How Identity Theft Shows Up on Your Credit Report
Identity theft doesn't always announce itself. Often the first sign is a mysterious account on your credit report — a credit card you never applied for, an address you've never lived at, a hard inquiry from a lender you've never contacted. By the time you notice, the fraudster may have opened multiple accounts, run up large balances, and left a trail of missed payments attached to your name.
Identity theft-related credit errors are different from ordinary reporting mistakes because they involve accounts and activity that are entirely fraudulent. The normal dispute process still applies, but there are additional, more powerful tools available specifically for identity theft victims.
Types of Identity Theft Errors on Your Credit Report
- Fraudulent accounts. Credit cards, personal loans, store cards, or other accounts opened by someone using your stolen information.
- Fraudulent inquiries. Hard inquiries from lenders the thief applied to in your name.
- Wrong addresses. Addresses the thief used when opening accounts.
- Fraudulent charges on existing accounts. In some cases, a thief gains access to an existing account, runs up charges, and the resulting delinquency shows on your report.
- Fraudulent tax or employment records. While not directly credit-related, these can sometimes appear in background checks or employment verification sections.
Step 1: Place a Fraud Alert
As soon as you suspect identity theft, place a fraud alert on your credit reports. Contact any one of the three bureaus — Equifax, Experian, or TransUnion — and the bureau you contact is required to notify the other two. A standard fraud alert lasts one year and requires lenders to take extra steps to verify your identity before opening new accounts.
If you have a police report or FTC identity theft report, you can request an extended fraud alert, which lasts seven years.
Step 2: File an Identity Theft Report With the FTC
Go to IdentityTheft.gov and complete the online identity theft report. This generates an official FTC Identity Theft Report, which is a powerful document you'll use in multiple places. It's free, official, and accepted by credit bureaus and businesses as evidence of identity theft.
You may also want to file a local police report, especially if the theft involved someone you know or if you need the police report for other purposes (like disputing fraudulent accounts with a specific company).
Step 3: Use FCRA § 605B to Block Fraudulent Information
This is where identity theft victims have a specific advantage over ordinary dispute filers. FCRA § 605B gives you the right to request a block of information resulting from identity theft — a stronger remedy than a standard dispute. Under § 605B:
- You send the bureau your identity theft report (FTC report or police report), proof of your identity, and a written request to block the fraudulent information.
- The bureau must block the information within four business days of receiving your complete request.
- Once blocked, the information cannot be reported to lenders.
- The bureau must notify the furnisher that the information was blocked as identity theft.
This block process is faster and more decisive than the standard 30-day dispute investigation.
Step 4: Send Direct Disputes to Furnishers
Under FCRA § 623(a)(6), if a furnisher receives notice that an account resulted from identity theft, they must stop reporting it. Send written notice to each creditor or collector reporting fraudulent accounts, include your FTC identity theft report, and request that they immediately stop reporting the account and close it.
Step 5: Consider a Credit Freeze
A credit freeze (also called a security freeze) prevents new creditors from accessing your credit report entirely, making it nearly impossible for a thief to open new accounts in your name. Freezes are free, and you can lift them temporarily when you need to apply for credit. You must freeze separately at all three bureaus — and consider Innovis and ChexSystems as well.
After the Cleanup
Monitor your reports closely in the months after a confirmed identity theft incident. Fraudulent accounts are sometimes re-inserted after removal, and new accounts may continue to surface if the thief still has your information. An extended fraud alert and a credit freeze together provide strong ongoing protection.