How to Remove Fraudulent Accounts From Your Credit Report

A fraudulent account is not simply an inaccurate balance or an old late payment you disagree with.

It is an account or other credit-file information created because someone used your identifying information without permission. That distinction matters because the Fair Credit Reporting Act gives identity-theft victims a specific blocking right that can be faster and stronger than the ordinary dispute process.

The goal is also broader than making a score rise. You want the fraudulent information blocked from consumer reports, the creditor’s records corrected, future furnishing stopped where the law applies, and any continuing misuse of your identity contained.

Fraudulent Account Removal at a Glance

First Confirm That the Account Really Resulted From Identity Theft

Do not use the identity-theft blocking process simply because an account name looks unfamiliar.

An unknown tradeline can have several explanations:

• a retail card reported under the issuing bank’s legal name;
• a loan transferred to a new servicer;
• a debt sold to a collector;
• a duplicate or ordinary reporting error;
• a mixed credit file involving another consumer; or
• actual identity theft.

The CFPB specifically warns that consumers may not recognize a creditor because the account is reported under a different business name. Before claiming fraud, compare the opening date, partial account number, balance, account type, addresses, and creditor contact information.

If the account belongs to another legitimate consumer because the bureau mixed files, use our mixed credit file guide. If the account is yours but a balance, late payment, or status is wrong, use the ordinary credit report dispute process.

Create an Identity Theft Report Through IdentityTheft.gov

For confirmed identity theft, the federal recovery process begins at IdentityTheft.gov.

The FTC describes IdentityTheft.gov as the federal government’s one-stop resource for reporting identity theft and building a recovery plan. The site can generate an Identity Theft Report that documents the fraud you reported.

That report is important because FCRA Section 605B specifically requires a copy of an identity theft report as part of the documentation used to request a block.

When completing the report, identify the affected accounts and companies accurately. Keep a copy of the finished report along with:

• the credit report showing the fraudulent account;
• account or reference numbers;
• letters or emails from the creditor;
• screenshots or statements showing the problem; and
• notes from calls with fraud departments.

If you discovered the theft through one of the warning signs covered in our identity theft warning signs guide, document the original clue as well.

What to Send Each Credit Reporting Company

Current CFPB guidance says an identity-theft victim seeking to block fraudulent report information should send the credit reporting company:

• an Identity Theft Report;
• proof of identity; and
• a letter identifying the fraudulent debts and information on the credit report.

FCRA Section 605B adds another required element: a statement that the identified information does not relate to a transaction by the consumer.

Be precise. Instead of saying only “remove fraud from my report,” identify each item by creditor name, partial account number, date, and any other details shown on the report.

IdentityTheft.gov publishes a sample credit-bureau letter specifically for this purpose. Use the current version rather than copying an old template from a credit-repair website.

The FCRA Four-Business-Day Block Is Different From a 30-Day Dispute

This is the central legal difference.

Under FCRA Section 605B, a consumer reporting agency generally must block reporting of identified identity-theft information no later than four business days after receiving the required documentation.

That is not the ordinary 30-day reinvestigation timeline used for most credit-report disputes.

The block prevents the fraudulent information from continuing to appear in the consumer report. It does not by itself mean that every internal record at the creditor has vanished or that every account-security problem has been resolved.

The CFPB also states that the bureau must notify the companies that furnished the blocked information that identity theft was reported.

Contact the Creditor or Furnisher Too

Cleaning the bureau file is only one side of the problem.

Contact the fraud department of the bank, card issuer, lender, collector, or other company connected with the fraudulent account. Explain that the account resulted from identity theft and ask the company to close or correct the account and stop treating you as the responsible borrower.

Federal law also addresses continued furnishing. Under 15 U.S.C. §1681s-2, when a consumer submits an identity theft report to a furnisher at the address the furnisher specifies for receiving such reports, the furnisher generally may not continue furnishing the alleged identity-theft information unless it later knows or is informed by the consumer that the information is correct.

Separately, federal law prohibits a person from selling, transferring for consideration, or placing for collection a debt after the person has been notified under the FCRA identity-theft blocking process that the debt resulted from identity theft, subject to statutory exceptions.

Current CFPB consumer guidance summarizes this by stating that once notified, creditors cannot turn identity-theft-related debts over to debt collectors.

You Can Request Records About the Fraudulent Application

Identity-theft victims have another useful FCRA right that is often overlooked.

Section 609(e) of the FCRA gives qualifying victims a right to obtain application and business transaction records relating to the fraudulent transaction from the business where the misuse occurred.

The FTC explains that these records can help show that the thief — not the victim — made the transaction and may help identify how the fraud happened.

Federal law generally requires the business to provide qualifying records within 30 days after receiving a proper written request and verifying the victim’s identity and identity-theft claim.

The records can include information such as:

• the fraudulent application;
• transaction records;
• contact details supplied by the applicant;
• delivery or account information; and
• other records controlled by the business that document the transaction.

The exact documentation required for a Section 609(e) request is defined by federal law, so follow the FTC’s current instructions rather than sending a generic dispute letter.

What If the Bureau Refuses or Removes the Block?

A four-business-day block is not unconditional.

The FCRA allows a consumer reporting agency to decline or rescind a block in specified circumstances, including when the agency reasonably determines that:

• the block was requested in error;
• the block was based on a material misrepresentation of fact by the consumer; or
• the consumer obtained possession of goods, services, or money as a result of the blocked transaction.

CFPB guidance states more simply that a bureau can refuse or remove a block if the information provided is not correct or the debt was not caused by identity theft.

If a legitimate identity-theft block is refused or reversed:

1. read the bureau’s explanation carefully;
2. check whether any required document was missing or inconsistent;
3. contact the creditor for records supporting the fraud claim;
4. correct factual errors in the Identity Theft Report if necessary;
5. resubmit a complete documented request when appropriate; and
6. consider a CFPB complaint if the credit reporting problem remains unresolved.

For a significant unresolved FCRA issue — especially one affecting a mortgage, employment, housing, or active collection — consultation with a consumer attorney can also be appropriate.

Protect Your Credit While the Fraudulent Account Is Being Fixed

Removing one fraudulent account does not stop a thief from trying again with the same stolen personal information.

Consider placing a security freeze with Equifax, Experian, and TransUnion. Current CFPB and FTC guidance says freezes are free and can make it harder for an identity thief to open additional credit accounts because prospective creditors generally cannot access the frozen file.

A freeze must be placed separately with each nationwide bureau.

A fraud alert works differently. An initial fraud alert lasts one year and tells creditors to take steps to verify your identity before extending new credit. When you place an initial alert with one nationwide bureau, that bureau must notify the other two.

For the tradeoffs, see Credit Freeze vs. Fraud Alert.

Also secure the accounts that may have enabled the theft — especially email, banking, mobile carrier, and any account using a compromised password or recovery method.

Verify the Cleanup on Every Affected Credit Report

Do not treat the first confirmation letter as the end of recovery.

Pull fresh reports and confirm that:

• the fraudulent tradeline no longer appears;
• related collection accounts are gone where they resulted from the same identity theft;
• fraudulent balances and late-payment history are no longer being reported;
• associated personal information that does not belong to you has been corrected where appropriate;
• no additional fraudulent accounts appeared while the case was being handled; and
• the problem is resolved at every bureau that previously reported it.

You can obtain the three nationwide reports using the process in Free Credit Reports: How to Get and Monitor Them.

Keep the before-and-after reports, Identity Theft Report, bureau correspondence, creditor letters, delivery confirmations, and case numbers together. If the fraudulent account later reappears, those records document the earlier identity-theft finding and block.

For the broader recovery sequence beyond credit reporting, use our Identity Theft Recovery Checklist.