Skip to main content

Identity Theft Recovery: How to Clean Up Your Credit Report

A step-by-step recovery plan for credit identity theft — FTC reports, fraud alerts, blocking fraudulent tradelines under FCRA 605B, and what to keep on file.

August 5, 202610 min read

Credit identity theft is one of the few situations where federal law gives you a fast, specific remedy instead of a general dispute right. Section 605B of the Fair Credit Reporting Act requires a credit bureau to block information that resulted from identity theft within four business days of receiving your identity theft report, your identification, and your statement that the information is not yours. The work is in assembling that package correctly.

Nothing here is legal advice, and none of it removes accurate debts you actually owe. It is the standard recovery sequence recommended by the FTC and the CFPB, organized so you can work it in order.

Step 1 — Place a fraud alert the same day

Call or file online with any one of the three bureaus; that bureau is required to notify the other two. An initial fraud alert is free, lasts one year, and requires lenders to take reasonable steps to verify your identity before opening new credit. If you already have an FTC identity theft report, you qualify for an extended alert that lasts seven years.

Step 2 — File an FTC Identity Theft Report at IdentityTheft.gov

This is the document everything else depends on. IdentityTheft.gov walks you through a sworn statement and generates both an Identity Theft Report and a personalized recovery plan with pre-filled letters. Keep the PDF — bureaus, creditors and collectors will all ask for it.

  • List every account and inquiry you believe is fraudulent, with the creditor name and approximate date.
  • Download the completed report and save the report number somewhere you can find it in a year.
  • File a police report as well if a creditor requires one or if you know the identity of the thief.

Step 3 — Freeze your credit at all three bureaus

A security freeze is free by law, blocks new credit from being opened in your name, and does not affect your existing accounts or your score. Freeze Equifax, Experian and TransUnion separately, store each PIN, and thaw temporarily when you apply for something. A freeze is the durable protection; a fraud alert is the fast one.

Step 4 — Block the fraudulent items under FCRA 605B

A 605B block is stronger than an ordinary dispute: rather than asking the bureau to investigate, you are invoking a statutory duty to block. Send each bureau a package containing:

  • A copy of your FTC Identity Theft Report.
  • Proof of identity — government ID plus a utility bill or bank statement showing your current address.
  • A clear list identifying each fraudulent account, tradeline or inquiry by creditor name and account number.
  • A statement that the information does not relate to any transaction you made or authorized.

Send by certified mail with return receipt and keep a complete copy of what you sent. A bureau may decline or rescind a block only in narrow circumstances, such as a material misrepresentation or information you actually benefited from.

Step 5 — Notify each furnisher directly

Blocking at the bureau does not close the fraudulent account. Write the creditor or collector too, attach the same identity theft report, request that they stop reporting the account and cease collection, and ask in writing for copies of the application and transaction records — FCRA section 609(e) entitles an identity theft victim to those documents.

Step 6 — Watch the follow-through for a year

  • Pull all three reports again 30 and 90 days after the block to confirm nothing reappeared.
  • Resold debt is the usual cause of a reappearance — send the same package to the new collector.
  • Use your free weekly reports at AnnualCreditReport.com rather than paying for monitoring you may not need.
  • Keep the entire paper trail for at least seven years.

Where CredFixAI™ fits

CredFixAI™ helps you inventory the affected tradelines, keeps the letters and evidence organized in one case file, and tracks the response deadlines so nothing quietly expires. You review every letter before it goes out. We are software, not a credit repair organization or a law firm, and no tool can promise a particular score outcome.

Frequently asked questions

Is an FTC Identity Theft Report the same as a police report?
No. The FTC report is a sworn statement you file at IdentityTheft.gov and is what the FCRA's block provisions rely on. Some creditors additionally ask for a police report, so file one if requested.
How fast does a 605B block have to happen?
Once a bureau receives your identity theft report, proof of identity and your statement, it generally must block the identified information within four business days and notify the furnisher.
Does freezing my credit hurt my score?
No. A freeze restricts access to your report for new credit. It does not change your score or affect accounts you already have.

See where your credit stands

Review your report, get a prioritized readiness plan, and draft compliant dispute letters you approve before anything is sent. Free to start.

Educational information, not legal or financial advice. No outcome is guaranteed.

Related articles