Am I legally responsible for debt from identity theft?

No. Under the Fair Credit Billing Act (FCBA) and the Fair Debt Collection Practices Act (FDCPA), you are not responsible for fraudulent accounts opened in your name. You must dispute the accounts in writing and file an FTC identity theft report.

How do I get fraudulent debt removed from my credit report?

File an identity theft report at IdentityTheft.gov, dispute the accounts with all three credit bureaus (Equifax, Experian, TransUnion), and send a debt validation letter to the debt collector. Credit bureaus must block fraudulent information within 4 business days of receiving your FTC report.

Can debt collectors contact me about identity theft debt?

Yes, initially — but once you provide proof of identity theft (FTC report), collectors must stop collecting on fraudulent debts. Under the FDCPA, they cannot continue to pursue debts they know are fraudulent.

Identity Theft Debt: How to Remove Fraudulent Accounts & Protect Your Credit

What Is Identity Theft Debt?

Identity theft debt occurs when someone uses your personal information — Social Security number, date of birth, address — to open credit cards, take out loans, or create utility accounts without your permission. The thief runs up the balance and disappears. The creditor then comes after you.

This is more common than most people realize. The FTC receives over 1.4 million identity theft reports per year. If you're seeing accounts on your credit report you don't recognize, or receiving collection calls for debts you never incurred, you may be a victim.

Warning Signs of Identity Theft Debt

Collection calls or letters for accounts you never opened
Unfamiliar accounts on your credit report (check all three bureaus)
Credit applications being denied unexpectedly
Bills arriving for services you didn't sign up for
Your credit score dropping for no apparent reason
IRS notice about income you didn't earn
Social Security benefits being claimed

Your Legal Rights as an Identity Theft Victim

1. Fair Credit Billing Act (FCBA)

Protects you from unauthorized credit card charges. Once you dispute a charge as fraudulent, the issuer must investigate and cannot collect the disputed amount during the investigation.

2. Fair Credit Reporting Act (FCRA)

Requires credit bureaus to block fraudulent information within 4 business days of receiving your identity theft report. Collectors cannot re-report information they know is the result of identity theft.

3. Fair Debt Collection Practices Act (FDCPA)

Once you provide proof of identity theft, debt collectors must stop collecting on fraudulent debts. Continuing to collect after receiving proof is an FDCPA violation, entitling you to up to $1,000 in statutory damages plus attorney's fees.

Step-by-Step: How to Remove Identity Theft Debt

Step 1: File an FTC Identity Theft Report (Required First)

Go to IdentityTheft.gov and create a free account. The FTC will generate an official Identity Theft Report — this is the legal document that triggers your rights under the FCRA and FDCPA. Download it and keep copies.

Step 2: Place a Fraud Alert or Credit Freeze

Contact any one bureau — they must notify the other two. A fraud alert (free, 1 year) requires creditors to verify your identity before opening new accounts. A credit freeze (free, permanent until lifted) completely blocks new credit applications. A freeze is stronger protection.

Equifax: 1-888-766-0008 or equifax.com
Experian: 1-888-397-3742 or experian.com
TransUnion: 1-800-680-7289 or transunion.com

Step 3: Get Your Free Credit Reports

Visit AnnualCreditReport.com to pull all three bureau reports. List every fraudulent account — you'll need this for your disputes. Look for: unknown accounts, inquiries from creditors you didn't apply to, and addresses you've never lived at.

Step 4: Dispute Fraudulent Accounts with Each Bureau

Send a dispute letter to each credit bureau where the fraudulent account appears. Include your FTC Identity Theft Report, a copy of your ID, and proof of address. Bureaus must block the fraudulent information within 4 business days and cannot re-add it without notifying you.

Step 5: Send a Debt Validation + Identity Theft Letter to Collectors

If a debt collector is contacting you about a fraudulent account, send them a certified letter disputing the debt and enclosing your FTC report. They must stop collection activity until they can verify the debt — and since it's fraudulent, they cannot verify it.

Step 6: File a Police Report (Optional but Helpful)

Some creditors and bureaus may also request a local police report. File one at your local police station or online if your jurisdiction allows it. Attach it to your dispute letters for stronger documentation.

Step 7: Follow Up and Escalate if Needed

Credit bureaus have 30 days to complete investigations. If they don't respond or refuse to remove legitimate identity theft accounts, file a complaint with the CFPB (ConsumerFinance.gov/complaint) and your state attorney general. You may also have grounds to sue under the FCRA.

Identity Theft Debt Dispute Letter Template

Send this by certified mail (return receipt requested) to each credit bureau and any debt collectors:

[Your Name] [Your Address] [City, State, ZIP] [Date] [Credit Bureau Name] [Bureau Address] RE: IDENTITY THEFT — Request to Block Fraudulent Information To Whom It May Concern: I am writing to dispute fraudulent information on my credit report resulting from identity theft. Under Section 605B of the Fair Credit Reporting Act, I request that you block the following fraudulent item(s) from my credit file: FRAUDULENT ACCOUNT(S): - [Creditor Name]: Account #[XXXX], Balance: $[Amount] - [Creditor Name]: Account #[XXXX], Balance: $[Amount] These accounts were opened without my knowledge or consent. I did not authorize these transactions and am not responsible for these debts. Enclosed: 1. Copy of my FTC Identity Theft Report (Report #[Number]) 2. Copy of my government-issued photo ID 3. Proof of my current address Under 15 U.S.C. § 1681c-2, you are required to block this information within 4 business days of receiving this notice. Please send written confirmation of the block to the address above. If you choose not to block this information, please provide a written explanation of the basis for that decision, as required by the FCRA. Sincerely, [Your Signature] [Your Printed Name] [Your SSN (last 4 digits only)]

Tip: Use our free demand letter generator to create a customized identity theft dispute letter in under 2 minutes.

What Happens After You Dispute?

Credit bureaus must:

Block fraudulent information within 4 business days of receiving your FTC report
Notify the furnisher (creditor or collector) of the block
Not re-add blocked information without notifying you in advance
Complete their investigation within 30 days (45 days if you provide additional info)

Debt collectors who receive your identity theft documentation must:

Stop collection activity immediately
Not sell, transfer, or place the debt with another collector
Not report the debt to credit bureaus
Notify the original creditor of your claim

Common Mistakes to Avoid

Never Pay Identity Theft Debt

Paying even a small amount on a fraudulent debt can be interpreted as acknowledging the debt is valid. This can restart the statute of limitations and make it harder to dispute. Do not pay — dispute.

Don't ignore collection calls — respond in writing immediately with your FTC report
Don't dispute online — send disputes by certified mail with return receipt for legal proof
Don't miss the deadlines — you have 60 days from receiving a credit card statement to dispute charges under the FCBA
Don't dispute everything at once casually — be specific about each fraudulent account
Don't forget all three bureaus — each bureau must be disputed separately

If a Creditor Sues You for Identity Theft Debt

This is rare but it happens. If you're served with a lawsuit for a debt you didn't incur:

Respond to the lawsuit — never ignore it. File an answer with the court within the deadline (usually 20-30 days).
Raise identity theft as a defense — attach your FTC report and police report to your answer.
Request discovery — demand the creditor produce the original application, signature, and ID used to open the account.
Consider a lawyer — many consumer protection attorneys offer free consultations and work on contingency for FDCPA/FCRA violations.

See our guide on what happens when debt collectors sue you and your debt validation rights for more detail.

Special Cases: Child Identity Theft & Deceased Relatives

Child Identity Theft

Children are prime targets because their credit files are blank. Signs include: your child receiving credit offers, debt collection calls in their name, or their SSN being rejected when applying for a student loan. Parents/guardians can dispute on behalf of minors and request a freeze on their child's credit file.

Deceased Relative's Identity

Thieves steal identities of recently deceased people from obituaries. If a creditor is pursuing you for a deceased family member's fraudulent debt, you are not responsible unless you co-signed the original account. Dispute the debt and provide a death certificate to the credit bureaus.

Resources for Identity Theft Victims

IdentityTheft.gov — FTC's official resource, free recovery plan
AnnualCreditReport.com — free weekly credit reports from all three bureaus
CFPB Complaint Portal — ConsumerFinance.gov/complaint
Social Security Administration — ssa.gov to report SSN misuse
State Attorney General — file state-level identity theft complaints

Free Tools to Fight Identity Theft Debt

Frequently Asked Questions

How long does it take to clear identity theft debt from my credit report?

Credit bureaus must block fraudulent information within 4 business days of receiving your FTC Identity Theft Report. Full investigation and confirmation typically takes 2-6 weeks. Complex cases involving multiple creditors may take 3-6 months to fully resolve.

Will identity theft hurt my credit score permanently?

No. Once fraudulent accounts are successfully removed, your credit score recovers to reflect only your legitimate history. There's no permanent record of being an identity theft victim that creditors can see.

What if the credit bureau refuses to remove a fraudulent account?

You can: (1) Submit a CFPB complaint, which often accelerates resolution; (2) Sue the bureau under the FCRA — courts have awarded $100-$1,000 per violation plus actual damages; (3) Contact a consumer protection attorney who specializes in FCRA cases.

Can I get damages from debt collectors who pursued identity theft debt?

Yes. If a collector continued pursuing you after you provided identity theft documentation, that's an FDCPA violation. You can sue for $1,000 in statutory damages per violation, actual damages, and attorney's fees — even if no actual harm occurred.