Someone opened an account in your name. You don't have to file a regular credit dispute first. Turns out, the Fair Credit Reporting Act has a faster tool: the identity theft block in Section 605B. A credit bureau must block the fraudulent information within four business days after it gets a complete package. What goes in that package? Proof of who you are, an identity theft report, the exact fraudulent items, and your signed statement that the account isn't yours. Card and bank charges run on separate clocks. Handle those in parallel. This is the U.S. process.
What Section 605B Requires From the Credit Bureaus
The federal blocking rule is 15 U.S.C. 1681c-2. It sets a four-business-day deadline. The clock starts when the consumer reporting agency receives four specific items. If the agency declines or rescinds a block, it must notify you promptly. That notice matters.
A normal dispute under Section 611 is not the same. It usually opens a 30-day reinvestigation. The furnisher often has a major say in what happens. Section 605B is narrower. It also requires notices to furnishers to delete the fraudulent accounts.
The four items are proof of identity, a copy of an identity theft report, identification of the information to block, and a statement from you that the information is not related to any transaction you made. That last one is easy to forget. Add a clear request to block under Section 605B. Don't make the bureau guess.
A Regular Dispute Is Not the Same as an Identity Theft Block
Thing is, many victims send the wrong request. They file a Section 611 dispute. That starts a reinvestigation, usually with a 30-day clock. It can work. It's slower. It isn't the specialized block.
If the bureau treats your identity theft claim as a normal dispute, point to the statute. Ask for the block in writing. Keep that request in your file. Section 605B requires action in four business days and notices to furnishers. A standard dispute does not promise that path.
Step-by-Step: How to Dispute Identity Theft
- Get all three credit reports. Look for new accounts, hard inquiries, addresses, or collections you don't recognize. Save PDFs.
- Create an identity theft report. File at the FTC's IdentityTheft.gov and get the report or affidavit. A local police report helps too, especially if the bureau or creditor asks.
- Build one package per bureau. Include proof of identity, the identity theft report, a list of each fraudulent account, and the statement that you did not authorize it. Ask for a block under 15 U.S.C. 1681c-2.
- Send it in a way you can prove. Certified mail with return receipt is common. Keep copies of everything. If you use an online portal, save screenshots and confirmation numbers.
- Watch the four-business-day clock. If the bureau hasn't blocked the items, call and send a written follow-up. Ask for the reason in writing if it declines.
- Contact the creditor or bank. The bureau block handles your credit file. It doesn't always stop the underlying collection or charge dispute.
- Add a fraud alert or freeze. Under FCRA, a fraud alert placed with one bureau must be shared with the other two. A security freeze can stop new credit from being opened. Use each bureau's process.
Deadlines for Fraudulent Charges and Bank Transfers
Credit cards and debit cards don't follow the same rules. For credit card billing errors, the Fair Credit Billing Act generally requires written notice within 60 days after the statement with the error was sent. The creditor must acknowledge within 30 days. It must resolve within two billing cycles, up to 90 days.
Debit cards and electronic transfers fall under the Electronic Fund Transfer Act. That law is stricter. Report a lost card or PIN within two business days to cap liability at $50. If the card is still in your possession and an unauthorized transfer appears on a statement, report it within 60 days. The bank generally must investigate within 10 business days.
| Problem | Main rule | Key deadline |
|---|---|---|
| Identity theft account on credit report | FCRA Section 605B | Block within 4 business days after a complete request |
| Regular credit report error | FCRA Section 611 | Often 30 days |
| Credit card billing error | FCBA | Written notice within 60 days of the statement |
| Debit or electronic transfer | EFTA and Regulation E | Report promptly; 2 business days for lost card or PIN; 60 days after statement if card is in hand |
| CFPB complaint | CFPB process | Companies generally respond in 15 days; you have 60 days for feedback |
Documents to Keep in Your Identity Theft File
Keep a digital folder and a paper folder. You'll want a copy of your ID, a utility bill or other proof of address, the FTC identity theft report, any police report, account statements showing the fraud, and your written block request.
Don't send originals. Send copies by certified mail when the bureau's portal doesn't give you a receipt. Write the date you sent each package on your calendar. That date starts your proof trail.
How to Escalate If the Bureau Does Nothing
To be honest, some requests get ignored or mishandled. If you sent a complete 605B package and the bureau missed the four-business-day deadline, you have a paper trail. Send a second letter. Reference your first request and the statute. Then file a complaint with the CFPB.
The CFPB accepts credit report complaints. Companies generally respond within 15 days. You'll get email updates. You can check status. Attach proof of your 605B package, mailing receipts, and any bureau response. You have 60 days to give feedback after the company responds.
What to Do About Fraud Alerts and Credit Freezes
Contact one bureau to place a fraud alert. The bureau must notify the other two. Each must add the alert. A security freeze is stronger. It blocks most access to your credit file for new accounts. Request a freeze with each bureau.
The Experian credit bureau contact guide lists phone and mail options. Equifax and TransUnion have similar pages. A freeze doesn't remove fraudulent accounts. It just makes new fraud harder.
Common Mistakes That Slow Recovery
The biggest mistake is sending a normal dispute and calling it identity theft. Another is leaving out the statement that the account isn't yours. Some people send documents to the creditor but not the bureau. Others miss the 60-day charge window while waiting for the credit report block. And a CFPB complaint filed before a complete 605B package often gets a simple response: no record of the required documents. Fix those issues first, then escalate.
FAQ
How long does an identity theft block take?
Four business days after the bureau receives all required items. That's the statutory deadline under Section 605B.
Is a police report required for a credit report block?
The statute requires an identity theft report. An FTC identity theft report can qualify. A police report is often useful and sometimes requested, but check the exact documents the bureau says it needs.
Can I dispute fraudulent charges with the credit bureaus?
The bureaus handle the credit report tradelines. The bank or creditor handles the transaction dispute. You usually need to do both.
What if the bureau verifies the fraudulent account?
Ask for the block under Section 605B if you haven't already. If you sent a complete package, send a written follow-up and then consider a CFPB complaint.
This is general information, not legal advice. Start by pulling your reports. Write one clear block request per bureau. Keep the receipts. The four-day clock starts only after they get the right documents.