Mixed Files vs. Identity Theft: What's Happening to Your Credit

That unfamiliar account on your credit report may not be fraud. It may be someone else's account, attached to your file by the bureau's own matching software. The two problems look identical on the page and call for completely different responses.

The Misdiagnosis Problem

Identity theft gets the attention, so an unfamiliar account reads as a crime. Often there is no criminal involved at all. The bureau has merged data belonging to two unrelated people, a situation known as a mixed file or a merged file, and it is far more common than most consumers realise.

Getting the diagnosis wrong costs you time. A dispute that describes fraud, when the real problem is a matching failure, invites a response that addresses fraud and leaves the merge in place.

Why Identity Theft Is Often the Wrong Label

Think about how a thief actually operates. They do not submit your complete and accurate information, because an application carrying your real address sends the new card to your mailbox. They use a partial set: your name and Social Security number, their address and phone.

What then lands on your credit report is the product of a decision made by the bureau, not by the thief. Something arrived carrying some of your identifiers and some of a stranger's, and the bureau's matching logic decided it belonged to you.

That same logic produces mixed files from entirely innocent data. Two people with similar names, adjacent Social Security numbers, or a shared former address can end up holding pieces of each other's credit histories with no crime committed anywhere.

The Matching Algorithms

Each bureau decides which file incoming data belongs to using its own matching rules, and those rules do not require an exact match on every identifier.

The tolerance is deliberate. A bureau that demanded exact matches would drop legitimate data constantly, because furnishers send names with middle initials and without, old addresses, and transposed digits. So the systems are built to err toward inclusion. Attaching questionable data to a file is treated as the safer error than losing it.

For the consumer on the receiving end, that tradeoff is the entire problem. It also explains why the same incoming record can land correctly at two bureaus and wrongly at the third.

How to Tell Which One You Have

Work from the report rather than from memory:

Compare the identifiers the bureau has on file for you. Mixed files usually show it: a name variation you have never used, an address you have never lived at, an employer that is not yours, sometimes a Social Security number off by a digit.
Look at the unfamiliar account itself. An account opened in a state you have no connection to, in a slightly different version of your name, suggests a merge.
Check the pattern. Fraud tends to cluster in time, several new accounts across weeks. A mixed file tends to bring a whole history, old accounts included.
Check all three bureaus. A mixed file commonly affects one and not the others, because the matching decision was made separately at each.

Why the Distinction Changes Your Move

If it is identity theft, you file an identity theft report at IdentityTheft.gov, consider a police report, and use the FCRA's victim remedies, including the section 605B block that obliges the bureau to remove the information generally within four business days.

If it is a mixed file, the block does not apply, because no theft occurred. Your dispute is aimed at the matching failure itself. You are asking the bureau to separate the files and correct your identifiers, and you say so explicitly: these accounts belong to another consumer, here are the identifiers that differ, here is what is actually mine.

Correcting the identifiers matters as much as removing the accounts. A file that still carries the wrong address or name variation will re-merge, and the same accounts come back.

The Standard That Applies Either Way

The FCRA requires a consumer reporting agency to follow reasonable procedures to assure maximum possible accuracy of the information it reports about you. That is the standard in section 1681e(b), and it is not a standard of good intentions.

A mixed file is direct evidence about those procedures. Someone else's accounts did not arrive on your report by accident; they arrived because a system decided they matched closely enough. When you have told the bureau about the merge and it persists, the question stops being how it happened and becomes why it was allowed to continue.

What to Do

Do not assume fraud. Check whether the account belongs to someone whose information resembles yours.
Pull all three reports and compare the personal information sections, not just the accounts.
Describe the problem accurately in your dispute, and ask for the identifiers to be corrected as well as the accounts removed.
Dispute with each bureau where the problem appears, separately.
Pull the reports again afterward and confirm the accounts have not returned.

Which Remedy Applies

Once you know which problem you have, the toolkit is different, and using the wrong one costs weeks.

For identity theft, the block under 15 U.S.C. § 1681c-2 is the strongest move. A complete request obliges the bureau to remove the identified information, generally within four business days, without waiting on the furnisher. It requires an identity theft report.

For a mixed file, the block does not apply, because no theft occurred and you cannot truthfully state that the information resulted from identity theft. Claiming otherwise is a material misrepresentation, which is a ground for the bureau to refuse or rescind. Your route is the ordinary dispute, aimed squarely at the matching failure, under the reasonable procedures standard in § 1681e(b).

The distinction is not a technicality. Filing an identity theft report about a mixed file puts a false statement in the file that follows your case.

When It Is Both

Sometimes it genuinely is both, and this is the case most often misdiagnosed in the other direction.

A thief applies using your Social Security number and their own address. The bureau's matching software folds that hybrid into your file, and now your file carries their address as one of yours. Every subsequent item from that address matches to you, including items that have nothing to do with the original thief.

So the account was fraud, and the spread was a matching failure. Both remedies apply: block the fraudulent accounts, and separately dispute the incorrect identifiers that are now attracting other people's data.

Treating that situation as pure identity theft removes the accounts and leaves the magnet in place.

Mixed Files on Background Checks

Most discussion of mixed files assumes a credit report. The version that does

the most immediate damage happens on an employment or tenant screening report,

and it works the same way for the same reason.

A screening company searches court and public records by name. Courts often

publish little beyond a name, sometimes a year of birth. The matching tolerance

has to be loose enough to find the right person despite inconsistent records,

which means it is loose enough to find the wrong one.

The difference is the speed of the consequence. A credit file error raises your

rate. A screening report that attaches a stranger's felony to your name ends a

candidacy, often before you know a report was run, and in gig work it can

deactivate an account that is already your income.

The remedy is the same in shape: dispute in writing with the screening agency,

attach the certified court record showing the other person's identifiers, and

ask for your own identifiers to be corrected rather than only for the record to

be removed.

Telling Them Apart on a Screening Report

The signals differ slightly from a credit file.

A record from a county you have never lived in, under a name close to but not

exactly yours, with a date of birth that is off, is a match failure.

A record that is genuinely yours but shows the wrong outcome, a dismissal

reported as pending, a felony that was pled down, an expungement that never

speaks directly to it by requiring current public record status.

Fraud looks different again: an account or an identity used by someone who

deliberately supplied your information, which is where the identity theft

remedies apply.

Common Questions

What is the difference between a mixed file and identity theft?

Identity theft means someone used your information to obtain credit. A mixed file means a bureau attached another consumer's information to your file through a matching error. The accounts look equally unfamiliar on the report.

How can I tell which one I have?

Look at the personal information on your report and at the pattern of accounts. Identity theft usually appears as new accounts clustered in time. A mixed file usually brings an entire history, and the file carries a name variation or an address belonging to the other person.

Can I use the identity theft block for a mixed file?

No. The block requires you to state that the information resulted from identity theft and does not relate to any transaction you made. If it is a mixed file, that statement is not true, and a material misrepresentation lets the bureau refuse or rescind.

Is a mixed file more common than people think?

Yes. A great deal of what consumers describe as identity theft turns out to be a matching failure, because a thief rarely submits a complete and accurate set of your identifiers in the first place.

Does the same dispute work at all three bureaus?

The same facts do, but send a separate dispute to each bureau where the problem appears. Matching decisions are made independently, so a mixed file often affects one bureau and not the others.

Can a background check mix me up with someone else?

Yes. Screening companies match court and public records by name, courts often

publish few other identifiers, and verification that the record belongs to the

applicant is frequently skipped.

What if the other person is a relative or a twin?

That is the hardest version, because the identifiers that usually separate two

people overlap. Obtain the certified disposition showing the other person's full

identifiers, submit it with yours, and ask for your identifiers to be corrected.

Is a mixed file identity theft?

No, and the distinction matters. Identity theft means someone used your

information. A mixed file is a matching error, so the identity theft block under

§ 1681c-2 does not apply and claiming otherwise would be a misstatement in your

request.

How do I prove a record is not mine?

With the certified court record. It carries the defendant's identifiers, which

you place next to your own. Argument does not do this work; the document does.

The screening company verified the record. What now?

Request its reinvestigation procedure description and dispute again with the

certified record attached. A verification that ignores a certified disposition

How fast do I need to move?

Quickly, because inquiries and reports age off and employers move on. Dispute in

writing straight away, keep proof of delivery, and keep the adverse action

notice that names the agency.