A sample identity theft dispute letter is a signed request that lists each fake account or charge and asks the company to block it, delete it, or reverse it. Attach proof. U.S. credit-reporting and electronic-transfer rules sit behind a lot of these letters, but this page is practical information, not legal advice.
Wondering if a phone call is enough? A call can start a bank claim. A letter with copies still gives you a paper trail.
A copy-paste sample identity theft dispute letter
Copy the block below and replace the brackets. Change the request so it fits a credit bureau, a bank, or a creditor. Don't put your full Social Security number in the letter.
[Your full name]
[Your mailing address]
[City, State ZIP]
[Phone]
[Email]
[Date]
[Fraud Department]
[Company name]
[Company mailing address]
Re: Identity theft dispute - [your full name], last four of SSN [XXXX]
Dear Fraud Department,
I am a victim of identity theft. I did not open, use, or authorize the accounts or charges below, and I am not responsible for them.
Please investigate and block or delete the following items:
- Creditor or bank: [name]
- Account number: [number]
- Date opened or charged: [date]
- Amount: [amount]
- Why it is fraudulent: [short reason]
I have enclosed copies of:
1. My FTC Identity Theft Report
2. A police report, if I filed one (report [number])
3. A government-issued photo ID
4. Proof of my current address
5. The statement or credit-report pages that show these items
Please send written confirmation of what you did, including an updated credit report if you are a consumer reporting agency. You can reach me at the phone number or email above.
Sincerely,
[Signature]
[Printed name]You list the fake card, then the collection that came after it, then maybe an inquiry you don't recognize, and if the letter rambles without account numbers the bureau has nothing concrete to block even if your story is true.
Documents that make the letter usable
Create an FTC Identity Theft Report at IdentityTheft.gov first. Credit bureaus lean on that report when you ask them to block identity-theft information.
A police report helps when a creditor demands one. It isn't always required.
Mail copies, never your only ID. Include a government photo ID and a recent proof of address, and black out extra numbers the company does not need. Leave the last four digits of your SSN only if that is how the company finds your file.
- FTC Identity Theft Report
- Police report, if you have one
- Copy of a photo ID
- Proof of address
- Pages that show the fraudulent items
- Your own complete photocopy of the whole packet
Bureaus, banks, and creditors need different packets
Thing is, one template cannot do three jobs.
Credit bureaus keep the files other companies pull. You ask Equifax, Experian, or TransUnion to investigate errors and, for identity theft, to block fake accounts, inquiries, or collections. A complete blocking request generally includes the Identity Theft Report, proof of identity, and a clear list of each fraudulent item.
Banks handle accounts you already have. That is where unauthorized electronic transfers and stolen debit cards belong. Creditors and collectors need notice that an account in your name is stolen, so they stop treating you as the borrower.
New accounts you never opened usually need both a bureau letter and a creditor letter. A drain on your real checking account is a bank claim first. Confirm the current mail address or online dispute path on the company's own site. This page does not print P.O. boxes, because those change.
Investigation clocks and electronic-transfer liability
Under the Fair Credit Reporting Act, a credit bureau generally has 30 days to investigate a dispute. Extra documents you send later can stretch that window. That 30 days is their clock, not a rule that you must dispute within 30 days of spotting the error.
Electronic transfers follow Regulation E. If an access device was lost or stolen, telling the institution within two business days after you learn about it limits your liability to the lesser of $50 or the unauthorized transfers that happened before notice. Wait past those two business days and the cap can rise, up to $500, for certain transfers before you notify the bank. There is also a 60-day period after the institution sends a statement that shows an unauthorized transfer. Miss that notice window, and you can be responsible for later transfers the bank shows would not have occurred if you had reported the problem in time. The rule text is 12 CFR 1005.6.
That bank timeline does not replace a credit-report block. Different mailbox. Different statute.
How the recipient changes the timeline
| Recipient | What you are asking | Timing that usually matters |
|---|---|---|
| Credit bureaus | Investigate and block fake report items | About 30 days to investigate, sometimes longer |
| Banks (electronic transfers) | Reverse unauthorized transfers and apply Reg E limits | Two-business-day and 60-day notice windows can change what you owe |
| Creditors or collectors | Stop treating a stolen account as yours | Company-specific; keep your own dates |
The table is a snapshot, not a promise any company will meet a date.
How to send the letter and what to keep
- Get your credit reports and mark each fraudulent line.
- Finish the Identity Theft Report and gather copies.
- Customize the sample letter. Sign a mailed version in ink.
- Send it with tracking, such as certified mail with a return receipt, or use the company's documented online dispute flow and save the confirmation.
- Write down the date. Follow up if the investigation window passes with silence.
Certified mail is not a federal ritual. It is delivery proof. Some banks want a phone or app claim the day you see a debit. Do that, then still keep the written packet.
If the item is still on the report
Keep the return receipt or the tracking screenshot. If a bureau or furnisher comes back and the fake account remains, write again and attach that result.
You can submit a complaint to the CFPB about credit reports, credit cards, debt collection, and similar products. The CFPB says the complaint goes through several steps, companies generally respond in 15 days, you can review that response, and you have 60 days to give feedback on it.
A fraud alert or a credit freeze is still worth placing once you know you are a victim. A freeze helps stop new credit. It will not erase an account already sitting on the file.
Turns out plenty of people freeze everything, exhale, and never send the dispute letter. The junk accounts stay.
Mistakes that slow these disputes
The usual collapse is a letter with no Identity Theft Report and no account numbers. Mailing your only driver's license is another way to turn a bad week into a worse one.
People also mash together a card they own and a card a thief opened. One is a billing or Regulation E problem on a real account. The other is an identity-theft block on a credit file. The wrong department will not fix the right problem.
Don't email a full SSN. Don't wait forever for a perfect police report if IdentityTheft.gov already gave you a report you can print.
Questions people ask before they mail
Do you need a police report? Not always. Many blocking requests run on the FTC Identity Theft Report plus ID. Some creditors still ask for a police report, so file one if you can.
Should you contact all three bureaus? Yes if the item shows on more than one report. They do not share one file.
Is email enough? Some companies take online disputes. Download the confirmation. For paper, tracking mail is the simple way to show the packet arrived.
This is not a state form kit. A few states run extra identity-theft steps through an attorney general. Use that office's own instructions if you want the state route.
Pull your reports at AnnualCreditReport.com and finish the Identity Theft Report the same day if you can. To be honest, the useful next hour is printing copies and getting the letter into tracked mail, not rereading templates.