If a family member took out a loan in your name without your permission, that is identity theft under federal law, and you are not legally responsible for the debt once you document the fraud properly. The catch is that the paperwork required to clear your name, an FTC identity theft report and usually a police report, can expose the family member to criminal charges. That tension is real, but delay is the bigger risk. Every week the account stays open, it damages your credit, spawns collection activity, and gives the person who used your information a chance to open more accounts.
Lock Down Your Credit Today
Before anything else, stop new accounts from being opened. A relative who has your Social Security number, date of birth, and address can keep applying for credit until you block them.
Place a fraud alert with any one of the three credit bureaus, Equifax, Experian, or TransUnion. It is free, lasts a year, and requires lenders to take extra steps to verify your identity before approving new credit. The bureau you contact is legally required to notify the other two.1Office of the Law Revision Counsel. 15 USC 1681c-1 Identity Theft Prevention Fraud Alerts and Active Duty Alerts
A credit freeze is stronger. It blocks lenders from pulling your file at all, which means most applications get denied outright. Freezes are also free, but you have to contact each of the three bureaus separately. You can lift the freeze later when you want to apply for credit yourself.1Office of the Law Revision Counsel. 15 USC 1681c-1 Identity Theft Prevention Fraud Alerts and Active Duty Alerts
If you are worried the family member might also try to open a checking or savings account in your name, place a separate security freeze with ChexSystems, which most banks use to screen new account applications. You can request it online, by phone, or by mail.2ChexSystems. Security Freeze Information
File an Identity Theft Report With the FTC
Go to IdentityTheft.gov, the Federal Trade Commission’s site for identity theft victims, and file a report. You describe what happened, and the site generates a formal Identity Theft Report that functions as a sworn affidavit, plus a step-by-step recovery plan for your situation.3Federal Trade Commission. IdentityTheft.gov
That report is the document that unlocks your strongest legal protections, including the right to have the fraudulent account permanently blocked from your credit file. Save copies of everything. You will send them to creditors, credit bureaus, and law enforcement.
The Police Report
This is where most victims stall. Filing a police report against a relative feels like a point of no return. But without one, you are asking creditors and bureaus to take your word that the loan is not yours, and the federal blocking process becomes much harder to invoke.
Bring a government-issued photo ID, proof of your address, any evidence of the loan (statements, lender letters, credit report entries), and your FTC Identity Theft Report. Explain what happened plainly. Whether the officer opens an active investigation on the spot is a separate question from getting the report filed.
If You Do Not Want Criminal Prosecution
Filing a report is not the same as pressing charges. Prosecutors decide whether to pursue a case, and in family identity theft situations they often will not move forward unless the victim actively cooperates. You can file the report to document the fraud without pushing for an arrest.
Some victims try to avoid police entirely by contacting the lender directly and asking whether the account can be transferred to the family member under a written repayment agreement, or by using mediation. Those routes can work, but you give up the federal blocking protections that force credit bureaus to remove the account, and creditors are often less willing to cooperate without official documentation of the crime.
Dispute the Account and Get It Blocked
Once you have both reports, write to the lender’s fraud department, explain the account was opened through identity theft, and enclose copies. Send everything by certified mail with return receipt requested.
File disputes with all three credit bureaus too. Each has its own process, usually online and by mail. Submit your identity theft documentation with each dispute. Bureaus generally have 30 days to investigate.4Office of the Law Revision Counsel. 15 USC 1681i Procedure in Case of Disputed Accuracy
A standard dispute triggers an investigation that may or may not resolve in your favor. A fraud block under FCRA Section 605B is stronger. Once you give the bureau proof of your identity, a copy of your identity theft report, identification of the fraudulent account, and a statement that you did not authorize the transaction, the bureau must block that information from your file within four business days.5Office of the Law Revision Counsel. 15 U.S. Code 1681c-2 Block of Information Resulting From Identity Theft
A bureau can reverse the block only if it finds the block was requested in error, the request involved a material misrepresentation, or you actually received goods or money from the transaction. Otherwise the entry stays off your report permanently.5Office of the Law Revision Counsel. 15 U.S. Code 1681c-2 Block of Information Resulting From Identity Theft
You Do Not Owe the Debt
You are not on the hook for a loan you did not authorize. Federal law gives you two layers of protection that work together. The blocking provision removes the account from your credit report and eliminates the credit damage. And once a debt has been identified as identity theft through the blocking process, no one may sell it, transfer it, or place it with a collection agency.6GovInfo. Fair Credit Reporting Act 15 USC 1681 et seq If a collector contacts you about a debt you have already reported as identity theft, that collector is violating federal law.
These protections activate only when you file the reports and submit the disputes. If you do nothing, the debt sits on your report and creditors have no reason to treat it as fraud. One important boundary: if you voluntarily co-signed the loan, you share legal responsibility regardless of any private agreement between you and the family member. Co-signing is not identity theft.
Protect Your IRS Account
A relative with your Social Security number can also try to file a fraudulent tax return or claim benefits in your name. If you think your federal taxes could be affected, file IRS Form 14039, the Identity Theft Affidavit. It flags your IRS account so the agency watches for suspicious activity like a duplicate return. You can submit it through IdentityTheft.gov, or download the PDF and send it by fax or mail. The IRS does not require the form if your taxes have not been touched, but it is available as a precaution.7Internal Revenue Service. Form 14039 Identity Theft Affidavit
Watch for one more tax trap. If the lender eventually cancels the fraudulent loan, you might receive a Form 1099-C reporting the canceled amount as income. Lenders are not supposed to issue a 1099-C for debt from identity theft, since you never incurred the underlying obligation.8Internal Revenue Service. Instructions for Forms 1099-A and 1099-C If one shows up, contact the lender and ask them to correct it. Do not ignore it, because the IRS gets a copy and may expect you to report the income.
What the Family Member Could Be Charged With
Taking out a loan in someone else’s name is a serious crime, and several federal statutes may apply depending on how it was done.
- Bank fraud, using false information to obtain money from a financial institution, carries up to 30 years in prison and fines up to $1,000,000.9Office of the Law Revision Counsel. 18 U.S. Code 1344 Bank Fraud
- Identity theft, fraudulently using another person’s identifying information to obtain something of value, carries up to 15 years for most offenses, or up to 5 years for less serious cases.10Office of the Law Revision Counsel. 18 U.S. Code 1028 Fraud and Related Activity in Connection With Identification Documents
- Aggravated identity theft adds a mandatory two-year sentence, run consecutively, if the person used your identity during another felony such as bank fraud.11Office of the Law Revision Counsel. 18 USC 1028A Aggravated Identity Theft
State charges may apply too. In practice, first-time offenders who defrauded a family member often face lower-end outcomes, especially if they cooperate with repayment, but the statutory exposure is real.
Deadlines for Taking Legal Action
Under the Fair Credit Reporting Act, any lawsuit to enforce your rights, for instance if a bureau refuses to block fraudulent information or a creditor ignores your dispute, must be filed within two years of when you discovered the violation, or five years from when it occurred, whichever comes first.12Federal Trade Commission. Fair Credit Reporting Act
Criminal prosecution is the government’s decision, not yours, so there is no personal deadline there. But the sooner you file your police report and FTC report, the stronger your position. Delays make the fraud harder to prove, and creditors grow less sympathetic to disputes filed months after the account opened. If you just found out, start today.