Identity theft on your credit report, and the four day block
There is a faster remedy than disputing, and it is written into federal law.
If someone opened accounts in your name, the standard advice is to dispute them. That works, and it takes thirty days per round, and it can come back “verified” because the furnisher confirmed their own records.
There is a better tool, written into federal law, and it is barely mentioned in most credit advice.
The block
Section 605B of the Fair Credit Reporting Act, at 15 U.S.C. 1681c-2, requires a credit bureau to block information that resulted from identity theft. Not investigate it. Block it.
The deadline is four business days from when the bureau receives:
- Proof of your identity
- A statement from you that the information is not related to any transaction you made
- An identity theft report
- Identification of which specific items to block
Compare that with the ordinary dispute process: thirty days, an automated exchange with the furnisher, and an outcome that depends on whether the furnisher stands behind its own data. The block is a different mechanism with a different burden.
The bureau also has to notify the furnisher that the information has been blocked as identity theft, which stops it being quietly re-reported.
An FTC identity theft report, generated free at IdentityTheft.gov, satisfies the legal requirement. A police report is useful with individual creditors and some will ask for one, but a credit bureau cannot refuse a valid 605B request because you did not file with the police. This trips up a lot of people who assume they must get a police report first and stall there.
Do this in order
1. Freeze all three bureaus first
Free, and it takes minutes. A freeze stops new accounts being opened while you clean up the existing mess, which otherwise turns into a treadmill. Credit freeze vs credit lock explains why the free statutory freeze beats the paid products.
A freeze does nothing about accounts already opened. It stops the bleeding, it does not heal the wound.
2. Get your FTC identity theft report
Go to IdentityTheft.gov and complete the report. It produces a recovery plan and, more importantly, the document that unlocks the 605B block. Keep the PDF.
3. Pull all three reports and list every fraudulent item
Free at AnnualCreditReport.com. Read every line of all three, because thieves do not distribute evenly across bureaus.
Write down, for each item: the creditor name, the account number as shown, the type, and the date it appeared. Include fraudulent inquiries and unfamiliar addresses, not just accounts. Addresses matter because a thief who added one is receiving mail meant to reach you.
4. Send the block request to each bureau
Each bureau separately. Include your identity proof, the FTC report, your written statement that the items are not yours, and the itemised list. Certified mail with return receipt gives you a dated record, which matters if a bureau misses the four day deadline.
5. Notify the furnishers too
Tell the companies that opened the fraudulent accounts. Under the FCRA they must stop furnishing information they have been told resulted from identity theft. You can also request copies of the fraudulent application documents, which is how you find out what the thief used.
6. Check your Social Security earnings record
A stolen SSN is often used for employment as well as credit, which shows up as income you never earned. Check the record at the Social Security Administration. Credit reports will not show this.
When a bureau declines
Blocks can be declined, and there are legitimate grounds: the request was based on a material misrepresentation, or you received goods or services from the transaction. A bureau can also rescind a block if it later learns one of those applies.
If you believe the decline is wrong, escalate rather than starting over. File a CFPB complaint naming the bureau, the date you sent the request, the certified mail number and the four business day requirement. A missed statutory deadline is a concrete failure, which makes for a much stronger complaint than a general grievance.
If you are dealing with a large volume of fraudulent accounts, a consumer law attorney is worth a conversation. The FCRA provides for attorney fees, so many work on contingency and the initial consultation is free.
Afterwards
Once the fraudulent items are blocked, your score should recover fairly quickly, because the negative information is gone rather than merely marked. That is the advantage over disputes, where a “verified” outcome leaves the damage in place.
Keep the freeze on. Lifting it is free and takes an hour when you actually need credit, and leaving it on permanently is the single most effective protection available to you.
Pull all three reports again after 30 days and confirm the blocks held. The one failure mode worth watching for is a debt that gets sold on, since a new owner may report it fresh without knowing the history.
Last verified
September 18, 2026. Section 605B is at 15 U.S.C. 1681c-2 of the Fair Credit Reporting Act.
Common questions
What is an FCRA 605B block?
It is a federal right that forces credit bureaus to block information resulting from identity theft within four business days of receiving proof of your identity and an identity theft report. It is faster and more decisive than the ordinary 30 day dispute process.
Do I need a police report to get a block?
No. An FTC identity theft report from IdentityTheft.gov satisfies the legal requirement. A police report can help with individual creditors and some will ask for one, but a bureau cannot refuse a valid 605B request just because you do not have one.
How long does the block take?
Four business days from when the bureau receives your identity proof and the identity theft report. That is the statutory deadline, and it is far shorter than the 30 days a normal dispute takes.
How do I check whether someone used my Social Security number?
Pull all three credit reports free at AnnualCreditReport.com and read them for accounts, inquiries and addresses you do not recognise. Also check the Social Security Administration's earnings record for employment you never had.
Should I freeze my credit after identity theft?
Yes, at all three bureaus, and it is free. A freeze stops new accounts being opened in your name while you deal with the existing damage. It does nothing about accounts already opened, so you still need the block.
This article is general education, not legal or financial advice. Laws change and individual circumstances differ. Confirm anything time-sensitive with a licensed attorney or a nonprofit credit counselor before you act.