Start with the place where the suspicious item appears. A fraudulent account on a credit report, an unauthorized bank transfer, and an unfamiliar credit-card charge are different problems with different deadlines.

Thing is, a purchase you made and regret is not automatically identity theft. It may call for a merchant return or a separate card dispute.

If a claim stalls, asks for sensitive information, or ends with a bare denial, pause before sending anything else. Verify contact details on a statement or official website, keep the original records, and use the process tied to the payment rail. This guidance is for U.S. consumers; account terms and state law may add requirements.

Name the dispute first

These clocks don't replace one another. First identify how the money moved.

Warning signs that call for a closer look

A warning sign is a reason to verify the process, not proof that a company violated the law. Slow down if you see one of these:

• You have no claim number, receipt, or usable way to confirm that the company received your dispute.
• An unverified caller, text, or email asks for your password, a one-time code, or your full Social Security number.
• A denial says only "insufficient evidence" or "verified," without naming the item, missing document, or result.
• New accounts, hard inquiries, or charges appear after you reported the theft or placed an alert.
• An item disappears and later returns without a clear explanation, or a bank reverses provisional credit without a final written result.
• The bureau, bank, and creditor give different receipt dates or keep sending you to another department.
• A recovery service promises guaranteed deletion, a guaranteed score increase, or a guaranteed refund in exchange for an upfront payment.

An official process may request secure identity documents. That is different from handing sensitive information to an unverified contact.

Build a paper trail before you escalate

Protect the account before arguing about the report. Then work through the records in an order that makes the next handoff easier.

1. Secure the account. Use the number printed on a statement or shown on the institution's official website. Ask whether other transfers are pending, whether the card or account should be replaced, and how to report additional suspicious activity. Change reused passwords and turn on multifactor authentication.

2. Document the identity theft. The CFPB's identity theft guidance directs consumers toward an FTC report and recovery plan. You can use IdentityTheft.gov to document what happened. If a bureau or creditor asks for a law-enforcement report, obtain one when available and save the incident number. Don't guess or add facts to make the report sound stronger.

3. Pull current records. Review your credit reports, bank statements, card statements, and email security notices. Write down when you first noticed each item and when you reported it.

4. Choose the right channel. For a fraudulent credit-report account, dispute the item with the credit bureau and the company that supplied the information. For an electronic transfer, use the bank's fraud or error-resolution channel. For a credit-card billing error, use the billing-inquiries address printed on the statement.

5. Log receipt, not just postage. Save the date sent, delivery confirmation, claim number, representative's name, and every response. A simple timeline can expose a missed handoff or an incorrect receipt date.

6. Check the result against the original problem. Removing an account may not remove a related balance or inquiry. Review each item separately.

Your evidence packet

Send copies, never originals. Provide identification or address documents only through a secure, official process that requests them.

• [ ] Account or transaction number, date, amount, and name shown on the record.
• [ ] A short statement saying you did not open, authorize, or receive the transaction.
• [ ] FTC Identity Theft Report and a law-enforcement report if requested or available.
• [ ] Credit-report page or statement with the disputed item clearly marked.
• [ ] Earlier letters, claim numbers, delivery proof, and company responses.
• [ ] Identification or address documents requested through the official process.

Use the identity-theft block for the right problem

Turns out, a generic credit-report dispute and an identity-theft block do different work.

For credit-report information that resulted from identity theft, the FCRA identity-theft block generally requires the credit bureau to block qualifying information within four business days after receiving a complete request. The clock starts only when the request includes what the law requires.

The request should identify each fraudulent item and include an identity-theft report. It should also state that the information does not relate to a transaction you made and ask for the item to be blocked. Use the bureau's secure process for any requested identity verification.

Name every account or collection item. A broad message saying only that your report is wrong may not tell the bureau what to block.

An FTC report helps document the theft, but don't assume it is the only material the bureau needs. If the bureau declines or rescinds the block, ask what was missing; the law requires notice of that decision.

If you opened the account but the balance, payment history, or dates are wrong, use an ordinary accuracy dispute instead. Calling a legitimate account identity theft can muddy the record.

Keep bank and card claims on separate tracks

One theft event can create several claims. Don't combine them into one all-purpose letter and assume the same deadline applies.

Debit cards, ACH, and other electronic transfers

Regulation E covers many unauthorized electronic fund transfers, including some debit-card, ACH, and ATM transactions. Coverage depends on how the transfer was made and the type of account involved, so contact the institution promptly through its official fraud or error-resolution channel.

Under the CFPB error-resolution rule, notice generally must reach the institution no later than 60 days after it sends the statement or provides the account record on which the alleged error first appears.

The institution generally must investigate and determine whether an error occurred within 10 business days. A permitted extension may trigger provisional-credit rules. If you report the error by phone, the institution may also require written confirmation within 10 business days.

An unfamiliar merchant name is not automatically an unauthorized transfer. If you made the purchase but the merchant failed to deliver, use a different dispute route.

Credit cards

Credit-card billing errors have their own notice process. Write the issuer within 60 days after the first statement showing the error was sent, and use the billing-inquiries address listed on the statement unless it gives the same address for payments.

The FTC's credit-card dispute guidance recommends stating the transaction date, amount, and reason you believe the charge was unauthorized. Keep a copy of the letter and proof that the issuer received it.

The issuer generally must acknowledge the complaint within 30 days, unless it has already resolved the problem, and resolve the dispute within 90 days. Continue paying amounts that aren't part of the dispute.

Read each clock from the receipt date

The date you mailed a notice may not be the date the company received it. Keep delivery proof and compare the receipt date with the rule that controls your claim.

Credit-report disputes: A credit bureau generally has 30 days to investigate. Certain situations allow up to 45 days. Repeated "under review" messages, no result by the applicable deadline, or a reset clock without an explanation calls for a written follow-up.

Bank electronic-transfer claims: The 10-business-day investigation period is separate from the credit-report deadline. An allowed extension may involve provisional credit and a later written decision.

Credit-card billing errors: The acknowledgment period and the resolution period are separate. A quick acknowledgment doesn't mean the investigation is finished.

If the claim is denied

To be honest, "insufficient evidence" tells you very little. Read the denial for a missing identity document, an incomplete theft report, an unclear account number, or a furnisher's response saying the account was verified.

Send a focused follow-up. Identify the exact item, explain what you did not authorize, attach the missing document, and include the earlier claim number. If the bureau says the account was verified, dispute the information with the furnisher too and ask the bureau what information it relied on.

A short letter can be direct:

Re: Dispute of account ending in [last four digits]

I did not open or authorize this account. I discovered it on [date].
Please investigate the account and correct or block the information as appropriate.
Attached are my identity-theft report, the report page showing the item,
and my earlier dispute confirmation.

Please send the result in writing.

Don't keep resending the same vague letter. The next submission should answer the stated reason for the denial.

Escalate with the record in hand

Give the company a clear chance to fix the problem through its official dispute or complaint channel. If it doesn't respond, gives an unexplained result, or continues reporting the item, consider a CFPB complaint involving a covered bank, card issuer, furnisher, or credit-reporting company.

Attach your timeline, dispute letters, delivery records, reports, statements, and denial. Ask for a specific remedy, such as an investigation, correction, block, or written explanation.

A complaint may prompt a response. It doesn't guarantee deletion, a refund, or a particular outcome.

The FTC report serves a different purpose. It documents the identity theft and provides a recovery plan; it doesn't replace the bureau's investigation or the bank's error-resolution process.

Questions consumers often ask

Is a denial itself a red flag?

No. A company can deny a claim after reviewing the evidence. The warning sign is a denial that doesn't identify the disputed item, explain the decision, or tell you what information was considered.

Does a fraud alert remove a fraudulent account?

No. A fraud alert asks businesses to take extra steps before extending credit. If you place one with a nationwide credit-reporting company, it must notify the other two. Initial and extended alerts are available, but an alert does not delete an account or settle a dispute.

Is an FTC Identity Theft Report always enough for a credit-report block?

Not necessarily. A block request must identify the information and state that the transaction wasn't yours. The bureau may also require the identity-theft report and secure identity verification.

Can a bank reverse provisional credit?

Yes. Provisional credit isn't always final. If the bank reverses it, review the written investigation result and compare it with the transaction, dates, and evidence you submitted.

Write down the discovery date and exact disputed item today. Choose the credit-report, electronic-transfer, or card track, send one complete notice through an official channel, and save the confirmation with a calendar reminder for the applicable deadline.