Someone took out a loan in your name, and you found out from a collector’s call or a line on your credit report. Now you have a bill you never agreed to and no clear idea who to tell first. Federal law treats this as a dispute with deadlines, and the fastest way through it is to find the account on all three reports, report it officially, and send a precise written dispute to each bureau and the lender.

We built CreditRefresh to draft those letters for you to review and sign. The steps below come first, because the order matters.

How do I confirm a loan in my name I didn’t take out?

You confirm it by pulling your credit reports from all three bureaus and looking for an account, inquiry or collector you do not recognize. Unfamiliar bills, collection calls and approval or denial letters for loans you never applied for are the other warning signs, and each one should send you to the reports first.

All three nationwide bureaus have permanently extended a program that lets you check your report from each of them once a week for free at AnnualCreditReport.com (Federal Trade Commission, 2026). You can order online, by phone at 1-877-322-8228, or by mail. Statute text read September 22, 2026 shows the same free-disclosure duty in Section 612 of the Fair Credit Reporting Act (15 U.S.C. 1681j).

Reading three reports line by line is slow work. CreditRefresh pulls all three, scans every line item for errors and FCRA violations, and flags unauthorized hard pulls when they appear on your reports. It checks dates and payment histories across the three files, and it drafts a letter for what it finds.

What should I do first after finding a loan I didn’t take out?

Contact the lender, say you did not take the loan, and ask for the account details in writing. Then file an identity theft report at IdentityTheft.gov and a police report, because creditors and bureaus ask for them as proof.

The FTC received more than 1.1 million identity theft reports through IdentityTheft.gov in 2024 (Federal Trade Commission, 2025), so the process is well worn. The report is free and takes only a few minutes. Ask the lender to close the account and to confirm in writing that it is being reported as the result of identity theft.

The FTC’s 2024 data book counts 95,689 business or personal loan fraud reports that year (Federal Trade Commission, 2025). You are one of many, and the paper trail you build now is what each later step leans on. Keep a copy of everything you send.

One more rule: never attach identity documents to a letter sent to a creditor or collector.

If new fraud is still happening, stop it first and handle disputes second. Active theft, where new accounts keep opening, needs a person. Email support@creditrefresh.ai or talk to an attorney before running a standard dispute flow.

Should I place a fraud alert or credit freeze on my credit reports?

Yes. A fraud alert tells lenders to verify your identity before opening new credit, and contacting one bureau covers all three. A credit freeze goes further by blocking access to your report, and you place it with each bureau separately.

An initial fraud alert lasts at least 1 year. An extended alert requires an identity theft report and runs 7 years (Fair Credit Reporting Act, Section 605A, 2026). The FTC states there is no cost to place or lift a freeze, and that a freeze does not affect a credit score (Federal Trade Commission, 2025). Bureaus must place a freeze within 1 business day of a phone or online request.

A freeze also blocks your own applications and report refreshes, so it adds friction every time you apply for credit. That cost is worth paying while someone else holds your Social Security number.

How do I dispute a fraudulent loan with the credit bureaus?

You send a written dispute to each bureau that lists the account, states you did not open it and attaches your identity theft report and proof of identity. Bureaus must investigate, and an identity theft report lets you ask them to block the fraudulent debt from your file.

Under Section 605B, a bureau must block information that resulted from alleged identity theft within 4 business days of receiving your proof of identity, a copy of the identity theft report, identification of the information, and a statement that it is not yours (Fair Credit Reporting Act, 2026). Under Section 611, a bureau must delete an item that is inaccurate, incomplete or cannot be verified. The standard investigation window is generally 30 days, and timelines vary.

A deletion applies only to the bureau that made it. Each of the three needs its own letter, and each runs on its own clock.

This is where most people stall, because the letter has to be exact. CreditRefresh drafts an FCRA dispute letter for Equifax, Experian and TransUnion, citing the specific issue and statutory basis. You mail each letter yourself or send it through RushMail. For active fraud, though, the blocking route is usually the better first move.

Why do most identity theft disputes stall without the right letter?

Disputes stall when a letter is vague, leaves out the identity theft report or goes to only one bureau, so the item stays on the other two reports. A letter that names the account, states the fraud and attaches proof, sent to all three bureaus, is the one that gets investigated.

The CFPB’s 2024 supervisory highlights report that consumers frequently saw bureaus resolve disputes by accepting a furnisher’s word without independent validation, and saw identical inaccurate items reappear after removal (Consumer Financial Protection Bureau, 2024). A bare claim is easy to wave through. A claim backed by your FTC report is evidence the furnisher has to reckon with.

Many people have already tried a tool that did not deliver. In a 1-star Trustpilot review on September 7, 2026, a credit repair company or dispute tool reviewer wrote: “I’ve had a credit card for I don’t know 2 months now and they don’t know that somehow but they’re supposed to be the ones running your credit what a scam when I show up to my job I get it done”

If you paid and got nothing, that is a real loss, and it is not your fault. The fix is a specific letter to each bureau, with proof attached, that you read and sign yourself.

What does it cost to get a loan in my name removed?

Disputing a fraudulent account yourself costs nothing but your time. Credit-repair firms commonly charge $79 to $139 a month plus a setup fee, while a software tool like CreditRefresh is included in the $49.99-a-month Refresh Monitoring subscription with no setup fee, no per-dispute charge and no contract.

The FTC obtained a court order in March 2022 against Turbo Solutions Inc., which it said charged an illegal $1,500 upfront fee and filed fake identity-theft reports to justify disputing accurate negative items (Federal Trade Commission, 2022). Your report must be true. We never generate a letter pretending an accurate debt is disputable.

The only optional cost on our side is a small per-letter fee if you have RushMail print and mail a round instead of mailing it yourself. You can cancel anytime.

What should I do after the fraudulent loan is removed?

Keep checking all three reports, because a removed account can reappear and the thief may have opened others. Monitoring catches new accounts early, while the fraud alert or freeze you placed stays in force.

An extended fraud alert lasts 7 years, and on it you may request 2 free copies of your file during the first 12 months (Fair Credit Reporting Act, Section 605A, 2026). If a deleted item returns, confirm it is the same account, then dispute it again and cite the earlier deletion.

Check the file a cycle or two after closing. The account should show closed by you, with a zero balance. Many people use a monitoring tool for daily alerts and CreditRefresh for active work on reports.

What each credit-dispute option offers someone with a fraudulent loan

The table lists what each option charges, what it buys, how many bureaus it reaches and how users rate it on Trustpilot, so you can weigh them on the same facts.

ToolWhat you payWhat that buysBureausTrustpilot
CreditRefresh$49.99 a month via Refresh Monitoring; no setup fee; letters self-mailed free or RushMail per-letter feeSoftware you control; AI drafts letters, you review and sign; bundled with Refresh Monitoring subscriptionAll three4.6 (19 reviews)
Dispute BeastFree tool; Beast Credit Monitoring from $49.99/m; Sprint Mail extra per letter, or free self-mailSoftware the user controls (DIY AI app), bundled with paid monitoring requiredAll three4.2 (2091 reviews)
DisputeBee$49/mo Individual; $129/mo Business; cancel anytime; you mail letters yourselfSoftware you control to draft letters; Business tier adds unlimited clients, bulk letters, send-mail API, client portal, ZapierAll three3.2 (68 reviews)
The Credit People$99/month Standard; $119/month Premium; $599 for 6 months Premium Flat Rate; mailing fee not publishedFirm drafts and sends disputes for you; you do not draft, sign or mail letters; includes unlimited challenges and monthly report refreshesAll three1.7 (18 reviews)
Lexington Law$139.95/month, invoiced at end of each service period; 50% off first payment for veterans and active militaryAttorney-handled disputes by the firm, not software you control; attorney case setup after a free assessmentAll three3.2 (624 reviews)
Credit KarmaFree (monetized through lender referrals and ads)Monitoring and lender offers; Direct Dispute reaches TransUnion only, does not draft or mail lettersTransUnion1.1 (915 reviews)

Every price is that company’s own published rate, read off that company’s own site on September 15, 2026. Trustpilot scores and review counts as published on October 5, 2026.

Skip the paperwork. Start your dispute.

CreditRefresh drafts your FCRA dispute letter and tracks the 30-day investigation window. You review, approve, and send. You stay in control.

Get Started

How CreditRefresh turns a fraud dispute into three steps with letters you sign

The hardest step in a fraud dispute is writing a precise FCRA letter, and CreditRefresh takes you from report scan to letter generation to mailing in three steps, with nothing to learn and no training session. We scan your three reports, draft a letter for each bureau, and you review it, sign it, and mail it yourself or through RushMail for a small per-letter fee. That fee is billed by a separate mailing company and is not part of the refund.

Our rating is 4.6 on Trustpilot across 19 reviews written July 25 to October 5, 2026. We are software you control, not a credit-repair agency, so nothing goes out until you review and sign it. We generate a letter only when an item has grounds for dispute. The bureaus decide outcomes, scores depend on the rest of your file, and we promise no result.

We cover the dispute side of cleanup. The wider identity theft process, including police reports, fraud affidavits and escalation with creditors, takes more than software. Our guarantee is a refund promise tied to conditions, not a score promise: members who work the full program for twelve months and see none of their three bureau scores rise above the starting point can claim back every Refresh Monitoring payment. The conditions are at creditrefresh.ai/guarantee. CreditRefresh LLC is not a law firm and does not give legal advice.

Frequently Asked Questions

Can I dispute a loan I didn’t take out without a police report?

Section 605B asks for a copy of an identity theft report, which you create free at IdentityTheft.gov. The FTC report is the document the FCRA rights are built around (Fair Credit Reporting Act, 2026). A police report can add weight if a crime is to be prosecuted.

How long do credit bureaus have to investigate a dispute?

Bureaus generally have about 30 days from receiving a dispute, and timelines vary. The window can run 45 days if you add documents mid-investigation. The industry’s e-OSCAR system routes most disputes to the furnisher as a short coded form rather than a full review of your papers (Online Data Exchange), which is why attached proof matters.

Will a fraudulent loan hurt my credit score while I dispute it?

The report is what bureaus must fix, and a score follows the report. While a bureau investigates, the account can carry a note that it is disputed, and lenders can see it. Bureaus cannot penalize you for using your dispute rights, and no one can promise a score change.

Do I need a lawyer to remove a fraudulent loan from my credit report?

You can send these disputes yourself, free of charge. The FCRA also has private rights of action, and for lawsuits or judgments tied to the loan you should talk to an attorney. Filing deadlines run 2 years from discovery, capped at 5 years from the violation.

Do I have to send dispute letters to all three credit bureaus?

Yes, because a deletion applies only to the bureau that made it. CreditRefresh drafts FCRA dispute letters for Equifax, Experian and TransUnion, which you mail yourself or send through RushMail. Passive monitoring apps such as Credit Karma file disputes with one bureau only.

What happens to my dispute letters if I cancel CreditRefresh?

You can cancel anytime. If the cancel control cannot be used, email support@creditrefresh.ai from your account email with the request. Uploaded documents are retained under our privacy policy unless you ask us to delete them.

CreditRefresh drafts the FCRA dispute letters for a loan you never took out, one for each of the three bureaus, and you review and sign every one before it goes out.

Draft my fraud dispute letters →