What this answers
On this page
Collection calls about an account you never opened are the part of identity theft that follows victims longest. A collector that has been told a debt came from identity theft has specific duties, and the duties start the moment you tell them in a way you can prove.
What a Collector Must Tell You
Under the Fair Credit Reporting Act, a debt collector that knows or has reason to know a debt may have resulted from identity theft has to give the consumer certain information:
- That they may be a victim of identity theft
- That federal law gives identity theft victims rights
- How to get more information about those rights
It is a modest duty on its face. It matters because it is an admission of knowledge. A collector that gave you that notice has, on the record, acknowledged it had reason to know the debt might be fraudulent, which shapes everything it does afterward.
Notifying the Creditor
When you give a collector an identity theft report, the collector must notify the creditor that the debt may have resulted from identity theft.
This one is worth understanding because of where the evidence lives. The collector does not hold the application. The original creditor does: the form the thief filled in, the address used, the identification accepted. That is the document that proves the account was never yours, and it is the document you can request directly under 15 U.S.C. § 1681g(e).
So the notification requirement pushes your report back up the chain to the only party holding proof.
Reporting, Selling, and Re-reporting
A collector that reports to the credit bureaus is a furnisher, with a furnisher's obligations. It must maintain reasonable procedures so that it does not refurnish information a consumer has identified as the product of identity theft. Once information has been blocked from your report through the section 605B process, it may not be re-reported.
Federal law also bars selling, transferring, or placing for collection a debt the collector has been told resulted from identity theft.
That last rule addresses the specific thing victims experience: the debt goes quiet, then reappears six months later with a different company's name on the letter. A debt that keeps being sold onward after an identity theft report was provided is not a loose end. It is conduct the statute addresses directly, and the chain of letters from each successive collector is the evidence of it.
How to Respond to a Collector
- Do not acknowledge the debt as yours, even informally. Say it resulted from identity theft.
- Put it in writing. A phone call that does not exist on paper is a conversation the collector can characterise however it likes later.
- Send a copy of your identity theft report with a letter explaining the fraud, by certified mail, return receipt requested.
- Request validation of the debt in writing. The right to request it is strongest within 30 days of the collector's first communication with you.
- Keep a log of every call: date, time, the name given, and what was said.
Why Validation and the Identity Theft Report Do Different Jobs
A validation request asks the collector to substantiate the debt. An identity theft report tells it the debt is fraudulent and triggers the duties above.
Send both. The validation response tells you what the collector actually has, which is frequently much less than it implies. The identity theft report starts the clock on the obligations and creates the dated record that it was told.
When They Keep Calling
- Continuing to collect after receiving an identity theft report
- Re-reporting an account that has been blocked
- Selling or transferring a debt it was told resulted from identity theft
- Failing to notify the creditor
- Failing to give the required victim notice
Each of these is a departure from a specific duty rather than poor service. File a complaint with the CFPB at consumerfinance.gov, keep every letter and envelope, and keep the dated credit reports that show what was being reported and when.
The documentation is what separates a collector that made a mistake from one that was told and continued anyway, and that distinction is usually the whole case.
The Letter That Does the Most Work
One letter, sent early and sent properly, changes the position more than anything else you can do with a collector.
It should do four things. State that the debt resulted from identity theft. Enclose a copy of your identity theft report. Request validation of the debt. And ask the collector to confirm in writing that it has notified the creditor, which is an obligation it owes once you provide the report.
Send it certified mail with return receipt and keep the green card. Every duty described here runs from the moment the collector has been told, so the date it was told is the fact everything else depends on.
Keep sending nothing else. Do not negotiate, do not make a token payment to buy time, and do not acknowledge the debt as yours in any phrasing, because activity on a debt can carry consequences under state collection law that have nothing to do with the FCRA.
When the Debt Is Sold On
The pattern to recognise: the collector goes quiet, and months later a letter arrives from a different company about the same account.
Federal law bars selling, transferring, or placing for collection a debt the collector has been told resulted from identity theft. So a debt that keeps moving after you provided an identity theft report is not simply bad luck.
Keep every letter from every successive collector, including the envelopes. The chain of companies, with dates, is what shows the debt was passed along after the first one was told, and that chain only exists if you kept it.
Send each new collector the same package. Each one that continues after receiving it has made its own decision on its own notice.
Common Questions
What must a debt collector do if I tell them a debt is identity theft?
Once it knows or has reason to know the debt may have resulted from identity theft, it must tell you that you may be a victim and that federal law gives victims rights. Once you provide an identity theft report, it must notify the creditor.
Can a collector keep reporting the debt to the credit bureaus?
It must maintain reasonable procedures to avoid refurnishing information you have identified as the product of identity theft, and information blocked under section 605B may not be re-reported.
Can the debt be sold to another company?
Federal law bars selling, transferring, or placing for collection a debt the collector has been told resulted from identity theft.
Should I ask for validation as well?
Yes. Validation asks the collector to substantiate the debt, which frequently reveals how little it holds. The identity theft report separately triggers the duties above. Send both.
What if they keep calling?
Keep a log of every call with the date, time, name given, and what was said, and keep every letter. File a complaint with the CFPB at consumerfinance.gov. Continued collection after an identity theft report is conduct the statutes address.
Do I have to pay to make it stop?
No, and paying a fraudulent debt can make matters worse by looking like acknowledgement. Deal with it on paper instead.
What is debt validation?
A written request asking the collector to substantiate the debt. The right is strongest within 30 days of the collector's first communication with you, and the response often reveals how little documentation the collector actually holds.
Can a collector contact my employer or family?
There are strict limits on third party contact, and a collector that discusses your debt with other people has a separate problem. Keep a note of who was contacted and when.
Does the collector have to stop contacting me if I ask?
You can tell a collector in writing to stop contacting you, and the obligations around that are specific. Do it in writing, keep the proof, and understand that stopping contact does not make the debt or the reporting go away.