Identity theft complaints work best when each filing has one job. If money is still moving or a new account is open, the first contact is the bank, card issuer, lender, or payment service that can lock it. After that, an FTC identity theft report creates a record and a recovery plan. Credit-bureau disputes, a police report, an IC3 complaint, and IRS steps come next only when the facts match.

No single complaint closes every fake account or guarantees a refund. The mix depends on the records involved: a credit account, bank transfer, debit card, online scam, tax return, medical bill, or stolen identification.

What to do before filing a complaint

Do these first if money is still leaving an account or someone may still have access:

  1. Contact the bank, card issuer, lender, or payment service immediately. Use the number on a statement or the back of your card, not a number from a suspicious message.
  2. Change exposed passwords and turn on multifactor authentication. Start with email, banking, payment, tax, and mobile-carrier accounts.
  3. Lock or replace compromised cards and accounts if the institution recommends it.
  4. Place a fraud alert or security freeze with the credit bureaus when new-account fraud or exposed Social Security information is involved. Follow each bureau's current instructions.
  5. Save evidence before deleting messages or closing accounts. Keep statements, emails, text messages, account notices, credit-report pages, screenshots, and confirmation numbers.
  6. Write a timeline. Note when you noticed the problem, what happened, whom you contacted, and what each organization told you.

The USA.gov identity theft guidance is a useful official starting point for the type of information that may have been misused and the agencies that may need notice.

Quick guide: which complaint should you file?

Situation Contact first Add these reports or documents What it does not do
Unauthorized debit, bank, or card transaction Bank or card issuer FTC report and transaction records An FTC report does not replace the bank's fraud claim
New loan, credit card, utility, or phone account Company that opened the account and the credit bureaus that list it FTC report, police report if available, and credit-report pages A credit bureau cannot close the lender's account
Phishing, online impersonation, or cyber-enabled theft Bank, payment service, or affected account provider IC3 complaint, FTC report, and screenshots IC3 is not a customer-service or refund process
Stolen driver's license or other identification Local police and the issuing agency FTC report and identity documents A police report does not automatically correct every record
Suspected tax-return identity theft IRS instructions for tax identity theft IRS notices and an IP PIN when appropriate An IP PIN does not remove fraudulent credit accounts

Match the paperwork to the recipient. Police officers need a factual incident statement, not a credit-dispute form. Bureaus need the exact account or inquiry. Banks need transaction details and the payment method.

FTC identity theft complaint: sample narrative

IdentityTheft.gov can create a record of the theft and a recovery plan. Start there or through the USA.gov identity theft guidance, then save a copy of the completed report and its reference number.

Draft from this example:

I am [full name] and I live in [city and state]. On [date], I discovered that
someone used my personal information without my permission.

The information involved was [Social Security number, driver's license,
account credentials, or other information]. The suspected activity includes:

- [Company and account type], opened or used on [date], amount [amount]
- [Unauthorized transaction], processed by [company] on [date], amount [amount]
- [Other account, bill, application, or notice]

I did not open, authorize, or benefit from these accounts or transactions.
I believe the information may have been obtained through [known breach,
phishing message, lost wallet, unknown source, or do not know].

I contacted [company or bank] on [date]. The reference number is [number],
if available. The effect on me includes [money lost, collection notice,
credit denial, tax notice, or other result].

I am reporting these facts so they can be documented and so I can follow
the recommended recovery steps.

Stay precise about what you know. If you don't know how the thief got your information, say so. Don't name a person or company without evidence, and don't put your full Social Security number in an ordinary letter or email. Give only what the verified recipient asks for, and generally redact all but the last four digits of account numbers on copies.

Police report and victim statement template

A police report can help establish a record, and a company may ask for one during a fraud review. Departments and states don't all accept identity-theft reports the same way. Use the local non-emergency or online process, and don't cite a state statute unless it actually applies where you live.

Bring or upload:

Police complaint letter example

[Your name]
[Mailing address]
[Phone number and email]
[Date]

[Police department or records unit]
[Address]

Subject: Identity theft victim statement

I am reporting the unauthorized use of my personal information. On [date],
I discovered [describe the account, transaction, application, or other event].

The affected company or institution is [name]. The account, application, or
transaction reference is [last four digits or other safe identifier]. The
amount involved is [amount], and the relevant dates are [dates].

I did not authorize this activity and did not receive any goods, services,
funds, or benefit from it. The suspected person is [unknown or information
supported by evidence]. The information I believe was misused is [type of
information].

I have notified [bank, lender, credit bureau, payment service, or other
organization] on [dates]. Their reference numbers are [numbers].

Enclosures include [FTC report, statements, credit-report pages, notices,
screenshots, and identification copies]. Please provide the report number
and a copy or instructions for obtaining the report, if available.

I certify that the facts above are accurate to the best of my knowledge.

[Signature]
[Printed name]

The department may send you to another jurisdiction or a specific form. Follow those instructions, and write down the employee's name, the date, and any incident number.

Credit bureau dispute letter for a fraudulent account

Send a separate dispute to each credit bureau that reports the fraudulent account, inquiry, address, or collection entry. A correction at one bureau doesn't necessarily update the other two.

The FTC's credit-report dispute guidance explains current dispute options and supporting information. Use the bureau's current online or mailing instructions rather than an old address copied from another letter.

[Your name]
[Current address]
[Date]

[Credit bureau's current dispute address or online dispute submission]

Subject: Dispute of identity-theft information on my credit report

I dispute the following information on my credit report:

Company: [name]
Account or inquiry: [last four digits or reference]
Date opened or reported: [date]
Amount shown: [amount]

This account or inquiry is not mine. I did not apply for, authorize, use,
or benefit from it. It resulted from identity theft.

Please investigate this item and correct, remove, or block it as applicable.
Please send me the result of your investigation and an updated copy of my
credit report if the information changes.

Enclosures:
- Copy of the relevant credit-report page with the item marked
- Copy of my identification, if required
- Proof of address, if required
- FTC identity theft report
- Police report or creditor correspondence, if available

Please contact me at [phone or email] if additional information is needed.

Sincerely,

[Signature]
[Printed name]

Send copies, not originals. If you dispute online, save the confirmation page and a copy of every file you uploaded. If you mail the dispute, keep the letter, enclosures, and delivery record.

A credit-report dispute is for information that is inaccurate or does not belong to you. It isn't a request to erase accurate negative information just because it hurts your credit. Also notify the lender, collector, or company that supplied the item; the bureau and the furnisher have different roles.

Creditor, bank, and card issuer complaint template

The bank or card issuer handles the underlying transaction or account. Contact it even if you already filed an FTC or police report, and don't hold that notice until a police report comes back.

Identify the payment rail clearly:

Use this letter or secure-message draft:

[Your name]
[Address]
[Date]

[Bank, card issuer, lender, or payment service]
[Fraud or dispute department]

Subject: Unauthorized transaction or account caused by identity theft

I am reporting activity that I did not authorize:

Account: [last four digits]
Transaction or account reference: [reference]
Date or date range: [date]
Amount: [amount]
Payment method: [credit card, debit card, ACH, wire, P2P, or new account]

I did not authorize this transaction or open this account. I have secured my
account by [changing credentials, locking the card, or other action].

Please open a fraud case, tell me which forms or documents you require, and
provide a case number. Please also explain any account closure, replacement,
payment-reversal, credit-reporting, or written-statement steps that apply.

I request correction of the account records and any refund or reversal
available under the applicable account agreement and law. I have enclosed
[statements, notices, FTC report, police report, and other evidence].

Sincerely,

[Signature]
[Printed name]

Ask about deadlines for written disputes. Keep paying any amount that isn't part of the dispute unless the issuer tells you otherwise, and check later statements for new activity.

Identity theft affidavit or sworn statement sample

Some lenders and creditors use their own identity theft affidavit. Use the company's form when it provides one; a generic statement may not satisfy its requirements. Notarization also varies, so don't pay for it unless the recipient asks.

Identity Theft Declaration

I, [full name], state the following:

1. I am the person identified in the attached documents.
2. On [date], I learned that [describe the fraudulent account, application,
   transaction, bill, or record].
3. I did not open, authorize, use, or benefit from that activity.
4. The company involved is [name], and the account or reference ends in
   [last four digits].
5. The relevant dates and amounts are [list them].
6. I notified [company, bank, credit bureau, police, or FTC] on [dates].
7. The attached documents are true copies of records supporting this statement.

I declare that the information above is true and correct to the best of my
knowledge.

[Signature]
[Printed name]
[Date]

Avoid guessing. If an item is unfamiliar but you can't yet confirm it's fraudulent, describe it as "unrecognized" and ask the company for records.

IC3 complaint for online identity theft

The FBI's Internet Crime Complaint Center, or IC3, is for cyber-enabled crime such as phishing, online impersonation, account takeover, and internet-based theft. File through the official IC3 complaint form.

Gather these details before starting:

IC3 narrative example

On [date], I received [email, text, call, or online message] from
[identifier]. The sender claimed to represent [company or person] and directed
me to [website, phone number, or account].

I entered or disclosed [type of information] after following the instructions.
I later learned that [describe the unauthorized account, account takeover,
transaction, or other result].

The related payment or loss was [amount] through [payment method] on [date].
The receiving account, transaction ID, website, email, or phone number is
[details]. I notified [bank, platform, or company] on [date], case number
[number].

The suspect information and supporting files are included where available.

You don't need to pick a criminal statute. Describe what happened, keep the original evidence, and give identifiers investigators can use. The FBI's cyber guidance says IC3 reports are shared with law-enforcement partners. IC3 also warns that it receives a large volume of complaints and may not respond directly to every person, so an IC3 filing doesn't replace a bank fraud claim or a request for recovery.

Tax-related identity theft and IRS IP PINs

Use the IRS process when someone may have filed a tax return using your information, claimed income that isn't yours, or otherwise interfered with your federal tax records. Keep every IRS notice and follow the instructions on that notice.

An Identity Protection PIN is a separate preventive tool, not a police report or credit dispute. The IRS says the PIN is used on Forms 1040, 1040-NR, 1040-PR, 1040-SR, and 1040-SS. Correct PINs must be entered on electronic and paper returns to avoid rejection or delay. The PIN is known only to you and the IRS.

Review the IRS's IP PIN instructions for identity-verification and delivery details. If you were assigned a PIN but lost it or did not receive the notice, use the IRS lost or missing IP PIN guidance.

Don't put your IP PIN in a police report, credit bureau letter, email, or other document unless the IRS specifically directs you to do so.

Build one evidence packet

A well-organized packet makes follow-up questions easier to answer without sending inconsistent details.

Section Include
Timeline Discovery date, transaction dates, calls, disputes, and responses
Account list Company, account type, last four digits, opening date, amount, and status
Identity documents Redacted copies of identification and proof of address when requested
Financial records Statements, transaction confirmations, collection letters, and loan notices
Digital evidence Original emails, message headers when available, screenshots, phone numbers, and web addresses
Filing records FTC report, police report, IC3 confirmation, IRS notices, and case numbers
Follow-up log Contact name, department, date, method, promised action, and next deadline

Use the same dates and account details in every complaint. Mark the fraudulent item clearly, but don't alter the original document. Keep a private unredacted copy in a secure location and send only what the recipient needs.

Illustrative filing timeline

This example is fictional. It only shows how the reports can fit together:

The sequence can change. For an active bank loss, the bank comes first. For tax identity theft, follow the IRS notice promptly. For a stolen license, also contact the issuing state agency.

Common mistakes to avoid

Frequently asked questions

Is an FTC identity theft report enough to fix my credit?

Usually not. Use it as supporting documentation, then dispute each fraudulent item with the credit bureaus and the company that supplied the information.

Should I file a police report for every identity theft case?

Not necessarily. A police report can be useful or requested by a creditor, but local procedures and jurisdiction rules vary. File one when the department accepts the report, the circumstances call for law-enforcement involvement, or a company asks for it.

Is an IC3 complaint the same as an FTC complaint?

No. IC3 focuses on cyber-enabled crime and shares reports with law-enforcement partners. The FTC report supports identity-theft recovery steps. Neither replaces a bank or card issuer's transaction-dispute process.

Can I use a generic affidavit instead of a company's form?

Ask the company first. Many organizations have their own affidavit or identity-theft form and may require specific attachments or a signature format.

Call the bank, card issuer, lender, or payment service that can stop the immediate loss and get a case number. File the FTC report next, save the reference number, and send the matching dispute or affidavit only to the bureau, creditor, police department, IC3, or IRS unit that still needs it.