Your FCRA rights as an identity theft victim
Identity theft victims get extra FCRA tools beyond normal disputes. With an FTC identity theft report you can require bureaus to block fraudulent information within 4 business days under Section 605B, place a free 7-year extended fraud alert, get fraud-related documents from businesses, and stop collectors from reporting debts that resulted from the theft.
The document everything depends on
Nearly every special right in this article requires an identity theft report, which you create at IdentityTheft.gov, the FTC's official site. It takes minutes, generates a recovery plan, and serves as the sworn documentation bureaus and businesses are required to honor. If the theft involved a crime you want prosecuted, a police report adds weight, but the FTC report is the document the FCRA rights are built around.
The Section 605B block
The standard dispute process gives a bureau 30 days. Section 605B is faster: once a bureau receives your identity theft report, proof of identity, and identification of the fraudulent items, it must block that information from your report within 4 business days and notify the furnishers. Blocked items cannot be sold to collectors or reported while blocked.
Fraud alerts and freezes
- Initial fraud alert: free, lasts one year, renewable, and requires only that you assert suspicion of fraud. Place it at one bureau and it must forward it to the other two.
- Extended fraud alert: free, lasts 7 years, requires an identity theft report. Lenders must contact you before opening new credit.
- Credit freeze: free, blocks new pulls entirely until you thaw it. Strongest prevention, though it also blocks your own applications and report refreshes.
Rights against businesses and collectors
Under FCRA Section 609(e), businesses where the thief opened accounts must give you the fraud-related records (applications, transaction data) within 30 days of a written request with your identity theft report. Collectors told a debt stems from identity theft have obligations too, and debts you did not incur are disputable everywhere they appear.
If active identity theft is still unfolding, contact support@creditrefresh.ai before running standard disputes; the blocking route above is usually the better first move.
Related articles
Identity theft happens when someone uses your personal information to open accounts or make purchases in your name. Signs on your report include unfamiliar accounts, hard inquiries you don't recognize, addresses you've never lived at, and collections for debts that aren't yours. Active theft requires filing an FTC report at IdentityTheft.gov, freezing your credit, and disputing fraudulent items.
A credit freeze blocks most new credit applications by preventing lenders from pulling your credit reports. It's free, federally protected, and the strongest single tool against identity-theft-driven new accounts. A freeze affects bureau pulls — including services like CreditRefresh — so frozen reports need to be temporarily thawed for scans and disputes.
If CreditRefresh cannot connect to a bureau, the usual cause is an identity check that did not pass: a mismatched name or address, security questions answered differently than the bureau has on file, or a credit freeze blocking the pull. Thaw any freeze, confirm your details exactly match your reports, and retry. If it still fails, email support@creditrefresh.ai.
When the standard dispute process has failed: a bureau missed the FCRA 30-day deadline, returned a clearly inadequate investigation, refused to investigate, or a furnisher keeps re-reporting a corrected item. The CFPB is an escalation tool — file at consumerfinance.gov/complaint after normal disputes haven't worked.