Frequently asked questions 

Answers to common questions about identity theft, credit disputes, and your rights under the Fair Credit Reporting Act.

Hands typing a question on a laptop keyboard

Section 01

Understanding Identity Theft

Fraud is the initial crime. Someone steals your information and uses it to obtain something of value, like credit, property, or a government benefit. Identity theft, as consumers experience it, is the ongoing damage to your credit report and reputation that follows. The person who opened the account may be long gone and untraceable, but you are left arguing with credit bureaus and debt collectors who keep reporting the false information as though it were yours. That distinction matters legally. The FCRA does not give you a claim against the thief, who usually has no money anyway. It gives you claims against the credit reporting agencies and the furnishers who keep reporting information they know, or should know, is not accurate. Our focus is that second problem, because that is the one the law lets you do something about.

The usual warning signs are accounts you do not recognize on your credit report, bills or collection calls for services you never ordered, denied credit applications when you believe your credit is good, an IRS notice about wages or income you never earned, medical bills for treatment you never received, or mail suddenly stopping because someone filed a change of address. Pull all three reports from AnnualCreditReport.com, which is the only federally authorized free source, and read the addresses and employers sections as carefully as the accounts. A strange address or an employer you never worked for is often the first visible sign, because that is how the bureau's matching system got confused in the first place. Check all three, not one. Not every furnisher reports to every bureau, so a fraudulent account can appear on Experian and be invisible on Equifax.

Yes. A police report is one of the two documents that unlock your strongest rights under the FCRA. File with your local police department even if they tell you they cannot investigate a faceless online crime. You need the report number and a copy of the report, not an arrest. Some departments resist taking a report for identity theft. If that happens, ask for a supervisor, mention that federal law gives you specific rights that require a report, and ask whether you can file online or by mail. Keep the report number, the date, and the officer's name. Without a police report, many furnishers will tell you your claim is unsubstantiated, and the bureaus will route your dispute through their ordinary process instead of the identity theft process.

An Identity Theft Report is a specific thing under the FCRA, not just any complaint. It is a report filed with a federal, state, or local law enforcement agency, together with the FTC Identity Theft Affidavit you complete at IdentityTheft.gov. Together they give you rights an ordinary dispute does not: the right under FCRA section 605B to have fraudulent accounts blocked from your report within four business days, the right under section 609(e) to obtain from the creditor the actual application and transaction records the thief submitted in your name, and the right to stop a debt collector from continuing to collect. IdentityTheft.gov walks you through the affidavit and generates a recovery plan. Do both steps. The affidavit alone is not an Identity Theft Report, and neither is the police report by itself.

Send the collector a written dispute that says the debt is the result of identity theft and enclose your Identity Theft Report. Under the FCRA, a debt collector who receives that notice may not sell or transfer the debt, and must notify the original creditor that the information may be fraudulent. Under the FDCPA, a written dispute sent within 30 days of their first communication also requires them to stop collection until they mail you verification of the debt. Send it certified mail with return receipt requested and keep the green card. If the collector keeps calling anyway, or reports the account to a bureau without noting that it is disputed, that is a separate violation with its own damages, and the paper trail you just created is what proves it.

Section 02

The Dispute Process

Send a written dispute letter by certified mail, return receipt requested, to each credit bureau that is reporting the error. Identify yourself with your full legal name, current address, date of birth and Social Security number, identify the account by creditor name and the last four digits, state exactly what the report says and exactly why it is wrong, and attach your proof. If the error is identity theft, include your Identity Theft Report and FTC affidavit. Keep a complete copy of everything you send, plus the certified mail receipt and the return card. The bureau then has 30 days to reinvestigate, or 45 if you send additional relevant information during that window. Dispute with every bureau reporting the error, not just one. Each bureau has its own independent duty, and fixing Experian does nothing to Equifax.

Online dispute portals are built for the bureau's convenience, not yours. They cap what you can say, often in a dropdown menu or a short character limit, which forces your specific factual dispute into a generic category. They make attaching documents awkward or impossible. Their terms frequently include arbitration language and other fine print. Most importantly, they leave you with no independent proof of what you actually said and when you said it. If your dispute is mishandled and you later need to prove the bureau was told something specific, a certified mail receipt and your own copy of the letter is evidence. A checkbox on a web form you no longer have access to is not.

This is the part most consumers never see, and it explains a lot of frustrating outcomes. The nationwide bureaus process disputes through an automated system called e-OSCAR. Your letter, with your documents and your explanation, is typically reduced by a clerk to a two-digit dispute code and a short free-text line, packaged into a form called an ACDV, and transmitted to the furnisher. The furnisher's own automated system frequently compares that code against the data it already has on file, sees a match, and returns a response of verified. The documents you carefully assembled may never be reviewed by a human at either company. Understanding this is practical, not just interesting. It is why a letter that states one clear, specific, provable error tends to do better than a letter disputing nine things at once, and it is why a returned result of verified so often means nothing was actually investigated.

Legally, it means the bureau claims it conducted a reasonable reinvestigation and concluded the information is accurate. Practically, it very often means the furnisher was sent an automated code and sent back an automated confirmation that its records match what it already reported. Matching its own records is not the same thing as verifying that the information is true. The FCRA requires a reasonable reinvestigation, and courts have repeatedly held that simply parroting the furnisher's data can fall short of that standard, particularly when the consumer supplied documents that the bureau never passed along or never considered. If you disputed with proof and got back verified with no explanation, that response is worth preserving. Also request the description of the reinvestigation procedure, which the FCRA entitles you to, including the business name, address and phone number of the furnisher contacted.

The bureau has 30 days from receipt to complete its reinvestigation, extended to 45 days if you submit additional relevant information during that period. It must forward the relevant information to the furnisher within five business days, and it must send you written results within five business days of finishing. So a properly handled dispute resolves in about five to seven weeks including mail time. That is the statutory timeline. Reality is often slower and frequently requires more than one round, especially with mixed files and identity theft, where the same wrong data gets re-reported by a furnisher that never fixed its own records. Track your dates from the return receipt, because a missed deadline is itself a violation.

A furnisher is any company that reports information about you to a credit bureau: banks, card issuers, auto lenders, mortgage servicers, landlords, utilities and debt collectors. Furnishers have their own investigation duties under the FCRA, but here is the part that matters and that most online advice gets wrong. A furnisher's duty to investigate, and your ability to sue it if it fails, is triggered by a dispute routed through a credit bureau, not by a letter you send the furnisher directly. Disputing directly with the furnisher is a reasonable supplemental step and sometimes fixes things quickly, but it does not create a private right of action on its own. Always dispute through the bureaus. Name the furnisher and give as much account detail as you have, so the bureau can route it correctly.

Bureaus are permitted to reject a dispute as frivolous or irrelevant only in narrow circumstances, and they must tell you why within five business days and identify what information they need. In practice, legitimate disputes get labeled frivolous fairly often, especially when they arrive on a template that looks like a credit repair mill produced it, or when the same item has been disputed before. If you sent a specific factual dispute with supporting documents and got a frivolous determination back, that determination may itself be improper. Do not simply resend the same letter. Preserve the response, address whatever they claim is missing, and consider that you may now have a claim worth an attorney's review.

Not without notice. If a bureau reinserts information it previously deleted, the FCRA requires it to notify you in writing within five business days of the reinsertion, and the furnisher must first certify that the information is complete and accurate. Silent reinsertion is a common and serious violation, and it is one of the reasons to keep your deletion letters permanently rather than throwing them out once the item disappears. Pull your reports again 60 to 90 days after any successful deletion. If the item reappeared and no notice ever arrived, document the before and after, and treat it as a distinct violation rather than starting the dispute process over from scratch.

Section 03

Deadlines, Limits and Deletion Rules

Most negative information has a seven year limit, running from the date of first delinquency on the original account, which is the date you first fell behind and never caught up again. Collection accounts follow that same original delinquency date plus 180 days, which means selling a debt to a collector does not restart anything. Chapter 7 bankruptcies may be reported for ten years from the filing date, and Chapter 13 is generally reported for seven years from filing. Closed accounts in good standing can stay for up to ten years and usually help you. The date that controls is the original delinquency, not the date the collector bought the debt, not the date of last payment, and not the date it was last reported.

Re-aging is when a furnisher reports a newer date of first delinquency than the true one, which illegally resets the seven year clock and keeps a stale negative item on your report years past its expiration. Spot it by comparing the same account across all three bureaus, since the dates frequently disagree, and by comparing what is reported against your own records of when you actually stopped paying. A collection that appears with a date of first delinquency close to the date the collector acquired the account is the classic signature. Re-aging is worth disputing precisely because the correct outcome is not a correction but deletion, and because the date is an objective fact rather than a matter of interpretation.

Generally two years from the date you discovered the violation, and in no event more than five years after the violation occurred. Discovery matters here, because many consumers do not learn a bureau mishandled a dispute until months later, when they are denied credit and pull their report. Do not let that flexibility make you comfortable. Evidence goes stale, certified mail records get thrown away, and witnesses forget. If you believe a bureau or furnisher has violated your rights, get the file in front of a consumer lawyer while the paper trail is intact.

The FCRA guarantees one free report every twelve months from each of the three nationwide bureaus through AnnualCreditReport.com. Since 2023 the bureaus have also voluntarily offered free weekly reports through the same site, which is useful but is a program they run, not a right the statute gives you. You are also entitled to an additional free report after an adverse action such as a credit denial, after placing a fraud alert, if you are unemployed and intend to apply for work, if you receive public assistance, or if you reasonably believe your file contains fraudulent information. Use AnnualCreditReport.com. Sites that ask for a credit card to give you a free report are selling monitoring subscriptions.

No, and you should be skeptical of anyone who says otherwise. Everything a credit repair company does to dispute an inaccuracy, you can do yourself for the cost of certified mail, which is why this site gives away the letter generator. Federal law also prohibits credit repair organizations from charging you before services are performed and from promising to remove accurate negative information, because nobody can do that. The more serious problem is strategic. Mass-mailed template disputes are exactly what bureaus use to justify frivolous determinations, and a shotgun dispute of nine items at once weakens the one item you could actually prove. If the bureaus have already refused to fix a provable error, the next step is a consumer lawyer, whose fees the FCRA makes the losing defendant pay, not a monthly subscription.

Section 04

Your Legal Rights

The core ones are these. You have the right to obtain everything in your file from a credit bureau. You have the right to dispute anything you believe is inaccurate or incomplete, and to have the bureau conduct a reasonable reinvestigation and correct or delete what it cannot verify. You have the right to have obsolete information removed once it passes the seven or ten year limits. You have the right to notice when someone takes adverse action against you based on your report. If you are an identity theft victim with a proper Identity Theft Report, you have the right to have fraudulent accounts blocked, and to get copies of the fraudulent applications the thief submitted. And if a bureau or furnisher violates those rights, you have the right to sue, with the losing defendant paying your attorney's fees.

It depends entirely on the facts, and anyone who quotes you a number before reading your file is guessing. What the statute allows is this. For a willful violation you can recover actual damages or statutory damages between 100 and 1,000 dollars per violation, plus punitive damages where the conduct warrants it. For a negligent violation you can recover actual damages. In both cases a prevailing consumer recovers costs and reasonable attorney's fees, which is the provision that makes these cases possible to bring at all. Actual damages are not limited to money you can put on a receipt. Denied credit, a higher interest rate, a lost housing application, a withdrawn job offer, time spent fighting the error and the documented emotional distress of it can all count. Results depend on the facts of each case.

No. Consumer FCRA cases are handled on contingency, and the fee-shifting provision means the defendant pays the attorney's fees when the consumer prevails. You should never be asked for money up front to evaluate a credit reporting claim. Bring your credit reports, your dispute letters, the bureau's responses, and your certified mail receipts. The quality of that paper trail usually determines whether there is a case, which is the practical reason this site keeps telling you to dispute in writing and keep copies.

Filing a dispute does not lower your score, and an item marked as disputed is generally excluded from score calculation while the dispute is open. Two honest caveats. Some mortgage underwriters will not close a loan while tradelines are flagged in dispute, so if you are weeks from closing, talk to your loan officer about sequencing. And if a deletion removes an old account that was helping your average account age, your score can move in ways that feel counterintuitive even though the report is now accurate. Neither is a reason to leave a false item on your report.

Section 05

Specific Situations

That is a mixed file, and it needs a different letter than an identity theft dispute. A mixed file happens when the bureau's matching logic merges two consumers, usually people who share a name, a similar Social Security number, or a family relationship, such as a father and son with the same name and a suffix difference. Do not use fraud or identity theft language, do not send an FTC affidavit, and do not call the other person a thief, because framing it as fraud sends the dispute down the wrong path and often gets it rejected. Instead, establish that you are two distinct people. Give your full legal name including middle name and suffix, your complete address history, your date of birth, and your Social Security number, and ask the bureau to correct its identification data and to review why its matching procedures merged the files in the first place.

A deceased indicator is one of the most damaging errors a bureau can make, because it does not just lower your score, it effectively removes you from the credit system and can freeze existing accounts. It usually originates with a single furnisher reporting a death notice in error, sometimes after a joint account holder or a relative with similar data actually died, and it then propagates. Dispute with all three bureaus in writing, identify the specific furnisher if you can tell which one reported it, and include proof of identity and life such as a government identification, a recent utility bill and a recent pay stub. This is a category where the harm accumulates daily and where getting a lawyer involved early is usually worth it.

That is duplicate reporting, and it doubles the visible damage of a single debt. When an original creditor charges off an account and sells it, the original tradeline should reflect that it was transferred or sold and show a zero balance, while the collector reports the balance it now owns. If both are reporting a balance owed, your report is telling a lender you owe the money twice. Dispute it as what it is, an inaccurate balance and status on the original tradeline, and include both tradelines from the same report so the bureau can see them side by side.

After discharge, debts included in the bankruptcy must be reported as discharged with a zero balance. Continuing to report a balance owed, or a continuing delinquency after the filing date, misrepresents your legal obligation, because the debt no longer legally exists. Attach the discharge order and the schedule of debts filed with the court, which together prove both that the discharge happened and which accounts it covered. This is a common and well-litigated error category, largely because furnishers buy and sell portfolios without carrying the bankruptcy status along with them.

The FCRA covers far more than the three credit bureaus. Employment screening companies, tenant screening companies, and specialty agencies that report on check writing, insurance claims, medical payments and employment history are all consumer reporting agencies with the same accuracy and reinvestigation duties. That includes companies like LexisNexis, Innovis, SageStream, ChexSystems, Early Warning Services and The Work Number. You have the right to your file from each of them, and the right to dispute what it contains. Employment reports carry an extra protection: before an employer takes adverse action based on a report, it must give you a copy of the report and a summary of your rights first, so you have a chance to dispute it before you lose the job.

The most useful set is your credit reports showing the error, ideally from all three bureaus and ideally more than one date so the change is visible, every dispute letter you have sent with its certified mail receipt and return card, every response you received from a bureau or furnisher, your Identity Theft Report and FTC affidavit if fraud is involved, and any evidence of what the error cost you, such as a denial letter, a rate sheet showing the worse terms you were given, or a rescinded offer. Do not wait until you have all of it. An incomplete file is still worth a conversation, and we can tell you what is worth chasing down.

Section 06

Working With Us

CreditDispute.com is published by Consumer Litigation Associates, P.C., a plaintiff-side consumer protection firm that has litigated Fair Credit Reporting Act cases nationwide for three decades, including individual jury trials and certified class actions. The firm's founder, Leonard A. Bennett, has testified before the House Committee on Financial Services on credit reporting, serves on the board of the National Association of Consumer Advocates, teaches the FCRA to other lawyers through NACA, NCLC and state bar programs, and received the 2025 Vern Countryman Award. The tools and guides here are free because the errors they address are common, the fixes are mostly procedural, and most people never needed a lawyer in the first place.

No. The letter generator is free, requires no account, and carries no obligation. You can build a letter, print it, mail it, and never speak to us. That is a normal and expected outcome. The reason a law firm gives away a dispute tool is that a properly written, properly mailed dispute is what creates the record, and a good record is what separates the cases that can be proven from the ones that cannot, whoever ends up handling them.

A member of the firm reviews what you send and tells you honestly whether there appears to be a claim worth pursuing, what is missing from the file, or whether the better next step is simply another properly documented dispute. Not every credit reporting error is a lawsuit, and we will say so. There is no cost for that evaluation and no obligation afterward.

The firm litigates consumer credit reporting cases around the country and regularly works as co-counsel with local firms in other states. Where you live does not by itself determine whether we can help, so it is worth asking rather than assuming. Contacting us does not create an attorney-client relationship, and nothing on this site is legal advice about your particular situation.

Published by Consumer Litigation Associates, P.C., a plaintiff-side FCRA consumer protection law firm.

This page is general information about the Fair Credit Reporting Act, not legal advice, and reading it does not create an attorney-client relationship.

Still have questions?

Every identity theft case is unique. Contact us to ask an FCRA lawyer about your situation and get personalized guidance.

CreditDispute.comCreditDispute.com

A consumer-help project developed with FCRA plaintiff attorneys at Consumer Litigation Associates, P.C. - a plaintiff-side FCRA law firm representing consumers nationwide. Dispute letters prepared with attorneys who have litigated thousands of federal FCRA cases against the big three bureaus and obtained FCRA payments for hundreds of thousands of consumers. Licensed in VA, NC, FL, TX, CA, NY; co-counsel in 40+ states.

(757) 930-3660