If someone used your name to open credit, drain a debit card, or file a tax return, don't start by polishing a letter. Start with an official identity theft report.

IdentityTheft.gov is the FTC site the CFPB tells consumers to use. It builds an Identity Theft Report and a recovery plan. Save that PDF.

Do you still need letters to the police, your bank, or a credit bureau? Yes, when you need an account closed, fake items blocked, or a dated request a phone call cannot prove.

Thing is, a template without that report is just stationery.

What actually controls these complaints

U.S. identity theft is not one form and not one mailbox. The FTC report is the hub most creditors already recognize.

Credit reporting companies follow the Fair Credit Reporting Act, which covers fraud alerts, credit freezes, and a four-business-day block of fraudulent items after you send a complete package. Bank electronic transfers follow Regulation E. Tax cases follow IRS rules, including when to file an Identity Theft Affidavit.

A police report can help, but it does not replace the FTC report. Some departments refuse these cases.

None of this is legal advice. It's the workflow agencies already publish.

File these items before you mail a stack of letters

Work in this order. Attach something real to each letter.

1. Complete the process at IdentityTheft.gov and save the Identity Theft Report.
2. Review your credit reports and list every account or inquiry you did not authorize.
3. Place a fraud alert with Equifax, Experian, or TransUnion. One nationwide bureau must notify the other two.
4. Freeze your credit at all three bureaus if you want to stop most new accounts.
5. Call each bank, card issuer, or lender tied to the fraud, then follow up in writing.
6. Request a local police report if the department will take one, and get the report number.
7. Use IRS, Social Security, or state DMV channels only when a tax return, benefit, or license is involved.

Note dates, names, and confirmation numbers. Keep copies of what you send.

A sample identity theft complaint letter you can customize

Here's a letter you can copy. Replace every bracket. Attach the FTC report. Send one letter per company, not one letter to "all creditors."

[Your full name]
[Street address]
[City, State ZIP]
[Email]
[Phone]
[Date]

[Recipient name or Fraud Department]
[Company or agency name]
[Mailing address]

Re: Identity theft complaint - [your full name], [last 4 of SSN or account number]

Dear Fraud Department:

I am a victim of identity theft. Someone used my personal information without my permission.

Victim details:
- Full name: [name]
- Date of birth: [date]
- Last 4 of SSN: [xxxx]
- Current address: [address]

What I found:
- Date I discovered the theft: [date]
- Fraudulent activity: [unauthorized card, loan, tax return, or inquiry, with dates]
- Accounts that are not mine: [creditor names and account numbers if you have them]

I have enclosed my FTC Identity Theft Report [report number, if shown]. I also enclose a copy of my government ID and [credit report pages / statements].

I request that you:
[close the account / block the fraudulent items / issue a police report number / place a fraud alert / send written confirmation]

The information in this letter is true to the best of my knowledge.

Sincerely,
[Signature]
[Printed name]

Enclosures: FTC Identity Theft Report; copy of ID; [other documents]

Last four digits of your SSN are enough for most cover letters. Use the full number only when an official form or the company's current instructions require it.

If a government form exists, use that form. The letter is a cover sheet, not a substitute for Form 14039 or a bureau freeze page.

When a police report is worth the trip

Ask your local department if it will take an identity theft report, and go in person if you can. You want the report number for later bureau steps, not a long narrative about the crime.

Fraud alerts, freezes, and the four-day block

People treat a fraud alert, a freeze, and a block as the same request. They aren't.

An initial fraud alert lasts one year. You contact one nationwide credit reporting company, and it must tell the others. An extended alert is available when you have an identity theft report. Experian's fraud alert page also notes extra file disclosures that come with those alerts.

A freeze is a separate step at each bureau. It is the stronger brake on new credit being opened in your name.

Turns out the fastest bureau tool is not a generic "please investigate" dispute. Under 15 U.S.C. 1681c-2, a consumer reporting agency must block identity-theft information no later than four business days after it receives a complete package. That package is proof of identity, an identity theft report, the fraudulent items identified, and your statement that those transactions are not yours.

Skip one piece and the bureau can wait. Use the current portal or mailing address on each bureau's own site.

What to put in a bank or card letter

Call the fraud number on the card or statement first. Then write.

If you're staring at a credit report with accounts you don't recognize, the instinct is to call everyone in one afternoon and then forget who promised what, which is how people lose the thread, because a verbal "we'll look into it" is not the same as a dated letter with the FTC report attached, and you'll want that dated letter when a bank asks again in three weeks.

Name the account. List dates and amounts that are not yours. Attach the FTC report. Ask the bank to close the compromised account, reverse unauthorized charges, and confirm in writing.

Debit cards are not credit cards. Regulation E ties some liability to how fast you report a lost or stolen access device. If you wait more than two business days after you learn that device was lost or stolen, your liability can rise, with a $500 cap in that window. Report the fraud anyway. Waiting helps the thief.

A bank letter can reuse the header above, then say you want the account closed, the listed charges reversed, and written confirmation. Put the charges in a simple list of dates, merchants, and amounts.

Tax returns, benefits, and driver's licenses

Tax identity theft is not a bank dispute. The IRS says to consider Form 14039 when you believe someone used your information to file a fraudulent return. You can complete it online or mail or fax the paper form.

If the IRS already sent Letter 5071C, 4883C, or 5747C, follow that letter first. Those letters ask you to verify your identity.

You'll send the same facts more than once, the same facts to the IRS and then to a bureau, and that repetition is annoying, but it's how the records get matched.

For benefits fraud, contact the Social Security Administration through its official channels. For a license issued in your name, call your state DMV. State rules differ. The FTC report still helps.

How to send it so you can prove it

Email screenshots are weak proof. A portal receipt or certified-mail stub is easier to produce later.

You don't need certified mail for IdentityTheft.gov. You do want proof for any company that later says it never heard from you.

What usually stalls a complaint

Missing attachments stall more files than clumsy wording. If the FTC report, a copy of your ID, and the account list are not included, many fraud teams will not act.

To be honest, people also wait too long to freeze credit while they hunt for a perfect police report. Freeze first. The police report can follow.

Other friction: one letter addressed to all three bureaus, no dates on the fake charges, a full SSN in unsecured email, and no check-in after a few weeks. First-class mail with no tracking is hard to prove.

If a bureau declines a block after a complete package, keep the dated copy you sent. The statute requires notice when a block is declined or later pulled off.

FAQ

Do I need a police report before I use an FTC Identity Theft Report? No. The FTC report stands on its own for many creditor and bureau steps. A police report can still help if the department will take the case.

Can I email the sample letter to my bank? Some banks accept a scan through a fraud portal. For a paper-only creditor, use the address on its official site and keep proof of delivery.

Open IdentityTheft.gov today, save the report, and place the fraud alert. Then send the customized letter to the first bank that still shows an account you didn't open.