identity-theft block, you can still dispute inaccurate information through the ordinary FCRA dispute process.

Notify the creditor and handle collection calls

Contact the lender, card issuer, or other furnisher reporting the account. Tell the business that the account resulted from identity theft and ask it to investigate, close the account, correct its records, and stop furnishing inaccurate information. Attach only the documentation needed for the request and keep proof of delivery.

If a debt collector is contacting you, the Fair Debt Collection Practices Act may give you a separate right to request information about the debt. A written request for validation generally must be sent within 30 days after receiving the collector’s initial written notice to trigger the FDCPA’s validation procedures. That process is separate from a credit-report block, so do not rely on a collection dispute alone to address fraudulent information on your reports.

Be careful about acknowledging or agreeing to pay an account you say is fraudulent. Ask questions in writing and keep the conversation focused on the identity theft. If you already paid a fraudulent account or reached an agreement before discovering the problem, explain that history to the creditor and seek professional legal guidance if the situation is complicated.

Track the outcome and escalate carefully

Review the bureau’s response and obtain updated reports to confirm what changed. If an item remains, compare the response with your original request. The bureau may have treated your submission as a standard dispute, found the documents incomplete, or decided that the information did not meet its identity-theft-block requirements.

For a standard FCRA dispute, a bureau generally has 30 days to investigate. The period can extend to 45 days in certain circumstances, including when you obtain a free report through the applicable federal disclosure process or provide additional relevant information during the investigation. The bureau generally must send you the investigation results and, when applicable, an updated report.

If the response is incomplete, send a focused follow-up with the missing documents and explain what remains unresolved. You may also file a complaint with the Consumer Financial Protection Bureau or contact your state attorney general. If you believe a business is threatening, harassing, or misrepresenting the debt, an attorney familiar with the FCRA or FDCPA can help you evaluate your options.

Do not repeatedly submit identical disputes without adding relevant information. Organized records, a precise explanation, and the correct type of request are usually more useful than sending many copies of the same letter.

This article is general information, not legal, financial, or tax advice.

Take the next step

A careful review can help you identify which accounts need an identity-theft block, a standard dispute, or direct contact with a furnisher. For guided tools and privacy-first support, see Pro pricing, or start with the free credit checkup at /checkup.