If a true-name fraud statement is on your credit report, federal law lets you force the credit bureau to remove the fraudulent account information entirely. The Fair Credit Reporting Act, at 15 U.S.C. ยง 1681c-2, requires each nationwide credit bureau to block identity-theft-related information within four business days of receiving a proper request.1Office of the Law Revision Counsel. 15 U.S. Code 1681c-2 – Block of Information Resulting From Identity Theft Once the block is in place, the unauthorized account, its payment history, and any collection activity attached to it drop off your file, and your score recalculates as if the account had never existed.
What True-Name Fraud Looks Like on Your Report
True-name fraud is identity theft in which someone uses your Social Security number, name, and date of birth to open brand-new accounts you never authorized. Because the accounts carry your real name, they appear on your credit report as legitimate debts, and late payments or defaults on them can wreck your score before you know they exist.2Department of Justice. Identity Theft and Identity Fraud This is different from account-takeover fraud, where a thief hijacks something you already have. Victims often first discover true-name fraud after a credit denial or a collection notice for a debt they never took on.
A Block Is Not the Same as a Fraud Alert or Freeze
Getting the right remedy depends on knowing what each one does. A fraud alert tells lenders to verify your identity before opening new credit, but it does nothing about accounts already on your report. A credit freeze prevents new credit inquiries. Only a block under Section 1681c-2 actually removes the fraudulent information already reporting. Most victims end up using more than one: a block to clean up the damage, an alert or freeze to prevent the next round, and monitoring to catch anything new.
A block is not necessarily permanent. Bureaus can decline or rescind one under specific conditions covered further down.
The Four Documents a Bureau Must Receive
The statute is specific about what starts the four-business-day clock. Your request must include all of the following:1Office of the Law Revision Counsel. 15 U.S. Code 1681c-2 – Block of Information Resulting From Identity Theft
- Proof of your identity. A copy of a government-issued ID such as a driver’s license or passport. Utility bills and similar documents may serve as supplemental identification under the CFPB’s regulations.3Consumer Financial Protection Bureau. 1022.123 Appropriate Proof of Identity
- An identity theft report. Under the FCRA’s definition, this is a report alleging identity theft that is either filed with a law enforcement agency or generated through the FTC’s IdentityTheft.gov portal. Filing a false report carries criminal penalties, which is what gives it legal weight.4Office of the Law Revision Counsel. 15 USC 1681a – Definitions, Rules of Construction
- A written list identifying the fraudulent accounts, with enough detail (account numbers, creditor names) for the bureau to find them on your file.
- A written statement that the identified information does not relate to any transaction you made or authorized.
The identity theft report is the piece that trips people up. You don’t strictly need both a police report and an FTC report. An Identity Theft Report generated at IdentityTheft.gov qualifies on its own because it meets the statutory requirements.5Federal Trade Commission. Report Identity Theft Filing a police report on top of that is still worth doing. It creates a separate law enforcement record that can help later if you have to fight collection attempts or prove the fraud in court.
Sending the Request to Each Bureau
Block requests do not propagate. You have to send the full package to Equifax, Experian, and TransUnion separately. That is different from fraud alerts, where notifying one bureau triggers automatic notice to the other two.6Consumer Financial Protection Bureau. What Do I Do if I Think I Have Been a Victim of Identity Theft?
Some bureaus accept block requests online or by phone. TransUnion, for example, allows online submissions through its dispute portal with document uploads. The safer route is certified mail with return receipt requested. The return receipt gives you a dated, signed record of exactly when the bureau received your package, and that date is what starts the four-business-day deadline. Keep copies of everything you send.
What the Bureau Must Do, and When
Once a bureau receives a complete request, it has four business days to block the fraudulent information from your file. It then must promptly notify the creditor or other company that furnished that information, telling the furnisher four things: the information may result from identity theft, an identity theft report has been filed, a block has been requested, and when the block takes effect.1Office of the Law Revision Counsel. 15 U.S. Code 1681c-2 – Block of Information Resulting From Identity Theft Missing that deadline puts the bureau in violation of the FCRA.
What the Creditor Must Do After the Notice
Once a creditor or debt collector is notified that information has been blocked as identity theft, it may not sell, transfer, or place the debt for collection.7Federal Trade Commission. Notice to Furnishers of Information This is the provision that stops the debt from being handed off from one collector to the next. The furnisher must also put reasonable procedures in place so the blocked information isn’t re-reported to any bureau. In practice that means flagging the account internally so automated systems don’t keep feeding the same fraudulent data back into your file.
Creditors sometimes claim they never received the bureau’s notice, which is one more reason to keep your own paper trail.
When a Bureau Can Decline or Rescind the Block
The protection is strong but not absolute. A bureau can decline to place a block, or rescind one already in place, if it reasonably determines that:1Office of the Law Revision Counsel. 15 U.S. Code 1681c-2 – Block of Information Resulting From Identity Theft
- The block was requested in error.
- You provided a material misrepresentation in your request.
- You actually received goods, services, or money from the transaction you’re calling fraudulent.
If a bureau rescinds a block, it must notify you promptly using the same process it follows when reinserting previously disputed information. It cannot quietly put the account back on your report. The statute also builds in a safeguard against circular reasoning: the mere fact that the information was in your file before the block was placed is not evidence you knew about or benefited from the transaction.
Pair the Block With a Fraud Alert
A block cleans up past damage; a fraud alert helps stop the next account from being opened. Anyone who suspects they are or will become a victim can request an initial fraud alert lasting one year, and a victim who has filed an identity theft report can request an extended alert lasting seven years. Both require lenders to take reasonable steps to verify your identity before extending new credit, and you only need to contact one of the three bureaus, which then notifies the other two. The extended alert also removes you from pre-screened credit and insurance offer lists for five years.8Office of the Law Revision Counsel. 15 U.S. Code 1681c-1 – Identity Theft Prevention, Fraud Alerts and Active Duty Alerts Service members on active duty can place a one-year active-duty alert that also removes them from unsolicited credit and insurance marketing lists for two years.9Military OneSource. FTC Active-Duty Fraud Alert More background on both tools is available from the FTC.10Federal Trade Commission. Credit Freezes and Fraud Alerts
If the Bureau or Creditor Ignores the Block
The FCRA gives you a private right to sue when a bureau misses the four-day deadline, when a bureau rescinds a block without proper grounds, or when a creditor keeps reporting or collecting on blocked information. Recoveries depend on whether the violation was negligent or willful.
For negligent noncompliance, you can recover your actual damages plus attorney’s fees and court costs. Actual damages cover things like credit denials, higher interest rates caused by the damaged score, or lost job opportunities from a botched background check.11Office of the Law Revision Counsel. 15 USC 1681o – Civil Liability for Negligent Noncompliance For willful noncompliance, you can recover either your actual damages or statutory damages between $100 and $1,000 per violation, whichever is greater, plus punitive damages and attorney’s fees.12Office of the Law Revision Counsel. 15 U.S. Code 1681n – Civil Liability for Willful Noncompliance
The fee-shifting provision is what makes these cases viable when actual damages are modest, because attorneys can take meritorious claims knowing the defendant pays fees if the claim succeeds. Courts have also treated emotional distress as compensable actual damages under the FCRA, though the distress has to be tied specifically to the violation rather than the underlying identity theft. Save denial letters, screenshots of collection calls, and any correspondence showing the bureau or creditor knew about the block. That documentation is what turns a frustrating experience into a viable claim.