Identity Theft Report
A formal declaration filed with the FTC (or equivalent authority) that a consumer's personal information has been used fraudulently, unlocking extended legal protections.
Also known as: FTC identity theft report, IdentityTheft.gov report
Last reviewed: 10 June 2026
In the US, an Identity Theft Report is created at IdentityTheft.gov (run by the FTC). Filing one generates a personalised recovery plan and creates a legally recognised document that can be used to: place a seven-year extended fraud alert on credit files; obtain free credit report copies; block fraudulent information under the FCRA; dispute fraudulent debts; and prevent debt collectors from reporting fraud-derived debts.
The report functions as a sworn statement that specific accounts or transactions were created fraudulently. Under the FCRA, a consumer who submits an identity theft report to a credit bureau can require the bureau to block any information resulting from the theft within four business days, rather than waiting for a full 30-day investigation. Financial institutions and debt collectors who receive a copy must stop collection and refrain from adverse credit reporting while the matter is under review.
In the UK, the analogous step is filing a report with Action Fraud (which generates a crime reference number) and applying for a CIFAS Protective Registration. These do not have the same statutory automatic-block mechanism as the US system, but they serve as official documentation for disputes with creditors and credit bureaus.
Examples
- A consumer whose Social Security number was used to open three credit cards files an Identity Theft Report at IdentityTheft.gov; he then uses it to block all three fraudulent accounts on his credit file.
- A victim of identity theft uses the FTC report to dispute a fraudulent debt with a collection agency, which must cease collection under the FCRA.