How Do You Remove Identity Theft From Your Credit Report?
The Fair Credit Reporting Act has a provision most people never hear about. It does not ask a credit bureau to investigate. It orders it to block, and it gives the bureau four business days to do it.
File an identity theft report at IdentityTheft.gov, then send each credit bureau a packet with four things: proof of identity, that report, an itemized list of the fraudulent information, and a signed statement that none of it was your transaction. Under 15 U.S.C. 1681c-2 the bureau must block the information within four business days of receiving all four.
What section 605B actually says
Section 605B of the FCRA is codified at 15 U.S.C. 1681c-2 and carries the title "Block of information resulting from identity theft." The operative word is block. It is not a request, and it is not a reinvestigation.
The four business day clock
Once a credit bureau receives the four items the statute lists, it must block the information from appearing on your report within four business days. The clock starts on receipt of the complete package, which is why the date you can prove delivery matters more than the date you mailed it.
Why it outruns an ordinary dispute
A dispute under section 611 starts a thirty day reinvestigation, extendable to forty five. At the end of it the furnisher can simply verify the debt and the item stays exactly where it was. A 605B block has no verification step for the furnisher to win.
An identity theft block runs on a four day clock. An ordinary dispute runs on a thirty day clock.
15 U.S.C. 1681c-2(a) sets the four business day block. 15 U.S.C. 1681i(a)(1) sets the thirty day reinvestigation period, extendable to forty five days when a consumer adds information mid dispute.
Does 605B apply to your situation?
The remedy is narrow on purpose. It covers information that resulted from identity theft, and nothing else. Four questions settle it.
Four questions that decide whether 605B is your route
1.Was the account opened, or the charge made, by someone other than you?
605B is the right tool. It is built for information that resulted from identity theft.
605B does not apply. A late payment you actually owe is a section 611 dispute, or nothing at all.
2.Can you obtain an identity theft report?
IdentityTheft.gov issues one free, online, in minutes. A police report also qualifies.
Without it there is no block. This is the one item with no substitute in the statute.
3.Can you identify the exact items on the report?
List every account number, balance, and date. The block covers what you name.
Pull all three reports first. Anything unnamed keeps reporting after the block lands.
4.Is the information genuinely not yours?
Then sign the statement and send it.
Stop. A block obtained on a material misrepresentation can be rescinded under 1681c-2(c), and filing a false report carries its own exposure.
The 48 hours before the clock starts
Nothing in the statute requires you to take two days. The sequence below is ordered by what stops the damage soonest, not by what is most convenient, and the whole of it can be finished in a weekend.
Hours 0 to 2: stop the bleeding
Freeze first, then alert, then file. A freeze is free at all three bureaus and takes effect immediately, which matters because the account you have not found yet is still being opened while you work.
Hours 3 to 24: find every item and build the packet
This is the step that decides how much actually comes off. A block reaches only the information you identify by name, so anything you overlook survives the process and keeps reporting.
Hours 24 to 48: send it and notify the furnishers
Certified mail with return receipt to all three bureaus. Then the furnishers separately, because section 623(a)(6)(B) bars them from re-reporting information once they have been told it was blocked.
The 48 hours that happen before the bureau's clock starts
- Hour 0
Freeze all three bureaus
A freeze is free and takes effect at once online. It stops the next account from being opened while you work on the ones already there.
- Hour 1
Place an extended fraud alert
An initial alert lasts one year. Once you hold an identity theft report you are entitled to the extended alert, which runs seven years.
- Hour 2
File at IdentityTheft.gov
The FTC report generated here is the identity theft report the statute asks for. This single document is what converts a dispute into a block.
- Hours 3 to 8
Pull all three reports and mark every fraudulent line
A block only reaches information you identify. Anything you miss keeps reporting, so this is the step that decides how much actually comes off.
- Hours 8 to 24
Assemble the four part packet
Proof of identity, the identity theft report, your itemized identification of the information, and your statement that none of it was your transaction.
- Hours 24 to 36
Send to all three bureaus, certified
Certified mail with return receipt fixes the date the four day clock starts. Without a provable receipt date there is no deadline to enforce.
- Hours 36 to 48
Notify furnishers and request the underlying records
Section 609(e) entitles you to the business records behind the fraudulent accounts. Section 615(f) bars anyone from selling that debt onward.
The forty eight hours are yours, not the bureau's. Nothing in the FCRA obliges you to take this long, and nothing obliges a bureau to act until the complete packet is in its hands. Finishing sooner starts the statutory clock sooner.
What goes in the packet
The statute names four items. Bureaus reject incomplete packets routinely, and an incomplete packet does not start the clock at all, so this list is worth treating as a checklist rather than a guideline.
Four items. Miss one and the four day clock never starts.
15 U.S.C. 1681c-2(a)(1)Appropriate proof of identity
Government issued photo identification plus proof of current address. Bureaus reject packets on this alone more than on any other element.
15 U.S.C. 1681c-2(a)(2)A copy of an identity theft report
The FTC report from IdentityTheft.gov qualifies. So does a police report. This is the document an ordinary dispute does not have, and it is the reason the four day clock exists.
15 U.S.C. 1681c-2(a)(3)Your identification of the information
Name the accounts, the account numbers, the balances, and the dates. A block reaches exactly what you identify and nothing else.
15 U.S.C. 1681c-2(a)(4)A statement that it was not your transaction
A plain signed sentence stating the information does not relate to any transaction by you. Short, but the statute requires it by name.
Source: 15 U.S.C. 1681c-2(a). The bureau must block within four business days of receiving all four items together.
Where to send it
Send to all three. A block at one bureau does nothing about the same account reporting at the other two.
| Bureau | Mailing address | Online | Phone |
|---|---|---|---|
| Equifax | Equifax Information Services LLC, P.O. Box 740256, Atlanta, GA 30348 | equifax.com/personal/credit-report-services/credit-dispute/ | (866) 349-5191 |
| Experian | Experian, P.O. Box 4500, Allen, TX 75013 | experian.com/disputes | (888) 397-3742 |
| TransUnion | TransUnion LLC Consumer Dispute Center, P.O. Box 2000, Chester, PA 19016 | transunion.com/credit-disputes/dispute-your-credit | (800) 916-8800 |
The same fraudulent account, taken down two different ways
Share of identified items removed, by route. The block path reflects the four business day deadline in 15 U.S.C. 1681c-2(a). The dispute path reflects the thirty day reinvestigation in 1681i(a)(1), where a furnisher that verifies the debt can leave it reporting. Illustrative of the statutory timelines, not a prediction of any individual outcome.
What happens after the block lands
The bureau has to tell the furnisher
Under 1681c-2(b) the bureau must promptly notify the furnisher that the information may be the result of identity theft, that a block has been requested, and the effective date. That notice is what triggers the furnisher's own obligations.
When a block can be declined or rescinded
Section 1681c-2(c) lets a bureau decline or rescind a block if it was made in error, if you made a material misrepresentation, or if you obtained goods, services, or money as a result of the blocked transaction. If that happens the bureau must notify you.
What 605B does not do
It removes the information from your credit report. It does not by itself erase the underlying debt, close the fraudulent account at the lender, or stop a collector who has not been notified. Those are separate steps, run in parallel.
Two provisions help. Section 609(e) entitles you to the business records behind the fraudulent transactions, which is how you find out who opened the account and where. Section 615(f) prohibits selling or transferring a debt once someone knows it resulted from identity theft.
Frequently asked questions
Written by
Alexander Katsman
Founder, Credit Booster & Credit Booster AI
Alexander Katsman has spent more than 15 years in credit and finance, helping thousands of people and small business owners dispute inaccurate reporting, rebuild their scores, and get approved for funding they were once denied. His latest project, Credit Booster AI, puts that entire toolkit in everyone's hands, using AI to make fixing, building, and funding your credit accessible to all.
Embed this publication
Paste this code anywhere to share it on your site or blog.
<iframe src="" width="100%" height="1400" frameborder="0" loading="lazy" style="border:0;max-width:100%;border-radius:12px;" title="Credit Booster Publication" allow="fullscreen"></iframe>