What to do first when identity theft hits your credit report
Identity theft on a credit report can lead to fraudulent accounts, collection notices, and damaged credit scores.
Knowing how to report identity theft involving your credit report quickly can limit the damage and help you start the dispute process with the right agencies.
The most effective response is to act in a specific order: document the fraud, notify the Federal Trade Commission, contact the credit bureaus, and secure your accounts.
A fast, organized response also creates the paper trail lenders, collectors, and law enforcement may require.
Understand what counts as identity theft on a credit report
Identity theft happens when someone uses your personal information, such as your Social Security number, date of birth, or address, to open or misuse credit accounts.
On your credit report, this may appear as accounts you never opened, hard inquiries you did not authorize, unfamiliar addresses, or balances on loans or cards you do not recognize.
Common signs include:
- New credit accounts opened without your permission
- Late payments tied to accounts you never used
- Debt collection notices for unfamiliar balances
- Employer, address, or phone number changes you did not request
- Hard inquiries from lenders you never contacted
How to report identity theft involving your credit report
Start with the FTC Identity Theft Report at IdentityTheft.gov.
The FTC collects details about the fraud, generates a recovery plan, and gives you an identity theft affidavit that supports disputes with creditors and credit bureaus.
Next, contact each of the three major credit bureaus: Equifax, Experian, and TransUnion.
Request that they place an initial fraud alert or, if appropriate, an extended fraud alert on your file.
A fraud alert tells lenders to take extra steps to verify identity before approving new credit.
If the fraud is severe or includes criminal activity, file a police report with your local law enforcement agency.
A police report is not required in every case, but it can strengthen your case when disputing accounts, requesting account removals, or proving identity theft to a lender.
FTC reporting steps
- Go to IdentityTheft.gov and choose the identity theft path
- Provide accurate details about unauthorized accounts, inquiries, or collections
- Save the recovery plan and identity theft affidavit
- Keep copies of screenshots, emails, and mailed notices
Credit bureau reporting steps
- Contact Equifax, Experian, and TransUnion separately
- Request a fraud alert or credit freeze if you need stronger protection
- Dispute inaccurate accounts and inquiries in writing
- Ask for confirmation that your dispute was received
Fraud alert or credit freeze: which should you use?
A fraud alert is useful when you want lenders to verify your identity before extending new credit.
It is free and can be easier to set up, especially if you need access to credit soon.
A credit freeze provides stronger protection by restricting access to your credit file unless you lift the freeze with a PIN or online request.
If you are not planning to apply for credit immediately, a freeze is often the better option for preventing new fraudulent accounts.
In practice:
- Use a fraud alert if you want added verification and still expect to apply for credit
- Use a credit freeze if you want the strongest barrier against new account openings
- You can use both, depending on your situation
What evidence should you gather?
Good documentation improves your chances of getting false information removed.
Create a dedicated file with every record related to the fraud and your reporting efforts.
Useful evidence includes:
- Copies of your credit reports showing the inaccurate items
- Account statements from unfamiliar creditors
- FTC identity theft affidavit and recovery plan
- Police report, if filed
- Letters, emails, and call logs from creditors and bureaus
- Proof of your identity, such as a government-issued ID and utility bill if requested
If the fraudulent item is tied to a collections agency, save all collection letters and note the dates you received them.
Collections accounts often involve multiple companies, so tracking the chain of communication matters.
How to dispute fraudulent accounts with the credit bureaus
You have the right to dispute inaccurate information on your credit report under the Fair Credit Reporting Act.
Send disputes to each bureau reporting the fraud, and include enough detail to identify the incorrect account or inquiry.
Your dispute letter should state that the item is the result of identity theft and include copies of supporting documents, not originals.
Be specific about what you want removed or corrected, such as an account number, creditor name, or inquiry date.
After receiving your dispute, the credit bureau must investigate and usually respond within 30 days.
If the information is found inaccurate or unverifiable, it should be removed or corrected.
What to include in a dispute letter
- Your full name, current address, and date of birth
- The account or inquiry you are disputing
- A clear statement that the item is fraudulent
- Copies of the FTC affidavit and any police report
- A request for deletion or correction of the inaccurate item
Contact the creditor or lender directly
Do not rely only on the credit bureaus.
Send a fraud notice to the creditor or lender associated with the false account and ask them to close the account as fraud, block it from collection, and stop reporting it as yours.
If the account was opened with stolen identity information, ask for the application method, mailing address, IP logs, or any identity verification records they used.
These details can help you confirm how the fraud occurred and support further disputes.
For collection accounts, notify the collector in writing that the debt is disputed due to identity theft and request that they stop collection efforts until the account is verified.
Protect your credit after the report is filed
Once the initial reports are filed, monitor your credit closely.
Review all three credit reports for new accounts, inquiries, or address changes, and consider setting up account alerts with your bank and major creditors.
Additional steps can include:
- Changing passwords on financial and email accounts
- Enabling multi-factor authentication wherever available
- Replacing compromised cards and account numbers
- Checking tax records, medical records, and Social Security statements if the theft appears broader than credit fraud
If you suspect someone also has access to your online banking or email, update those credentials immediately.
Identity thieves often move from one account type to another once they get a foothold.
When should you escalate the case?
Escalate the matter if credit bureaus fail to remove fraudulent items, if a lender refuses to cooperate, or if new accounts keep appearing.
You can submit a complaint to the Consumer Financial Protection Bureau and attach your dispute records and FTC documentation.
Escalation is also appropriate if the theft involves tax fraud, benefits fraud, mail theft, or repeated unauthorized loan applications.
In those cases, the issue may extend beyond credit reporting and require separate agency reports.
How long does recovery usually take?
Recovery time depends on how many accounts were opened, how quickly you reported the fraud, and whether the creditors cooperate.
Simple cases may resolve within a few weeks, while more complex cases can take several months.
The fastest path is consistent follow-up.
Keep a log of every call, letter, case number, and response date so you can show the timeline if a dispute stalls or a bureau asks for more information.