The four-business-day identity theft block

If the problem is that an account or a debt is not yours because someone else opened or used it, there is a route that does not run on the thirty-day reinvestigation clock. It runs on four business days.

The rule

15 U.S.C. § 1681c-2(a):

A consumer reporting agency shall block the reporting of any information in the file of a consumer that the consumer identifies as information that resulted from an alleged identity theft, not later than 4 business days after the date of receipt by such agency of— (1) appropriate proof of the identity of the consumer; (2) a copy of an identity theft report; (3) the identification of such information by the consumer; and (4) a statement by the consumer that the information is not information relating to any transaction by the consumer.

Four business days. But read the trigger: the clock starts on receipt of all four. An incomplete submission does not start a short clock; it starts nothing. Three of four is not three-quarters of the way there.

The four, one at a time

Proof of identity. What the agency requires, typically documentary.

A copy of an identity theft report. This is a defined term in the Act, and it is the piece that most often goes wrong. Not every document a person thinks of as a police report satisfies the definition, and the definition — not the label on the paperwork — controls. The FTC’s IdentityTheft.gov is the government’s route for generating a report and a recovery plan. We deliberately do not tell you that any particular document will qualify in your situation. That is a legal judgment about your facts, and it is one of the better reasons on this site to talk to a lawyer.

Identification of the information. Which items. Specifically — account by account, item by item.

A statement that it is not information relating to any transaction by the consumer. An affirmative statement from you. Note the breadth of “any transaction by the consumer,” and note that you are making it in writing.

The furnisher gets told

Section 1681c-2(b) requires the agency to promptly notify the furnisher of information identified under subsection (a):

(1) that the information may be a result of identity theft; (2) that an identity theft report has been filed; (3) that a block has been requested under this section; and (4) of the effective dates of the block.

So a block is not a quiet edit to your file. The company that reported the item is told, and told that an identity theft report has been filed.

A block can be declined or undone

Section 1681c-2(c):

A consumer reporting agency may decline to block, or may rescind any block, of information relating to a consumer under this section, if the consumer reporting agency reasonably determines that— (A) the information was blocked in error or a block was requested by the consumer in error; (B) the information was blocked, or a block was requested by the consumer, on the basis of a material misrepresentation of fact by the consumer relevant to the request to block; or (C) the consumer obtained possession of goods, services, or money as a result of the blocked transaction or transactions.

Subparagraph (B) deserves a sentence of its own. This route requires you to make written statements, sometimes under penalty of perjury, in a document that goes to law enforcement and to the furnisher. A material misrepresentation is grounds to rescind the block, and the consequences of a false identity theft report are not limited to the credit file.

That is why this is the one route on this site we treat differently. If an account is genuinely not yours, this is a strong and fast provision written for exactly that situation. If the facts are complicated — a family member, a former partner, an account you knew about at some point, a business you were involved in, goods you ended up with — then whether this is the right route is a real legal question and not a form-filling exercise.

Blocking is not the only step

A block addresses the credit file. It does not by itself resolve the underlying debt, stop collection activity, or address anything outside your report. Those are separate problems with separate mechanisms.

What we do not say

We do not tell you whether your situation is identity theft, whether your document is an identity theft report within the meaning of the Act, or whether to use this route. Those depend on your facts. What is on this page is what the statute requires and what the deadlines are.