Identity Theft Credit Dispute Letter (FCRA Section 605B Block)
Free identity theft dispute letter for the credit bureaus. With an FTC Identity Theft Report, FCRA 605B requires a block within 4 business days of receipt.
The short answer
An identity theft dispute letter asks a credit bureau to block accounts, inquiries and other information that resulted from identity theft. Under FCRA section 605B (15 U.S.C. 1681c-2), if you send proof of identity, an identity theft report such as the FTC report from IdentityTheft.gov, and a list of the fraudulent items, the bureau must block them within 4 business days of receiving your request. It is free and faster than a standard 30-day dispute.
- Section 605B (15 U.S.C. 1681c-2) requires a bureau to block identity theft information within 4 business days of receiving a complete request.
- A complete request has four parts: proof of identity, an identity theft report, the specific items, and your statement that they are not from your transactions.
- An FTC Identity Theft Report from IdentityTheft.gov counts as an identity theft report. A police report is optional in most cases.
- Place a fraud alert or a security freeze with each bureau. Both are free.
- Also notify each company where the fraud happened, since furnishers have separate duties when you send them an identity theft report.
If someone opened accounts, ran up balances or applied for credit in your name, you do not have to wait out a standard 30-day dispute. The FCRA gives identity theft victims a faster tool: a block under section 605B. This page gives you the letter, the documents to include, and the order of steps that gets it done.
When to use an identity theft dispute letter
Use this letter when information on your credit report came from identity theft. Examples:
- Credit cards, loans or utility accounts you never opened
- Collection accounts for debts you never owed
- Hard inquiries from applications someone else made in your name
- Addresses, phone numbers or employers that are not yours and are tied to the fraud
- Charges on a real account of yours that you did not make, if they caused late payments or balances on your report
When a different letter fits better
- The error is a mistake, not fraud. A wrong balance, a mixed file with a relative, or a late payment reported in error should go through the credit dispute letter. An identity theft report includes a statement made under penalty of law, so only file one for real identity theft.
- There is a single unknown inquiry and nothing else. The hard inquiry removal letter may be enough, although you should still check for new accounts.
- Someone you know used your information with your permission. That is not identity theft under the law, and the account may be your responsibility.
What the 605B block requires
Under 15 U.S.C. 1681c-2, a bureau must block the information within 4 business days after it receives all four of these:
- Appropriate proof of your identity
- A copy of an identity theft report
- Identification of the specific information that resulted from the theft
- Your statement that the information does not relate to any transaction you made
An FTC Identity Theft Report from IdentityTheft.gov counts as an identity theft report. The bureau must also promptly notify each company that furnished the blocked information.
Want a specialist to handle this for you?
We write and send the challenges, follow up with creditors, and track every bureau response. Plans from $79.99 a month with a 90-day money-back guarantee.
Identity theft dispute letter template
Send one letter to each bureau that shows fraudulent information. Replace every [BRACKET].
How to file your identity theft dispute
- Pull all three reports at AnnualCreditReport.com and list every account, inquiry and piece of personal information you do not recognize.
- Place a fraud alert or freeze. A fraud alert placed with one bureau is shared with the other two. An initial alert lasts one year, and an extended alert lasts 7 years if you have an identity theft report (15 U.S.C. 1681c-1). A security freeze must be placed with each bureau separately and is free.
- File your FTC Identity Theft Report at IdentityTheft.gov. Print or save the report and your recovery plan. Review it carefully, since it includes a statement that the information is true.
- Fill in one letter per bureau, listing only the items that appear on that bureau's report.
- Enclose copies of your ID, proof of address, the FTC report and your report with the items circled. Never send originals.
- Mail each letter by USPS Certified Mail with Return Receipt. The delivery date starts the 4-business-day clock.
- Contact each company where fraud occurred. Send them a copy of your FTC report and ask them to close the account and stop reporting it. Under 15 U.S.C. 1681g(e), you can also request the application and transaction records for the fraudulent account.
- Keep a log of every letter, call and response, with dates.
What happens after the bureau gets your letter
| When | What the law requires |
|---|---|
| Within 4 business days of receipt | The bureau blocks the identified information (1681c-2(a)) |
| Promptly after blocking | The bureau notifies each furnisher that the information may be from identity theft and has been blocked (1681c-2(b)) |
| If the bureau declines or rescinds | It must notify you, and it can do so only for error, misrepresentation, or if you received goods, services or money from the transaction (1681c-2(c)) |
| Once a furnisher gets your identity theft report | It may not furnish that information to any bureau unless it later learns the information is correct (1681s-2(a)(6)) |
If a bureau treats your request as a standard 30-day dispute instead of a 605B block, send a follow-up letter pointing to 15 U.S.C. 1681c-2 and the date it received your complete request. If the information is still not blocked, file a complaint with the CFPB. For serious cases, such as fraudulent tax returns, medical identity theft or criminal records in your name, consult an attorney for your situation.
Customize your identity theft letter
- Include your FTC Identity Theft Report number in the subject line
- List every fraudulent account, inquiry and personal detail on that bureau's report
- Copy company names and account numbers exactly as the report shows them
- Keep the statement that the items do not relate to any transaction you made
- Choose a fraud alert, an extended alert or a freeze confirmation
- Make sure all four required enclosures are in the envelope
- Sign, date and keep a full copy
Guides that go with this letter
For the full recovery plan, read repairing credit after identity theft. If you want to stop new accounts while you clean up, see what is a credit lock. For errors that are not fraud, use how to dispute negative items on your credit report. The FTC's identity theft guidance covers taxes, medical and government benefits fraud.
Credit Saint challenges items you believe are inaccurate with all three bureaus, including accounts that resulted from identity theft, and tracks each response. Plans start at $79.99 a month with a 90-day money-back guarantee. See how it works. You can always file an identity theft report and request a block yourself for free.
Frequently asked questions
What is the difference between a 605B block and a regular dispute?
A regular dispute under section 611 gives the bureau 30 days to investigate whether information is accurate. A 605B block applies only to identity theft, requires an identity theft report, and must be put in place within 4 business days of receipt. The block also stops the bureau from reporting the information while it stays in place.
Do I need a police report?
Usually not. An FTC Identity Theft Report created at IdentityTheft.gov qualifies as an identity theft report under the FCRA. Some creditors or situations may still ask for a police report, and it can help if the theft involves a known person or large losses.
Can a bureau refuse to block the information?
Yes, in limited cases. Under 15 U.S.C. 1681c-2(c), a bureau may decline or remove a block if it reasonably determines the request was made in error, was based on a misrepresentation, or that you received goods, services or money from the transaction. It must notify you if it does.
Should I freeze my credit after identity theft?
A security freeze is free and stops most new lenders from seeing your report, which blocks most new account fraud. You can lift it temporarily when you apply for credit. A fraud alert is another free option that tells lenders to verify your identity before opening an account.
What if the thief's account went to collections?
Send the collector a copy of your FTC report and tell it in writing that the debt resulted from identity theft. Under 15 U.S.C. 1681m(g), a collector that is notified must tell the creditor. Also include the collection in your 605B block request to the bureaus.
This article is for educational purposes and isn't legal advice. Credit Saint is a credit repair organization. Results vary, and no credit repair company can promise a specific outcome or score change.
Start your credit repair today
Plans from $79.99 a month. Every plan includes the 90-day money-back guarantee.