What this answers
On this page
The Fair and Accurate Credit Transactions Act of 2003, known as FACTA, is the reason an identity theft victim has anything to work with. Before it, the Fair Credit Reporting Act gave you the right to dispute an item and wait. FACTA added the tools that let you force the issue.
What FACTA Changed
FACTA amended the FCRA to build a victim's toolkit: the right to block fraudulent information outright, the identity theft report that triggers the rest, additional free file disclosures, the extended fraud alert, and a right to the records the thief created in your name.
The common thread is that these remedies do not depend on the furnisher agreeing with you. An ordinary dispute does. You send it, the bureau forwards it, the company that reported the account says the account is fine, and the item stays. FACTA's remedies route around that, which is precisely why they matter and precisely why they are resisted.
The Right to Block Fraudulent Information
A block is stronger than a dispute flag. It does not mark the entry as contested. It stops the bureau from reporting the item at all.
A complete request has four elements: proof of identity, a copy of an identity theft report, identification of the specific information to be blocked, and your statement that the information does not relate to any transaction you made. Leave one out and the bureau has a clean basis to decline, regardless of whether the account was really fraudulent.
The Identity Theft Report
FACTA created the identity theft report as the credential that unlocks the rest. You can generate one free at the FTC's IdentityTheft.gov, and bureaus and furnishers have to accept a qualifying report. A police report can also serve.
File it before you start writing letters, not after. Nearly every other right described here requires you to enclose a copy, and reconstructing the sequence later is harder than doing it in order.
Free Reports for Victims
Victims get file disclosures beyond the standard entitlement. Placing an extended fraud alert entitles you to two free reports from each bureau within the following twelve months, on top of the free weekly reports available to everyone at AnnualCreditReport.com.
Use them on a schedule rather than all at once. The point of a second and third look is to catch fraud that surfaces after the first wave, and a thief who has your information often returns to it months later.
The Extended Fraud Alert
An initial fraud alert lasts one year and asks creditors to take reasonable steps to verify identity. An extended alert, which requires an identity theft report, lasts seven years and requires a creditor to actually contact you before opening an account. It also removes you from prescreened credit offer lists for five years.
Receipt Truncation
FACTA also requires that an electronically printed card receipt show no more than the last five digits of the card number, and that it not print the expiration date. It is the least discussed part of the statute and the most preventive: it closed off a route where thieves worked from discarded paper.
How to Use the Toolkit
- File the identity theft report at IdentityTheft.gov first, and be thorough about every account you know of
- Send block requests that name each fraudulent item specifically, with the furnisher, the account number as it appears, and the amount
- Include the statement that the information does not relate to any transaction you made, because it is a statutory element
- Place the extended alert, and give a phone number you will actually answer
- Send everything certified mail, return receipt, and keep the green cards
- Pull your reports again after four business days and confirm the blocked items are gone
When the Toolkit Is Ignored
The failures are predictable. A bureau treats a complete block request as an ordinary dispute, forwards it for verification, and leaves the item in place. A blocked item reappears a month later because the furnisher kept sending the same monthly file. A collector keeps calling about a debt that has already been blocked.
Each of those is a failure of a specific duty rather than a customer service problem, and each is provable only from the record you kept. That is the unglamorous part of FACTA: the statute gives you leverage, and the paperwork is what makes the leverage real.
Why FACTA Exists
The 2003 amendments came out of a specific realisation: the FCRA as written gave consumers a right to dispute and essentially nothing else. A victim could tell a bureau the account was fraudulent, the bureau would ask the furnisher, the furnisher would say the account was fine, and the process ended there.
That is a workable design when the question is a disputed balance between two parties who both have records. It fails completely when the question is whether an account exists at all, because the party being asked is the party that accepted the thief's application.
FACTA's additions share one structural feature: each of them routes around the furnisher's agreement. The block does not need it. The records request goes to the business directly. The extended alert obliges a creditor to act before the account exists. Reading the statute that way makes the remedies easier to use, because it tells you which one to reach for when the ordinary route stalls.
The Rights That Expire If You Wait
Two things in this toolkit are time sensitive and neither is obvious.
The extra free file disclosures attached to an extended alert run from when the alert is placed. Spread them out across the following twelve months rather than pulling all of them at once, because the point is catching fraud that surfaces later.
Inquiries age off reports after about two years, and inquiries are what prove a third party actually saw the fraudulent information while it was there. A victim who sorts everything out and discards the reports loses the ability to show the data reached anyone. Keep the reports you pull, dated, even after the problem is fixed.
Common Questions
What does FACTA do for identity theft victims?
It added the identity theft block, the identity theft report, the extended fraud alert, additional free file disclosures, the right to the thief's application and transaction records, and the requirement that card receipts be truncated.
What is the difference between FACTA and the FCRA?
FACTA is not a separate statute in practice. It is a set of 2003 amendments to the Fair Credit Reporting Act, so the rights it created live inside the FCRA and are cited as FCRA sections.
How fast does a credit bureau have to block fraudulent information?
What is the receipt truncation rule?
An electronically printed card receipt may show no more than the last five digits of the card number and may not print the expiration date. It closed a route where thieves worked from discarded paper.
Can I get the records the thief created in my name?
Yes, under § 1681g(e). A business that opened an account in your name must provide the application and transaction records, free, within 30 days of a qualifying request. Note the limit: that section does not create a private right to sue over a refusal, though the FTC and CFPB enforce it.
Do these rights cost anything?
No. The FTC report is free, the block is free, the extended alert is free, the extra disclosures are free, and the thief's records must be provided at no charge.